Play interactive tour

Edit tour

Analysis Report UM6rAJhKEq.exe

Overview

General Information

Sample Name:	UM6rAJhKEq.exe
Analysis ID:	433862
MD5:	043662a4b5e44eb83cec615f2a519906
SHA1:	a3445fe53782b10e5903e41ca8af89faac192df4
SHA256:	1cded2a6ad0ce1864580e179b9ddd2a5eec787e96236bc8eb0cdb61ce47a137c
Tags:	32exe
Infos:
Most interesting Screenshot:

Detection

Score:	45
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Compliance

Score:	20
Range:	0 - 100

Signatures

Multi AV Scanner detection for submitted file

Contains functionality to detect sleep reduction / modifications

Machine Learning detection for dropped file

Machine Learning detection for sample

Allocates memory with a write watch (potentially for evading sandboxes)

Contains capabilities to detect virtual machines

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to check if a debugger is running (OutputDebugString,GetLastError)

Contains functionality to check if a window is minimized (may be used to check if an application is visible)

Contains functionality to check the parent process ID (often done to detect debuggers and analysis systems)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Creates a process in suspended mode (likely to inject code)

DLL planting / hijacking vulnerabilities found

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

EXE planting / hijacking vulnerabilities found

Extensive use of GetProcAddress (often used to hide API calls)

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains executable resources (Code or Archives)

PE file contains strange resources

Potential key logger detected (key state polling based)

Queries disk information (often used to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

UM6rAJhKEq.exe (PID: 6704 cmdline: 'C:\Users\user\Desktop\UM6rAJhKEq.exe' MD5: 043662A4B5E44EB83CEC615F2A519906)

smy.exe (PID: 4484 cmdline: 'C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe' MD5: 043662A4B5E44EB83CEC615F2A519906)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Multi AV Scanner detection for submitted file

Show sources

Source: UM6rAJhKEq.exe	Virustotal: Detection: 27%			Perma Link
Source: UM6rAJhKEq.exe	ReversingLabs: Detection: 37%

Machine Learning detection for dropped file

Show sources

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe

Joe Sandbox ML: detected

Machine Learning detection for sample

Show sources

Source: UM6rAJhKEq.exe

Joe Sandbox ML: detected

Cryptography:

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_002966B0 CryptStringToBinaryW,MultiByteToWideChar,MultiByteToWideChar,		20_2_002966B0
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_002968D0 CryptBinaryToStringW,WideCharToMultiByte,WideCharToMultiByte,		20_2_002968D0

Privilege Escalation:

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: LINKINFO.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: WINMM.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: bcrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libcef.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: Secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\CefHelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: WININET.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: CRYPTSP.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: msIso.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: MSHTML.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: d3d11.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\WebView.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: TextInputFramework.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: d3d10warp.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libGLESv2.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: WINMMBASE.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_43.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: dbghelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\NetBridge.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: MSIMG32.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libEGL.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: PROPSYS.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: srpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: d2d1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: VERSION.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: MLANG.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: cscapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: Cabinet.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\CefRes.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: DPAPI.DLL	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: CoreUIComponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: DEVRTL.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: IPHLPAPI.DLL	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_47.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: ImgUtil.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: dxgi.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\7z.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: CoreMessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: CLDAPI.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\pepflashplayer.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\widevinecdmadapter.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: DWrite.dll	Jump to behavior

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	EXE: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\CefView.exe	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	EXE: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\wow_helper.exe	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	EXE: C:\Users\user\AppData\Roaming\WdGame\Utils\Uninst.exe	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	EXE: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Jump to behavior

Bitcoin Miner:

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION UM6rAJhKEq.exe			Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION smy.exe			Jump to behavior

Compliance:

DLL planting / hijacking vulnerabilities found

Show sources

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: LINKINFO.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: WINMM.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: bcrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libcef.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: Secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\CefHelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: WININET.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: CRYPTSP.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: msIso.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: MSHTML.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: d3d11.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\WebView.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: TextInputFramework.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: d3d10warp.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libGLESv2.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: WINMMBASE.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_43.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: dbghelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\NetBridge.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: MSIMG32.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libEGL.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: PROPSYS.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: srpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: d2d1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: VERSION.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: MLANG.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: cscapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: Cabinet.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\CefRes.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: DPAPI.DLL	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: CoreUIComponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: DEVRTL.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: IPHLPAPI.DLL	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_47.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: ImgUtil.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: dxgi.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\7z.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: CoreMessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: CLDAPI.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\pepflashplayer.dll	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\widevinecdmadapter.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	DLL: DWrite.dll	Jump to behavior

EXE planting / hijacking vulnerabilities found

Show sources

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	EXE: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\CefView.exe	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	EXE: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\wow_helper.exe	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	EXE: C:\Users\user\AppData\Roaming\WdGame\Utils\Uninst.exe	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	EXE: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Jump to behavior

Uses 32bit PE files

Show sources

Source: UM6rAJhKEq.exe

Static PE information: 32BIT_MACHINE, EXECUTABLE_IMAGE

Creates a software uninstall entry

Show sources

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

Registry value created: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\WdGame_smy

Jump to behavior

Creates license or readme file

Show sources

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\LICENSE.txt

Jump to behavior

PE / OLE file has a valid certificate

Show sources

Source: UM6rAJhKEq.exe

Static PE information: certificate valid

Uses secure TLS version for HTTPS connections

Show sources

Source: unknown

HTTPS traffic detected: 115.238.192.239:443 -> 192.168.2.4:49782 version: TLS 1.2

Contains modern PE file flags such as dynamic base (ASLR) or NX

Show sources

Source: UM6rAJhKEq.exe

Static PE information: TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

Binary contains paths to debug symbols

Show sources

Source:	Binary string: D:\box\WdGameBox\Release\LiteGameBox2.pdb source: UM6rAJhKEq.exe
Source:	Binary string: h:\ch1\src\sandbox\wow_helper\wow_helper.pdbp source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp
Source:	Binary string: C:\vmagent_new\bin\joblist\369595\out\Release\ResHelper.pdb source: UM6rAJhKEq.exe, 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp
Source:	Binary string: \|D:\box\WdGameBox\Release\LiteGameBox2.pdb source: UM6rAJhKEq.exe
Source:	Binary string: d:\build\360cloud_build\360NetUL_base1031\bin\360NetUL.pdb source: UM6rAJhKEq.exe
Source:	Binary string: E:\open_source\cef\source\chromium\src\out\Release\widevinecdmadapter.dll.pdb source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp
Source:	Binary string: E:\r\ws\St_Make\code\products\player\pepper\gypbuild\Release\pepflashplayer.pdb source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp
Source:	Binary string: E:\open_source\cef\source\chromium\src\out\Release\widevinecdmadapter.dll.pdbGCTL source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp
Source:	Binary string: h:\ch1\src\sandbox\wow_helper\wow_helper.pdb source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp
Source:	Binary string: E:\r\ws\St_Make\code\products\player\pepper\gypbuild\Release\pepflashplayer.pdb% source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp

Spreading:

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe

Code function: 20_2_002042B3 SetFileAttributesW,lstrlenW,FindClose,FindFirstFileW,FindClose,

20_2_002042B3

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File opened: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File opened: C:\Users\user\AppData\Roaming\WdGame\smy	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File opened: C:\Users\user\AppData\Roaming\WdGame	Jump to behavior

Networking:

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: TengineContent-Type: application/octet-streamContent-Length: 1113400Connection: keep-aliveDate: Mon, 14 Jun 2021 01:43:23 GMTx-oss-request-id: 60C6B43BBD5C4D3233D87E21x-oss-cdn-auth: successAccept-Ranges: bytesETag: "C4AA6D9E72A1721B3F65646E04E702CF"Last-Modified: Thu, 17 Dec 2020 05:40:22 GMTx-oss-object-type: Normalx-oss-hash-crc64ecma: 3096456683339413985x-oss-storage-class: StandardContent-MD5: xKptnnKhchs/ZWRuBOcCzw==x-oss-server-time: 27Via: cache29.l2cn2628[0,0,304-0,H], cache42.l2cn2628[0,0], vcache4.cn3284[0,1,200-0,H], vcache18.cn3284[4,0]Ali-Swift-Global-Savetime: 1611736566Age: 9543X-Cache: HIT TCP_HIT dirn:0:513005844X-Swift-SaveTime: Mon, 14 Jun 2021 02:32:59 GMTX-Swift-CacheTime: 10800Access-Control-Allow-Origin: Timing-Allow-Origin: EagleId: 73e798a616236445461205084eData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 b9 f8 f1 69 fd 99 9f 3a fd 99 9f 3a fd 99 9f 3a f4 e1 0a 3a e9 99 9f 3a da 5f f2 3a fc 99 9f 3a da 5f e4 3a fa 99 9f 3a fd 99 9e 3a 61 99 9f 3a f4 e1 1c 3a 90 99 9f 3a f4 e1 1b 3a 09 99 9f 3a f4 e1 0d 3a fc 99 9f 3a e3 cb 0b 3a fc 99 9f 3a f4 e1 0e 3a fc 99 9f 3a 52 69 63 68 fd 99 9f 3a 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 f6 ce 69 54 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 09 00 00 c4 0b 00 00 f6 04 00 00 00 00 00 33 d1 09 00 00 10 00 00 00 e0 0b 00 00 00 00 10 00 10 00 00 00 02 00 00 05 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 50 11 00 00 04 00 00 9b 0d 11 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 80 38 0e 00 f2 00 00 00 74 2a 0e 00 50 00 00 00 00 20 0f 00 bc 7d 01 00 00 00 00 00 00 00 00 00 98 c0 10 00 a0 3c 00 00 00 a0 10 00 b4 a4 00 00 e0 e3 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 7b 0c 00 40 00 00 00 00 00 00 00 00 00 00 00 00 e0 0b 00 7c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$i:::::_::_:::a:::::::::::Rich:PELiT!3P8t*P }<{@\|
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: TengineContent-Type: application/octet-streamContent-Length: 25402696Connection: keep-aliveDate: Mon, 14 Jun 2021 04:22:30 GMTx-oss-request-id: 60C6D986F4D9893936A92E7Dx-oss-cdn-auth: successAccept-Ranges: bytesETag: "0BD4F927300726072F1AA50BF08CB175-5"Last-Modified: Tue, 03 Dec 2019 08:17:34 GMTx-oss-object-type: Multipartx-oss-hash-crc64ecma: 17829016985417600697x-oss-storage-class: Standardx-oss-server-time: 2Ali-Swift-Global-Savetime: 1623644550Via: cache8.l2cn2628[58,58,200-0,M], cache56.l2cn2628[60,0], cache56.l2cn2628[60,0], cache5.cn1962[147,147,200-0,M], cache19.cn1962[148,0], xh-cn1777[169,168,200-0,M], xh-cn1777[171,0]X-Swift-SaveTime: Mon, 14 Jun 2021 04:22:30 GMTX-Swift-CacheTime: 2592000X-Cache: MISS TCP_MISS dirn:-2:-2X-Swift-SaveTime: Mon, 14 Jun 2021 04:22:30 GMTX-Swift-CacheTime: 2592000Timing-Allow-Origin: EagleId: dcbdc50216236445503451394eData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 2a 3e f1 03 6e 5f 9f 50 6e 5f 9f 50 6e 5f 9f 50 da c3 6e 50 64 5f 9f 50 da c3 6c 50 18 5f 9f 50 da c3 6d 50 76 5f 9f 50 3c 37 9b 51 7e 5f 9f 50 3c 37 9c 51 7c 5f 9f 50 3c 37 9a 51 70 5f 9f 50 67 27 0c 50 63 5f 9f 50 6e 5f 9e 50 0b 5f 9f 50 f6 36 9a 51 6b 5f 9f 50 f6 36 9f 51 6f 5f 9f 50 f6 36 60 50 6f 5f 9f 50 6e 5f 08 50 6f 5f 9f 50 f6 36 9d 51 6f 5f 9f 50 52 69 63 68 6e 5f 9f 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 81 f8 43 5d 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 0e 10 00 16 01 00 00 4a 82 01 00 00 00 00 8d 28 00 00 00 10 00 00 00 30 01 00 00 00 00 10 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 a0 83 01 00 04 00 00 12 ba 83 01 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$>n_Pn_Pn_PnPd_PlP_PmPv_P<7Q~_P<7Q\|_P<7Qp_Pg'Pc_Pn_P_P6Qk_P6Qo_P6`Po_Pn_Po_P6Qo_PRichn_PPELC]!J(0@

Source: Joe Sandbox View	IP Address: 120.27.82.56 120.27.82.56
Source: Joe Sandbox View	IP Address: 139.129.105.182 139.129.105.182

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=install&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=68d41268a99c8b13258bf1a15ef7b0d7&from=tp_smy&forcetick=4028031 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/wan/7z.dll HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)Accept-Encoding: gzipHost: cdn-file-ssl-wan.ludashi.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=7z_noexist&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=249e3a2b67d901167e5cb35d71347473&from=tp_smy&forcetick=4028421 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=7z_download_start&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=ea780b69077edb956fbc2175e7a770df&from=tp_smy&forcetick=4028421 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=7z_download_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=277f2cde0146b235341f2d18326925eb&from=tp_smy&forcetick=4031671 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pc/cef/CefRes.dll?t=202106140622 HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)Host: cdn-file-ssl-pc.ludashi.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pc/cef/CefRes.dll?t=202106140622 HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)Host: cdn-file-ssl-pc.ludashi.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=res_down_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=5325e06e8a465a509753654520147fbb&from=tp_smy&forcetick=4108671 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pc/game/flash/pepflashplayer.7z?t=202106140623 HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)Host: cdn-file-ssl-wan.ludashi.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=pepflash_down_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=fd2781f9951253bc008b96bdef7d4634&from=tp_smy&forcetick=4128875 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=add_uninst_item&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=33331b265eb83b74a2a113adc36700a0&from=tp_smy&forcetick=4129375 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=add_desk_icon&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=aa839ed1b28cc8cdeaaae92f4e4726d8&from=tp_smy&forcetick=4129421 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=install_extra&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=358b9fe095674bcc60c0d222c2f30341&from=tp_smy&forcetick=4129781 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=inst_open&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=fcdf1d0913f0dccc8c7a0e1803ad8b9a&from=tp_smy&forcetick=4129781 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=wd_install_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=ebdf880b7713a474f1d77c2f9a363ac3&from=tp_smy&forcetick=4131281 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=inst_succ&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=049e1d14ad80d6b9bee92f75827b56a8&from=tp_smy&forcetick=4131281 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602 HTTP/1.1Accept: /Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: wan.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=run&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=08d04bed40b525cd8a38008e74110bd0&from=tp_smy&forcetick=4131843 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=wd_show_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=c72126e37abd325999d2706fe8d8095b&from=tp_smy&forcetick=4132281 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=main_show&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=9f28ee541c2d80157e627209b7339813&from=tp_smy&forcetick=4132281 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/main.css HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/upload.jpg HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/bg.jpg HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/log_btn.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/jquery/jquery183.js HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/reg.jpg?t=20200105 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/nav.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/sea/sea.js HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/news-bg.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/input_reg_pwd.png?t=20191021 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/input_reg_code.png?t=20191021 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/checkbox.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/third_qq.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/third_weixin.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/superjs/config.js?v=20210527 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-wan.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/input_reg_act.png?t=20191021 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/input_log_code.png?t=20191021 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /api/CheckGameStatus?callback=jQuery1830019642693851471715_1623644654749 HTTP/1.1Content-Type: application/x-www-form-urlencoded; charset=UTF-8Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestReferer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: wan.ludashi.comContent-Length: 11Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /announce/list?callback=jQuery1830019642693851471715_1623644654750&type=2&gid=smy&skip=0&num=5&_=1623644659450 HTTP/1.1Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestReferer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: wan.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=accurate&action=t0&channel=tp&from=tp_repush_wd_smy_0602&mid=e4ec8e8a6f2d1ca301f6e29536448c71&appver=3.2.124.1372&uid=0&game=smy&timestamp=1623644659499&ex_ary[guid]= HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/cir.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /ajax/gettoken?user_from=youxi&callback=jQuery1830019642693851471715_1623644654749&_=1623644659796 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: i.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=accurate&action=t1&channel=tp&from=tp_repush_wd_smy_0602&mid=e4ec8e8a6f2d1ca301f6e29536448c71&appver=3.2.124.1372&uid=0&game=smy&timestamp=1623644669499&ex_ary[guid]= HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=accurate&action=t2&channel=tp&from=tp_repush_wd_smy_0602&mid=e4ec8e8a6f2d1ca301f6e29536448c71&appver=3.2.124.1372&uid=0&game=smy&timestamp=1623644689502&ex_ary[guid]= HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=accurate&action=t3&channel=tp&from=tp_repush_wd_smy_0602&mid=e4ec8e8a6f2d1ca301f6e29536448c71&appver=3.2.124.1372&uid=0&game=smy&timestamp=1623644719499&ex_ary[guid]= HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe

Code function: 20_2_002347E0 PeekMessageW,SetEvent,GetMessageW,GetMessageW,DeleteFileA,URLDownloadToCacheFileA,DeleteFileA,GetMessageW,

20_2_002347E0

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: TengineContent-Type: text/cssContent-Length: 2403Connection: keep-aliveDate: Mon, 14 Jun 2021 04:13:39 GMTx-oss-request-id: 60C6D77377D4573938759B77x-oss-cdn-auth: successAccept-Ranges: bytesETag: "A159D8A971FC72831C6FE9F28CE0E0DF"Last-Modified: Wed, 26 May 2021 02:36:16 GMTx-oss-object-type: Normalx-oss-hash-crc64ecma: 16351635262908020403x-oss-storage-class: StandardVary: Accept-EncodingContent-MD5: oVnYqXH8coMcb+nyjODg3w==x-oss-server-time: 3Via: cache11.l2cn1823[0,0,304-0,H], cache17.l2cn1823[0,0], cache20.cn1995[0,0,200-0,H], cache3.cn1995[2,0]Content-Encoding: gzipAli-Swift-Global-Savetime: 1623117638Age: 633X-Cache: HIT TCP_MEM_HIT dirn:4:456974408X-Swift-SaveTime: Mon, 14 Jun 2021 04:15:37 GMTX-Swift-CacheTime: 599Timing-Allow-Origin: *EagleId: 65e3191716236446522435813eData Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 5a 5b 6f e3 36 16 fe 2b c2 04 45 2f a8 14 5d 6c f9 86 45 31 d9 6e 9f f6 61 d1 97 3e 1a 94 44 db dc c8 a2 86 92 e3 64 8c fc f7 1e de 24 52 94 3c 49 e3 2e b0 30 26 63 cb e4 e1 b9 7e e7 42 ff 74 a9 51 51 90 6a bf 0e 37 47 c4 f6 a4 5a 87 af 19 2d 5e 2e f4 09 b3 5d 49 cf eb 03 29 0a 5c bd 96 e4 52 92 a6 f5 9b f6 a5 c4 eb 8a 56 f8 15 5d 5a fc dc fa 05 ce 29 43 2d a1 95 7c 4c 8e fb 4b 46 59 81 19 d0 0a 76 e5 05 c8 a0 76 5d e2 5d 0b 1f 99 fa c8 c8 fe 00 9f f3 32 bb e4 25 46 6c 9d d1 f6 f0 1a 70 0a 97 82 34 75 89 5e 24 b9 80 9e 5a cc 2e 67 52 b4 87 f5 72 b6 ac 9f 37 07 cc 37 af 67 cb 10 3e d4 b4 21 e2 70 86 4b e0 e2 09 6f 32 94 3f ee 19 3d 55 c5 fa c4 ca 1f 3e dd df e7 45 e5 ef 48 89 83 f2 54 a0 e6 40 82 9c 1e ef cf a8 ba 3f 92 9c d1 fb e6 f8 72 8f 9a 06 b7 cd b6 2c 9a fb 6c 1f fc b7 de 7f fa d1 0b e1 55 51 9f e1 1a 23 e0 b5 42 4f 8a 8d 74 39 eb d9 88 17 26 17 28 6b 68 09 1c 6f b8 bc eb 34 85 ef 5a 5a af a3 15 bc f9 28 63 c0 40 50 57 92 b3 1c 57 a0 96 01 7b de a9 74 0c 27 9e 83 f5 4c 2b f0 47 a8 53 73 56 d2 fc 71 23 25 8b c2 d8 90 2c 1d 95 8c cb 13 4a 22 fc cf 36 ba 08 59 cd 47 b1 7c 14 71 0b 19 8f 93 8b 30 bb f3 7c a6 9e 03 89 92 82 13 fa c2 05 95 ae d3 79 cf 51 92 86 d3 ca 16 46 e1 cc ad b8 0c 8e 1e 14 65 bc a3 0c 0f b5 b4 e9 c3 40 9d 14 85 e1 77 9b 8c 3e fb 0d f9 ca bf 90 1e 0d 8c 01 df 4d 49 0a ec 57 f8 dc 28 1e 93 59 34 ea 89 a6 ce c5 a6 8b d6 32 10 d7 07 2d d3 5a Data Ascii: Z[o6+E/]lE1na>Dd$R<I.0&c~BtQQj7GZ-^.]I)\RV]Z)C-|LKFYvv]]2%Flp4u^$Z.gRr77g>!pKo2?=U>EHT@?r,lUQ#BOt9&(kho4ZZ(c@PWW{t'L+GSsVq#%,J"6YG|q0|yQFe@w>MIW(Y42-Z

Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=install&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=68d41268a99c8b13258bf1a15ef7b0d7&from=tp_smy&forcetick=4028031 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/wan/7z.dll HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)Accept-Encoding: gzipHost: cdn-file-ssl-wan.ludashi.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=7z_noexist&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=249e3a2b67d901167e5cb35d71347473&from=tp_smy&forcetick=4028421 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=7z_download_start&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=ea780b69077edb956fbc2175e7a770df&from=tp_smy&forcetick=4028421 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=7z_download_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=277f2cde0146b235341f2d18326925eb&from=tp_smy&forcetick=4031671 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pc/cef/CefRes.dll?t=202106140622 HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)Host: cdn-file-ssl-pc.ludashi.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pc/cef/CefRes.dll?t=202106140622 HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)Host: cdn-file-ssl-pc.ludashi.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=res_down_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=5325e06e8a465a509753654520147fbb&from=tp_smy&forcetick=4108671 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pc/game/flash/pepflashplayer.7z?t=202106140623 HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)Host: cdn-file-ssl-wan.ludashi.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=pepflash_down_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=fd2781f9951253bc008b96bdef7d4634&from=tp_smy&forcetick=4128875 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=add_uninst_item&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=33331b265eb83b74a2a113adc36700a0&from=tp_smy&forcetick=4129375 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=add_desk_icon&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=aa839ed1b28cc8cdeaaae92f4e4726d8&from=tp_smy&forcetick=4129421 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=install_extra&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=358b9fe095674bcc60c0d222c2f30341&from=tp_smy&forcetick=4129781 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=inst_open&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=fcdf1d0913f0dccc8c7a0e1803ad8b9a&from=tp_smy&forcetick=4129781 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=wd_install_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=ebdf880b7713a474f1d77c2f9a363ac3&from=tp_smy&forcetick=4131281 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=inst_succ&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=049e1d14ad80d6b9bee92f75827b56a8&from=tp_smy&forcetick=4131281 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602 HTTP/1.1Accept: /Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: wan.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=run&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=08d04bed40b525cd8a38008e74110bd0&from=tp_smy&forcetick=4131843 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=wd_show_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=c72126e37abd325999d2706fe8d8095b&from=tp_smy&forcetick=4132281 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=main_show&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=9f28ee541c2d80157e627209b7339813&from=tp_smy&forcetick=4132281 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/main.css HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/upload.jpg HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/bg.jpg HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/log_btn.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/jquery/jquery183.js HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/reg.jpg?t=20200105 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/nav.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/sea/sea.js HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/news-bg.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/input_reg_pwd.png?t=20191021 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/input_reg_code.png?t=20191021 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/checkbox.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/third_qq.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/third_weixin.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/superjs/config.js?v=20210527 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-wan.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/input_reg_act.png?t=20191021 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/input_log_code.png?t=20191021 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /announce/list?callback=jQuery1830019642693851471715_1623644654750&type=2&gid=smy&skip=0&num=5&_=1623644659450 HTTP/1.1Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestReferer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: wan.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=accurate&action=t0&channel=tp&from=tp_repush_wd_smy_0602&mid=e4ec8e8a6f2d1ca301f6e29536448c71&appver=3.2.124.1372&uid=0&game=smy&timestamp=1623644659499&ex_ary[guid]= HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/smy/assets_lds/cir.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /ajax/gettoken?user_from=youxi&callback=jQuery1830019642693851471715_1623644654749&_=1623644659796 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: i.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=accurate&action=t1&channel=tp&from=tp_repush_wd_smy_0602&mid=e4ec8e8a6f2d1ca301f6e29536448c71&appver=3.2.124.1372&uid=0&game=smy&timestamp=1623644669499&ex_ary[guid]= HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=accurate&action=t2&channel=tp&from=tp_repush_wd_smy_0602&mid=e4ec8e8a6f2d1ca301f6e29536448c71&appver=3.2.124.1372&uid=0&game=smy&timestamp=1623644689502&ex_ary[guid]= HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=accurate&action=t3&channel=tp&from=tp_repush_wd_smy_0602&mid=e4ec8e8a6f2d1ca301f6e29536448c71&appver=3.2.124.1372&uid=0&game=smy&timestamp=1623644719499&ex_ary[guid]= HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive

Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: <FavoriteIcon>http://www.facebook.com/favicon.ico</FavoriteIcon> equals www.facebook.com (Facebook)
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: <FavoriteIcon>http://www.myspace.com/favicon.ico</FavoriteIcon> equals www.myspace.com (Myspace)
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: <FavoriteIcon>http://www.rambler.ru/favicon.ico</FavoriteIcon> equals www.rambler.ru (Rambler)
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: <URL>http://www.facebook.com/</URL> equals www.facebook.com (Facebook)
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: <URL>http://www.rambler.ru/</URL> equals www.rambler.ru (Rambler)

Source: unknown

DNS traffic detected: queries for: cdn-file-ssl-wan.ludashi.com

Source: unknown

HTTP traffic detected: POST /api/CheckGameStatus?callback=jQuery1830019642693851471715_1623644654749 HTTP/1.1Content-Type: application/x-www-form-urlencoded; charset=UTF-8Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01X-Requested-With: XMLHttpRequestReferer: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: wan.ludashi.comContent-Length: 11Connection: Keep-AliveCache-Control: no-cache

Source: smy.exe, 00000014.00000002.1062022222.0000000004700000.00000002.00000001.sdmp	String found in binary or memory: http://%s.com
Source: UM6rAJhKEq.exe, 00000000.00000003.878449582.0000000004550000.00000004.00000001.sdmp	String found in binary or memory: http://a.http://%sSharedObject.UriMismatchpendingSharedObject.BadPersistenceSTUVWXYZ23456789ABCDEFGH
Source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp	String found in binary or memory: http://ad./adserver?tm=15&u=http://cdn.auditude.com/adserver/1.4midpre/response.xml?u=&of=1.4&g=X-Mo
Source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp	String found in binary or memory: http://ad.auditude.com/adserver/e?type=playererror
Source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp	String found in binary or memory: http://ad.auditude.com/adserver/e?type=playererrormpd&f=&tp=&tv=&url=&vw=&vh=X-MoneyTraceX-IDx
Source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp	String found in binary or memory: http://adunit.cdn.auditude.com/assets/3p/v
Source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp	String found in binary or memory: http://adunit.cdn.auditude.com/assets/3p/vService
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://amazon.fr/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://ariadna.elmundo.es/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://ariadna.elmundo.es/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://arianna.libero.it/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://arianna.libero.it/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://asp.usatoday.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://asp.usatoday.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://auone.jp/favicon.ico
Source: smy.exe, 00000014.00000002.1062022222.0000000004700000.00000002.00000001.sdmp	String found in binary or memory: http://auto.search.msn.com/response.asp?MT=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://br.search.yahoo.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://browse.guardian.co.uk/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://browse.guardian.co.uk/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://busca.buscape.com.br/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://busca.buscape.com.br/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://busca.estadao.com.br/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://busca.igbusca.com.br/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://busca.igbusca.com.br//app/static/images/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://busca.orange.es/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://busca.uol.com.br/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://busca.uol.com.br/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://buscador.lycos.es/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://buscador.terra.com.br/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://buscador.terra.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://buscador.terra.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://buscador.terra.es/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://buscar.ozu.es/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://buscar.ya.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://busqueda.aol.com.mx/
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDCodeSigningCA-1.crt
Source: UM6rAJhKEq.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDCodeSigningCA-1.crt0
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDCodeSigningCA-1.crtJ
Source: UM6rAJhKEq.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: UM6rAJhKEq.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt$K
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt.K
Source: UM6rAJhKEq.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: smy.exe, 00000014.00000002.1063402467.0000000004E86000.00000004.00000001.sdmp	String found in binary or memory: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt0
Source: UM6rAJhKEq.exe, 00000000.00000002.893456532.0000000003774000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file-ssl-wan.ludashi.com/pc/game/flash/pepflashplayer.7z?t=202106140623
Source: UM6rAJhKEq.exe, 00000000.00000002.893456532.0000000003774000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file-ssl-wan.ludashi.com/pc/game/flash/pepflashplayer.7z?t=202106140623C:
Source: UM6rAJhKEq.exe, 00000000.00000003.666331834.000000000083A000.00000004.00000001.sdmp, smy.exe	String found in binary or memory: http://cdn-file-ssl-wan.ludashi.com/wan/wan/7z.dll
Source: UM6rAJhKEq.exe	String found in binary or memory: http://cdn-file-ssl-wan.ludashi.com/wan/wan/7z.dll7z_download_success7z_download_failStartEx3.2623.1
Source: UM6rAJhKEq.exe, 00000000.00000002.893052233.0000000003544000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file-ssl-wan.ludashi.com/wan/wan/7z.dllC:
Source: smy.exe, 00000014.00000003.906469175.000000000C0DE000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com
Source: smy.exe, 00000014.00000002.1059541894.00000000014AB000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/
Source: smy.exe, 00000014.00000002.1063599606.0000000004F0F000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1063648238.0000000004F32000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/jquery/jquery183.js
Source: smy.exe, 00000014.00000002.1063648238.0000000004F32000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/jquery/jquery183.jsC
Source: smy.exe, 00000014.00000002.1063785434.0000000004F6D000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/jquery/jquery183.jsH
Source: smy.exe, 00000014.00000002.1084803596.000000000D670000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/jquery/jquery183.jsR7
Source: smy.exe, 00000014.00000002.1063785434.0000000004F6D000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/jquery/jquery183.jsV
Source: smy.exe, 00000014.00000002.1067463435.00000000095C4000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/sea/sea.js
Source: smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/sea/sea.js&
Source: smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/sea/sea.jsX
Source: smy.exe, 00000014.00000002.1067463435.00000000095C4000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/sea/sea.jsZ
Source: smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/sea/sea.jsry183.js=tp&from=tp_repush_wd_smy_0602
Source: smy.exe, 00000014.00000002.1063585153.0000000004F03000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/bg.jpg
Source: smy.exe, 00000014.00000002.1063585153.0000000004F03000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/check.png
Source: smy.exe, 00000014.00000002.1063585153.0000000004F03000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/check.png$
Source: smy.exe, 00000014.00000002.1063585153.0000000004F03000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/check.png6
Source: smy.exe, 00000014.00000002.1063599606.0000000004F0F000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/checkbox.png
Source: smy.exe, 00000014.00000002.1063648238.0000000004F32000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/cir.png
Source: smy.exe, 00000014.00000002.1063648238.0000000004F32000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/cir.png4
Source: smy.exe, 00000014.00000002.1063648238.0000000004F32000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/cir.png6
Source: smy.exe, 00000014.00000002.1063599606.0000000004F0F000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/cir.pngke
Source: smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_log_act.png?t=20191021
Source: smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_log_act.png?t=201910214
Source: smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_log_act.png?t=20191021z
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_log_code.png?t=20191021
Source: smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_log_code.png?t=2019102102
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_log_code.png?t=20191021Q.H
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_log_pwd.png?t=20191021
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_log_pwd.png?t=20191021K.f
Source: smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_reg_act.png?t=20191021
Source: smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_reg_act.png?t=20191021$
Source: smy.exe, 00000014.00000003.898502515.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_reg_act.png?t=20191021//Z
Source: smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_reg_act.png?t=20191021602$
Source: smy.exe, 00000014.00000003.898502515.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_reg_act.png?t=20191021e.
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_reg_code.png?t=20191021
Source: smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_reg_code.png?t=2019102102G
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_reg_code.png?t=20191021I
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_reg_code.png?t=20191021Y/p
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_reg_code.png?t=20191021c
Source: smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_reg_pwd.png?t=20191021
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_reg_pwd.png?t=201910215/
Source: smy.exe, 00000014.00000002.1059558415.00000000014B9000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/main.css
Source: smy.exe, 00000014.00000002.1059558415.00000000014B9000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/main.css-
Source: smy.exe, 00000014.00000002.1059558415.00000000014B9000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/main.cssJ
Source: smy.exe, 00000014.00000002.1063585153.0000000004F03000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/nav.png
Source: smy.exe, 00000014.00000002.1059558415.00000000014B9000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/nav.pngpg
Source: smy.exe, 00000014.00000002.1063585153.0000000004F03000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/nav.pngr
Source: smy.exe, 00000014.00000002.1063621662.0000000004F23000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/news-bg.png
Source: smy.exe, 00000014.00000002.1063599606.0000000004F0F000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/news-bg.pngX
Source: smy.exe, 00000014.00000002.1063621662.0000000004F23000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/news-bg.pngg
Source: smy.exe, 00000014.00000002.1059558415.00000000014B9000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/reg.jpg?t=20200105
Source: smy.exe, 00000014.00000002.1059558415.00000000014B9000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/reg.jpg?t=202001051
Source: smy.exe, 00000014.00000002.1059558415.00000000014B9000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/reg.jpg?t=20200105h_wd_smy_0602p&from=tp_repush
Source: smy.exe, 00000014.00000002.1063621662.0000000004F23000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/third_qq.png
Source: smy.exe, 00000014.00000002.1063599606.0000000004F0F000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/third_qq.png105u
Source: smy.exe, 00000014.00000002.1063621662.0000000004F23000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/third_qq.pngn
Source: smy.exe, 00000014.00000002.1063599606.0000000004F0F000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/third_weixin.png
Source: smy.exe, 00000014.00000002.1063599606.0000000004F0F000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/third_weixin.pngN
Source: smy.exe, 00000014.00000003.898254006.0000000004EB4000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/upload.jpg
Source: smy.exe, 00000014.00000002.1059558415.00000000014B9000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/upload.jpg.
Source: smy.exe, 00000014.00000003.898399556.0000000004F03000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/upload.jpga
Source: smy.exe, 00000014.00000002.1063857208.00000000050C3000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.comhttp:
Source: smy.exe, 00000014.00000003.906469175.000000000C0DE000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1063857208.00000000050C3000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-wan.ludashi.com
Source: smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-wan.ludashi.com/
Source: smy.exe, 00000014.00000002.1063599606.0000000004F0F000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1074548563.000000000C0F0000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527
Source: smy.exe, 00000014.00000002.1063648238.0000000004F32000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527%
Source: smy.exe, 00000014.00000002.1063599606.0000000004F0F000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527.png
Source: smy.exe, 00000014.00000002.1063648238.0000000004F32000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527A
Source: smy.exe, 00000014.00000002.1063648238.0000000004F32000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527T
Source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp	String found in binary or memory: http://cdn.auditude.com/adserver
Source: smy.exe, 00000014.00000002.1063402467.0000000004E86000.00000004.00000001.sdmp	String found in binary or memory: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl0L
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://cerca.lycos.it/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://cgi.search.biglobe.ne.jp/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://cgi.search.biglobe.ne.jp/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://clients5.google.com/complete/search?hl=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://cnet.search.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://cnweb.search.live.com/results.aspx?q=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://corp.naukri.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://corp.naukri.com/favicon.ico
Source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	String found in binary or memory: http://crl.globalsign.com/gs/gstimestampingg2.crl0T
Source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	String found in binary or memory: http://crl.globalsign.com/gs/gstimestampingsha2g2.crl0
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r3.crl0
Source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	String found in binary or memory: http://crl.globalsign.net/root.crl0
Source: UM6rAJhKEq.exe, 00000000.00000003.881253437.0000000000E30000.00000004.00000001.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
Source: UM6rAJhKEq.exe, 00000000.00000002.892846917.00000000034CA000.00000004.00000001.sdmp	String found in binary or memory: http://crl3.digi9
Source: UM6rAJhKEq.exe, 00000000.00000002.892846917.00000000034CA000.00000004.00000001.sdmp, UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl
Source: UM6rAJhKEq.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: UM6rAJhKEq.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: UM6rAJhKEq.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: smy.exe, 00000014.00000002.1063449957.0000000004EAA000.00000004.00000001.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0c
Source: UM6rAJhKEq.exe	String found in binary or memory: http://crl3.digicert.com/assured-cs-g1.crl00
Source: UM6rAJhKEq.exe	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl
Source: UM6rAJhKEq.exe	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: UM6rAJhKEq.exe, 00000000.00000002.892846917.00000000034CA000.00000004.00000001.sdmp, UM6rAJhKEq.exe, 00000000.00000002.889506299.00000000007DB000.00000004.00000020.sdmp	String found in binary or memory: http://crl4.digi
Source: UM6rAJhKEq.exe, 00000000.00000002.892846917.00000000034CA000.00000004.00000001.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl
Source: UM6rAJhKEq.exe	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: UM6rAJhKEq.exe	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: UM6rAJhKEq.exe, 00000000.00000002.892846917.00000000034CA000.00000004.00000001.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crlh
Source: UM6rAJhKEq.exe	String found in binary or memory: http://crl4.digicert.com/assured-cs-g1.crl0L
Source: UM6rAJhKEq.exe	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0L
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl
Source: UM6rAJhKEq.exe	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: UM6rAJhKEq.exe, 00000000.00000003.881253437.0000000000E30000.00000004.00000001.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
Source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp	String found in binary or memory: http://curl.haxx.se/docs/http-cookies.html
Source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp	String found in binary or memory: http://dashif.org/guidelines/trickmode
Source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp	String found in binary or memory: http://dashif.org/guidelines/trickmodeAdaptationSetvideo/mp4audio/mp4text/vttMain
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://de.search.yahoo.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://es.ask.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://es.search.yahoo.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://esearch.rakuten.co.jp/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://espanol.search.yahoo.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://espn.go.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://find.joins.com/
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://fontfabrik.com
Source: UM6rAJhKEq.exe, 00000000.00000003.878449582.0000000004550000.00000004.00000001.sdmp	String found in binary or memory: http://fpdownload2.macromedia.com/get/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://fr.search.yahoo.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://google.pchome.com.tw/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://home.altervista.org/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://home.altervista.org/favicon.ico
Source: UM6rAJhKEq.exe	String found in binary or memory: http://https://file:///res://ieframe.dll/unloadonunload
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://i.ludashi.com/
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://i.ludashi.com/F
Source: smy.exe, 00000014.00000002.1068045331.0000000009622000.00000004.00000001.sdmp	String found in binary or memory: http://i.ludashi.com/ajax/Weixinlogin?extend=wd_youxisite&gamefrom=smy&channel=tp&from=tp_repush_wd_
Source: smy.exe, 00000014.00000002.1059541894.00000000014AB000.00000004.00000020.sdmp, smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	String found in binary or memory: http://i.ludashi.com/ajax/gettoken?user_from=youxi&callback=jQuery1830019642693851471715_16236446547
Source: smy.exe, 00000014.00000002.1059541894.00000000014AB000.00000004.00000020.sdmp	String found in binary or memory: http://i.ludashi.com/ajax/qqlogin?extend=wd_youxisite&gamefrom=smy&channel=tp&from=tp_repush_wd_smy_
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://ie.search.yahoo.com/os?command=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://ie8.ebay.com/open-search/output-xml.php?q=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://image.excite.co.jp/jp/favicon/lep.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://images.joins.com/ui_c/fvc_joins.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://images.monster.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://img.atlas.cz/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://img.shopzilla.com/shopzilla/shopzilla.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://in.search.yahoo.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://it.search.dada.net/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://it.search.dada.net/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://it.search.yahoo.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://jobsearch.monster.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://kr.search.yahoo.com/
Source: smy.exe	String found in binary or memory: http://l.public.ludashi.com/pc/Updata/Usuallog
Source: UM6rAJhKEq.exe	String found in binary or memory: http://l.public.ludashi.com/pc/Updata/UsuallogCStatistic::Thread_SendPingback
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://list.taobao.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://list.taobao.com/browse/search_visual.htm?n=15&q=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://mail.live.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://mail.live.com/?rru=compose%3Fsubject%3D
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://msk.afisha.ru/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://ocnsearch.goo.ne.jp/
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.digicert.com
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir%2FSSy4IxL
Source: smy.exe, 00000014.00000002.1063449957.0000000004EAA000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.digicert.com0B
Source: UM6rAJhKEq.exe	String found in binary or memory: http://ocsp.digicert.com0C
Source: UM6rAJhKEq.exe	String found in binary or memory: http://ocsp.digicert.com0L
Source: UM6rAJhKEq.exe	String found in binary or memory: http://ocsp.digicert.com0N
Source: UM6rAJhKEq.exe	String found in binary or memory: http://ocsp.digicert.com0O
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.digicert.comf
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.digicert.comhttp://crl3.digicert.com/DigiCertAssuredIDRootCA.crlhttp://crl4.digicert.com
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.digicert.comhttp://crl3.digicert.com/sha2-assured-ts.crlhttp://crl4.digicert.com/sha2-as
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.digicert.comhttp://crl4.digicert.com/DigiCertAssuredIDRootCA.crlhttp://crl3.digicert.com
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.digicert.com~
Source: UM6rAJhKEq.exe, 00000000.00000003.881253437.0000000000E30000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.sectigo.com0
Source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp2.globalsign.com/gstimestampingsha2g20
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://openimage.interpark.com/interpark.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://p.zhongsou.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://p.zhongsou.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://price.ru/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://price.ru/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://recherche.linternaute.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://recherche.tf1.fr/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://recherche.tf1.fr/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://rover.ebay.com
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://ru.search.yahoo.com
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/
Source: UM6rAJhKEq.exe	String found in binary or memory: http://s.ludashi.com/wan
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?rl
Source: smy.exe, 00000014.00000002.1059541894.00000000014AB000.00000004.00000020.sdmp	String found in binary or memory: http://s.ludashi.com/wan?typ
Source: smy.exe, 00000014.00000002.1067463435.00000000095C4000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1059558415.00000000014B9000.00000004.00000020.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=accurate&action=t0&channel=tp&from=tp_repush_wd_smy_0602&mid=e4ec8e8a6
Source: smy.exe, 00000014.00000002.1079555603.000000000CE5D000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1068045331.0000000009622000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=accurate&action=t1&channel=tp&from=tp_repush_wd_smy_0602&mid=e4ec8e8a6
Source: smy.exe, 00000014.00000002.1079555603.000000000CE5D000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1063449957.0000000004EAA000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=accurate&action=t2&channel=tp&from=tp_repush_wd_smy_0602&mid=e4ec8e8a6
Source: smy.exe, 00000014.00000002.1079555603.000000000CE5D000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=accurate&action=t3&channel=tp&from=tp_repush_wd_smy_0602&mid=e4ec8e8a6
Source: UM6rAJhKEq.exe, 00000000.00000002.892370964.0000000003459000.00000004.00000001.sdmp, UM6rAJhKEq.exe, 00000000.00000003.817220003.000000000083A000.00000004.00000001.sdmp, UM6rAJhKEq.exe, 00000000.00000003.666331834.000000000083A000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=7z_download_start&channel=tp&mid=e4ec8e8a6f2d1ca301f6e2
Source: UM6rAJhKEq.exe, 00000000.00000002.892370964.0000000003459000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=7z_download_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6
Source: UM6rAJhKEq.exe, 00000000.00000002.889506299.00000000007DB000.00000004.00000020.sdmp, UM6rAJhKEq.exe, 00000000.00000003.666331834.000000000083A000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=7z_noexist&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448
Source: UM6rAJhKEq.exe, 00000000.00000002.889745719.000000000083A000.00000004.00000020.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=add_desk_icon&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536
Source: UM6rAJhKEq.exe, 00000000.00000002.892370964.0000000003459000.00000004.00000001.sdmp, UM6rAJhKEq.exe, 00000000.00000002.889745719.000000000083A000.00000004.00000020.sdmp, UM6rAJhKEq.exe, 00000000.00000002.892478243.0000000003472000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=add_uninst_item&channel=tp&mid=e4ec8e8a6f2d1ca301f6e295
Source: UM6rAJhKEq.exe, 00000000.00000002.892675679.0000000003490000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=inst_open&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c
Source: UM6rAJhKEq.exe, 00000000.00000002.889506299.00000000007DB000.00000004.00000020.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=inst_succ&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp, UM6rAJhKEq.exe, 00000000.00000003.666331834.000000000083A000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=install&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71
Source: UM6rAJhKEq.exe, 00000000.00000002.889745719.000000000083A000.00000004.00000020.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=install_extra&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536
Source: smy.exe, 00000014.00000003.898254006.0000000004EB4000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=main_show&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c
Source: UM6rAJhKEq.exe, 00000000.00000002.892370964.0000000003459000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=pepflash_down_success&channel=tp&mid=e4ec8e8a6f2d1ca301
Source: UM6rAJhKEq.exe, 00000000.00000002.892370964.0000000003459000.00000004.00000001.sdmp, UM6rAJhKEq.exe, 00000000.00000003.881469811.0000000003491000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=res_down_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29
Source: UM6rAJhKEq.exe, 00000000.00000002.889745719.000000000083A000.00000004.00000020.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=wd_install_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e
Source: smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=wd_show_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e295
Source: UM6rAJhKEq.exe, 00000000.00000002.893052233.0000000003544000.00000004.00000001.sdmp	String found in binary or memory: http://s.symcb.com/universal-root.crl0
Source: UM6rAJhKEq.exe, 00000000.00000002.889506299.00000000007DB000.00000004.00000020.sdmp	String found in binary or memory: http://s.symcd.com0&
Source: UM6rAJhKEq.exe, 00000000.00000002.893052233.0000000003544000.00000004.00000001.sdmp	String found in binary or memory: http://s.symcd.com06
Source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	String found in binary or memory: http://s1.symcb.com/pca3-g5.crl0
Source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	String found in binary or memory: http://s2.symcb.com0
Source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp	String found in binary or memory: http://s3.amazonaws.com/venkat-test/ads/camry/file-640k.m3u8
Source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp	String found in binary or memory: http://s3.amazonaws.com/venkat-test/ads/camry/file-640k.m3u8L
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://sads.myspace.com/
Source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search-dyn.tiscali.it/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.about.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.alice.it/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.alice.it/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.aol.co.uk/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.aol.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.aol.in/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.atlas.cz/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.auction.co.kr/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.auone.jp/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.books.com.tw/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.books.com.tw/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.centrum.cz/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.centrum.cz/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.chol.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.chol.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.cn.yahoo.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.daum.net/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.daum.net/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.dreamwiz.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.dreamwiz.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.ebay.co.uk/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.ebay.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.ebay.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.ebay.de/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.ebay.es/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.ebay.fr/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.ebay.in/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.ebay.it/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.empas.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.empas.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.espn.go.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.gamer.com.tw/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.gamer.com.tw/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.gismeteo.ru/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.goo.ne.jp/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.goo.ne.jp/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.hanafos.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.hanafos.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.interpark.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.ipop.co.kr/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.ipop.co.kr/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.live.com/results.aspx?FORM=IEFM1&q=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.live.com/results.aspx?FORM=SO2TDF&q=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.live.com/results.aspx?FORM=SOLTDF&q=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.live.com/results.aspx?q=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.livedoor.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.livedoor.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.lycos.co.uk/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.lycos.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.lycos.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.msn.co.jp/results.aspx?q=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.msn.co.uk/results.aspx?q=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.msn.com.cn/results.aspx?q=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.msn.com/results.aspx?q=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.nate.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.naver.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.naver.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.nifty.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.orange.co.uk/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.orange.co.uk/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.rediff.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.rediff.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.seznam.cz/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.seznam.cz/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.sify.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.yahoo.co.jp
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.yahoo.co.jp/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.yahoo.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.yahoo.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.yahooapis.jp/AssistSearchService/V2/webassistSearch?output=iejson&p=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search.yam.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search1.taobao.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://search2.estadao.com.br/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://searchresults.news.com.au/
Source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	String found in binary or memory: http://secure.globalsign.com/cacert/gstimestampingg2.crt0
Source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	String found in binary or memory: http://secure.globalsign.com/cacert/gstimestampingsha2g2.crt0
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://service2.bfast.com/
Source: UM6rAJhKEq.exe, 00000000.00000002.889506299.00000000007DB000.00000004.00000020.sdmp	String found in binary or memory: http://sf.symcb.com/sf.crl0a
Source: UM6rAJhKEq.exe, 00000000.00000002.889506299.00000000007DB000.00000004.00000020.sdmp	String found in binary or memory: http://sf.symcb.com/sf.crt0
Source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	String found in binary or memory: http://sf.symcd.com0&
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://sitesearch.timesonline.co.uk/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://so-net.search.goo.ne.jp/
Source: smy.exe, 00000014.00000002.1079542902.000000000CE56000.00000004.00000001.sdmp	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/sc/2b/a5ea21.ic
Source: smy.exe, 00000014.00000002.1067463435.00000000095C4000.00000004.00000001.sdmp	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/sc/2b/a5ea21.ico
Source: smy.exe, 00000014.00000002.1083649714.000000000D542000.00000004.00000001.sdmp	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/sc/2b/a5ea21.icog
Source: smy.exe, 00000014.00000002.1063402467.0000000004E86000.00000004.00000001.sdmp	String found in binary or memory: http://status.rapidssl.com0=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://suche.aol.de/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://suche.freenet.de/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://suche.freenet.de/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://suche.lycos.de/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://suche.t-online.de/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://suche.web.de/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://suche.web.de/favicon.ico
Source: UM6rAJhKEq.exe, 00000000.00000003.817283987.0000000003475000.00000004.00000001.sdmp	String found in binary or memory: http://sv.symcb.com/sv.crl0a
Source: UM6rAJhKEq.exe, 00000000.00000003.817283987.0000000003475000.00000004.00000001.sdmp	String found in binary or memory: http://sv.symcb.com/sv.crt0
Source: UM6rAJhKEq.exe, 00000000.00000003.817283987.0000000003475000.00000004.00000001.sdmp	String found in binary or memory: http://sv.symcd.com0&
Source: UM6rAJhKEq.exe	String found in binary or memory: http://tg.taojike.com.cn/login/dispense?channel=wd_uninstall_OpenUninstallPage_OpenUninstallPage
Source: smy.exe, 00000014.00000002.1062022222.0000000004700000.00000002.00000001.sdmp	String found in binary or memory: http://treyresearch.net
Source: UM6rAJhKEq.exe, 00000000.00000002.893052233.0000000003544000.00000004.00000001.sdmp	String found in binary or memory: http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(
Source: UM6rAJhKEq.exe, 00000000.00000003.817220003.000000000083A000.00000004.00000001.sdmp	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: UM6rAJhKEq.exe, 00000000.00000002.893052233.0000000003544000.00000004.00000001.sdmp	String found in binary or memory: http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0
Source: UM6rAJhKEq.exe, 00000000.00000003.817220003.000000000083A000.00000004.00000001.sdmp	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: UM6rAJhKEq.exe, 00000000.00000003.817220003.000000000083A000.00000004.00000001.sdmp	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: UM6rAJhKEq.exe, 00000000.00000002.893052233.0000000003544000.00000004.00000001.sdmp	String found in binary or memory: http://ts-ocsp.ws.symantec.com0;
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://tw.search.yahoo.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://udn.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://udn.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://uk.ask.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://uk.ask.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://uk.search.yahoo.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://vachercher.lycos.fr/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://video.globo.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://video.globo.com/favicon.ico
Source: smy.exe, 00000014.00000002.1059541894.00000000014AB000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/
Source: UM6rAJhKEq.exe	String found in binary or memory: http://wan.ludashi.com/(?:(?:web/game)
Source: BrowserDlg.xml	String found in binary or memory: http://wan.ludashi.com/account/pop
Source: smy.exe, 00000014.00000002.1063599606.0000000004F0F000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/account/protocol?type=register
Source: smy.exe, 00000014.00000002.1063599606.0000000004F0F000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/account/protocol?type=register&
Source: smy.exe, 00000014.00000002.1063449957.0000000004EAA000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/announce/list?callback=jQuery1830019642693851471715_1623644654750&type=2&gid=
Source: smy.exe, 00000014.00000002.1059558415.00000000014B9000.00000004.00000020.sdmp, smy.exe, 00000014.00000002.1059541894.00000000014AB000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/api/CheckGameStatus?callback=jQuery1830019642693851471715_1623644654749
Source: smy.exe, 00000014.00000002.1059558415.00000000014B9000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/api/CheckGameStatus?callback=jQuery1830019642693851471715_1623644654749MS
Source: smy.exe, 00000014.00000002.1059558415.00000000014B9000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/api/CheckGameStatus?callback=jQuery1830019642693851471715_1623644654749qQ
Source: smy.exe, 00000014.00000002.1075079251.000000000C170000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/client/play/
Source: UM6rAJhKEq.exe	String found in binary or memory: http://wan.ludashi.com/cms/newbuy/microend.php?game_id=%s&channel=%s&pid=%s&subpid=%s
Source: smy.exe, 00000014.00000002.1063621662.0000000004F23000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/download/jump?game_id=smy
Source: smy.exe, 00000014.00000002.1063621662.0000000004F23000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/download/jump?game_id=smy_
Source: smy.exe, 00000014.00000002.1075079251.000000000C170000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/h5/game/
Source: smy.exe, 00000014.00000002.1063621662.0000000004F23000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/
Source: smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/0602ea.js
Source: smy.exe, 00000014.00000002.1063936649.0000000005174000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1073330882.000000000BAB0000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/_use_0
Source: smy.exe, 00000014.00000002.1059558415.00000000014B9000.00000004.00000020.sdmp, smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp, UM6rAJhKEq.exe	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602
Source: smy.exe, 00000014.00000002.1059389044.00000000012F4000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602$
Source: smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602.
Source: smy.exe, 00000014.00000002.1059541894.00000000014AB000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_060215_162364465474
Source: smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_06022
Source: smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_060225
Source: smy.exe, 00000014.00000002.1066968345.0000000009550000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_06022WV
Source: smy.exe, 00000014.00000002.1063449957.0000000004EAA000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_06024465474902...yy
Source: smy.exe, 00000014.00000002.1059558415.00000000014B9000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602=1&dLMEM
Source: smy.exe, 00000014.00000002.1066968345.0000000009550000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602ByV
Source: smy.exe, 00000014.00000002.1079096784.000000000CDC1000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602WS
Source: smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602Z
Source: smy.exe, 00000014.00000002.1066968345.0000000009550000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602b
Source: smy.exe, 00000014.00000003.908482067.000000000C156000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1073330882.000000000BAB0000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1063857208.00000000050C3000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602http://wan.luda
Source: smy.exe, 00000014.00000002.1075005294.000000000C157000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602https://cdn-ssl
Source: smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602i
Source: smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602l
Source: smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602s
Source: smy.exe, 00000014.00000002.1059541894.00000000014AB000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602tps=1ultbrowser
Source: smy.exe, 00000014.00000003.898254006.0000000004EB4000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602vC
Source: smy.exe, 00000014.00000002.1063449957.0000000004EAA000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602y:inline;zoom:1
Source: UM6rAJhKEq.exe, smy.exe	String found in binary or memory: http://wan.ludashi.com/pageV2/alone
Source: UM6rAJhKEq.exe	String found in binary or memory: http://wan.ludashi.com/pageV2/aloneembedversion=embedversionembedinsttime=embedinsttimeembedchannel=
Source: BrowserDlg.xml	String found in binary or memory: http://wan.ludashi.com/pageV2/index
Source: UM6rAJhKEq.exe	String found in binary or memory: http://wan.ludashi.com/pageV2/protocol?type=register
Source: UM6rAJhKEq.exe	String found in binary or memory: http://wan.ludashi.com/pay/index?game=smy
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp, UM6rAJhKEq.exe, 00000000.00000002.889506299.00000000007DB000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/pay/index?game=smy0
Source: smy.exe, 00000014.00000002.1067463435.00000000095C4000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/pay?game=smy&server=1
Source: smy.exe, 00000014.00000002.1067463435.00000000095C4000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/service?type=1
Source: UM6rAJhKEq.exe	String found in binary or memory: http://wan.ludashi.com/site/
Source: smy.exe, 00000014.00000002.1067335387.0000000009583000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/smy
Source: smy.exe, 00000014.00000002.1059541894.00000000014AB000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/site/smy%
Source: smy.exe, 00000014.00000003.923495957.000000000C152000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1077760827.000000000C7A3000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/smy?id=10599
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/smy?id=1059902
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/smy?id=10599b
Source: smy.exe, 00000014.00000003.923495957.000000000C152000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1077760827.000000000C7A3000.00000004.00000001.sdmp, smy.exe, 00000014.00000003.923542279.000000000C161000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1074685605.000000000C10E000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/smy?id=10805
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/smy?id=108052
Source: smy.exe, 00000014.00000003.923495957.000000000C152000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1077760827.000000000C7A3000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/smy?id=11058
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/smy?id=11058.
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/smy?id=11058J
Source: smy.exe, 00000014.00000003.923495957.000000000C152000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1077760827.000000000C7A3000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1074685605.000000000C10E000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/smy?id=12061
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/smy?id=120612
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/smy?id=12061F
Source: smy.exe, 00000014.00000002.1067463435.00000000095C4000.00000004.00000001.sdmp, smy.exe, 00000014.00000003.923495957.000000000C152000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1077760827.000000000C7A3000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/smy?id=9384
Source: smy.exe, 00000014.00000002.1067463435.00000000095C4000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/smy?id=9384=
Source: smy.exe, 00000014.00000002.1067463435.00000000095C4000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/smy?id=9384e
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp, smy.exe	String found in binary or memory: http://wan.ludashi.com/web
Source: smy.exe	String found in binary or memory: http://wan.ludashi.com/web/service
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/web/serviceetUL
Source: UM6rAJhKEq.exe	String found in binary or memory: http://wan.ludashi.com/web/servicekefu_page_urlhttp://wan.ludashi.com/webindex_page_urldeskicon_name
Source: UM6rAJhKEq.exe	String found in binary or memory: http://wan.ludashi.com/web/wpay?game=
Source: smy.exe, 00000014.00000002.1075079251.000000000C170000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/yeyou/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://web.ask.com/
Source: smy.exe, 00000014.00000002.1062022222.0000000004700000.00000002.00000001.sdmp	String found in binary or memory: http://www.%s.com
Source: UM6rAJhKEq.exe, 00000000.00000003.817220003.000000000083A000.00000004.00000001.sdmp	String found in binary or memory: http://www.360.cn
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.abril.com.br/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.abril.com.br/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.afisha.ru/App_Themes/Default/images/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.alarabiya.net/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.alarabiya.net/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.amazon.co.jp/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.amazon.co.uk/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.amazon.com/exec/obidos/external-search/104-2981279-3455918?index=blended&keyword=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.amazon.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.amazon.com/gp/search?ie=UTF8&tag=ie8search-20&index=blended&linkCode=qs&c
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.amazon.de/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.aol.com/favicon.ico
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.arrakis.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.arrakis.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.asharqalawsat.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.asharqalawsat.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.ask.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.auction.co.kr/auction.ico
Source: BrowserDlg.xml, PlayWindow.xml	String found in binary or memory: http://www.baidu.com
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.baidu.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.baidu.com/favicon.ico
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.carterandcone.coml
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.cdiscount.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.cdiscount.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.ceneo.pl/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.ceneo.pl/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.chennaionline.com/ncommon/images/collogo.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.cjmall.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.cjmall.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.clarin.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.cnet.co.uk/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.cnet.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.dailymail.co.uk/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.dailymail.co.uk/favicon.ico
Source: UM6rAJhKEq.exe	String found in binary or memory: http://www.digicert.com/CPS0
Source: UM6rAJhKEq.exe	String found in binary or memory: http://www.digicert.com/ssl-cps-repository.htm0
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.docUrl.com/bar.htm
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.etmall.com.tw/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.etmall.com.tw/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.excite.co.jp/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.expedia.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.expedia.com/favicon.ico
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.fontbureau.com
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.fontbureau.com/designers
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/?
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/cabarga.htmlN
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/frere-user.html
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.fontbureau.com/designers8
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.fontbureau.com/designers?
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.fontbureau.com/designersG
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.fonts.com
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.founder.com.cn/cn
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.founder.com.cn/cn/bThe
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.founder.com.cn/cn/cThe
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.galapagosdesign.com/DPlease
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.galapagosdesign.com/staff/dennis.htm
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.gismeteo.ru/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.gmarket.co.kr/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.gmarket.co.kr/favicon.ico
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.goodfont.co.kr
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.co.in/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.co.jp/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.co.uk/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.com.br/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.com.sa/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.com.tw/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.cz/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.de/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.es/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.fr/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.it/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.pl/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.ru/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.si/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.iask.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.iask.com/favicon.ico
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.kkbox.com.tw/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.kkbox.com.tw/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.linternaute.com/favicon.ico
Source: UM6rAJhKEq.exe, 00000000.00000003.878449582.0000000004550000.00000004.00000001.sdmp	String found in binary or memory: http://www.macromedia.com
Source: UM6rAJhKEq.exe, 00000000.00000003.878449582.0000000004550000.00000004.00000001.sdmp	String found in binary or memory: http://www.macromedia.com/go/player_settings_
Source: UM6rAJhKEq.exe, 00000000.00000003.878449582.0000000004550000.00000004.00000001.sdmp	String found in binary or memory: http://www.macromedia.com/go/player_settings_Microphone.MutedMicrophone.UnmutedCamera.MutedCamera.Un
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.maktoob.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.mercadolibre.com.mx/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.mercadolibre.com.mx/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.mercadolivre.com.br/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.mercadolivre.com.br/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.merlin.com.pl/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.merlin.com.pl/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.microsofttranslator.com/?ref=IE8Activity
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.microsofttranslator.com/BV.aspx?ref=IE8Activity&a=
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.microsofttranslator.com/BVPrev.aspx?ref=IE8Activity
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.microsofttranslator.com/Default.aspx?ref=IE8Activity
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.microsofttranslator.com/DefaultPrev.aspx?ref=IE8Activity
Source: smy.exe, 00000014.00000002.1068045331.0000000009622000.00000004.00000001.sdmp	String found in binary or memory: http://www.msn.com/?ocid=iehp
Source: smy.exe, 00000014.00000002.1063585153.0000000004F03000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1079096784.000000000CDC1000.00000004.00000001.sdmp	String found in binary or memory: http://www.msn.com/de-ch/?ocid=iehp
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.mtv.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.mtv.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.myspace.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.najdi.si/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.najdi.si/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.nate.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.neckermann.de/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.neckermann.de/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.news.com.au/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.nifty.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.ocn.ne.jp/favicon.ico
Source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.html
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.orange.fr/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.otto.de/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.ozon.ru/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.ozon.ru/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.ozu.es/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.paginasamarillas.es/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.paginasamarillas.es/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.pchome.com.tw/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.priceminister.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.priceminister.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.rakuten.co.jp/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.rambler.ru/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.rambler.ru/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.recherche.aol.fr/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.rtl.de/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.rtl.de/favicon.ico
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.sajatypeworks.com
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.sakkal.com
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.sandoll.co.kr
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.servicios.clarin.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.shopzilla.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.sify.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.so-net.ne.jp/share/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.sogou.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.sogou.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.soso.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.soso.com/favicon.ico
Source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	String found in binary or memory: http://www.symauth.com/cps0(
Source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	String found in binary or memory: http://www.symauth.com/rpa00
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.t-online.de/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.taobao.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.taobao.com/favicon.ico
Source: smy.exe	String found in binary or memory: http://www.taojike.com.cn
Source: UM6rAJhKEq.exe	String found in binary or memory: http://www.taojike.com.cnURLInfoAboutInstallLocation_AddUninstallItem
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.target.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.target.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.tchibo.de/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.tchibo.de/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.tesco.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.tesco.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.timesonline.co.uk/img/favicon.ico
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.tiro.com
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.tiscali.it/favicon.ico
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.typography.netD
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.univision.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.univision.com/favicon.ico
Source: smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	String found in binary or memory: http://www.urwpp.deDPlease
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.walmart.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.walmart.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.ya.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www.yam.com/favicon.ico
Source: smy.exe, 00000014.00000002.1066410433.00000000085D3000.00000002.00000001.sdmp, smy.exe, 00000014.00000002.1071759626.000000000B310000.00000002.00000001.sdmp	String found in binary or memory: http://www.zhongyicts.com.cn
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www3.fnac.com/
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://www3.fnac.com/favicon.ico
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://xml-us.amznxslt.com/onca/xml?Service=AWSECommerceService&Version=2008-06-26&Operation
Source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp	String found in binary or memory: http://youtube.com/drm/2012/10/10/ContentProtectioncenc:pssh/cenc:psshurn:uuid:F239E769-EFA3-4850-9C
Source: UM6rAJhKEq.exe	String found in binary or memory: http://yxtg.taojike.com.cn/login/uninst?channel=wd_uninstall
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: http://yxtg.taojike.com.cn/login/uninst?channel=wd_uninstalli
Source: smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	String found in binary or memory: http://z.about.com/m/a08.ico
Source: smy.exe, 00000014.00000002.1079542902.000000000CE56000.00000004.00000001.sdmp	String found in binary or memory: https://2542116.fls.doubleclick.net/activityi;src=2542116;type=2542116;cat=chom0;ord=8072167097284;g
Source: smy.exe, 00000014.00000002.1063449957.0000000004EAA000.00000004.00000001.sdmp	String found in binary or memory: https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=chromx;ord=1;num=4510094
Source: smy.exe, 00000014.00000002.1066968345.0000000009550000.00000004.00000001.sdmp	String found in binary or memory: https://adservice.google.com/ddm/fls/i/src=2542116;type=2542116;cat=chom0;ord=8072167097284;gtm=2wg9
Source: UM6rAJhKEq.exe, 00000000.00000003.878449582.0000000004550000.00000004.00000001.sdmp	String found in binary or memory: https://auth.adobefpl.com/1/
Source: UM6rAJhKEq.exe, 00000000.00000003.878449582.0000000004550000.00000004.00000001.sdmp	String found in binary or memory: https://auth.adobefpl.com/1/?nocache=load-authorized-features-from-data
Source: smy.exe, 00000014.00000002.1063936649.0000000005174000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1063875088.00000000050CF000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-file-ssl.ludashi.com
Source: smy.exe, 00000014.00000002.1073330882.000000000BAB0000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-file-ssl.ludashi.com6
Source: smy.exe, 00000014.00000002.1063936649.0000000005174000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1063857208.00000000050C3000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com
Source: smy.exe, 00000014.00000002.1063621662.0000000004F23000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/
Source: smy.exe, 00000014.00000002.1073330882.000000000BAB0000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/
Source: smy.exe, 00000014.00000003.917832724.000000000C62E000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonLoginApi.js?v=20200810
Source: smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonLoginApi.js?v=202008102
Source: smy.exe, 00000014.00000002.1063648238.0000000004F32000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonLoginApi.js?v=202008102pageMicro.js?v=2
Source: smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonLoginApi.js?v=20200810A
Source: smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonLoginApi.js?v=20200810cript
Source: smy.exe, 00000014.00000002.1063648238.0000000004F32000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527
Source: smy.exe, 00000014.00000002.1063585153.0000000004F03000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527...
Source: smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=202105271
Source: smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527602
Source: smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=202105276022
Source: smy.exe, 00000014.00000002.1073330882.000000000BAB0000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527D
Source: smy.exe, 00000014.00000002.1075890011.000000000C1D4000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527W
Source: smy.exe, 00000014.00000003.917832724.000000000C62E000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527p
Source: smy.exe, 00000014.00000002.1063599606.0000000004F0F000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527
Source: smy.exe, 00000014.00000002.1063480117.0000000004EDF000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527...
Source: smy.exe, 00000014.00000002.1073330882.000000000BAB0000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527_async_1
Source: smy.exe, 00000014.00000003.917832724.000000000C62E000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527_async_1p
Source: smy.exe, 00000014.00000002.1063599606.0000000004F0F000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527dv
Source: smy.exe, 00000014.00000002.1063621662.0000000004F23000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/o
Source: smy.exe, 00000014.00000003.906469175.000000000C0DE000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.compageRegister.js?v=20210429
Source: smy.exe, 00000014.00000002.1083013087.000000000D45C000.00000004.00000001.sdmp	String found in binary or memory: https://consent.google.com/?hl=en-GB&origin=https://www.google.com&continue=https://www.google.com/?
Source: smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	String found in binary or memory: https://consent.google.com/done8?continue=https://www.google.com/?gws_rd%3Dssl&origin=https://www.go
Source: smy.exe, 00000014.00000002.1067463435.00000000095C4000.00000004.00000001.sdmp	String found in binary or memory: https://consent.google.com/set?pc=s&uxe=4421591
Source: smy.exe, 00000014.00000002.1083649714.000000000D542000.00000004.00000001.sdmp	String found in binary or memory: https://consent.google.com/set?pc=s&uxe=4421591LMEM
Source: smy.exe, 00000014.00000002.1068275073.000000000969F000.00000004.00000001.sdmp	String found in binary or memory: https://contextual.media.net/chec
Source: smy.exe, 00000014.00000002.1067463435.00000000095C4000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1059558415.00000000014B9000.00000004.00000020.sdmp, smy.exe, 00000014.00000002.1079542902.000000000CE56000.00000004.00000001.sdmp	String found in binary or memory: https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2
Source: smy.exe, 00000014.00000002.1068275073.000000000969F000.00000004.00000001.sdmp	String found in binary or memory: https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIGv
Source: smy.exe, 00000014.00000002.1066968345.0000000009550000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1084803596.000000000D670000.00000004.00000001.sdmp	String found in binary or memory: https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&https=1
Source: smy.exe, 00000014.00000002.1084803596.000000000D670000.00000004.00000001.sdmp	String found in binary or memory: https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&https=1d6
Source: smy.exe, 00000014.00000002.1066968345.0000000009550000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1084803596.000000000D670000.00000004.00000001.sdmp	String found in binary or memory: https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1
Source: smy.exe, 00000014.00000002.1066968345.0000000009550000.00000004.00000001.sdmp	String found in binary or memory: https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=12~
Source: smy.exe, 00000014.00000002.1066968345.0000000009550000.00000004.00000001.sdmp	String found in binary or memory: https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1J
Source: smy.exe, 00000014.00000002.1066968345.0000000009550000.00000004.00000001.sdmp	String found in binary or memory: https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1R
Source: smy.exe, 00000014.00000002.1066968345.0000000009550000.00000004.00000001.sdmp	String found in binary or memory: https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1b
Source: UM6rAJhKEq.exe, 00000000.00000002.889506299.00000000007DB000.00000004.00000020.sdmp	String found in binary or memory: https://d.symcb.com/cps0%
Source: UM6rAJhKEq.exe, 00000000.00000002.889506299.00000000007DB000.00000004.00000020.sdmp, UM6rAJhKEq.exe, 00000000.00000002.893052233.0000000003544000.00000004.00000001.sdmp	String found in binary or memory: https://d.symcb.com/rpa0
Source: UM6rAJhKEq.exe, 00000000.00000002.893052233.0000000003544000.00000004.00000001.sdmp	String found in binary or memory: https://d.symcb.com/rpa0.
Source: UM6rAJhKEq.exe, 00000000.00000003.878449582.0000000004550000.00000004.00000001.sdmp	String found in binary or memory: https://fpdownload.macromedia.com/get/
Source: UM6rAJhKEq.exe	String found in binary or memory: https://getfirebug.com/firebug-lite.js#startOpened=true
Source: UM6rAJhKEq.exe, 00000000.00000002.892254296.0000000003440000.00000004.00000001.sdmp	String found in binary or memory: https://login.live.com
Source: smy.exe, 00000014.00000002.1059541894.00000000014AB000.00000004.00000020.sdmp	String found in binary or memory: https://login.live.comcro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602
Source: smy.exe, 00000014.00000002.1083824111.000000000D582000.00000004.00000001.sdmp	String found in binary or memory: https://ogs.google.com/widget/callout?prid=19020392&pgid=19020380&puid=93eb0881ae9ec1db&origin=https
Source: UM6rAJhKEq.exe, 00000000.00000003.881253437.0000000000E30000.00000004.00000001.sdmp	String found in binary or memory: https://sectigo.com/CPS0D
Source: da.pak.0.dr	String found in binary or memory: https://support.google.com/chrome/?p=sync_history&hl=da
Source: es.pak.0.dr	String found in binary or memory: https://support.google.com/chrome/?p=sync_history&hl=es
Source: ro.pak.0.dr	String found in binary or memory: https://support.google.com/chrome/?p=sync_history&hl=ro
Source: UM6rAJhKEq.exe	String found in binary or memory: https://wan.ludashi.com
Source: smy.exe, 00000014.00000002.1075079251.000000000C170000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1075005294.000000000C157000.00000004.00000001.sdmp	String found in binary or memory: https://wan.ludashi.com/micro/bind.html
Source: UM6rAJhKEq.exe	String found in binary or memory: https://wan.ludashi.com/service
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: https://wan.ludashi.com/serviceg(J
Source: UM6rAJhKEq.exe	String found in binary or memory: https://wan.ludashi.com/site/smy
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp, UM6rAJhKEq.exe, 00000000.00000002.889506299.00000000007DB000.00000004.00000020.sdmp	String found in binary or memory: https://wan.ludashi.com/site/smy-1002
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: https://wan.ludashi.com/site/smy0K
Source: UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	String found in binary or memory: https://wan.ludashi.com_
Source: UM6rAJhKEq.exe	String found in binary or memory: https://www.digicert.com/CPS0
Source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	String found in binary or memory: https://www.globalsign.com/repository/0
Source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	String found in binary or memory: https://www.globalsign.com/repository/03
Source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	String found in binary or memory: https://www.globalsign.com/repository/06
Source: smy.exe, 00000014.00000002.1067463435.00000000095C4000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/?gws_rd%3Dssl&origin=https://www.google.com&gl=GB&pc=s&uxe=4421591
Source: smy.exe, 00000014.00000002.1063585153.0000000004F03000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1079096784.000000000CDC1000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/?gws_rd=ssl
Source: smy.exe, 00000014.00000002.1063585153.0000000004F03000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/?gws_rd=ssl_
Source: ro.pak.0.dr	String found in binary or memory: https://www.google.com/chrome/browser/privacy/whitepaper.html#malwareEroare
Source: es.pak.0.dr	String found in binary or memory: https://www.google.com/chrome/browser/privacy/whitepaper.html#malwareError
Source: da.pak.0.dr	String found in binary or memory: https://www.google.com/chrome/browser/privacy/whitepaper.html#malwareFejl
Source: smy.exe, 00000014.00000002.1066968345.0000000009550000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/chrome/static/images/favicons/favicon-16x16.png
Source: smy.exe, 00000014.00000002.1080030035.000000000CF30000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/chrome/static/images/favicons/favicon-16x16.pngl
Source: smy.exe, 00000014.00000002.1083649714.000000000D542000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/chrome/static/images/favicons/favicon-16x16.pngoG
Source: smy.exe, 00000014.00000002.1063449957.0000000004EAA000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/intl/en_uk/chrome/
Source: smy.exe, 00000014.00000002.1063449957.0000000004EAA000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/intl/en_uk/chrome/8
Source: smy.exe, 00000014.00000002.1063449957.0000000004EAA000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/intl/en_uk/chrome/o
Source: smy.exe, 00000014.00000002.1063648238.0000000004F32000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/intl/en_uk/chrome/thank-you.html?statcb=0&installdataindex=empty&defaultbrows
Source: smy.exe, 00000014.00000002.1067463435.00000000095C4000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1068045331.0000000009622000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/search
Source: smy.exe, 00000014.00000002.1067463435.00000000095C4000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/search?source=hp&ei=djJ0X6TKCL6IjLsPqriogAY&q=chrome&oq=chrome&gs_lcp=CgZwc3k
Source: smy.exe, 00000014.00000002.1068045331.0000000009622000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/searchHWl
Source: smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	String found in binary or memory: https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwj8k7G9rJDsAhWNTxUIHZZGDCQQ
Source: UM6rAJhKEq.exe, 00000000.00000003.878449582.0000000004550000.00000004.00000001.sdmp	String found in binary or memory: https://www.macromedia.com/bin/flashdownload.cgi
Source: UM6rAJhKEq.exe, 00000000.00000003.878449582.0000000004550000.00000004.00000001.sdmp	String found in binary or memory: https://www.macromedia.com/bin/flashdownload.cgihttps://fpdownload.macromedia.com/get/http://fpdownl
Source: UM6rAJhKEq.exe, 00000000.00000003.878449582.0000000004550000.00000004.00000001.sdmp	String found in binary or memory: https://www.macromedia.com/support/flashplayer/sys/
Source: UM6rAJhKEq.exe, 00000000.00000003.878449582.0000000004550000.00000004.00000001.sdmp	String found in binary or memory: https://www.macromedia.com/support/flashplayer/sys/http://www.macromedia.commm.cfgflashlog.txtpolicy
Source: smy.exe, 00000014.00000002.1075079251.000000000C170000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1075584139.000000000C1A2000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1078038180.000000000C930000.00000004.00000001.sdmp	String found in binary or memory: https://yxtg.taojike.com.cn/exitpage/client.html
Source: smy.exe, 00000014.00000002.1075079251.000000000C170000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1078038180.000000000C930000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1063885906.00000000050DC000.00000004.00000001.sdmp	String found in binary or memory: https://yxtg.taojike.com.cn/exitpage/client_h5.html
Source: smy.exe, 00000014.00000002.1075079251.000000000C170000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1063885906.00000000050DC000.00000004.00000001.sdmp	String found in binary or memory: https://yxtg.taojike.com.cn/exitpage/client_new.html
Source: smy.exe, 00000014.00000002.1078038180.000000000C930000.00000004.00000001.sdmp	String found in binary or memory: https://yxtg.taojike.com.cn/exitpage/client_new.htmls

Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782

Source: unknown

HTTPS traffic detected: 115.238.192.239:443 -> 192.168.2.4:49782 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing:

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00A8C890 GetKeyState,GetKeyState,GetKeyState,GetKeyState,GetKeyState,GetKeyState,		0_2_00A8C890
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_0023C890 GetKeyState,GetKeyState,GetKeyState,GetKeyState,GetKeyState,GetKeyState,		20_2_0023C890

System Summary:

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00A8C8E0	0_2_00A8C8E0
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00AE70E0	0_2_00AE70E0
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00AE8BE0	0_2_00AE8BE0
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00A43310	0_2_00A43310
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00AE74A0	0_2_00AE74A0
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00AE7C30	0_2_00AE7C30
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00A7CDE0	0_2_00A7CDE0
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00AE6D20	0_2_00AE6D20
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00AE5D30	0_2_00AE5D30
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00AE7610	0_2_00AE7610
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_6B59CB9E	0_2_6B59CB9E
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_6B5969A8	0_2_6B5969A8
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_6B5A17B8	0_2_6B5A17B8
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_6B59C6F0	0_2_6B59C6F0
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_0025C570	20_2_0025C570
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_0025A680	20_2_0025A680
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_00299340	20_2_00299340
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_0024F900	20_2_0024F900
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_0029A0D0	20_2_0029A0D0
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_002B61D0	20_2_002B61D0
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_0023842E	20_2_0023842E
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_00256580	20_2_00256580
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_0021259D	20_2_0021259D
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_002087C0	20_2_002087C0
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_0023C8E0	20_2_0023C8E0
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_0022AB30	20_2_0022AB30
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_00298BE0	20_2_00298BE0
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_0029AC10	20_2_0029AC10
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_00296D20	20_2_00296D20
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_0022CDE0	20_2_0022CDE0
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_002970E0	20_2_002970E0
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_001F3310	20_2_001F3310
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_002974A0	20_2_002974A0
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_00297610	20_2_00297610
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_00297C30	20_2_00297C30

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: String function: 00225DD0 appears 56 times
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: String function: 001FECA0 appears 40 times
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: String function: 002957F0 appears 34 times
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: String function: 001F7D90 appears 46 times
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: String function: 00225DB0 appears 51 times
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: String function: 001F4EA0 appears 36 times
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: String function: 0023BFC0 appears 33 times

Source: UM6rAJhKEq.exe	Static PE information: Resource name: FILERES type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: UM6rAJhKEq.exe	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: UM6rAJhKEq.exe	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: UM6rAJhKEq.exe	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: UM6rAJhKEq.exe	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: UM6rAJhKEq.exe	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: smy.exe.0.dr	Static PE information: Resource name: FILERES type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: smy.exe.0.dr	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: smy.exe.0.dr	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: smy.exe.0.dr	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: smy.exe.0.dr	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: smy.exe.0.dr	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract

Source: UM6rAJhKEq.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: smy.exe.0.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: UM6rAJhKEq.exe, 00000000.00000002.894684453.0000000003A00000.00000002.00000001.sdmp	Binary or memory string: OriginalFilenamemswsock.dll.muij% vs UM6rAJhKEq.exe
Source: UM6rAJhKEq.exe, 00000000.00000002.889506299.00000000007DB000.00000004.00000020.sdmp	Binary or memory string: OriginalFilenameNetBridge.dll8 vs UM6rAJhKEq.exe
Source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	Binary or memory string: OriginalFilenamewidevinecdmadapter.dllv+ vs UM6rAJhKEq.exe
Source: UM6rAJhKEq.exe, 00000000.00000002.891418086.0000000002C70000.00000002.00000001.sdmp	Binary or memory string: OriginalFilenameCRYPT32.DLL.MUIj% vs UM6rAJhKEq.exe
Source: UM6rAJhKEq.exe, 00000000.00000003.876415030.0000000003B50000.00000004.00000001.sdmp	Binary or memory string: OriginalFilenamepepflashplayer.dll: vs UM6rAJhKEq.exe
Source: UM6rAJhKEq.exe, 00000000.00000002.889228548.00000000005F0000.00000002.00000001.sdmp	Binary or memory string: originalfilename vs UM6rAJhKEq.exe
Source: UM6rAJhKEq.exe, 00000000.00000002.889228548.00000000005F0000.00000002.00000001.sdmp	Binary or memory string: OriginalFilenamepropsys.dll.mui@ vs UM6rAJhKEq.exe
Source: UM6rAJhKEq.exe	Binary or memory string: OriginalFilenameNetBridge.dll8 vs UM6rAJhKEq.exe

Source: UM6rAJhKEq.exe

Static PE information: 32BIT_MACHINE, EXECUTABLE_IMAGE

Source: classification engine

Classification label: mal45.evad.winEXE@3/131@9/9

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00A70E20 GetModuleFileNameW,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,CloseHandle,	0_2_00A70E20
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_0022C770 LoadLibraryW,GetProcAddress,GetCurrentProcess,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,CloseHandle,GetLastError,GetCurrentProcess,OpenProcessToken,DuplicateTokenEx,LocalAlloc,CreateWellKnownSid,GetLengthSid,SetTokenInformation,CloseHandle,LocalFree,CloseHandle,FreeLibrary,	20_2_0022C770
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_00220F50 GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,CloseHandle,	20_2_00220F50

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe

Code function: 20_2_0021E030 CreateToolhelp32Snapshot,Thread32First,GetCurrentProcessId,GetCurrentProcessId,GetCurrentThreadId,HeapAlloc,HeapReAlloc,Thread32Next,CloseHandle,OpenThread,SuspendThread,CloseHandle,

20_2_0021E030

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe

Code function: 20_2_002625C0 LoadLibraryW,GetProcAddress,CoCreateInstance,

20_2_002625C0

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

Code function: 0_2_00A72180 FindResourceW,SizeofResource,LoadResource,LockResource,

0_2_00A72180

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

File created: C:\Users\user\AppData\Roaming\LDSGameCenter

Jump to behavior

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

Mutant created: \Sessions\1\BaseNamedObjects\CUSERSuserAPPDATAROAMINGWDGAMELOGCEFHELPERLOG

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

File created: C:\Users\user\AppData\Local\Temp\WdGame_smy

Jump to behavior

Source: UM6rAJhKEq.exe

Static PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: UM6rAJhKEq.exe	Virustotal: Detection: 27%
Source: UM6rAJhKEq.exe	ReversingLabs: Detection: 37%

Source: smy.exe	String found in binary or memory: -install
Source: UM6rAJhKEq.exe	String found in binary or memory: F_CreateShortcut, create '%s' success_AddStartMenu, Delete %s--from=start_menu_AddStartMenu, successadd_start_menu--from=desk_icon_AddDesktopIcon, successadd_desk_icon_AddToInstallList_AddToInstallList regPath: %s;%s;InstalledGameIds%s;_RemoveFromInstallList_RemoveFromInstallList regPath: %s;\WdGameTray_LaunchTrayInstall, create install dir failed.\WdGameTray\Utils_LaunchTrayInstall, create install Utils dir failed.\WdGameTray\DrvMgr_LaunchTrayInstall, create install DrvMgr dir failed.\WdGameTray.exeWdGameTray.exe_LaunchTrayInstall, _TrayUnzipFile WdGameTray.exe failed._LaunchTrayInstall, _TrayUnzipFile NetBridge.dll failed.\RunDll.exe_LaunchTrayInstall, _TrayUnzipFile RunDll.exe failed.\LitePopEx.dll_LaunchTrayInstall, _TrayUnzipFile LitePopEx.dll failed._LaunchTrayInstall, WdGameTray.exe not valid exe.-install -gameid=%s -pid=%s -gameid=%s -pid=%s -subpid=%s_LaunchTrayInstall, run '%s' %s failed_LaunchTrayUninstall, install dir not found._LaunchTrayUninstall, WdGameTray.exe not valid exe.-uninstall\Fancy3D_TryInstallFancy3D, create appdata dir failedfancygame.ocxDllRegisterServerFANCY3DOCX.Fancy3DOCXCtrl.%d{B2E8D85E-C0C5-48DF-8DBC-1359B339AE32}_GetStartMenuDir, Create directory : %snotempdiruninstall__WdGameTemp___EnsureIsRunningTempExe, copy to temp path failed.target_dir --target_dir="%s"_KillRelatedProcess, kill '%s'_RemoveDesktopIcon, delete '%s'_RemoveDesktopIcon, failed delete '%s'_RemoveStartMenu, delete '%s'_RemoveStartMenu, failed delete '%s'_RemoveInstalledDir, delete '%s'_RemoveInstalledDir, failed delete '%s'_RemoveUninstItem*%s\%s.%s%s\%s-%d.%suidown_skin_fail
Source: UM6rAJhKEq.exe	String found in binary or memory: BrowserDlg/loading.gif
Source: UM6rAJhKEq.exe	String found in binary or memory: ChangeGameWindow/loading_bg.jpg
Source: UM6rAJhKEq.exe	String found in binary or memory: FuncDlgs/add_clock.png
Source: UM6rAJhKEq.exe	String found in binary or memory: InstallWindow/install_click.png}U
Source: UM6rAJhKEq.exe	String found in binary or memory: InstallWindow/install_disabled.png}T8
Source: UM6rAJhKEq.exe	String found in binary or memory: "InstallWindow/install_disabled.png}T8
Source: UM6rAJhKEq.exe	String found in binary or memory: InstallWindow/install_hover.png}U
Source: UM6rAJhKEq.exe	String found in binary or memory: InstallWindow/install_normal.png}U8Tk
Source: UM6rAJhKEq.exe	String found in binary or memory: InstallWindow/install_normal.png}U8Tk
Source: UM6rAJhKEq.exe	String found in binary or memory: InstallWindow/install_click.png
Source: UM6rAJhKEq.exe	String found in binary or memory: InstallWindow/install_disabled.png
Source: UM6rAJhKEq.exe	String found in binary or memory: InstallWindow/install_hover.png
Source: UM6rAJhKEq.exe	String found in binary or memory: InstallWindow/install_normal.png

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

File read: C:\Users\user\Desktop\UM6rAJhKEq.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\UM6rAJhKEq.exe 'C:\Users\user\Desktop\UM6rAJhKEq.exe'
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process created: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe 'C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe'
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process created: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe 'C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe'	Jump to behavior

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{289AF617-1CC3-42A6-926C-E6A863F0E3BA}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

Registry value created: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\WdGame_smy

Jump to behavior

Source: UM6rAJhKEq.exe

Static PE information: certificate valid

Source: UM6rAJhKEq.exe

Static file information: File size 3826088 > 1048576

Source: UM6rAJhKEq.exe

Static PE information: Raw size of .rsrc is bigger than: 0x100000 < 0x265800

Source: UM6rAJhKEq.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: UM6rAJhKEq.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: UM6rAJhKEq.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: UM6rAJhKEq.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: UM6rAJhKEq.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: UM6rAJhKEq.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: UM6rAJhKEq.exe

Static PE information: TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

Source: UM6rAJhKEq.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: D:\box\WdGameBox\Release\LiteGameBox2.pdb source: UM6rAJhKEq.exe
Source:	Binary string: h:\ch1\src\sandbox\wow_helper\wow_helper.pdbp source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp
Source:	Binary string: C:\vmagent_new\bin\joblist\369595\out\Release\ResHelper.pdb source: UM6rAJhKEq.exe, 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp
Source:	Binary string: \|D:\box\WdGameBox\Release\LiteGameBox2.pdb source: UM6rAJhKEq.exe
Source:	Binary string: d:\build\360cloud_build\360NetUL_base1031\bin\360NetUL.pdb source: UM6rAJhKEq.exe
Source:	Binary string: E:\open_source\cef\source\chromium\src\out\Release\widevinecdmadapter.dll.pdb source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp
Source:	Binary string: E:\r\ws\St_Make\code\products\player\pepper\gypbuild\Release\pepflashplayer.pdb source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp
Source:	Binary string: E:\open_source\cef\source\chromium\src\out\Release\widevinecdmadapter.dll.pdbGCTL source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp
Source:	Binary string: h:\ch1\src\sandbox\wow_helper\wow_helper.pdb source: UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp
Source:	Binary string: E:\r\ws\St_Make\code\products\player\pepper\gypbuild\Release\pepflashplayer.pdb% source: UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp

Source: UM6rAJhKEq.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: UM6rAJhKEq.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: UM6rAJhKEq.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: UM6rAJhKEq.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: UM6rAJhKEq.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Data Obfuscation:

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

Code function: 0_2_00A8C8E0 EnterCriticalSection,LeaveCriticalSection,SendMessageW,SendMessageW,GetTickCount,SendMessageW,_TrackMouseEvent,GetTickCount,SendMessageW,GetFocus,IsChild,SetFocus,SetCapture,GetTickCount,SetFocus,SetCapture,GetTickCount,ReleaseCapture,GetTickCount,SetFocus,SetCapture,GetTickCount,ScreenToClient,GetTickCount,GetTickCount,SendMessageW,SendMessageW,SendMessageW,SendMessageW,IsWindowVisible,GetFocus,GetClassNameW,SetFocus,GetTickCount,CreateWindowExW,SendMessageW,SendMessageW,SendMessageW,GetClientRect,SaveDC,GetWindow,GetWindowRect,MapWindowPoints,SetWindowOrgEx,SendMessageW,GetWindow,RestoreDC,LoadLibraryW,GetProcAddress,FreeLibrary,EnterCriticalSection,LeaveCriticalSection,

0_2_00A8C8E0

Source: UM6rAJhKEq.exe	Static PE information: real checksum: 0x3abb17 should be: 0x3a79b4
Source: smy.exe.0.dr	Static PE information: real checksum: 0x3abb17 should be: 0x3a79b4

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00AE5836 push ecx; ret	0_2_00AE5849
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00AE5437 push ecx; ret	0_2_00AE544A
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_6B592BC6 push ecx; ret	0_2_6B592BD9
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_00295437 push ecx; ret	20_2_0029544A
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_00295836 push ecx; ret	20_2_00295849

Persistence and Installation Behavior:

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File created: C:\Users\user\AppData\Local\Temp\{467B4A82-2989-4e52-A47E-1F20823DD802}.tmp\CefRes.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_47.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libEGL.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\wow_helper.exe	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libcef.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File created: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libGLESv2.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\7z.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\CefRes.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_43.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File created: C:\Users\user\AppData\Local\Temp\WdGame_smy\NetBridge.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File created: C:\Users\user\AppData\Roaming\WdGame\NetBridge.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\pepflashplayer.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\widevinecdmadapter.dll	Jump to dropped file

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\LICENSE.txt

Jump to behavior

Boot Survival:

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\???			Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\???\???.lnk			Jump to behavior

Hooking and other Techniques for Hiding and Protection:

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe

Code function: 20_2_00248D70 IsIconic,GetWindowRect,CreateRoundRectRgn,SetWindowRgn,DeleteObject,

20_2_00248D70

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe

Code function: 20_2_0023842E GetModuleHandleW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

20_2_0023842E

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Jump to behavior

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior

Malware Analysis System Evasion:

Contains functionality to detect sleep reduction / modifications

Show sources

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00A75040	0_2_00A75040
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00A74A00	0_2_00A74A00
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00A74EE0	0_2_00A74EE0
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_00224A00	20_2_00224A00
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_00224B40	20_2_00224B40
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_00224EE0	20_2_00224EE0
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_00225040	20_2_00225040

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Memory allocated: 4D80000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Memory allocated: 5170000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Memory allocated: 52F0000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Memory allocated: 5310000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Memory allocated: BA70000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Memory allocated: BAD0000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Memory allocated: C130000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Memory allocated: C1B0000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Memory allocated: C1F0000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Memory allocated: C210000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Memory allocated: C580000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Memory allocated: C3E0000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Memory allocated: C830000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Memory allocated: C420000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Memory allocated: C440000 memory commit \| memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0001 name: DriverDesc			Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	File opened / queried: SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}			Jump to behavior

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe

20_2_0021E030

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\wow_helper.exe	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libEGL.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_47.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libcef.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libGLESv2.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_43.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\pepflashplayer.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\widevinecdmadapter.dll	Jump to dropped file

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

File opened: PhysicalDrive0

Jump to behavior

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe

Code function: 20_2_002042B3 SetFileAttributesW,lstrlenW,FindClose,FindFirstFileW,FindClose,

20_2_002042B3

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File opened: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File opened: C:\Users\user\AppData\Roaming\WdGame\smy	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	File opened: C:\Users\user\AppData\Roaming\WdGame	Jump to behavior

Source: UM6rAJhKEq.exe, 00000000.00000003.666331834.000000000083A000.00000004.00000001.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllw
Source: UM6rAJhKEq.exe	Binary or memory string: :khGfS
Source: UM6rAJhKEq.exe, 00000000.00000002.892370964.0000000003459000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1063387554.0000000004E80000.00000004.00000001.sdmp	Binary or memory string: Hyper-V RAW
Source: smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	Binary or memory string: Hyper-V RAW,

Anti Debugging:

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

Code function: 0_2_00AF79BF IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_00AF79BF

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe

Code function: 20_2_00225928 MultiByteToWideChar,GetLastError,MultiByteToWideChar,MultiByteToWideChar,MultiByteToWideChar,OutputDebugStringA,

20_2_00225928

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe

20_2_0021E030

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

0_2_00A8C8E0

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00B0CA70 mov eax, dword ptr fs:[00000030h]	0_2_00B0CA70
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_6B5976A5 mov eax, dword ptr fs:[00000030h]	0_2_6B5976A5
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_002BCA70 mov eax, dword ptr fs:[00000030h]	20_2_002BCA70

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

Code function: 0_2_00A84B40 GetProcessHeap,

0_2_00A84B40

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00AF79BF IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00AF79BF
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_00AE4C62 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_00AE4C62
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_6B595B0F IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_6B595B0F
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: 0_2_6B592BDB SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_6B592BDB
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_00294C62 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	20_2_00294C62
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: 20_2_002A79BF IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	20_2_002A79BF

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion:

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

Process created: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe 'C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe'

Jump to behavior

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe

Code function: 20_2_001FC890 GetCurrentThread,OpenThreadToken,GetLastError,GetLastError,GetLastError,GetCurrentProcess,OpenProcessToken,GetTokenInformation,GetTokenInformation,GetLastError,GetTokenInformation,AllocateAndInitializeSid,EqualSid,

20_2_001FC890

Source: smy.exe, 00000014.00000002.1060031769.0000000001D10000.00000002.00000001.sdmp	Binary or memory string: Program Manager
Source: smy.exe, 00000014.00000002.1060031769.0000000001D10000.00000002.00000001.sdmp	Binary or memory string: Shell_TrayWnd
Source: smy.exe, 00000014.00000002.1060031769.0000000001D10000.00000002.00000001.sdmp	Binary or memory string: Progman
Source: smy.exe, 00000014.00000002.1060031769.0000000001D10000.00000002.00000001.sdmp	Binary or memory string: Progmanlock

Language, Device and Operating System Detection:

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe

Code function: 20_2_0028F2B0 cpuid

20_2_0028F2B0

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Code function: GetLocaleInfoW,		0_2_00B1176C
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Code function: GetLocaleInfoW,		20_2_002C176C

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Queries volume information: C:\Windows\Fonts\ARIALN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Queries volume information: C:\Windows\Fonts\ariali.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Queries volume information: C:\Windows\Fonts\ARIALNI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Queries volume information: C:\Windows\Fonts\arialbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Queries volume information: C:\Windows\Fonts\ARIALNB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Queries volume information: C:\Windows\Fonts\arialbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Queries volume information: C:\Windows\Fonts\ARIALNBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Queries volume information: C:\Windows\Fonts\ariblk.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Queries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Queries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Queries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Queries volume information: C:\Windows\Fonts\times.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Queries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Queries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

Code function: 0_2_00AE5AFB GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

0_2_00AE5AFB

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe

Code function: 20_2_0022AB30 CoInitialize,CoInitializeSecurity,CoCreateInstance,VariantInit,VariantInit,VariantInit,VariantInit,VariantInit,VariantClear,VariantClear,VariantClear,VariantClear,VariantClear,SysAllocString,SysFreeString,SysFreeString,SysAllocString,SysAllocString,SysAllocString,SysAllocString,SysAllocString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysAllocString,SysFreeString,SysAllocString,SysAllocString,SysFreeString,SysAllocString,SysFreeString,GetUserNameExW,SysFreeString,SysAllocString,SysAllocString,SysAllocString,SysFreeString,SysFreeString,SysFreeString,SysAllocString,SysAllocString,SysFreeString,SysAllocString,SysFreeString,SysFreeString,SysAllocString,SysAllocString,SysFreeString,SysAllocString,SysFreeString,VariantInit,VariantInit,VariantInit,VariantClear,VariantInit,SysAllocString,SysAllocString,SysAllocString,SysFreeString,VariantClear,VariantClear,VariantClear,VariantClear,CoUninitialize,

20_2_0022AB30

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe

Code function: 20_2_002C2954 _free,_free,_free,GetTimeZoneInformation,WideCharToMultiByte,WideCharToMultiByte,_free,

20_2_002C2954

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe

Code function: 0_2_00A88E20 PathFileExistsW,GetVersionExW,WinVerifyTrust,WTHelperProvDataFromStateData,CertGetNameStringW,WinVerifyTrust,

0_2_00A88E20

Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings:

Source: C:\Users\user\Desktop\UM6rAJhKEq.exe	Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Scripting1	DLL Search Order Hijacking2	DLL Search Order Hijacking2	Disable or Modify Tools1	Input Capture1	System Time Discovery2	Remote Services	Archive Collected Data1	Exfiltration Over Other Network Medium	Ingress Tool Transfer13	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Native API1	Application Shimming1	Application Shimming1	Deobfuscate/Decode Files or Information1	LSASS Memory	Account Discovery1	Remote Desktop Protocol	Input Capture1	Exfiltration Over Bluetooth	Encrypted Channel22	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	Command and Scripting Interpreter2	Windows Service1	Access Token Manipulation1	Scripting1	Security Account Manager	File and Directory Discovery3	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Non-Application Layer Protocol4	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Registry Run Keys / Startup Folder1	Windows Service1	Obfuscated Files or Information2	NTDS	System Information Discovery44	Distributed Component Object Model	Input Capture	Scheduled Transfer	Application Layer Protocol25	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Process Injection12	DLL Search Order Hijacking2	LSA Secrets	Query Registry1	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Registry Run Keys / Startup Folder1	Masquerading1	Cached Domain Credentials	Security Software Discovery161	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	Virtualization/Sandbox Evasion3	DCSync	Virtualization/Sandbox Evasion3	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	Modify Registry1	Proc Filesystem	Process Discovery2	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	Access Token Manipulation1	/etc/passwd and /etc/shadow	Application Window Discovery1	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction
Supply Chain Compromise	AppleScript	At (Windows)	At (Windows)	Process Injection12	Network Sniffing	System Owner/User Discovery1	Taint Shared Content	Local Data Staging	Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol	File Transfer Protocols			Data Encrypted for Impact
Compromise Software Dependencies and Development Tools	Windows Command Shell	Cron	Cron	Right-to-Left Override	Input Capture	Remote System Discovery1	Replication Through Removable Media	Remote Data Staging	Exfiltration Over Physical Medium	Mail Protocols			Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
UM6rAJhKEq.exe	28%	Virustotal		Browse
UM6rAJhKEq.exe	11%	Metadefender		Browse
UM6rAJhKEq.exe	38%	ReversingLabs	Win32.Trojan.Doina
UM6rAJhKEq.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Link
C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\WdGame_smy\NetBridge.dll	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\WdGame_smy\NetBridge.dll	3%	ReversingLabs
C:\Users\user\AppData\Local\Temp\{467B4A82-2989-4e52-A47E-1F20823DD802}.tmp\CefRes.dll	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\{467B4A82-2989-4e52-A47E-1F20823DD802}.tmp\CefRes.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\WdGame\NetBridge.dll	0%	Metadefender	Browse
C:\Users\user\AppData\Roaming\WdGame\NetBridge.dll	3%	ReversingLabs
C:\Users\user\AppData\Roaming\WdGame\Utils\7z.dll	0%	Metadefender	Browse
C:\Users\user\AppData\Roaming\WdGame\Utils\7z.dll	4%	ReversingLabs
C:\Users\user\AppData\Roaming\WdGame\Utils\CefRes.dll	0%	Metadefender	Browse
C:\Users\user\AppData\Roaming\WdGame\Utils\CefRes.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_43.dll	0%	Metadefender	Browse
C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_43.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_47.dll	0%	Metadefender	Browse
C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_47.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libEGL.dll	0%	Metadefender	Browse
C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libEGL.dll	0%	ReversingLabs

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Link
cdn-wan.ludashi.com.w.kunlunle.com	0%	Virustotal	Browse
cdn-file.ludashi.com.m.alikunlun.net	0%	Virustotal	Browse
cdn-ssl-wan.ludashi.com.m.alikunlun.com	0%	Virustotal	Browse
cdn-file-ssl-wan.ludashi.com.m.alikunlun.com	1%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://www.mercadolivre.com.br/	0%	URL Reputation	safe
http://www.mercadolivre.com.br/	0%	URL Reputation	safe
http://www.mercadolivre.com.br/	0%	URL Reputation	safe
http://www.merlin.com.pl/favicon.ico	0%	URL Reputation	safe
http://www.merlin.com.pl/favicon.ico	0%	URL Reputation	safe
http://www.merlin.com.pl/favicon.ico	0%	URL Reputation	safe
http://www.dailymail.co.uk/	0%	URL Reputation	safe
http://www.dailymail.co.uk/	0%	URL Reputation	safe
http://www.dailymail.co.uk/	0%	URL Reputation	safe
http://www.galapagosdesign.com/DPlease	0%	URL Reputation	safe
http://www.galapagosdesign.com/DPlease	0%	URL Reputation	safe
http://www.galapagosdesign.com/DPlease	0%	URL Reputation	safe
http://busca.igbusca.com.br//app/static/images/favicon.ico	0%	URL Reputation	safe
http://busca.igbusca.com.br//app/static/images/favicon.ico	0%	URL Reputation	safe
http://busca.igbusca.com.br//app/static/images/favicon.ico	0%	URL Reputation	safe
http://www.etmall.com.tw/favicon.ico	0%	URL Reputation	safe
http://www.etmall.com.tw/favicon.ico	0%	URL Reputation	safe
http://www.etmall.com.tw/favicon.ico	0%	URL Reputation	safe
http://it.search.dada.net/favicon.ico	0%	URL Reputation	safe
http://it.search.dada.net/favicon.ico	0%	URL Reputation	safe
http://it.search.dada.net/favicon.ico	0%	URL Reputation	safe
https://yxtg.taojike.com.cn/exitpage/client_new.html	0%	Avira URL Cloud	safe
http://search.hanafos.com/favicon.ico	0%	URL Reputation	safe
http://search.hanafos.com/favicon.ico	0%	URL Reputation	safe
http://search.hanafos.com/favicon.ico	0%	URL Reputation	safe
http://cgi.search.biglobe.ne.jp/favicon.ico	0%	Avira URL Cloud	safe
http://search.msn.co.jp/results.aspx?q=	0%	URL Reputation	safe
http://search.msn.co.jp/results.aspx?q=	0%	URL Reputation	safe
http://search.msn.co.jp/results.aspx?q=	0%	URL Reputation	safe
http://buscar.ozu.es/	0%	URL Reputation	safe
http://buscar.ozu.es/	0%	URL Reputation	safe
http://buscar.ozu.es/	0%	URL Reputation	safe
http://search.auction.co.kr/	0%	URL Reputation	safe
http://search.auction.co.kr/	0%	URL Reputation	safe
http://search.auction.co.kr/	0%	URL Reputation	safe
http://crl4.digi	0%	Avira URL Cloud	safe
http://www.pchome.com.tw/favicon.ico	0%	URL Reputation	safe
http://www.pchome.com.tw/favicon.ico	0%	URL Reputation	safe
http://www.pchome.com.tw/favicon.ico	0%	URL Reputation	safe
http://browse.guardian.co.uk/favicon.ico	0%	URL Reputation	safe
http://browse.guardian.co.uk/favicon.ico	0%	URL Reputation	safe
http://browse.guardian.co.uk/favicon.ico	0%	URL Reputation	safe
http://google.pchome.com.tw/	0%	URL Reputation	safe
http://google.pchome.com.tw/	0%	URL Reputation	safe
http://google.pchome.com.tw/	0%	URL Reputation	safe
http://www.ozu.es/favicon.ico	0%	URL Reputation	safe
http://www.ozu.es/favicon.ico	0%	URL Reputation	safe
http://www.ozu.es/favicon.ico	0%	URL Reputation	safe
http://search.yahoo.co.jp/favicon.ico	0%	URL Reputation	safe
http://search.yahoo.co.jp/favicon.ico	0%	URL Reputation	safe
http://search.yahoo.co.jp/favicon.ico	0%	URL Reputation	safe
http://www.gmarket.co.kr/	0%	URL Reputation	safe
http://www.gmarket.co.kr/	0%	URL Reputation	safe
http://www.gmarket.co.kr/	0%	URL Reputation	safe
http://www.founder.com.cn/cn/bThe	0%	URL Reputation	safe
http://www.founder.com.cn/cn/bThe	0%	URL Reputation	safe
http://www.founder.com.cn/cn/bThe	0%	URL Reputation	safe
http://ad.auditude.com/adserver/e?type=playererrormpd&f=&tp=&tv=&url=&vw=&vh=X-MoneyTraceX-IDx	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
cdn-wan.ludashi.com.w.kunlunle.com	122.225.67.180	true	false	0%, Virustotal, Browse	unknown
s.ludashi.com	47.117.76.6	true	false		high
cdn-file.ludashi.com.m.alikunlun.net	101.227.25.228	true	false	0%, Virustotal, Browse	unknown
cdn-ssl-wan.ludashi.com.m.alikunlun.com	115.238.192.239	true	false	0%, Virustotal, Browse	unknown
cdn-file-ssl-wan.ludashi.com.m.alikunlun.com	115.231.152.244	true	false	1%, Virustotal, Browse	unknown
i.ludashi.com	120.27.82.56	true	false		high
wan.ludashi.com	139.129.105.182	true	false		high
cdn-file-ssl-pc.ludashi.com.m.alikunlun.com	220.189.197.2	true	false		unknown
cdn-ssl-wan.ludashi.com	unknown	unknown	false		high
cdn-file.ludashi.com	unknown	unknown	false		high
cdn-wan.ludashi.com	unknown	unknown	false		high
cdn-file-ssl-wan.ludashi.com	unknown	unknown	false		high
cdn-file-ssl-pc.ludashi.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Reputation
http://s.ludashi.com/wan?type=weiduan&action=run&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=08d04bed40b525cd8a38008e74110bd0&from=tp_smy&forcetick=4131843	false	high
http://s.ludashi.com/wan?type=accurate&action=t1&channel=tp&from=tp_repush_wd_smy_0602&mid=e4ec8e8a6f2d1ca301f6e29536448c71&appver=3.2.124.1372&uid=0&game=smy&timestamp=1623644669499&ex_ary[guid]=	false	high
http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/bg.jpg	false	high
http://cdn-file.ludashi.com/assets/sea/sea.js	false	high
http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/main.css	false	high
http://s.ludashi.com/wan?type=weiduan&action=add_desk_icon&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=aa839ed1b28cc8cdeaaae92f4e4726d8&from=tp_smy&forcetick=4129421	false	high
http://s.ludashi.com/wan?type=weiduan&action=res_down_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=5325e06e8a465a509753654520147fbb&from=tp_smy&forcetick=4108671	false	high
http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_reg_pwd.png?t=20191021	false	high
http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527	false	high
http://s.ludashi.com/wan?type=weiduan&action=inst_open&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=fcdf1d0913f0dccc8c7a0e1803ad8b9a&from=tp_smy&forcetick=4129781	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://search.chol.com/favicon.ico	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://www.mercadolivre.com.br/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://cdp.rapidssl.com/RapidSSLRSACA2018.crl0L	smy.exe, 00000014.00000002.1063402467.0000000004E86000.00000004.00000001.sdmp	false		high
http://www.merlin.com.pl/favicon.ico	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://s.ludashi.com/wan?type=weiduan&action=inst_open&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c	UM6rAJhKEq.exe, 00000000.00000002.892675679.0000000003490000.00000004.00000001.sdmp	false		high
http://wan.ludashi.com/micro/smy/	smy.exe, 00000014.00000002.1063621662.0000000004F23000.00000004.00000001.sdmp	false		high
http://www.dailymail.co.uk/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527...	smy.exe, 00000014.00000002.1063480117.0000000004EDF000.00000004.00000001.sdmp	false		high
http://cdn-file-ssl-wan.ludashi.com/wan/wan/7z.dll7z_download_success7z_download_failStartEx3.2623.1	UM6rAJhKEq.exe	false		high
http://www.fontbureau.com/designers	smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	false		high
http://wan.ludashi.com/site/smy?id=10599	smy.exe, 00000014.00000003.923495957.000000000C152000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1077760827.000000000C7A3000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	false		high
http://fr.search.yahoo.com/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/third_weixin.pngN	smy.exe, 00000014.00000002.1063599606.0000000004F0F000.00000004.00000001.sdmp	false		high
http://in.search.yahoo.com/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_060225	smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	false		high
http://wan.ludashi.com/pay?game=smy&server=1	smy.exe, 00000014.00000002.1067463435.00000000095C4000.00000004.00000001.sdmp	false		high
https://wan.ludashi.com/serviceg(J	UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp	false		high
http://img.shopzilla.com/shopzilla/shopzilla.ico	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://cdn-file.ludashi.com/assets/sea/sea.jsry183.js=tp&from=tp_repush_wd_smy_0602	smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	false		high
http://s.ludashi.com/wan?type=weiduan&action=wd_show_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e295	smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	false		high
http://www.galapagosdesign.com/DPlease	smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://msk.afisha.ru/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://busca.igbusca.com.br//app/static/images/favicon.ico	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://wan.ludashi.com/site/smy?id=11058.	smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	false		high
http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_log_code.png?t=2019102102	smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	false		high
http://www.ya.com/favicon.ico	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://www.etmall.com.tw/favicon.ico	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/nav.pngpg	smy.exe, 00000014.00000002.1059558415.00000000014B9000.00000004.00000020.sdmp	false		high
http://it.search.dada.net/favicon.ico	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_06022WV	smy.exe, 00000014.00000002.1066968345.0000000009550000.00000004.00000001.sdmp	false		high
http://wan.ludashi.com/account/protocol?type=register&	smy.exe, 00000014.00000002.1063599606.0000000004F0F000.00000004.00000001.sdmp	false		high
https://yxtg.taojike.com.cn/exitpage/client_new.html	smy.exe, 00000014.00000002.1075079251.000000000C170000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1063885906.00000000050DC000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://search.hanafos.com/favicon.ico	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://wan.ludashi.com/download/jump?game_id=smy_	smy.exe, 00000014.00000002.1063621662.0000000004F23000.00000004.00000001.sdmp	false		high
http://wan.ludashi.com/pay/index?game=smy0	UM6rAJhKEq.exe, 00000000.00000003.665274272.00000000007E6000.00000004.00000001.sdmp, UM6rAJhKEq.exe, 00000000.00000002.889506299.00000000007DB000.00000004.00000020.sdmp	false		high
http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527%	smy.exe, 00000014.00000002.1063648238.0000000004F32000.00000004.00000001.sdmp	false		high
http://cgi.search.biglobe.ne.jp/favicon.ico	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://s.ludashi.com/wan?type=weiduan&action=wd_install_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e	UM6rAJhKEq.exe, 00000000.00000002.889745719.000000000083A000.00000004.00000020.sdmp	false		high
http://search.msn.co.jp/results.aspx?q=	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527p	smy.exe, 00000014.00000003.917832724.000000000C62E000.00000004.00000001.sdmp	false		high
http://buscar.ozu.es/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527A	smy.exe, 00000014.00000002.1063648238.0000000004F32000.00000004.00000001.sdmp	false		high
http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602vC	smy.exe, 00000014.00000003.898254006.0000000004EB4000.00000004.00000001.sdmp	false		high
http://s.ludashi.com/	smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	false		high
http://www.microsofttranslator.com/BVPrev.aspx?ref=IE8Activity	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://www.symauth.com/cps0(	UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	false		high
http://www.ask.com/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://wan.ludashi.com/site/smy?id=11058J	smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	false		high
http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/check.png	smy.exe, 00000014.00000002.1063585153.0000000004F03000.00000004.00000001.sdmp	false		high
http://www.google.it/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://search.auction.co.kr/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.amazon.de/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://crl4.digi	UM6rAJhKEq.exe, 00000000.00000002.892846917.00000000034CA000.00000004.00000001.sdmp, UM6rAJhKEq.exe, 00000000.00000002.889506299.00000000007DB000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
http://sads.myspace.com/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://www.symauth.com/rpa00	UM6rAJhKEq.exe, 00000000.00000003.837957972.0000000002BA0000.00000004.00000001.sdmp	false		high
https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonLoginApi.js?v=20200810cript	smy.exe, 00000014.00000002.1059506449.0000000001480000.00000004.00000020.sdmp	false		high
http://l.public.ludashi.com/pc/Updata/Usuallog	smy.exe	false		high
http://www.pchome.com.tw/favicon.ico	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://browse.guardian.co.uk/favicon.ico	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/cir.pngke	smy.exe, 00000014.00000002.1063599606.0000000004F0F000.00000004.00000001.sdmp	false		high
http://google.pchome.com.tw/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://list.taobao.com/browse/search_visual.htm?n=15&q=	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://www.360.cn	UM6rAJhKEq.exe, 00000000.00000003.817220003.000000000083A000.00000004.00000001.sdmp	false		high
http://www.rambler.ru/favicon.ico	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://uk.search.yahoo.com/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527602	smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	false		high
http://www.ozu.es/favicon.ico	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://search.sify.com/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://openimage.interpark.com/interpark.ico	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://search.yahoo.co.jp/favicon.ico	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.gmarket.co.kr/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.founder.com.cn/cn/bThe	smy.exe, 00000014.00000002.1065879728.0000000008356000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_reg_pwd.png?t=201910215/	smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	false		high
http://search.nifty.com/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527D	smy.exe, 00000014.00000002.1073330882.000000000BAB0000.00000004.00000001.sdmp	false		high
https://cdn-file-ssl.ludashi.com	smy.exe, 00000014.00000002.1063936649.0000000005174000.00000004.00000001.sdmp, smy.exe, 00000014.00000002.1063875088.00000000050CF000.00000004.00000001.sdmp	false		high
http://wan.ludashi.com/	smy.exe, 00000014.00000002.1059541894.00000000014AB000.00000004.00000020.sdmp	false		high
http://www.google.si/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602WS	smy.exe, 00000014.00000002.1079096784.000000000CDC1000.00000004.00000001.sdmp	false		high
http://www.soso.com/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=202105271	smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	false		high
http://busca.orange.es/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://cnweb.search.live.com/results.aspx?q=	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://auto.search.msn.com/response.asp?MT=	smy.exe, 00000014.00000002.1062022222.0000000004700000.00000002.00000001.sdmp	false		high
http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/third_qq.pngn	smy.exe, 00000014.00000002.1063621662.0000000004F23000.00000004.00000001.sdmp	false		high
http://www.target.com/	smy.exe, 00000014.00000002.1062275455.00000000047F3000.00000002.00000001.sdmp	false		high
http://wan.ludashi.com/site/smy?id=1059902	smy.exe, 00000014.00000002.1067252032.0000000009572000.00000004.00000001.sdmp	false		high
http://www.openssl.org/support/faq.html	UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp	false		high
https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=202105276022	smy.exe, 00000014.00000002.1063419277.0000000004E8E000.00000004.00000001.sdmp	false		high
http://ad.auditude.com/adserver/e?type=playererrormpd&f=&tp=&tv=&url=&vw=&vh=X-MoneyTraceX-IDx	UM6rAJhKEq.exe, 00000000.00000003.879803072.00000000048DE000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
115.238.192.239	cdn-ssl-wan.ludashi.com.m.alikunlun.com	China	136190	CHINATELECOM-ZHEJIANG-JINHUA-IDCJINHUAZHEJIANGProvince	false
120.27.82.56	i.ludashi.com	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
139.129.105.182	wan.ludashi.com	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
101.227.25.228	cdn-file.ludashi.com.m.alikunlun.net	China	4812	CHINANET-SH-APChinaTelecomGroupCN	false
47.117.76.6	s.ludashi.com	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
115.231.152.244	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com	China	136190	CHINATELECOM-ZHEJIANG-JINHUA-IDCJINHUAZHEJIANGProvince	false
122.225.67.180	cdn-wan.ludashi.com.w.kunlunle.com	China	58461	CT-HANGZHOU-IDCNo288Fu-chunRoadCN	false
47.117.70.170	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
220.189.197.2	cdn-file-ssl-pc.ludashi.com.m.alikunlun.com	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false

General Information

Joe Sandbox Version:	32.0.0 Black Diamond
Analysis ID:	433862
Start date:	14.06.2021
Start time:	06:21:27
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 12m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	UM6rAJhKEq.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	22
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal45.evad.winEXE@3/131@9/9
EGA Information:	Failed
HDC Information:	Successful, ratio: 4% (good quality ratio 3.8%) Quality average: 65.2% Quality standard deviation: 25.8%
HCA Information:	Failed
Cookbook Comments:	Adjust boot time Enable AMSI Sleeps bigger than 120000ms are automatically reduced to 1000ms Found application associated with file extension: .exe
Warnings:	Show All Exclude process from analysis (whitelisted): taskhostw.exe, BackgroundTransferHost.exe, backgroundTaskHost.exe, svchost.exe, UsoClient.exe, wuapihost.exe Excluded IPs from analysis (whitelisted): 52.113.196.254, 13.107.3.254, 104.43.139.144, 92.122.145.220, 13.88.21.125, 20.82.209.183, 20.54.7.98, 20.54.104.15, 20.54.26.129, 2.20.142.210, 2.20.142.209, 20.50.102.62, 92.122.213.194, 92.122.213.247 Excluded domains from analysis (whitelisted): au.download.windowsupdate.com.edgesuite.net, s-ring.msedge.net, store-images.s-microsoft.com-c.edgekey.net, a1449.dscg2.akamai.net, arc.msn.com, consumerrp-displaycatalog-aks2eap-europe.md.mp.microsoft.com.akadns.net, teams-9999.teams-msedge.net, e12564.dspb.akamaiedge.net, audownload.windowsupdate.nsatc.net, arc.trafficmanager.net, displaycatalog.mp.microsoft.com, watson.telemetry.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, au-bg-shim.trafficmanager.net, iris-de-prod-azsc-neu.northeurope.cloudapp.azure.com, displaycatalog-rp-europe.md.mp.microsoft.com.akadns.net, ris-prod.trafficmanager.net, ctldl.windowsupdate.com, skypedataprdcolcus16.cloudapp.net, a767.dscg3.akamai.net, consumerrp-displaycatalog-aks2aks-europe.md.mp.microsoft.com.akadns.net, iris-de-prod-azsc-uks.uksouth.cloudapp.azure.com, s-ring.s-9999.s-msedge.net, ris.api.iris.microsoft.com, s-9999.s-msedge.net, store-images.s-microsoft.com, blobcollector.events.data.trafficmanager.net, teams-ring.teams-9999.teams-msedge.net, teams-ring.msedge.net, skypedataprdcolwus15.cloudapp.net, displaycatalog-rp.md.mp.microsoft.com.akadns.net, neu-consumerrp-displaycatalog-aks2aks-europe.md.mp.microsoft.com.akadns.net Report size exceeded maximum capacity and may have missing disassembly code. Report size exceeded maximum capacity and may have missing network information. Report size getting too big, too many NtAllocateVirtualMemory calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtEnumerateKey calls found. Report size getting too big, too many NtOpenKeyEx calls found. Report size getting too big, too many NtProtectVirtualMemory calls found. Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
06:25:19	API Interceptor	9x Sleep call for process: smy.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
115.238.192.239	Zoom#U4f1a#U8bae#U5ba2#U6237#U7aef.exe	Get hash	malicious	Browse
120.27.82.56	icgAiUeVGv.exe	Get hash	malicious	Browse	i.ludashi.com/ajax/gettoken?user_from=youxi&callback=jQuery183012363156929511493_1597829271039&_=1597829275628
120.27.82.56	oWaVUlA05C.exe	Get hash	malicious	Browse	i.ludashi.com/ajax/gettoken?user_from=youxi&callback=jQuery183027719053962145756_1597825781402&_=1597825785410
139.129.105.182	icgAiUeVGv.exe	Get hash	malicious	Browse	wan.ludashi.com/announce/list?callback=jQuery183012363156929511493_1597829271038&type=2&gid=cjzg&skip=0&num=5&_=1597829275038
139.129.105.182	oWaVUlA05C.exe	Get hash	malicious	Browse	wan.ludashi.com/announce/list?callback=jQuery183027719053962145756_1597825781401&type=2&gid=cjzg&skip=0&num=5&_=1597825785093
47.117.76.6	KuMTnLOuSZ.exe	Get hash	malicious	Browse
	KuMTnLOuSZ.exe	Get hash	malicious	Browse
	o5ZGIQwDed.exe	Get hash	malicious	Browse
	17mqa66sU6.exe	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
cdn-wan.ludashi.com.w.kunlunle.com	KuMTnLOuSZ.exe	Get hash	malicious	Browse	122.225.67.190
	o5ZGIQwDed.exe	Get hash	malicious	Browse	122.225.67.170
	UM6rAJhKEq.exe	Get hash	malicious	Browse	122.225.67.170
	mAGs0IsoB7.exe	Get hash	malicious	Browse	122.225.67.180
	IJ9cCBb4Tv.exe	Get hash	malicious	Browse	122.225.67.170
	KuMTnLOuSZ.exe	Get hash	malicious	Browse	122.225.67.189
	o5ZGIQwDed.exe	Get hash	malicious	Browse	122.225.67.189
	17mqa66sU6.exe	Get hash	malicious	Browse	58.216.17.182
	FjzWYXTUop.exe	Get hash	malicious	Browse	122.225.67.193
	icgAiUeVGv.exe	Get hash	malicious	Browse	114.80.24.207
	oWaVUlA05C.exe	Get hash	malicious	Browse	114.80.24.213
cdn-ssl-wan.ludashi.com.m.alikunlun.com	KuMTnLOuSZ.exe	Get hash	malicious	Browse	115.231.152.242
	o5ZGIQwDed.exe	Get hash	malicious	Browse	115.231.152.242
	UM6rAJhKEq.exe	Get hash	malicious	Browse	115.238.192.241
	IJ9cCBb4Tv.exe	Get hash	malicious	Browse	115.238.192.238
	KuMTnLOuSZ.exe	Get hash	malicious	Browse	117.21.230.240
	o5ZGIQwDed.exe	Get hash	malicious	Browse	115.238.192.240
	17mqa66sU6.exe	Get hash	malicious	Browse	115.231.152.248
	FjzWYXTUop.exe	Get hash	malicious	Browse	119.96.78.242
	icgAiUeVGv.exe	Get hash	malicious	Browse	114.80.24.229
	oWaVUlA05C.exe	Get hash	malicious	Browse	180.163.149.239
cdn-file.ludashi.com.m.alikunlun.net	KuMTnLOuSZ.exe	Get hash	malicious	Browse	101.227.25.212
	o5ZGIQwDed.exe	Get hash	malicious	Browse	101.227.25.212
	UM6rAJhKEq.exe	Get hash	malicious	Browse	101.227.25.229
	mAGs0IsoB7.exe	Get hash	malicious	Browse	101.227.25.229
	IJ9cCBb4Tv.exe	Get hash	malicious	Browse	125.77.169.238
	KuMTnLOuSZ.exe	Get hash	malicious	Browse	125.77.169.248
	o5ZGIQwDed.exe	Get hash	malicious	Browse	125.77.169.248
	17mqa66sU6.exe	Get hash	malicious	Browse	101.227.25.210
	FjzWYXTUop.exe	Get hash	malicious	Browse	221.231.83.238
	icgAiUeVGv.exe	Get hash	malicious	Browse	218.91.221.116
	oWaVUlA05C.exe	Get hash	malicious	Browse	218.91.221.117
s.ludashi.com	KuMTnLOuSZ.exe	Get hash	malicious	Browse	47.117.70.170
	o5ZGIQwDed.exe	Get hash	malicious	Browse	47.117.70.170
	UM6rAJhKEq.exe	Get hash	malicious	Browse	106.15.48.27
	mAGs0IsoB7.exe	Get hash	malicious	Browse	106.15.48.27
	IJ9cCBb4Tv.exe	Get hash	malicious	Browse	106.15.48.27
	KuMTnLOuSZ.exe	Get hash	malicious	Browse	106.15.48.27
	o5ZGIQwDed.exe	Get hash	malicious	Browse	106.15.48.27
	17mqa66sU6.exe	Get hash	malicious	Browse	47.117.76.6
	FjzWYXTUop.exe	Get hash	malicious	Browse	139.224.193.172
	S38G0o4jF9.exe	Get hash	malicious	Browse	182.92.34.21

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
CHINATELECOM-ZHEJIANG-JINHUA-IDCJINHUAZHEJIANGProvince	KuMTnLOuSZ.exe	Get hash	malicious	Browse	115.231.152.242
	o5ZGIQwDed.exe	Get hash	malicious	Browse	115.231.152.242
	UM6rAJhKEq.exe	Get hash	malicious	Browse	115.238.192.240
	mAGs0IsoB7.exe	Get hash	malicious	Browse	115.238.192.240
	IJ9cCBb4Tv.exe	Get hash	malicious	Browse	115.238.192.240
	o5ZGIQwDed.exe	Get hash	malicious	Browse	115.238.192.240
	17mqa66sU6.exe	Get hash	malicious	Browse	115.231.152.248
	FjzWYXTUop.exe	Get hash	malicious	Browse	115.231.152.244
	Zoom#U4f1a#U8bae#U5ba2#U6237#U7aef.exe	Get hash	malicious	Browse	115.238.192.240
	EMG 3.0.exe	Get hash	malicious	Browse	122.226.182.47
	c5twLLnwwY.exe	Get hash	malicious	Browse	115.238.242.35
	WinRAR#U538b#U7f29#U8f6f#U4ef6.exe	Get hash	malicious	Browse	61.130.28.117
	http://www.datacentervision.com/	Get hash	malicious	Browse	183.131.207.66
	http://hueros.com/hbt.php?rewrite=banking/wp-content/uploads/2017/04/background2.jpg	Get hash	malicious	Browse	183.131.207.66
	http://js.users.51.la/20864593.js	Get hash	malicious	Browse	183.131.207.66
	kuwo_jm829.exe	Get hash	malicious	Browse	115.231.130.141
	http://cdn4.mydown.com/5f0fbb58/8715f31af9f3ccd466ede2e37f0434a3/newsoft/ChromeSetup.exe	Get hash	malicious	Browse	183.131.211.245
	https://www.tiaodao.com/gogo/?url=https://d48dkduy4mnnxh.du.r.appspot.com/#mgiannantonio@resortsac.com	Get hash	malicious	Browse	122.226.111.101
CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	KuMTnLOuSZ.exe	Get hash	malicious	Browse	47.117.70.170
	o5ZGIQwDed.exe	Get hash	malicious	Browse	47.117.70.170
	UM6rAJhKEq.exe	Get hash	malicious	Browse	106.15.48.27
	mAGs0IsoB7.exe	Get hash	malicious	Browse	106.15.48.27
	IJ9cCBb4Tv.exe	Get hash	malicious	Browse	106.15.48.27
	KuMTnLOuSZ.exe	Get hash	malicious	Browse	106.15.48.27
	o5ZGIQwDed.exe	Get hash	malicious	Browse	106.15.48.27
	17mqa66sU6.exe	Get hash	malicious	Browse	47.117.76.6
	FjzWYXTUop.exe	Get hash	malicious	Browse	139.224.193.172
	czmPR2gmQI.exe	Get hash	malicious	Browse	121.40.19.56
	6K6EBFC653	Get hash	malicious	Browse	101.201.199.196
	MedMooc.exe	Get hash	malicious	Browse	120.27.25.246
	#U8c37#U6b4c#U97e9#U6587#U8f93#U5165#U6cd5(Google Korean Input)_011589485.exe	Get hash	malicious	Browse	60.205.177.239
	tgb4.exe	Get hash	malicious	Browse	39.98.88.43
	testtotesnotrealname.exe	Get hash	malicious	Browse	47.102.143.195
	xiaoan_3.0.apk	Get hash	malicious	Browse	203.119.214.123
	h5plugin_1.1.apk	Get hash	malicious	Browse	47.104.217.248
	98b537971f7b5b5331c4b1ce0079633c.apk	Get hash	malicious	Browse	115.29.160.1
	6883966fd8f918a4aa29be29d2c386fb-1 (1).apk	Get hash	malicious	Browse	47.96.37.170
	Makbuz kopyas#U0131 onayland#U0131 5.26.21.exe	Get hash	malicious	Browse	39.102.59.240

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
37f463bf4616ecd445d4a1937da06e19	lc3of5dOat.exe	Get hash	malicious	Browse	115.238.192.239
	zYIgBtTNii.exe	Get hash	malicious	Browse	115.238.192.239
	v5BF2xbrST.exe	Get hash	malicious	Browse	115.238.192.239
	zXgPNPqubH.exe	Get hash	malicious	Browse	115.238.192.239
	cyIabcIBpj.exe	Get hash	malicious	Browse	115.238.192.239
	pVs9Vm0z1O.exe	Get hash	malicious	Browse	115.238.192.239
	Q7wxFhc4yZ.exe	Get hash	malicious	Browse	115.238.192.239
	FK1RtVDPVt.exe	Get hash	malicious	Browse	115.238.192.239
	mid5ag333h.exe	Get hash	malicious	Browse	115.238.192.239
	3HvqVSJrRe.exe	Get hash	malicious	Browse	115.238.192.239
	research-1234799369.xlsb	Get hash	malicious	Browse	115.238.192.239
	DHL_2761228.exe	Get hash	malicious	Browse	115.238.192.239
	comprobante de pago.exe	Get hash	malicious	Browse	115.238.192.239
	Facturas__Electronicas__Pdf__2021__4SDJFK34JKSHASL456LKSDFJ2DFKYJAS23346IKHHDFJ.vbs	Get hash	malicious	Browse	115.238.192.239
	audit-528010081.xlsb	Get hash	malicious	Browse	115.238.192.239
	b9f5bca9a22f08aad48674bc42e4eaf72ab8aa3d652ba.exe	Get hash	malicious	Browse	115.238.192.239
	3.exe	Get hash	malicious	Browse	115.238.192.239
	audit-1133808478.xlsb	Get hash	malicious	Browse	115.238.192.239
	tXkin8g4sy.exe	Get hash	malicious	Browse	115.238.192.239
	xGrfj8RvYg.exe	Get hash	malicious	Browse	115.238.192.239

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Link
C:\Users\user\AppData\Local\Temp\{467B4A82-2989-4e52-A47E-1F20823DD802}.tmp\CefRes.dll	KuMTnLOuSZ.exe	Get hash	malicious	Browse
	o5ZGIQwDed.exe	Get hash	malicious	Browse
	UM6rAJhKEq.exe	Get hash	malicious	Browse
	mAGs0IsoB7.exe	Get hash	malicious	Browse
	IJ9cCBb4Tv.exe	Get hash	malicious	Browse
	KuMTnLOuSZ.exe	Get hash	malicious	Browse
	o5ZGIQwDed.exe	Get hash	malicious	Browse
	17mqa66sU6.exe	Get hash	malicious	Browse
	FjzWYXTUop.exe	Get hash	malicious	Browse
C:\Users\user\AppData\Local\Temp\WdGame_smy\NetBridge.dll	KuMTnLOuSZ.exe	Get hash	malicious	Browse
	o5ZGIQwDed.exe	Get hash	malicious	Browse
	UM6rAJhKEq.exe	Get hash	malicious	Browse
	mAGs0IsoB7.exe	Get hash	malicious	Browse
	IJ9cCBb4Tv.exe	Get hash	malicious	Browse
	KuMTnLOuSZ.exe	Get hash	malicious	Browse
	o5ZGIQwDed.exe	Get hash	malicious	Browse
	17mqa66sU6.exe	Get hash	malicious	Browse
	FjzWYXTUop.exe	Get hash	malicious	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\index_lds[1].htm Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	HTML document, UTF-8 Unicode text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11098
Entropy (8bit):	4.5550227301096085
Encrypted:	false
SSDEEP:	192:pp9zv5HQo0lf5AZlTr1I6NfUxI7CtVVOK+hWAAS:5zxHQJQl3DNcxImLVOKoV
MD5:	F3FF040DEDB33D97AA00D478E011179E
SHA1:	01714487BED4B415FA9939F834DF3E715646EFDE
SHA-256:	4DF61B649CA6D8DB3F15BAD28A5334A84DAA37A40C7944470D2B65225899A9B2
SHA-512:	E62BD972C850E8CADAF60EB063DF8C3FA972612023AD9C078EF47AE836EC9EAB36DFAB0EB9FF555D7A840844067D29B089E85A2A7F66761047992079557F6352
Malicious:	false
Reputation:	low
IE Cache URL:	http://wan.ludashi.com/micro/smy/index_lds.html?channel=tp&from=tp_repush_wd_smy_0602
Preview:	<!doctype html>..<html lang="zh">....<head>.. <meta charset="UTF-8" />.. <title>..</title>.. <link rel="stylesheet" href="./assets_lds/main.css" /> -->.. <link rel="stylesheet" href="//cdn-file.ludashi.com/wan/micro/smy/assets_lds/main.css" />.. <style type="text/css">.. .nav{display: none;}.. .check-box {.. height: 19px;.. overflow: hidden;.. padding-left: 70px;.. }.. </style>..</head>....<body>.. <div class="outer">.. <div class="nav">.. <ul>.. <li><a class="nav_1" href="/site/smy" target="_blank"></a></li>.. <li><a class="nav_2" href="/pay?game=smy&server=1" target="_blank"></a></li>.. <li><a class="nav_3" href="/service?type=1" target="_blank"></a></li>.. <li><a class="nav_4" href="/download/jump?game_id=smy" target="_blank"></a></li>.. </ul>.. </div>.. <div class="login-body">.. .

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\input_log_code[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	PNG image data, 176 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3504
Entropy (8bit):	7.902825376951053
Encrypted:	false
SSDEEP:	96:LEr46jwyV7LAeb4bwXbQLi3+He2rN3M8uI:Q46LV7v40Xb3oe2h3ZuI
MD5:	A38F4A6A20D533B4A9D4B130C820E935
SHA1:	74B4AE963CD160C9EE9CE6071B8E72629C8C75CD
SHA-256:	A683CB498593E44E79E0E4DDB13574C845F65CAFF6669850C6758DD2A02743A7
SHA-512:	6EE5ABB978ED224D6B20BDC3DB4A3721D21D8C0DCB760C6275B19B9BD326DD4FF9EA47677F1EF31318AF2833B6FB23A3FBCC93A6216AB3FD54FFD20BE9A25A58
Malicious:	false
Reputation:	low
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_log_code.png?t=20191021
Preview:	.PNG........IHDR....... ............wIDATx^.\}l....o..\|{v...9..?.A.. .aC.p.W"Q).ZU.UP.....V-U..5......P.V-j"....?............C......pq.6w..7.s..>..8...mt.....7.y......L....dWK..+b!"...0....LC@N3..y..2Ly...29....LS.eYNgq.k....u.T}..i...fp=&..C!C.h.a..,..f.....uI....+t.y.#...\|4....#....t.R2..B..P...:.\Y.@.....#.X.\....pT.^. ...j..q....?y...]U}(.m]6P.8.G......ss..?..o......n.4....]..+...W+...u'.Nemz..:Y]..^.w...W.....=.x.\|..S.(9u p..5w...9:.2._..G...........5.....i.7.x.(`.....@..7X=.....cS......X..+..w.%lA.zg..9.Y..eA..FA.,.a............4..lq..X......,......e...KoP.....#.............H.....-\!.......q.B..8...k"...Yp.e..?>........p..t...../.......@n..[...._...%=..?.v.r.y..sk8_H...jK...[F..l..Mu......a@8dJ...F..d.....eZ-...^..e..l.....S.L.... .r.\.....+K_XH?Y...m..[6..[...w.n.77.W...........2..;.y.z..+..tB..%.N..H..d...7%......\._ ].`......h..W6...N...@8l.^.V.fY._...C.2.!8.....G4..v............b.+..r....X......}..U?.`......mq.........=...F .6...ZU[f

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\input_reg_pwd[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	PNG image data, 343 x 41, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6476
Entropy (8bit):	7.953016673419361
Encrypted:	false
SSDEEP:	192:aprUPGmhHqkHss+bZNzs/Ug3EMh6X2QyiRFja+:aZmPHlik3EQ6mQywE+
MD5:	451A0132C173EB7783D09C5AC1B87CF0
SHA1:	F6F1F05395D45106DA7291A3448AEA145795324C
SHA-256:	7A6C3480F15164F8E57E333F75E9C915FA7671D7DA0E3478FD1AA917EA7120B1
SHA-512:	30E9C9F6754082C8AA7EA53C0FF104E7A3DD4EED78B409578D7E4D2FDB3284083C5AD32A368014B457FE2324ADECFD3395BDC23C9F7C5BDB1C95976F6A38CD42
Malicious:	false
Reputation:	low
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_reg_pwd.png?t=20191021
Preview:	.PNG........IHDR...W...)......nj.....IDATx^.]}l..q..{$o....o.&...8@.Zh...-.....I...~ ......j*.Q.h..I..H..p..A...C)b nk.NE..-.BlS$%Y....n_13ov..}...'...!...7....f...].._........8yx4..v9e_....4(.@).....3..Wt.........\|.~........>......9j..[rs.N4........K..8.y9x..a9..Q.C....9.89>..s..w..R.:............r"..r8....z.O)....N...;...T....k.dq......o....rI....d..H..,j..Da...1....D.J7.AZW@.0.X.4..3c>E..2.Y...M.Y....D.5.7}....}.?...xBW.'.O..8..5.>..6..v..+..h.3m...wM.\|...gEd.A.I...?i.te.....l.......1.+.>>~.Qa_>..>........?..x.......4.A.^XOFg4)..nLA..f.....%...2.2..o.Y.Kb.y.o....l..p.f..X.mW.......C..L.g.........&.....].\|.o..D..V....I......A.. ...,.7.....H.mE...O.=..D.<...."....Fl.0.... .........A'4..A......#C..d..;4~.....j/.K.0..r3..?....q..<.<.....EM,.d.1..M.r......L..)XR0`....X.2.......\|H..I.E.2...6..7!.{5.".F.:.G.m@...a...n.}..>.j.?..V...>.X.....D4.^.~...'...6.$DR.10$....@.ue....fn.`$....."z.DVP`.f..<._.w.S..t....)].:.h.C.U.S....y..lyu.6w....Z.7}tl..uayc.VK

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\jquery183[1].js Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	93565
Entropy (8bit):	5.312490777554991
Encrypted:	false
SSDEEP:	1536:8hIGG4EYrbSkPAQWSaKTlf5g42M4O5b7DuKM7G0i33Ky4J6iVM+tEKo+zt5mKhUP:wOpWR/2NK+21NGZ1gSa
MD5:	4D30FCEB0A9DA287C6F802EA05B69E3B
SHA1:	BF4CE064F2EA3D6F9AB4BE257EBD897A4078E4E3
SHA-256:	D3A9CAA7EEBC914C861DD7FB50145903D27AC6F52B18320EBA2F3D313867A577
SHA-512:	82A34EE7307CC826B0793BC9C06E3916FD42214BD52D0950E07AA71CC63C7A8D4042A8478873FD2C2EB83A23B8D4FDF6FDC02C3C312D4CB5466480EA0E36782E
Malicious:	false
Reputation:	moderate, very likely benign file
IE Cache URL:	http://cdn-file.ludashi.com/assets/jquery/jquery183.js
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /(function(e,t){function n(e){var t=dt[e]={};return Y.each(e.split(tt),function(e,n){t[n]=!0}),t}function r(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(mt,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:vt.test(r)?Y.parseJSON(r):r}catch(s){}Y.data(e,n,r)}else r=t}return r}function i(e){var t;for(t in e){if(t==="data"&&Y.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function s(){return!1}function o(){return!0}function u(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function a(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function f(e,t,n){t=t\|\|0;if(Y.isFunction(t))return Y.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return Y.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=Y.grep(e,function(e){return e.nodeType===1});if(Bt.test(t))return Y.filter(t,r,!n);t=Y.filter(t,r)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\list[1].json Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	823
Entropy (8bit):	4.744161425848019
Encrypted:	false
SSDEEP:	24:NVGtpb2HN0iZID0iNsh0i10FwCZ0iSJ0d6E2HE60iC:NV2SJIrsp0Fl+JCbgE1
MD5:	B316B638AB0EF1D7992CF1C3159F200D
SHA1:	CB01C7E6BEBF3C46FC10DCFAB85AE24BCDBBD4A7
SHA-256:	D60D0837CBE704C609E6DC9290EC897CECA7FCF53598F4A5FF75D4B3B3810B3E
SHA-512:	5A6828845330470442DF7D3A156F25715FC9C3D1027DA0FDD7EBCF14718EF0D5DF671135985FA5F8E1B0B2977F639613DC02A280FFD27DADB4514CA548FDAE50
Malicious:	false
Reputation:	low
IE Cache URL:	http://wan.ludashi.com/announce/list?callback=jQuery1830019642693851471715_1623644654750&type=2&gid=smy&skip=0&num=5&_=1623644659450
Preview:	jQuery1830019642693851471715_1623644654750({"errno":0,"msg":"success","data":{"list":[{"title":"\u300a\u5723\u9b54\u5370\u300b\u8d85\u503c\u5f00\u670d\u6d3b\u52a8\uff01","type":2,"id":12061,"stick":0,"timestamp":"2021-06-07 00:00:00"},{"title":"\u9c81\u5927\u5e08\u6e38\u620f\u6e05\u660e\u6d3b\u52a8","type":2,"id":11058,"stick":0,"timestamp":"2021-03-31 00:00:00"},{"title":"\u9c81\u5927\u5e08\u6e38\u620f315\u6743\u76ca\u65e5\u6d3b\u52a8","type":2,"id":10805,"stick":0,"timestamp":"2021-03-12 00:00:00"},{"title":"\u9c81\u5927\u5e08\u6e38\u620f\u5143\u5bb5\u798f\u5229\u6d3b\u52a8","type":2,"id":10599,"stick":0,"timestamp":"2021-02-24 00:00:00"},{"title":"\u9c81\u5927\u5e08\u6e38\u620f\u6708\u672b\u8fd4\u5229\uff0c\u611f\u6069\u6709\u60a8","type":2,"id":9384,"stick":0,"timestamp":"2020-10-29 00:00:00"}],"size":25}});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\third_weixin[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	PNG image data, 76 x 38, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4927
Entropy (8bit):	7.949006162054865
Encrypted:	false
SSDEEP:	96:mMLdR5ceT+DYGYs7dNiSO1XDZGzjTf400CWPIzvyIYLwyIFNYsrpH6vwfgFTFn1:mUdR5bmdNXOdDZob0CWPqvyIk9IFiDhR
MD5:	3783F1E3ACC2F223129173D034A30920
SHA1:	75ECE47349995085CE0E4ED0972EA8BFC57E3523
SHA-256:	E9C9B9A56FBD98C444CC5CDCFDC597FA5D4DD3D6DD1DB4B3B655B84BB344208C
SHA-512:	6A3437F3A8EF69B1573C3E5182E5F35DFE76A72562EBA6A7FBA4079BC0EFCF6BE7A8BF5F830D37CBC4F67B243985061E0140167CA9B33750119D3425D9D4E368
Malicious:	false
Reputation:	moderate, very likely benign file
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/third_weixin.png
Preview:	.PNG........IHDR...L...&.....n.}.....IDAThC..y\|TU.....^..$!.B.\| .@.!....-.....n(\|.>..5.#..8...:.b.B.mqA...."...T...d!K.U...[U!!.Ih.....w...s.=..+h..&XL.(..&.BC...3.,.".[#..4>.QtU.:O.y.\W0M..H.0...iI.CIA.0K...YC-.:E..8.W.E...r..IQ~.R...P61F0a..F0+A0../1.p.......p..}....9{.`>.I.FE.-)`..0...`.....!...1.K.J..5.A......;t..\..X....L..q..@...........^.....\D...&.....h.,zzf......0N!...4......x.&........4..v.....\..X.\..}i.C.).. .zz...gx.\..F..n2...Z..r.......=..;....q.=...h..~.p....\|t...rw....)..#.D.+y.N}.. .....xj../...l.b...x..L.....N....Ji..^...K...v.,...2...`..(`..Vc.@8..JS../.8{3t..YV.F..@]e..\.Y&.t).I...:..-.&.p....4...!....Y~.....:w._.>.\......a.D....v%\.\F..a..N\....e..(.W.J......R...US......:E... .).}...x...x.=.....C.8v.-..U.....i.B.\b.X.J.%....1.i..l..C...........+....$.q[.S+.k~.....[.@...Q..a.a$3...z..u.g.c0.._...{O.@............B....i>x57\~.\P!0.a.aRL0(..$W.........9GN.......b`...B.'.Z%>..:.y....hI@jX:,.09.[u..4..U.4..g

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\wan[1].txt Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
Reputation:	moderate, very likely benign file
IE Cache URL:	http://s.ludashi.com/wan?type=weiduan&action=run&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=08d04bed40b525cd8a38008e74110bd0&from=tp_smy&forcetick=4131843
Preview:	ok

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\wan[2].txt Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
IE Cache URL:	http://s.ludashi.com/wan?type=accurate&action=t0&channel=tp&from=tp_repush_wd_smy_0602&mid=e4ec8e8a6f2d1ca301f6e29536448c71&appver=3.2.124.1372&uid=0&game=smy&timestamp=1623644659499&ex_ary[guid]=
Preview:	ok

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\bg[1].jpg Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 848x480, frames 3
Category:	downloaded
Size (bytes):	68104
Entropy (8bit):	7.985244720510459
Encrypted:	false
SSDEEP:	1536:9Qpl8KHBKsOedmb5JCi6GQoVybWtDmWpshVGAey0yE3YzZY2k0:9QT88Oe0JzBLLEWpoVFEozZY2k0
MD5:	49204F3243FCC1BC6856C0F3344FE2E0
SHA1:	EC789F2758A28C2CC9F8A857963C4FAEECA90089
SHA-256:	3867207EB8291E158955C74532A643B607A3181575FA44C4FA0D92D8EB554A72
SHA-512:	6029894D1F4BAD867253890482805A6B24E092564845BCC43392B864FD086BBA861D2DD0EF2453F7B5ECB02D9175C24493F4502A69619D43975EF2F4E512BE4E
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/bg.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................P.................................................................................................o-. ,..... U@5eF..8r...$.`...;..S..z.w.:..p.\|......J....%9.#"t.....(r...pT..l...h..^UD9r..C(%.4.n.5gZ.K..q.v....{...?.......................c.r....:.s.F@.J.QB.b..:J-ePNh..%.%f......RVM@..p.3!.!C$.9(.%:f..J..-: .D.........j..N.X.n...wx.....=.G./...?..#......................:+AC..%..hn....1f.....I.r..h....Y..iRr.. .JPR.C..h..N.s2.B.(.J).\..S..F.f..,...3...s.z/G....._...9..\|..I...W.....O...?..d.EL.)k...X..-AKT...t.IH..t.iq,.5t`.eI(.4..h.3&E9T.j.`V6iT8........G....r...D.9%.nj..,.4.&w.zrs.....N.....}..3.....3....7...G./...D..ef.C....c.\...k....5..&.).&TU.reNR.U..L.i.).(.]%).b.h....RC....l.....r0.k:..I.D..[6S...vk..v..W.....^..^.>...y.?.............[ck..T.I:.e0W1f..+P...kluNT..o7

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\commonTool[1].js Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	28191
Entropy (8bit):	4.765319479982372
Encrypted:	false
SSDEEP:	384:QCV2SvA+ExnO/L33rGV/G70ErU+1IcI7coAQXlcG+U0rEA0rEbaZcYMvR1MjMqIP:QpSvA+qnOjLw/m1zc/VKUyccR1MjMhP
MD5:	62FBEB7AB3A48B20EF33600FC8EA5465
SHA1:	6BE30ECCAE4FD34A7D83CCE1EFF2F57C048E7A20
SHA-256:	84757406545E7C19676BC7F3660602502A86E63C4A3022705967EED9C33CBA11
SHA-512:	ADC685D9EC4929CC75407240FE17E77DB878FCBE9342FE06DF4BE659857942A42BD226ECD5AD57B6DF0713928453FCBB58749390C8BD6D35E5D5EFDD4BCD77C3
Malicious:	false
IE Cache URL:	https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527
Preview:	/*.. ......... @author zhanghengpu.. /....define(function(require, exports, module) {.... var commonTool = {};.... commonTool = {.. getSiteUrl:function(urlPath){.. var urlBase = location.protocol+'//'+location.host;.. if (typeof urlPath != 'undefined') {.. if (urlPath.search('http://') < 0 && urlPath.search('//') < 0 && urlPath.search('https://') < 0 ) {.. return urlBase + urlPath; .. }else{.. return urlPath;.. }.. }.... return urlBase;.. },.. getAjaxData:function(type, url, params, _callback){.. $.ajax({.. type: type,.. url: url,.. data: params,.. dataType:'jsonp',.. jsonp:'callback',.. success: _callback.. });.. },.. jsonToStr: function(obj) {.. var _this = this;.. va

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\gettoken[1].json Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	177
Entropy (8bit):	4.812937383753672
Encrypted:	false
SSDEEP:	3:RAVdSVUcdXDdSQUbyVsmG9pQHOu5xVLVuCV1QZDJcOgFiRqzmR+BTGuWL:JUyXBSyGLl2TLVfzOgkRqmKKJ
MD5:	30DC2E48C288BC752C01242D210721E2
SHA1:	880D017469EDB26A2313432ED2B8E40A687E4E55
SHA-256:	3EDDFB59A3B4DC21C592199A654DA8869675A3E72783758BEAF72EE5215574D5
SHA-512:	9A1BB92A2FEA9C228115B7559D13EEF8A6F2F7010817F6C0BF880B14D9D078D8C05877E1EA93A153A891E809953C701267EA4241FF9FC1821F71C89064B98A6C
Malicious:	false
IE Cache URL:	http://i.ludashi.com/ajax/gettoken?user_from=youxi&callback=jQuery1830019642693851471715_1623644654749&_=1623644659796
Preview:	jQuery1830019642693851471715_1623644654749({"errno":0,"msg":"\u83b7\u53d6token\u6210\u529f\uff0c5\u5206\u949f\u6709\u6548","data":{"token":"c082335124e88afa3216896b66c39ebf"}});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\input_reg_act[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	PNG image data, 343 x 41, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5993
Entropy (8bit):	7.953218691970372
Encrypted:	false
SSDEEP:	96:4t2o7P7W1GCDslkYsvjuOp/wLCgixfKPdR0Jx8SFUUg6x2sOC58fwPCutbocYv0Q:RJGq++vfp/wLdiN+RkxxXqfQboxvNX
MD5:	7B7F952506B1958EDB6A3764BF37F9D3
SHA1:	7638C8BA1D07CDB8E84D86ECB5F124FF7CA15CE4
SHA-256:	293A0FB8797C0F2EC4DFC942725269A50712A040FEEF34E3E4FD2D19416B6207
SHA-512:	E0DDC93EA40593D1A9E1795AD5F6C3498031BB7F5F7AEC8B48DF708CE170C0C82A18999ABE4F3ACB58A0A2DCA030EFD60A2079BFDDC81BED2EB6FE25A9735ABB
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_reg_act.png?t=20191021
Preview:	.PNG........IHDR...W...)......nj....0IDATx^.]}.$.u..=.;=.;.{.y.oI..{>]..'`....&...!.+..b...........+8....E.A.!...`p..!X1.)...N....;.....tWx........Y......W.^..{.^UO+._..&..W...;u..B_....(,...M.(M.Zk...(,.?.o.(.?k.N..l......QT.!.....q..U....t..TV..........;..k...q.........p...1..W.........\....?..>M.4...)w...H7.[.[d.$-..........k.(..$S..c..myN..2.Or...\..F.\....pbp.p....I3C....Q+.5.B0.z....c..M..P=..}..J`..U......zXWk.<...^....P}....a..+...@.~......?0......2....xj....9.\|.:x.F..mp}..c.l>..,..,.......T.9Q1..$P.h..@PC...l..B...R]...t.......7.5..(.i.sg.$.R.....E....;..E:..4sll..X.x."..V..$...3.$"'#3s-......`..#..p..<.4V........5.......A..T.A.q.q.X.P....F".\..H=..C..S.h.!................q...0..N...<.1..e@...h.).!..g..H.'..O...`b..i.ohf.`D..44&.l#'.N..7..8).t-ua`f..`........D.Y.S....}F........O ..[....` @b9.-......v..v.?v..G.#...n......f.4h.,.d...!?$'..b...#SdY.56.6"F.....X..fn.}jp].vk...J....[....\-.>{\|b..Ayes..;...x.R......_..".i.4..6Hh.J.(.PV

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\input_reg_code[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	PNG image data, 193 x 41, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5263
Entropy (8bit):	7.945830380684339
Encrypted:	false
SSDEEP:	96:STai6hGy2asvz/KQ9d11N5ZmNHxZ4fnwewsMAq98H7V02poYcklaDJoiBaFl2aR5:DXht5QrVuNqwMs98H5rLcDF4lhT
MD5:	75F6000CA950B5D04F8FD81CAC65A8B7
SHA1:	5E3AF14BDA97C4FBC0F664CA458F3FAE441518FA
SHA-256:	1FD7B89B12C7F6E41532785BD6069332E5CA7ABB98574886359CC12D238D4EA8
SHA-512:	B22CB0ABC6BFFA28B866D09CFBBBD320C31E85C4316E6CE484BFAB34A0CCDA1AD3DB3611941AA77EEBC98F52422FB26E4ECD743C91BBED712F84715051C51A9C
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/input_reg_code.png?t=20191021
Preview:	.PNG........IHDR.......)......UMs...VIDATx^.]{l..y.......G.M.-.-.G[....b.B..E[.A.G....;..E..Qx2.B&...."F...#.4AR..R.ES.E] m.Z.N."..Q..E.....q.3.7....R.;Q!.p-..v.............6.R...4.w`W...;].Mp!.8.....8c`.......8.K8...$W.......2x.......IH$\..D.....9.\$.....&..H..\$..^..q.p..8..8..:.wUA.(}..B..I.R..}........BD~..S.H.P@J..R.....JH.B.'......0@....@X...0..\. .!...P.(.O".B%.X..%.#.Rz.......! d.)%...,T6........`..H..s....0.61wE5..k....<.iI..... .w....P.#.QcS%3HidLE2G...?M...!..!...Bi:..:....7gp..........p...9.9.4..9..}WDq....`g...$....* ]W.......5....U...I ..p.G..C.b@.. C.@..:'.9-#E..O.\..0].B.V.8].?m)#(V.,]u.P.\|...........qk.s...&."u..k6.255.....G.#.y..R?....M.h.U.E......M;.I........w.W.xT.o..............WCP#d.1R..."0.D7ub5H...0u..rol.zj.j..0..H... .QHqe..^...G....)".@..Z3I.......{..$.T..m...&...f....Q.h+WV......LK.K.(......Yn....{.#,......v.b.........U.[...,%4......t.i.IM.B..,g%.,..\|!y........bQ.+.C.. .J.5.n..s#_.o[kaWw.?26...L.K.p8.;.B+

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\sea[1].js Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8504
Entropy (8bit):	5.463830962615999
Encrypted:	false
SSDEEP:	192:hLTnM7vkOBpTf4L5pAPa6aF3a81MdgicdNKiHrD8YRDyQ:hT4kOBpTf4L5aaF3akMdXcvzHHlt/
MD5:	26A812EDE84886A75880D9A2E723A00F
SHA1:	A601CEF80A60A99200950123AC9821E1B26C5581
SHA-256:	A930A3AEF9A72482C88962BB979CE88D3628ABC918DB3C0A0F9491A8BA0C1F5D
SHA-512:	CE28F673B09B7DCA2ED07BBF05A3B764998A9D6055099F4974D1219AB9B569A6FE4AFA7FA96796E0F398B6DB8ADE8ED127982FDA2C6B428ED258ACDB22B8C0AB
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/assets/sea/sea.js
Preview:	/! Sea.js 3.0.0 \| seajs.org/LICENSE.md /.!function(a,b){function c(a){return function(b){return{}.toString.call(b)=="[object "+a+"]"}}function d(){return A++}function e(a){return a.match(D)[0]}function f(a){for(a=a.replace(E,"/"),a=a.replace(G,"$1/");a.match(F);)a=a.replace(F,"/");return a}function g(a){var b=a.length-1,c=a.charCodeAt(b);return 35===c?a.substring(0,b):".js"===a.substring(b-2)\|\|a.indexOf("?")>0\|\|47===c?a:a+".js"}function h(a){var b=v.alias;return b&&x(b[a])?b[a]:a}function i(a){var b=v.paths,c;return b&&(c=a.match(H))&&x(b[c[1]])&&(a=b[c[1]]+c[2]),a}function j(a){var b=v.vars;return b&&a.indexOf("{")>-1&&(a=a.replace(I,function(a,c){return x(b[c])?b[c]:a})),a}function k(a){var b=v.map,c=a;if(b)for(var d=0,e=b.length;e>d;d++){var f=b[d];if(c=z(f)?f(a)\|\|a:a.replace(f[0],f[1]),c!==a)break}return c}function l(a,b){var c,d=a.charCodeAt(0);if(J.test(a))c=a;else if(46===d)c=(b?e(b):v.cwd)+a;else if(47===d){var g=v.cwd.match(K);c=g?g[0]+a.substring(1):a}else c=v.base+a;return

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\wan[1].txt Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	4
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:Ln:Ln
MD5:	B73FDAA1FB7669DA760B49600C45D9BE
SHA1:	39D0D38B6B9A01E2894DB59A9985BA2DF6C895D9
SHA-256:	3A5088295708D3304F06DE0499B9243BFBD68D14878615C531F0E346F47B389D
SHA-512:	57E58B658F9E042986714D82919B526E69414F04B10EEC62B2734BB9374549F3CFE447D48E81236617A928789FA3ABB9E35F0DD58A326AAC155CB246BCEAF348
Malicious:	false
IE Cache URL:	http://s.ludashi.com/wan?type=weiduan&action=add_uninst_item&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=33331b265eb83b74a2a113adc36700a0&from=tp_smy&forcetick=4129375
Preview:	okok

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\wan[2].txt Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
IE Cache URL:	http://s.ludashi.com/wan?type=weiduan&action=wd_install_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=ebdf880b7713a474f1d77c2f9a363ac3&from=tp_smy&forcetick=4131281
Preview:	ok

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\wan[3].txt Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
IE Cache URL:	http://s.ludashi.com/wan?type=accurate&action=t3&channel=tp&from=tp_repush_wd_smy_0602&mid=e4ec8e8a6f2d1ca301f6e29536448c71&appver=3.2.124.1372&uid=0&game=smy&timestamp=1623644719499&ex_ary[guid]=
Preview:	ok

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\checkbox[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	PNG image data, 17 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	867
Entropy (8bit):	7.72857074798045
Encrypted:	false
SSDEEP:	24:ABncg1wQB0zelKiKH6Ft+tHZvXjKdJh0pXi1:5JHycXgwy1
MD5:	A2D3BEAF27DDCDF29BAF47D299640813
SHA1:	1F728AF69A9C4D39C59CD618EBA7F45EC1CD39D6
SHA-256:	C54D294E04EF0542BFEB3F4528C9CD0563DF19E33FEFD80200896F06C6AC4CB4
SHA-512:	618503765E8E49B432DB8C06D0D41A5768940BC1ACFDF46D7511A966C0BAF19CD162B20AB5E704E7174BD8D10296E1CB06E3653BEF7EB56C09D4E719D9FC42FC
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/checkbox.png
Preview:	.PNG........IHDR..............1._...IDAT8OU..o.E...Zz.mbbO..v2.c.8qF`...DB"..'p...$...p..H..'...8DB..S.....)!l.P.b.b..Y.....K.n...V.UUz..{..x..D.V..aA+...H.{.ad..ePR.?....{y...)...?<]..O....q..........P.......8.(......$../.-q..E.....w.....@L......X..#..R...R..l..v...93]...,7.......%.a...R...J.....r"...7...>>..g.<..Kn.../.\|3.G....u/.v.U.......Q..VHi........$".p..../?6.qx../V....{.g^y.;..G_,..9....&..u9.z......X.q....+6.......7..r.q.9.....3....?.x2..4...0..P....+M....U\.........5..w<..h..rz.Of.x.s.T9..Y.=u..&.^.\|...#..up..\| J}......S..-..j..O..W\|u...q.P+......U..t ...U........_Y].r6dj0.AK.......Mk3..\..7...r.]\%.S^....rR..W.^+.X.q...r.^.h...a..CUx(.q..C&.p......?...........%T.p.....u.).65..(.m....?.R.R.....0...R.............1..V....qx.h.M.Z..Y..v....$.{.m.0aHN+...xxl...$.uk..].@.}.^V....s`..4QkY.%;.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\commonLoginApi[1].js Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	downloaded
Size (bytes):	32322
Entropy (8bit):	4.750299526098472
Encrypted:	false
SSDEEP:	384:+dOjuaI96CSeH2CgpJyLVWQd3WjApd0BBd1H43dLRR7Z4vKR:+XLNW/gnQKR
MD5:	8C15896CABA628CD9EFE42116C7A3DFB
SHA1:	2DC419A3889AA0118E022D06F1E172BFE5D118EB
SHA-256:	1AE405DA05B26908C54B675BE64DB6D6BEC894C230F902E7E6897B7C694897C9
SHA-512:	681BA9235CF64A37C107D7E0B30AC72E39402B8A37F6EC460BC47AF2589FDE4E020CC295EECD1DE9817008E731200EAE52FB3DD07B81D6DF37E308FB5EA25D6A
Malicious:	false
IE Cache URL:	https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonLoginApi.js?v=20200810
Preview:	/*.. ...-........ @author zhanghengpu.. /....define(function(require, exports, module) {.... var commonTool = require('commonTool');//.... .. var commonLoginApi = {.. game_id:'',.. extend:'',.. channel:'',.. from:'',.. prevUrl:'',.. isPop:0,.. pageFrom:"inside",.. clickCountType:"inside_login_",.. captchaWidth:70,.. captchaHeight:30,.. captchaFontSize:16,.. captchaShow:false,.. autoSetThirdLink:true,.. tipsWrap:".error_notice",.. loginFormId:"#loginForm",.. loginButton:"#loginSubmit",.. loginCallback:null,.. loginStatus:false,.. registerFormId:"#registerForm",.. registerButton:"#registerSubmit",.. registerCallback:null,.. registerStatus:false,.. smscodeShow:false,.. tokenCount:0,.. useNewThemes:false,.. showErrorMsgCallback:null,.. isPhoneRegister:false,.. lo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\main[1].css Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10209
Entropy (8bit):	5.168175890806781
Encrypted:	false
SSDEEP:	192:L6v6SK0XxozdBr2X2As4edwXMcQeulax5bi0Z:L6vVK0OTf4swXMcSlaaI
MD5:	A159D8A971FC72831C6FE9F28CE0E0DF
SHA1:	ED66B98CB1C170E5E9DCBB8E130F215DB7A73872
SHA-256:	BDB95E57947CE390A2443016A49E8E9E5E9C4F0BCF9F13678D49BBDB5D0C84D8
SHA-512:	B50224C21906CBC50723504FF6BE536B9BF9C0B6769D5962237D40179ECD3D404CEAA1A256BA031BF41DC3EF3014A52379C5536DC33C4C295AF2F8C2D3B558F3
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/main.css
Preview:	*{padding:0;margin:0}body{overflow:hidden}li{list-style:none}a{text-decoration:none}img{border:0}.fl{float:left}.fr{float:right}.clb{clear:both}.none{display:none}.outer{width:848px;height:480px;position:relative;background:url("//cdn-file.ludashi.com/wan/micro/smy/assets_lds/bg.jpg") 0 0 no-repeat}.nav{width:684px;height:27px;position:absolute;left:66px;top:19px;background:url("//cdn-file.ludashi.com/wan/micro/smy/assets_lds/nav.png") 0 center no-repeat}.nav ul{overflow:hidden}.nav li{float:left}.nav a{display:block;width:102px;height:26px;position:absolute;top:0}.nav .nav_1{left:0}.nav .nav_2{left:180px}.nav .nav_3{right:180px}.nav .nav_4{right:0}.login-body{width:665px;height:360px;position:absolute;left:84px;top:92px;overflow:hidden}.login-before{overflow:hidden;padding:0;height:100%;box-sizing:border-box}.slide-news{width:341px;position:relative;float:left}.slide{width:100%;height:186px}.slide img{width:100%;height:100%}.slide-cir{position:absolute;bottom:10px;left:0;z-index:2}.sl

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\news-bg[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	PNG image data, 65 x 17, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3915
Entropy (8bit):	7.812392088353486
Encrypted:	false
SSDEEP:	96:PQkcUU3zxhORbN/dWBgBivMik/m3zpHBmQbLbTk:PruyHdWBgcIKzSQbXTk
MD5:	F54CE52FABBA9384351CF92C9516C383
SHA1:	8EC1A674E77443B5FCF41DCBB961E2F12E0AB97E
SHA-256:	6FE9AD228F3CD89F9F3BE596D456F64E56B62746A02530F18F393F4CA62F2E61
SHA-512:	A1D604278EFED639CBD3EF3836B80DCEFC5C45DD2788433AC5EFC245DDBB0142E79589A032CFD7095D331D7E3DAC5BCB4C49F3690016AA38D82AAB0D1A2BED17
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/news-bg.png
Preview:	.PNG........IHDR...A..........y......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2F9B575C5295E811B5479A177797EF55" xmpMM:DocumentID="xmp.did:ACB8DF0395F811E89B1FA07D18E58C81" xmpMM:InstanceID="xmp.iid:ACB8DF0295F811E89B1FA07D18E58C81" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:76F72BA45B95E811A92ABB565D057B64" stRef:documentID="xmp.did:2F9B575C5295E811B5479A177797EF55"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...a...{IDATx.X{XT..?...................[_r...R

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\third_qq[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	PNG image data, 76 x 38, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4184
Entropy (8bit):	7.943562745166503
Encrypted:	false
SSDEEP:	96:mZXMt283zwASN5E5ag1Y0ElrSlNJuNHI9AiPQYF6O1pMfF4vCqU:mZn8j3SN5kagREeNJMJiPQYFPiN4vCqU
MD5:	664EBBEEA5E330A5ADC8D729070DD213
SHA1:	6A929D0CED20C7D75FAFF558776FBBA597703209
SHA-256:	D19534767DE432AFB00CB0C0658458F0E6ED380BE08D4A0A36F5AB94E8277D2F
SHA-512:	40B96965AA7AD85BD579328A12BF3DA74C5B7CD259D0EF586054E429B48E9C16137490C6A847951730A5FD6A7D41B401CDE92955C4118161A93C50275B5A873C
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/third_qq.png
Preview:	.PNG........IHDR...L...&.....n.}.....IDAThC.........~......dD.VKM....DFPW#...E..F]...5....f.Q.Bd@.D........5.b0)0..."..=...g...............{...{.%..]......Z.<.+.Xc... 3]......}..q,]...E...F....m.[.@-....u...D....E..h'.....f?v.../.<"..j....P(4F...0..N&.:.~...T._..Y0...!.?..Ao'....f.M...R.....XD.i&.'.r\.....bfM.,.4."`...[..=..d.a.6...S.2Vep."5...Q...H.4....s.z...Hv...MMv)/.=3...S~....^A.......%.q..k..>........s.5........a....T~.A.8.`33Z..}kmS}...o..p...."..-\....[b...q.;....EkY..'.........n.;.....W..<.TSE.H....Z.l..Lt.._+..{.y%..G....U.`......[A.._...........3...s3F.....s.S....m.K..v.....T.&l.rl........%.._.....K.r.1.e....=..H.B....HZV3..p.../..E.0...O7+Z..c..0k\W1..\|~oMH.nc...v.2X.8y..:...E.I.Lf7..J..}.....d..m.H....O.4...2S.....5z..f.&....O...-.i2.V..k.....(U..m...F.'.8.............P..B..... .sakg..XU.#.....`.4oC.lE......(b...F"..Z..z/.......o..bK..r/...!..M...........?.Ls^.............F.f\|..o..C}H..p0n......EX..b....Y.;4.W...p.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\upload[1].jpg Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 341x186, frames 3
Category:	downloaded
Size (bytes):	56525
Entropy (8bit):	7.990340848228441
Encrypted:	true
SSDEEP:	1536:8SH0fRY4gGtXfMhRk5bbIN9VHDEC/KUXs9IkoJsSrUR7Lz:8SH6RY4JkhRkkbjhlXXkwYz
MD5:	3FFBA046D459F09027ED51858E19736E
SHA1:	3945C5F4364F0FCBC8D9B742C55A8E75B1012DC2
SHA-256:	8208749E7C4B102343A4C2BCB4D2D031087EF9C167F2B325A50A2E006B422EB1
SHA-512:	860888E7663544B79F5F41D66CBE51E4A6B5643326DA1B4F12810E483D5FA597CDC20481B0B7524CAA267A2053B71FAF407A1CA10B0C017F10EDEB04C441F9FD
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/upload.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................U........................................................................................-+`Q.....yQ..3..Q]-..^...\|n...\|m{..<{...y...\|..z.U.N..y~..2'...>.............V....A^.y.k..H.M.........D?.!.l.=.E.I....O....~.O...^j".Fb.."...1y...~..4]....W..0.#qhr.....5..MkE........:.)]fM..S.....b2ZI].j..O...t...Rt.....a2.1.[N,..{j..t.....Js.....L.....M..A..$......) .}....0]!%..........p.\.........L..o.#.?.G......cG{..i-.U...u.K...a."..t.W4.....1.......oB.JDXs....i..uM....qh)..>u.T.......f.(......*Ma.C...N_]ppu..}[+.D...9.Q...\|...B...c.:..3.4...q......\..Et.ug.1.v..t]^.54S)......wF^%....#J{8B.~3..........B..YP.....?.:...cM...56...)\4.[...v.0....Q.s.et%.k...j....R[....{.!pX1)....(...s.{..V!QFD...3.M...m....l....1.W".>.(.'X%_.E....K&..,...9....P]+....f...+....."...+_`Uk.~.t.0sl..'j<...Y...M.Lz.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\wan[1].txt Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
IE Cache URL:	http://s.ludashi.com/wan?type=weiduan&action=7z_download_success&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=277f2cde0146b235341f2d18326925eb&from=tp_smy&forcetick=4031671
Preview:	ok

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\wan[2].txt Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	4
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:Ln:Ln
MD5:	B73FDAA1FB7669DA760B49600C45D9BE
SHA1:	39D0D38B6B9A01E2894DB59A9985BA2DF6C895D9
SHA-256:	3A5088295708D3304F06DE0499B9243BFBD68D14878615C531F0E346F47B389D
SHA-512:	57E58B658F9E042986714D82919B526E69414F04B10EEC62B2734BB9374549F3CFE447D48E81236617A928789FA3ABB9E35F0DD58A326AAC155CB246BCEAF348
Malicious:	false
IE Cache URL:	http://s.ludashi.com/wan?type=weiduan&action=add_desk_icon&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=aa839ed1b28cc8cdeaaae92f4e4726d8&from=tp_smy&forcetick=4129421
Preview:	okok

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\wan[3].txt Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
IE Cache URL:	http://s.ludashi.com/wan?type=accurate&action=t1&channel=tp&from=tp_repush_wd_smy_0602&mid=e4ec8e8a6f2d1ca301f6e29536448c71&appver=3.2.124.1372&uid=0&game=smy&timestamp=1623644669499&ex_ary[guid]=
Preview:	ok

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\cir[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	PNG image data, 4 x 7, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1020
Entropy (8bit):	5.9443874518469375
Encrypted:	false
SSDEEP:	24:bl1he91Wwh82lYSKwUc1FyqViT3ouyJ3VRUc1KGp8T:bLqQvnL9cKq0IJ3EcItT
MD5:	9E43DD74317164DA84B254D22A4BAB53
SHA1:	A76374D07F5ADAA68408D8D7856A30BA55814AD7
SHA-256:	21E523CCB626993544479E7DA691D30CF99880118194C16D868BE70258081EF6
SHA-512:	E5C1F5630A2B2B020A42245C9C217BC7C9D09A5F2C9C405A51B835AB43090942B71690625CD0FE76CA29B384BFA078C6BD1A0C1919F381F75DEA4A06374B3FB5
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/cir.png
Preview:	.PNG........IHDR............./e......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2F9B575C5295E811B5479A177797EF55" xmpMM:DocumentID="xmp.did:E6379550960411E896B580B88E28446E" xmpMM:InstanceID="xmp.iid:E637954F960411E896B580B88E28446E" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:700E78ABFB95E811BD1BCCEA04786753" stRef:documentID="xmp.did:2F9B575C5295E811B5479A177797EF55"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?> z._...,IDATx.b..Y..........t.. ..X.]..Y..Y.......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\config[1].js Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2992
Entropy (8bit):	5.433630078169903
Encrypted:	false
SSDEEP:	48:391aCe0zwglWSpXjuMV5m9BQiloFYKkCrDSaZH+2Qz7JzdPaepqjOkBnqf:3WMjlnpTuMVOBQiloFOCrDSO+PJzdPag
MD5:	9680DAF7C9D9E06F41550EE8D56A19E9
SHA1:	5FA542BAAB09FD10D48ECE740D2240ABEF444EA2
SHA-256:	C730345485D4B8191F055A96DA4E13CFB5D1B5DE5F22EFDEF22BA033C92FFE08
SHA-512:	B267678E0604733063B03906845AAF0FAECA17DDF5E7DEAD6C4D965B4F3CAC866F2B7A6DB65660239E150A721827ED11492DBD59F6CB2D496E6837546087A65B
Malicious:	false
IE Cache URL:	http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527
Preview:	/*.. ...seajs...... */..if(typeof use_https === 'undefined'){.. var use_https = false;..}....// ie9.....https..if(navigator.userAgent.indexOf("compatible") > -1 && navigator.userAgent.indexOf("MSIE") > -1){.. var regIE = new RegExp("MSIE (\\d+\\.\\d+);");.. regIE.test(navigator.userAgent);.. var ieVER = parseFloat(RegExp["$1"]);.. if(ieVER<9){.. use_https = false;.. }..}....// ......https,.....https..if (location.protocol && location.protocol == 'https:') {.. use_https = true;..}....var __urlBase = "https://cdn-ssl-wan.ludashi.com";..var __urlPath = "https://cdn-file-ssl.ludashi.com";..if(!use_https){.. __urlBase = 'http://cdn-wan.ludashi.com';.. __urlPath = "http://cdn-file.ludashi.com";..}..seajs.config({.. base: __urlBase+"/assets/superjs/",.. alias: {.. "jquery": "cdnAssets/jquery/jquery183.js",.. "qrcode": "cdnAssets/qrcode/qrcode.min.js",.. 'qrcodeJquery': "cdnAssets/qrcod

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\log_btn[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	PNG image data, 168 x 68, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6640
Entropy (8bit):	7.961266541921765
Encrypted:	false
SSDEEP:	96:ut8qIbANH0RNfa3+NxOKt1gLeXmowPHonhQZxEdd+XHNYqzkV6O4N:08qMANH0RNfa4OKt1gIOl70dqH2Cx
MD5:	9505EE30ED15B8F7A6D76456C289659F
SHA1:	8D6CCA69CA3750BA5C1E39D6B6546255EC133561
SHA-256:	64558FBFDE670EEAD1FED435FDF9A66C22851324C48404E9E3104A1D325984A1
SHA-512:	1A3C2EF26599DAF2585203FAB160B4EE5D0266BFD49495DE3C0C7139C4EB09C55CC49158CF6B426419E6159949D251267B31F0468E800D2451FC838700683371
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/log_btn.png
Preview:	.PNG........IHDR.......D.....".......PLTE......,(# ..8("..........6)"9"+..n^:kJ(?+.LC2T,.J7.^5.}l@<5+...[M2d=!]T9VA&.zH>;1..\|.)#.~...z.._.~S..e.......vX.qU}...............'.......t4.............\...%.h...V....M...!.Y.....k........q...0.....6.....O..-....n.....3..S....x...>.e......K.u........9..b.._..Q......@..E.6..V....[.H..6...P..h.yM.\ .&..!..9..;...w.!..C.s .c"..2.})........h2.a!.........G.../......e&.r%b..\|1..._.#.y......Z..H.~....T.a%.C....6..}#=..s....@.^..:.8...0...m.T..T.l$.J..%..G..&.L&.f!.4..+..Y.H...sD..?.."............j.?[......i(.S%...x0........e.[#.@.m.......T..N.H.^#.v......q.V.C.o.N..O..-..]..U.<.'..%..;.Q ..j.P.w;...U.G.y>.f=..:.3.6..D..8.a2.p/.,.K"....z.e.S..P.oD.s4..2.L0.8..=....s..a.[.^0.k+......~.i..L.-...H.Y<.g2...Q.)...........s...f......(tRNS)>.o..R].........................I]wfw.....wIDATh...QH.q...I...T0B..J....... .>.P.k.7...A...m..]0=..E..E{.%.v.*...YF.k..16.,.....m.H..p.........UZ.Vu.)!......\W..Ao.z.^.6

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\nav[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	PNG image data, 684 x 27, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5629
Entropy (8bit):	7.912473282143565
Encrypted:	false
SSDEEP:	96:CNAFr8ZLnSnMlTOW2hIePriJDZcSp7Xxw6zkl1I72eenawQ7yBDN6CI+qUoRrs:IQ8ZLnQPP4lLlxw6qSyVnawpDq+qUots
MD5:	B9D5EC6D77A5C9614675A713B95BB628
SHA1:	4A4D03AF537A12BC7FBE182347BDB4EE98E1E57B
SHA-256:	126337C544866623384697B0493716238DF788855586D3479532D28FDDFBB323
SHA-512:	9BE02828CDB00B82262A05FE5C4C2C6DC3C9EB74B23B797ED72D3073F92D5B653C4740E0AD6C84FE2A5EAEC3978263144232E7C97A17C1BC4C5DEC06E746D64D
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/nav.png
Preview:	.PNG........IHDR..............L-.....PLTE.....i..,...........a..../..x.......>.....b..x........:..1............L..r.......W.......n....7....S..........B..\....N........Q..W..{.......N....]..?......R..p.......;......_......@....G..6..M../..:..w...........H........4..m..........-....x..>..X..m..x..-....Y..p........6......Y..9..m..2..../..=..G..@......i..Y..5....0....1..@..p....L..t..C......>..j..I..6..5..k..K.....x..:..`.......}..^....1....~..e..=..S....3....Q..M....q....M.........@.......\|.................a....P...........O........i..q........t.............h......9..U....2.............A.........G..n..A....................u.......J.......\|.............7....1.....x....i..q..=..Y.......K..D....R....a.......+.......tRNS.....`@.@ .`.@.`@.@...@ .`..`` ...._............'...........~L@?*...FA;._AA7.....tSR0$..........~g_RP1......`0..........toaJ.....i:6.........yljYS9.....................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\pageMicro[1].js Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	downloaded
Size (bytes):	34425
Entropy (8bit):	4.813784803155087
Encrypted:	false
SSDEEP:	384:M3Lv2V/Y62LzYyvJy9MQoa+AWBKVOdmLDf3Ni1jb6HQom5:MIuY8Q9MqDfVQ
MD5:	53637DDCA6C502FB53378D56CB33EEDB
SHA1:	AEFA8DD4086F96E7744FC5EA7EAAAB44DB353D98
SHA-256:	F9B8DE7FE6FB2A6DDB9C9678D43844A282A436CECE126A040139B8FD1A40F91E
SHA-512:	2786213D6778ACA3C51D46B2F2043B30EE3099DC65459ECB6122018DC6DE37B49010BF70714BA961509D8C41DC605230E9FDF3B144A8C680DE2215487D158BF0
Malicious:	false
IE Cache URL:	https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527
Preview:	/*.. ...--........ @author zhanghengpu.. /....define(function(require, exports, module) {.... var commonTool = require('commonTool');.... var pageMicro = {.. debug:false,.. game_id:'',.. extend:'',.. channel:'',.. isChannelApk:false,.. from:'',.. pageFrom:"outside",.. clickCountType:"outside_login_wd",.. new_server_id:0,.. init_notices:false,.. init_servers:false,.. init_hotgame:true,.. init_channel_from:true,.. checkFirst:true,.. jumpNewServer:false,.. userHistoryKey:"localcachekey_",.. noticePageKey:'0',.. noticeWrap:"#newsWrap",.. noticeDisplay:5,.. noticeListUrl:"//wan.ludashi.com/announce/list",.. hotGameWrap:"#hotGameWrap",.. hotGameCache:{},.. hotGameUrl:"//wan.ludashi.com/cms/microclient/hot.php",.. serverTabNum:6,.. serverRecentWrap:"#serverRecentWrap",.. serverTabWrap:"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\reg[1].jpg Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 848x480, frames 3
Category:	downloaded
Size (bytes):	157677
Entropy (8bit):	7.988615164393063
Encrypted:	false
SSDEEP:	3072:IAHmGqDpFglvgxdLXNibWWrSkf6FiA18jSNDeQoEAzwbcvwFiexock6KEagGsB:vGxFEvgxVXNgSLvsSNDhoJuKB6HaS
MD5:	7506DBD9F6F8074790866F5367CEDF6B
SHA1:	40A41DEB42746276AA9B46743C73A345853F393F
SHA-256:	996956162C18F1701C47A26AED66382E4DA56149D51670BEC02E9BD50ACF0004
SHA-512:	17CE6E479540734C5F401E311230E132F7CB64D915E487D42F06302974FB747F7B364D20783E7F23075B82B76B9DDED10090C7FD6C551232EAEDBD1C4D51763A
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/smy/assets_lds/reg.jpg?t=20200105
Preview:	......JFIF.............C....................................................................C.........................................................................P......................................................................................../.}..~..<Zj..Nu.D.PQ..Dp..I.4......8..n0 .Y}FJ5mm4.UX.Z.m...1"0...L5..bCFJ@.....!.....dpD.A....A.e8.%I..Q... ...M..F.`..N...M.....e>J..C#Q.gs.....\|.m!.<...}......^C..\.."d.%. @.(.I.IF.f..mB"Q..0.)R.`..iH....A.02..N..x.A%..8......h..G...@e0(20 .J9.F...!...##...P`.a..6Dr1.cB..$b....d..j;;...r..V...a..O.\|.S...e.v7&Q.@..q`R1...+.l$...E:...qIE.&SW.q#..+....L4G...R..<&...@.....@...AA. ....pQ.0.Q.8"..f.B...'.P.(..".@..E6R.,W..d.....9X.Lr..]WW..G.............$.P.U.S....L5...... 4ZN5!4ie.."#h.@.e&VAD.(..A...D$. @)....J..ME....8.9aME.J....4f.1.......$..:......8H.2..*...l..t.-.<-.%..P...o...}E._A.;...VJ.4..(.@u%".J.p..18.....J..n$..a@...@.6...P.@.ud.RW.r.....".E..r.DFF.....T.!..0(....(.A......j...O.>..WW.....`L....eE

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\wan[1].txt Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
IE Cache URL:	http://s.ludashi.com/wan?type=weiduan&action=7z_noexist&channel=tp&mid=e4ec8e8a6f2d1ca301f6e29536448c71&mid2=120ad2d5423d82ed71c1ebae426857ce8c6b78322975&uid=d&appver=&modver=3.2.124.1372&sign=249e3a2b67d901167e5cb35d71347473&from=tp_smy&forcetick=4028421
Preview:	ok

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\wan[2].txt Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
IE Cache URL:	http://s.ludashi.com/wan?type=accurate&action=t2&channel=tp&from=tp_repush_wd_smy_0602&mid=e4ec8e8a6f2d1ca301f6e29536448c71&appver=3.2.124.1372&uid=0&game=smy&timestamp=1623644689502&ex_ary[guid]=
Preview:	ok

C:\Users\user\AppData\Local\Temp\WdGame2Run_smy\smy.ui Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
File Type:	Zip archive data, at least v2.0 to extract
Category:	dropped
Size (bytes):	824106
Entropy (8bit):	7.99093166303455
Encrypted:	true
SSDEEP:	24576:WOXP55n5PUR4bmGaELO3lJpsnag/FZQubt94YouZx1pNtQ:1XB5n5PUR4bm1wO3dsaAZ3bt+2tQ
MD5:	C45F626AD65405066D868DC253EDBF90
SHA1:	72E14FA66C4C4A4C3228FFB3941C08D3C2AAF4F9
SHA-256:	7BA51A5BB4D2D0A11683407CD165F619792D5CCEF90983344DAE6EAE86DFE88B
SHA-512:	DC2F242B5B8F4ECF647EEDF1F90C5F65445C6FF6E34FF63129EDDF8821E9A0449220FD4F1663409C458052955BD972EDAAE1583C5ECF622C96601A7BF042A8D2
Malicious:	false
Preview:	PK........(..R................BrowserDlg/PK........Y.,R.(W.....^.......BrowserDlg.xml.V..0.]..?Df.Mh..AA. ...,.,+'q[.....Vl......!X !.....KC._.e.+~..8....(..hj.{\|\|.+?..v.MF.D...Ev....=.S>.X.....I.}..']t.D.8.q`.......blD..l4...F..=....f.O......E....}...7...x.)#..,....=....A..D.I.4L.l...1..Z.1..4......;.S.K..]..r<...W;......[.QJ....``..,"..3........b...r~.....e..9OBI=....".)"K~..EO0....S...}.3".W...G7.5I.T2....CB.C.E...[...{'. .<.s..{Q.-.q..v..... V.hD]p..5."....O.Z(.m....i.L 0...q2^i./.$...O.!+.=.]..n..I&........;....7..\|.M.....qs......-..\|0U...u.sK.....Zzo...../\kf;K...z...q%...`...;.....U.ng..J..\.#.J4J.{v{..cg.U.Z.S.d C!.AP7...@.GC.Qo.H..A..9.{.&.X!l...A.\KsW........~..1.._.]... R...(.z.....Z....}..i..#.{...........M.w,h.dR...~.q.....2..'.0..`I....c...]V..S..i?Q(.c3.TBh.TR.,V.V..~V.{.^.ld....X....h.".....I.........F.....\|.7k.....'.R......K}.........vom..8X....c...M.,..@K.[.C..I.e..9o..j&e.[..n4M..dJ......[......u.$...ET.e...;.?.xt....\|.....

C:\Users\user\AppData\Local\Temp\WdGame_smy\NetBridge.dll Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	243776
Entropy (8bit):	6.739922320894202
Encrypted:	false
SSDEEP:	6144:yJlU7zM4nGH4Ye1XBINNN8YCh2Jo9TB7PTkRc3/:y/SMH4YUXBIfPdo9T1V3/
MD5:	1618C56FD42A483782F863555B2EEF12
SHA1:	130DEA21A6AA501AB63277FE429571442C520193
SHA-256:	F4ACB8DE7EE4C64E9BA4A0004CBDE9282FD3ED5F0CEE7633CD3EFA197EEDA196
SHA-512:	4B401316B8C7243C09D28D9E95DFD163FC991C64CC37E1EE46483446FE7B6AC7B2F7476764E25CC2B34871E4823123BF3CB71E8ECAAEA00A284B07EB48304996
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 3%
Joe Sandbox View:	Filename: KuMTnLOuSZ.exe, Detection: malicious, Browse Filename: o5ZGIQwDed.exe, Detection: malicious, Browse Filename: UM6rAJhKEq.exe, Detection: malicious, Browse Filename: mAGs0IsoB7.exe, Detection: malicious, Browse Filename: IJ9cCBb4Tv.exe, Detection: malicious, Browse Filename: KuMTnLOuSZ.exe, Detection: malicious, Browse Filename: o5ZGIQwDed.exe, Detection: malicious, Browse Filename: 17mqa66sU6.exe, Detection: malicious, Browse Filename: FjzWYXTUop.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........."..sL..sL..sL.....sL....{sL..7..sL..sM.UsL.....sL.....sL..!..sL.....sL.Rich.sL.................PE..L...=.LS...........!.................T...............................................k....@......................... E.......6...........................5.........................................`...@...............t............................text............................... ..`.rdata.............................@..@.data....1...P.......8..............@....rsrc................N..............@..@.reloc...(.......*...V..............@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\WdGame_smy\smy.ico Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	393646
Entropy (8bit):	6.900526763646595
Encrypted:	false
SSDEEP:	12288:rggwA6eRUj02jJTi39Mqw33dInLDVtY/RNJ3:r3N6eRUo2jhi39Mq+GLDoH3
MD5:	B05E52ACC59887E12FC9F140376A20E9
SHA1:	749D44D8D3E14D5361C803FA64559A65F9501F0E
SHA-256:	19B21B531A746EE7276E958CAC39504312D9C697FC09B1BC23B901306D433C9F
SHA-512:	53CF4D45793F95C0F2DA4D2D58EE2A198946CD33F1E96A7FE7F917867365DAEBF0442480A891D5623724D183ED0640464D33FB094A93F5635CEAFD28E6BF03C5
Malicious:	false
Preview:	......(....... ..... ...........................4...L.9k..<n..<o..<q..Jz..^...a...Nz..<m..8k..<k..<t...Fz...E..A...........n.V:-.E...9...O!..\|D .`%..s/...,..........\....@n.,`..][S.................U;..J#..a-..P&..O(..=...B"..J"..6..5o..%T.............................w...y..Z..q9..H...G"..C..6^...P.......................................r...J...E..J ..@..6d...U......b...l...pk.........................a/..[,..W(..G..2b.. a....O.Co..W...(I..Vi..hfx.....................tC..X-..E!.1]..!`......I...W...3Il.;Z..Jc.._]j...x.................J&..L*.3_...[....R.8...@...?s..3T..F]}.C]..EV~.Xcv.............}..`:.5a.. ^.../..;...k...U...A...Bj..9Jt.-Cq.2Bc.@Zy.Zee.........t[.6c...Y...%...Z..-k..........G...0`..:Nu.DYz.9G[.:Ji.EIL.xzq.....1d...X...$...2...4...]..a.......}...V...@m..8Wq.>Rb.$/M.TRO.dg^.0c...V...(...6..(\...k..'...S.......T...>...-b..>e..+Ac.LPV.WP=.)Z...T.......$...#......"?..,...;...g....q..L...9o..+W..:Nl..1?..O..(w...+m.......}......%..?o...G..)N..1u..$...G...-g..!I.. ;

C:\Users\user\AppData\Local\Temp\WdGame_smy\smy.ui Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	Zip archive data, at least v2.0 to extract
Category:	dropped
Size (bytes):	824106
Entropy (8bit):	7.99093166303455
Encrypted:	true
SSDEEP:	24576:WOXP55n5PUR4bmGaELO3lJpsnag/FZQubt94YouZx1pNtQ:1XB5n5PUR4bm1wO3dsaAZ3bt+2tQ
MD5:	C45F626AD65405066D868DC253EDBF90
SHA1:	72E14FA66C4C4A4C3228FFB3941C08D3C2AAF4F9
SHA-256:	7BA51A5BB4D2D0A11683407CD165F619792D5CCEF90983344DAE6EAE86DFE88B
SHA-512:	DC2F242B5B8F4ECF647EEDF1F90C5F65445C6FF6E34FF63129EDDF8821E9A0449220FD4F1663409C458052955BD972EDAAE1583C5ECF622C96601A7BF042A8D2
Malicious:	false
Preview:	PK........(..R................BrowserDlg/PK........Y.,R.(W.....^.......BrowserDlg.xml.V..0.]..?Df.Mh..AA. ...,.,+'q[.....Vl......!X !.....KC._.e.+~..8....(..hj.{\|\|.+?..v.MF.D...Ev....=.S>.X.....I.}..']t.D.8.q`.......blD..l4...F..=....f.O......E....}...7...x.)#..,....=....A..D.I.4L.l...1..Z.1..4......;.S.K..]..r<...W;......[.QJ....``..,"..3........b...r~.....e..9OBI=....".)"K~..EO0....S...}.3".W...G7.5I.T2....CB.C.E...[...{'. .<.s..{Q.-.q..v..... V.hD]p..5."....O.Z(.m....i.L 0...q2^i./.$...O.!+.=.]..n..I&........;....7..\|.M.....qs......-..\|0U...u.sK.....Zzo...../\kf;K...z...q%...`...;.....U.ng..J..\.#.J4J.{v{..cg.U.Z.S.d C!.AP7...@.GC.Qo.H..A..9.{.&.X!l...A.\KsW........~..1.._.]... R...(.z.....Z....}..i..#.{...........M.w,h.dR...~.q.....2..'.0..`I....c...]V..S..i?Q(.c3.TBh.TR.,V.V..~V.{.^.ld....X....h.".....I.........F.....\|.7k.....'.R......K}.........vom..8X....c...M.,..@K.[.C..I.e..9o..j&e.[..n4M..dJ......[......u.$...ET.e...;.?.xt....\|.....

C:\Users\user\AppData\Local\Temp\{2ABEE32F-59D3-45b7-9A49-7D0E0AA32891}.tmp\cef.7z Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	7-zip archive data, version 0.4
Category:	dropped
Size (bytes):	25267431
Entropy (8bit):	7.999992683412103
Encrypted:	true
SSDEEP:	786432:8p93h/NbHXz9qvayto6pHTH5sTFDwN8CmanQm1/Si:8pV7j9qIETH5sTK2aQu/Si
MD5:	B4397BC61FC3CC1FF3E3A82C50C964C8
SHA1:	447CFA5A3A6574E0F3A01EEB34F7F7E713184C52
SHA-256:	557236CA4930C9B9964313DE8F055F7264C534AB00738D80512FD3C196E05879
SHA-512:	7A5FFE067DAB4476087F3E48DB483919F96CC0174D63927414A2413A60CC926F0C965BA4EADF8513A6C3A2FB5956E6A40170F8D6D7DC0CE9961E353782EC699C
Malicious:	false
Preview:	7z..'....(..........%........ mJ.v...]...6.;.OI.......4. .Fj...-.1../.....{..9`.....@.]...9{..Sw......n..z$.JP...7v.....=.7.I....U...+h.k.....%.\|...-.~.....AfT.sG.R..;...r.....9.9?..C.QOo...lyv........D..z.....1r&E.....C.S..b.q.........5y.#....+j....a.[..O...p....<..,.k^C.`V2S..D\`...P...8w....<.1.^M....y....B.N..4p.G.........q..........x5...3.&ME.T....L.....z..2..p...v.x.....S...9..!1.>(d..ZA.........1...D.I..e....nJ.7.....H...m4#.. .o(.x%......N..u..f.....&....h!.d.I)-..A. .d.\|.!F..M+.t.U...?m..j.\|.a.6........~."?R..{=..7..?....(.......'...p..,...{K....r....iy].R.q..9...N.6.v.c.au.gy..y...VW...+...2RCO'..<.xp/....H.$. ..P.{KJ....r.....w..<.;.* ..s..k3-.4?.9]O.......AJ...G........H...6-8&(.._..Ro..r.u.(.X.6.m...'.$.9z.D...".....x.b..`..>\Jq...?.8EW...fk...Yd.Yo.#...1...M.Mn{....&,..fEq.M...q...."...q..4....U..]..~.mA....;.....}..=_-.jD.g..1w.Iq.............f.......~..}.l........==q..g4...dX.>g.]..+.u5.TY..mn..wV...Al..`......hYOc.a...

C:\Users\user\AppData\Local\Temp\{467B4A82-2989-4e52-A47E-1F20823DD802}.tmp\CefRes.dll Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	25402696
Entropy (8bit):	7.999831197194621
Encrypted:	true
SSDEEP:	786432:GnyHxH6qXvrx3BWUwStoAw4y+Ekdhjt8El0GdU1Ww:GnOlTx3XLw4y+ESllLy1Ww
MD5:	6EBC597BCFD7267FE42045005BB796DB
SHA1:	7313C8B9D34E92E12CA8F614B8A5F2913DEDAE6F
SHA-256:	D82C1A849C963054E41704D49258EA634DE816F0B596DE1AE97FD9266DE3A5A3
SHA-512:	EA5E4586643C5A611840633410814A6C3593EC664955A5953794641E6255EA6A8D03D1087B6FEE7040824A03AF1562112D265A1DF6F21E517515083E781C2F86
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: KuMTnLOuSZ.exe, Detection: malicious, Browse Filename: o5ZGIQwDed.exe, Detection: malicious, Browse Filename: UM6rAJhKEq.exe, Detection: malicious, Browse Filename: mAGs0IsoB7.exe, Detection: malicious, Browse Filename: IJ9cCBb4Tv.exe, Detection: malicious, Browse Filename: KuMTnLOuSZ.exe, Detection: malicious, Browse Filename: o5ZGIQwDed.exe, Detection: malicious, Browse Filename: 17mqa66sU6.exe, Detection: malicious, Browse Filename: FjzWYXTUop.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......*>..n_.Pn_.Pn_.P..nPd_.P..lP._.P..mPv_.P<7.Q~_.P<7.Q\|_.P<7.Qp_.Pg'.Pc_.Pn_.P._.P.6.Qk_.P.6.Qo_.P.6`Po_.Pn_.Po_.P.6.Qo_.PRichn_.P........................PE..L.....C]...........!.........J.......(.......0............................................@......................... ...H...h...x....................f...6..............T..............................@............0..\............................text............................... ..`.rdata..>m...0...n..................@..@.data...............................@....rsrc...............................@..@.reloc...............R..............@..B................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{94F935E3-AAB3-4258-84E0-CC7146580192}.tmp Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	Microsoft Cabinet archive data, 25278986 bytes, 1 file
Category:	dropped
Size (bytes):	25278986
Entropy (8bit):	7.999988082497275
Encrypted:	true
SSDEEP:	786432:2nyHxH6qXvrx3BWUwStoAw4y+Ekdhjt8El0GdU1WS:2nOlTx3XLw4y+ESllLy1WS
MD5:	09FDA8864BA82B306EEED8959BAE888C
SHA1:	B5004C3BE7592F3B0B74C89346511E1C0D6C27E7
SHA-256:	B6794C2CC0870411E9ACE6C17E4D3094C8E4386F66ACEE7DCDE391ECC573E116
SHA-512:	9C8318F9D9C5A792EA5A828A38C1D7DDF3131A29F93AD113C68F7FF145F463C0689D79AD5D78FC0E130C5AE61C23058139B26911DD9C5CDD4C90A920C11B29B9
Malicious:	false
Preview:	MSCF............,...................C................O. .cef.7z.~!......CK.....7z..'....(..........%........ mJ.v...]...6.;.OI.......4. .Fj...-.1../.....{..9`.....@.]...9{..Sw......n..z$.JP...7v.....=.7.I....U...+h.k.....%.\|...-.~.....AfT.sG.R..;...r.....9.9?..C.QOo...lyv........D..z.....1r&E.....C.S..b.q.........5y.#....+j....a.[..O...p....<..,.k^C.`V2S..D\`...P...8w....<.1.^M....y....B.N..4p.G.........q..........x5...3.&ME.T....L.....z..2..p...v.x.....S...9..!1.>(d..ZA.........1...D.I..e....nJ.7.....H...m4#.. .o(.x%......N..u..f.....&....h!.d.I)-..A. .d.\|.!F..M+.t.U...?m..j.\|.a.6........~."?R..{=..7..?....(.......'...p..,...{K....r....iy].R.q..9...N.6.v.c.au.gy..y...VW...+...2RCO'..<.xp/....H.$. ..P.{KJ....r.....w..<.;.* ..s..k3-.4?.9]O.......AJ...G........H...6-8&(.._..Ro..r.u.(.X.6.m...'.$.9z.D...".....x.b..`..>\Jq...?.8EW...fk...Yd.Yo.#...1...M.Mn{....&,..fEq.M...q...."...q..4....U..]..~.mA....;.....}..=_-.jD.g..1w.Iq.............f..*...

C:\Users\user\AppData\Local\Temp\{ADA5407F-EABB-4dd2-A7D2-00AC184DF8AD}.tmp\pepflashplayer.7z Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	7-zip archive data, version 0.4
Category:	dropped
Size (bytes):	7086750
Entropy (8bit):	7.9999693736939
Encrypted:	true
SSDEEP:	196608:98mpL8l6iIUt3Lh3LOnk/86nZ1/VH1j3BF84D:9LY6Zs13LOk/8GbH84D
MD5:	F541D00B14B9C08873D92077566FF63D
SHA1:	3E5610A7547FA6F852EC5959C9234BF1363A8877
SHA-256:	B8AB60859626690078BFC50645C33AE57E8CFDD597E5BF6BE33CC869452EB83A
SHA-512:	4B27AA7ADC65D2439F1C8F56D122BC91AC8929D59C9688B4578404D6F07CC6915833C932C43A18FB3BA1C089DA1E31D9F230637CC42CAB994B887FBB45D18541
Malicious:	false
Preview:	7z..'.......!l..................V..].&..p.........../D.N...'.J.u..a.s'..N/:.lz..........q.+.....S..U.^dq..~@..9en...@...~.}.6..)...{.....q..[u.N...v\.....3c....R.b_.\|wi...^=.Y0.../>.......D.\|UvQAnk.]....>......)G?............v.v..F.!.....b..9...IB..wg....q...LX.#.).S. .../.".pZ.......KSjM.L.(..{Ue.kF....BI.%O..$........Z.b,K...V....v3!:..p.#..G4.'...{.......4..aE1...s.0n.7...1N..........mc..3..y<...-......y...$.J,."...{<R.!...Z.`........<.8z13.&..jg............&..l.@.).c.N.:B.F...cJ....+.K..>.l.]..G1.u:....D3.e..N..>.S...h!e..].S..<..7)....H...Eb/......`=......E.....=3C...q$a....=..0..\|F.D...s...u....C.....K...^.w....4.c.>r..'ds..!.{].T...?>...?I..V..c8.V2....lf.V(....S.e..k]A........b.\..<.U.z.&....L......j....4...5.'`..K....108]........s8g..M.w/......8..../s..C..<...Uy@.{8.@.<.W..v....y.h...X...........Y>(..R..kT..U...t.,H.../..p..;.II.5El+..........)..z...2. ....<.L..T.7....V.Mj.....\|%szE........u.o......^...Cz...YH...g..6.Q.....%.s

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\???\???.lnk Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Mon Jun 14 03:22:25 2021, mtime=Mon Jun 14 03:22:25 2021, atime=Mon Jun 14 03:22:21 2021, length=3826088, window=hideshowminimized
Category:	dropped
Size (bytes):	1939
Entropy (8bit):	3.3930819138753217
Encrypted:	false
SSDEEP:	24:8hEM33eycHBs9lNHh2HTpMbXLAh/hnr/GrqWwhDyMBm:8p33eL+9lVybNRjG2Ww9
MD5:	EAB56E98A84DC1EA480475B2DE7A5E3E
SHA1:	43E5C4246FE9EE1DB068AC8D28118BF15716D033
SHA-256:	4AB0C16DD53F1FC6672B4373032FBBBC20CF903D1038FBDDFA820EEE76ECD4F6
SHA-512:	739F467E6374E36988428BC20BC4C9D79593D2F03A50DB6DF3CB0C0EF5C58CA0AFCE4913DB112207DA5AB93373D1FC63A1D05A4D8653284F0D387AC8D3FF7CC8
Malicious:	false
Preview:	L..................F.@.. ...U}...`../....`..1....`...a:.......................:..DG..Yr?.D..U..k0.&...&...........-..@yEY.....o...`......t...CFSF..1......N....AppData...t.Y^...H.g.3..(.....gVA.G..k...@.......N...R.".....Y....................yN\|.A.p.p.D.a.t.a...B.V.1......R."..Roaming.@.......N...R.#.....Y....................CR..R.o.a.m.i.n.g.....T.1......R."..WdGame..>.......R.".R.#..........................,d.W.d.G.a.m.e.....J.1......R."..smy.8.......R.".R.#...........................m.s.m.y.....V.2..a:..R." .smy.exe.@.......R.".R."...........................k..s.m.y...e.x.e.......`...............-......._.............y.....C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe..!.....\.....\.....\.....\.....\.W.d.G.a.m.e.\.s.m.y.\.s.m.y...e.x.e.).C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.R.o.a.m.i.n.g.\.W.d.G.a.m.e.\.s.m.y...-.-.f.r.o.m.=.s.t.a.r.t._.m.e.n.u.1.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.R.o.a.m.i.n.g.\.W.d.G.a.m.e.\.s.m.y.\.s.m.y...i.c.o.........%APPDATA%\

C:\Users\user\AppData\Roaming\WdGame\NetBridge.dll Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	243776
Entropy (8bit):	6.739922320894202
Encrypted:	false
SSDEEP:	6144:yJlU7zM4nGH4Ye1XBINNN8YCh2Jo9TB7PTkRc3/:y/SMH4YUXBIfPdo9T1V3/
MD5:	1618C56FD42A483782F863555B2EEF12
SHA1:	130DEA21A6AA501AB63277FE429571442C520193
SHA-256:	F4ACB8DE7EE4C64E9BA4A0004CBDE9282FD3ED5F0CEE7633CD3EFA197EEDA196
SHA-512:	4B401316B8C7243C09D28D9E95DFD163FC991C64CC37E1EE46483446FE7B6AC7B2F7476764E25CC2B34871E4823123BF3CB71E8ECAAEA00A284B07EB48304996
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 3%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........."..sL..sL..sL.....sL....{sL..7..sL..sM.UsL.....sL.....sL..!..sL.....sL.Rich.sL.................PE..L...=.LS...........!.................T...............................................k....@......................... E.......6...........................5.........................................`...@...............t............................text............................... ..`.rdata.............................@..@.data....1...P.......8..............@....rsrc................N..............@..@.reloc...(.......*...V..............@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\7z.dll Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1113400
Entropy (8bit):	6.584133168551355
Encrypted:	false
SSDEEP:	24576:SZ+lCPq8bgPqPRzWu+sjvNfEz0z/JiJXosc3:FlCPnbgiPRzWFsjvNffJtsg
MD5:	C4AA6D9E72A1721B3F65646E04E702CF
SHA1:	6A41028AB246CE033E19DA5C54E066E0752CB616
SHA-256:	D4298C89FC52459842E7658EBF3AA34A9F6E061A97B8984790239609B492F696
SHA-512:	D2DE0B47EC3A5564592797468F02944FE911C66034C08FBEB5EF4592B1CCE7561E6ED36E4433D6520F2927B66DBDBE68424939CAC286B325EB7E83F09AB65843
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 4%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........i...:...:...:...:.:._.:...:._.:...:...:a..:...:...:...:...:...:...:...:...:...:...:Rich...:........PE..L.....iT...........!................3........................................P.......................................8......t*..P.... ...}...............<...........................................{..@...............\|............................text............................... ..`.rdata..rY.......Z..................@..@.data...(....@...v..."..............@....rsrc....}... ...~..................@..@.reloc.............................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\CefRes.dll Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	25402696
Entropy (8bit):	7.999831197194621
Encrypted:	true
SSDEEP:	786432:GnyHxH6qXvrx3BWUwStoAw4y+Ekdhjt8El0GdU1Ww:GnOlTx3XLw4y+ESllLy1Ww
MD5:	6EBC597BCFD7267FE42045005BB796DB
SHA1:	7313C8B9D34E92E12CA8F614B8A5F2913DEDAE6F
SHA-256:	D82C1A849C963054E41704D49258EA634DE816F0B596DE1AE97FD9266DE3A5A3
SHA-512:	EA5E4586643C5A611840633410814A6C3593EC664955A5953794641E6255EA6A8D03D1087B6FEE7040824A03AF1562112D265A1DF6F21E517515083E781C2F86
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......*>..n_.Pn_.Pn_.P..nPd_.P..lP._.P..mPv_.P<7.Q~_.P<7.Q\|_.P<7.Qp_.Pg'.Pc_.Pn_.P._.P.6.Qk_.P.6.Qo_.P.6`Po_.Pn_.Po_.P.6.Qo_.PRichn_.P........................PE..L.....C]...........!.........J.......(.......0............................................@......................... ...H...h...x....................f...6..............T..............................@............0..\............................text............................... ..`.rdata..>m...0...n..................@..@.data...............................@....rsrc...............................@..@.reloc...............R..............@..B................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\CefView.zip Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	Zip archive data, at least v2.0 to extract
Category:	dropped
Size (bytes):	651641
Entropy (8bit):	7.998055134531002
Encrypted:	true
SSDEEP:	12288:FdSGsVxJKsOf9WCeQnpURUH9+otLl6sfRdBwaS9LjimkPp1Kb1:FIlVSdf9JBwUHZ10T9LuFgb1
MD5:	51E723B78C3559A3E4AB4C291F221D2B
SHA1:	FE86535BC14A49B9045C40D86B1511E5E3C3E7F8
SHA-256:	4493B8D2ECE172C617D8EB10B41E83B757588C68EED8C8FDC7D64EB53FFFFD45
SHA-512:	70583A92356DE492C7936D092211107A66B6C24C2A21309EA33E6D582430879DC912770631E3D786B8F0C0962BAF673804A80606D343C4625BE1E5E43EF39235
Malicious:	false
Preview:	PK..........RS..............CefView.exe.RI..Q...;.5j.H"D.w.a.i2....DOq.b..Q.#hFb.WpC\|<......<x.z...`.q.. q...:ft......p...?......W_...S..~.....+.).....1....sz(..hk.H...+....%..ruQ&....;.....4...R.w-....2.~.8.{....7....ec..%.N..J.A..f<A.v.f..{...l.+.1b~.s..5..}do.#..>6.....FCb.8...."..X.~,qc....M?~/.j.].;....k..{.!p..EY._}v2. A...c~.....&C}.z..v7..sq....v......7.\|....%..g.(,O.Dy.B..bg&.Y..!.n....qB/.o.7.#!.}c....D....o@.Lz...t.) .,........`A8.8S...R......!6.D...pt- 9...4...w6._._....Q..f..^.sY..qv....;....Y....Q?/. .......?y..4.7........;<<..vy.aW.]e.e............A.......9~.....STnP...S.M..9.9-.i.S".h...<.k.D...v..X....W.T...e.Y.....cT{`]s.....k..%u........T..Y.]...8R..........8.......!.\a..+Q.H..^.u.[fq.,.........qZ.u..0.nY....&.H.W...[W\.'.8N.Kh.....h..y....:;oqv...<....y......y..n.....Y......:y.l...(v...Iz....8....T.1......Uq,...-"...#.....+.[.*.X..^!....2.....D....J....[.R4F.t..bu..!C...$?I}(T.&iP/a..U.J....=..R.r.=.....pA

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\LICENSE.txt Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1662
Entropy (8bit):	5.176453607410173
Encrypted:	false
SSDEEP:	48:VcbD7BOCrYJ4rYJVwUCazPXy43HV713XEyMmZ3teTHv:VoDYCrYJ4rYJVwUCaDZ3Z13XtdUTP
MD5:	FD74AE632A39D7DC6B1A4E3BF81DEF7D
SHA1:	3655FF8A1A94273610FA4B9861453D52F0E5B21E
SHA-256:	072A6488C6B0763259987B586F2A6EA00E351AA3F5025090B4C14F04508720F2
SHA-512:	7C7E71411860AED1CB9750AA7D36000D6BA39191A3AF123EFFC6B159894281282EF466599AFC7B8459D189A124E63704C4FB9B3E9EF2888934D4E3AFFDA53F61
Malicious:	false
Preview:	// Copyright (c) 2008-2014 Marshall A. Greenblatt. Portions Copyright (c).// 2006-2009 Google Inc. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the name Chromium Embedded.// Framework nor the names of its contributors may be used to endorse.// or promote products derived from this software without specific prior.// written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLU

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\cef.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	2322682
Entropy (8bit):	5.626974295837984
Encrypted:	false
SSDEEP:	49152:m+jA+bQaVNVtw5uwB2UKO0GGxsbMFsEMtggb7xqk2UQfVGGG2pLTux:FDGGG2pLTux
MD5:	4D991B6DB94E823AAC8CEF6EB1959662
SHA1:	84856F2EBA08C5AD2DF6A946E0EB7519BC9FB6CC
SHA-256:	2E07DC909EFB9D9316E15452F168581966BDC7AD8FB607D3D3A339AAA8DC0266
SHA-512:	9842BF88339EAED96F81E82B1F1B15F6FE259449097E44F5D7738CD0AA79786DA5E0B777D84B9A6A1C08BF3D0EDFCF71C9CB396BD6C78145C5DFD171B8384F1F
Malicious:	false
Preview:	...........9...V^}...W^....X^.!..Y^.A..Z^.W..[^....\^....]^....^^g..._^u...`^y...a^....b^....c^....d^B...e^.!..f^9>..g^....h^k...i^....j^....k^5...l^.?..m^.B..n^.K..t^'W..u^.h..v^.}..w^t...x^....y^....z^....{^....lk.T..mk~Z..nk.`..ok.k..pk8n..qkwq..rk{...sk.....u.....ud;...u.?...u.J...u.Y...u.....u.....u.....u.....u.....uS....uU....u.....ux....uV....u.....uF....u.....u~....u9....u.5...u.E...u_H...uH[...u`h...u.x...u.....u....u?....u.....u.....u\|....vI....vT....vM....v.....vN....v.....vn....vJ....v*....vi....v.....v "...vS'...vf#...v.h...voj...v.w...v....v^....v.....v.....v.....v.....v.....v.....vm....v.....vW"...v.(...v.....v.....v.....v....v.....vg....v.....v.....vN....v.+...v.1...v.8...v{?...v.....v.....v._...vR`...v.d...vk....v.....v.....vj....v]....v.-...v.....v.....v.....v.D...vKM...vWh...vMi...v......p#.<!DOCTYPE html>..<html i18n-values="dir:textdirection;lang:language">..<head>.<meta charset="utf-8">.<meta name="google" value="notranslate">..<script>.function addRow(name, u

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\cef_100_percent.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	144747
Entropy (8bit):	7.724721097992957
Encrypted:	false
SSDEEP:	3072:Z7qrTpJroFYgI1epIMIZOgl95h4vjWX6pCa8+1pq0YAhstEtTUuS/po:Z74JrEXjIZJlHavSqT1YZYstATJ1
MD5:	AD2DDFC39C78EEDC734AF6506A579A8C
SHA1:	64E66D48AB3A98503948202DEC3FF2F35470CD5B
SHA-256:	58F7CE00D589AAAEBFAF3D0BADAC45924545E49F2D1531156F282EAC7ABB11B5
SHA-512:	7482B0C4C51BF4D3C3389A6CCF9C59307911BA793116BAC04077594D9B3D6F54A07E6187764201FBA8BB31EDE88B9FF65AB6867A2526E0F8E7B16136F7978367
Malicious:	false
Preview:	....c......a.....!.....O.............................. .....%.........p......2.....8.....=.....L.....O.....^.....a.....k....@u....yx....E......................w..........t..........b.................~.....<.............................A.....Q...........D.......................y...........s...........Q.................t...........n...........Z......................._.....D.....7........... .................s.....H...................................d.....9..................:....e;....,<.....<....X>.....?....>@.....@.....A.....B.....C....YD.....E.....E....>F.....F....MG.....G....rH....RI....0J....cK.....L.....N....qP....+Q.....Q.....R.....T...._U.....U....AV.....V....'W.....W.....W....X....{X.....Y.....Z.....[....._....,a....1c.....h....eh.....h.....i....ai.....j.....j.....k.....k.....l.....l.....m.....m....jn.....n....zo.....o.....p.....q....nr....#s.....s....pt....>u....,v.....v.....w.....x....Yy.....z.....z.....{....O\|....2}....J~.....~...................../.....$...............

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\cef_200_percent.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	233072
Entropy (8bit):	7.845701811235802
Encrypted:	false
SSDEEP:	6144:HJW/jBysmlC9BzMklLwozV1oJoRc5QXfHgs4jTlnG:pW/lDmYmqh1qggs4jTM
MD5:	66FA52C0523AE2EC18C37960E4EB3E6A
SHA1:	61AC3E8E84A7F84790A835998873431C4A086BD9
SHA-256:	25006F654D50E7E63F4557357437EFF5F6BDA3DC6E8BF86CF0BD5B02FDBF2A28
SHA-512:	E8CFDC0937982245E9D31D2D62ED39E7E3B86C9FEE41482597CB6C77CD54EA4EFF6E35362D81A32DBE54BAFFEFEECA31A4259CE9EA7C06E65904F3816DC65D58
Malicious:	false
Preview:	....c......a.................-.......................T"....}'....x,....F0....m4.....:.....?.....N.....R.....`.....c.....m.....w.....z................e.....}...................................Q.....e.....\.....&.............................g.......................[.................n...........$$.....$....=%.....%.....'....0)....4....i+.....+.....,....i-..........o0.....1....t3....,5.....5....T6....77.....8.....9....Q;.....<.....>....k?....3C.... G.....J....EL.....M.....O.........5.....................J...........~.................F.....[.....p...........M.................,.................[.................9.....T.................:.....=...........X.....!.......................v...........5.................k.....@.....-.................-.................Q.....Z.....[.................k.................R.......................R...................................y.....x .....!....$#....>$.....%.....&.....'.....(........./,..../......0.....0.....1.....4.....7....s:.....;.....<.....=...

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\cef_extensions.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	4282175
Entropy (8bit):	6.227966188441409
Encrypted:	false
SSDEEP:	49152:a297+EfG5u8mWexScqKTtUtxT6z/t/G1hoLwpbeuR2oSKolWZHqYNYzv2v3zjKNL:keuKZULT6k1hq
MD5:	6E727928EBEEEB5847C65C15C41802ED
SHA1:	D22BA6F8E3160484DD40FD5F4EB685182F404D88
SHA-256:	221A97DAF8263321CEB9CE244452FC97B865B561E399B23D42682FEF4785EA7F
SHA-512:	D39E98D8D2E9AFC84F8188E27E412079667DF2174DA14F93F451396EA1A27FD5ABF9FB8218FF02C94B56C60E7E5E59A5819D50D2463EF6F6AD71D29CF1F155A8
Malicious:	false
Preview:	..................1.....4.....7...........6....W\....R.....<.................i...........{......4....r4....-:....Cz....h.....".....e.....N.....)...................................N............:.....`.....i.....{....O\|....]~....:...................................... ...........I...........:...........Q.....f......... .....!.b..."..L..#.....$.....%.Q...&.....'.^2..(..M..)..v..*.....+.....,.....-.&.........5....6.....7.3...8....M.....N.....O.....P.....Q.....R.c=..S.y\..T.1...U....V.....W.....X.....Y.....Z.....[../..\..1..].^6..^..:.._.CC..`..D..a..E..b..F..c.DJ..d..M..e..P..f..Q..g.lW..h..Z..i..^..j..d..k.gj..l..n..m..u..n.....o.{...p.y...q....r.....s.t...t.8...u.....v.V...w.....x.....y.....z.....{.!...\|.o...}.u...~........ .....Z..........^.....F......0.....2.....9...._=.....E.....I......................l.....K[................?............................. ...........E......#.....,....%/.....4.....7.....:.....?.....B....aU.....[.....g.....j.....p....sw.........................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\cef_resources.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	34381
Entropy (8bit):	5.703073846966971
Encrypted:	false
SSDEEP:	768:xNwNU5pqbjUFhDoH8TOLgHqSnhZOLPcIyoejomm1396i0ebbF:xC4p6UvDocSnShgTduy3
MD5:	91DCD33EA77CF56FA39F3C3B0628141F
SHA1:	092DE5A70119BD7675B5C81DC2546D685696E281
SHA-256:	84478E9E8EDF2980B5D214AB6019885FF762DB832EE8A12E6216D4439BA56B63
SHA-512:	748B752FE801C2E254B16B824B1BD45C32AFA9BF9A9A8DCC62D4480E18350E5750E32A92F9DBE1359FACA330CF7F2242305F9E2A5164269F76308320F22DE427
Malicious:	false
Preview:	.........lk?...mk....nk....okF...pk....qk....rk.9..sk.V....M...<html>.<head>.<title>CEF remote debugging</title>.<style>.</style>..<script>.function onLoad() {. var tabs_list_request = new XMLHttpRequest();. tabs_list_request.open("GET", "/json/list?t=" + new Date().getTime(), true);. tabs_list_request.onreadystatechange = onReady;. tabs_list_request.send();.}..function onReady() {. if(this.readyState == 4 && this.status == 200) {. if(this.response != null). var responseJSON = JSON.parse(this.response);. for (var i = 0; i < responseJSON.length; ++i). appendItem(responseJSON[i]);. }.}..function appendItem(item_object) {. var frontend_ref;. if (item_object.devtoolsFrontendUrl) {. frontend_ref = document.createElement("a");. frontend_ref.href = item_object.devtoolsFrontendUrl;. frontend_ref.title = item_object.title;. } else {. frontend_ref = document.createElement("div");. frontend_ref.title = "The tab already has active debugging session";. }

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_43.dll Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2114408
Entropy (8bit):	6.464490838050645
Encrypted:	false
SSDEEP:	49152:vpX9JVeE9HP6Zpy9KyhMI50Du8LljslNsHSHFUq9OiapbbO5Ak6:73P9HP6Zpy9KyhMI50Du8LljslNsyHiX
MD5:	6E053D67B6073261F96F2C547D776676
SHA1:	5FE7337ABB09C1BE286C14EC81A7755522197AEA
SHA-256:	EA463D97EB088CAFC5CD7574682BE42EFC791C46428B8DB15C62DE09649CCE32
SHA-512:	EDCEC5D29B57FD9112C9CD6B30EB01CD414DD47822DBCF0DADFF5B0DEABF6533FB93B1BD025B04D9DFB8D7F982D497008115F288947B1473616C759B6AAEE936
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......\.h...;...;...;..];...;...;...;.._;...;..h;0..;..i;'..;..X;...;..l;D..;?M.;...;..Y;...;..^;...;Rich...;........PE..L...92.K...........!.........d...............................................p .....tl ...@.........................@.......@...P..................... .h7...........................................i..@............................................text...S........................... ..`.data....~.......B..................@....rsrc................(..............@..@.reloc..D............,..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_47.dll Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3707752
Entropy (8bit):	6.560134391465009
Encrypted:	false
SSDEEP:	49152:6XxztRVg63VCssRWQnP73DPFeYjLpZyLpsRug4TJz07+GM:6BzrVgoVCbLxTpkpsRugYiM
MD5:	BF435F59C5A079919AE75EB3964D796F
SHA1:	175BE2807DA8AC9CBCDAD7E3B22C519353C308A7
SHA-256:	6D13CD7546E4C99799CD030DCA8D13F0D1D350F084A53E92BD885821B4AB8F41
SHA-512:	94C93BDF5FA8332A19774C6D6A5D4949DD8D92330D6C88F646A50199E1FF1FD57FE7CEE08DE60769AA4D0EFEB423A59C9D9385949BB490C2AF0193AF90C4102F
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................Ds......Ds..........=...Ds......Ds......Ds......Ds..\|...Ds......Ds......Rich....................PE..L...X.NV...........!......5..........6+.......6...............................9.......9...@A........................p.6.u.....7.d.... 7.H............\8.h7...07.........8...........................8...@.............7..............................text.....5.......5................. ..`.data.........6..d....6.............@....idata........7......d6.............@..@.rsrc...H.... 7......v6.............@..@.reloc.......07......\|6.............@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\icudtl.dat Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	lif file
Category:	dropped
Size (bytes):	10207936
Entropy (8bit):	6.147523774437582
Encrypted:	false
SSDEEP:	196608:L+7mOUgAjk3MVMP7mxl2b+2WYZjU15obkTQ89kxgc3bbHo4QY7iUT0ep:evWjk3mMP7mxl2b+2WYZjU15obkTQ89a
MD5:	D03AD9A1189D190119209072D048E428
SHA1:	AA954098E3AE4C00F67BACE45B39A7B4A8242C6A
SHA-256:	2857FBE46D007307B1E204C6EB1B7E4988973B958EC8EDB07445988F332C1AB5
SHA-512:	4F73A2C0CEEF525E5947DC6EEB7608DB40E535EEADB37D83842BDD638EB4D9114F3654D8094C0B72C66AE4BB0214B0947CD4FE2B56426F778C07F3CAC5FAEA21
Malicious:	false
Preview:	...'........CmnD........ Copyright (C) 2014, International Business Machines Corporation and others. All Rights Reserved. ...............\.......^......._..................$... ...4.......E.......U...`...l..../..\|....Z.......\......p>................&...... &......!&.'....(&.A....)&.X....1&.o...p2&.....P7&..... :&.....0.'......u(......C.....p",.%....+,.C...@,,.\...`.,.s..../,.......,.....P/-......./.....0\/.......0.......0......A0....`C0.@....g0.U...0.0.j.....0......51..... Z1......1.....@ 2......r2.....Pr2......r2......t2.3...Pu2.K....u2.`...@.2.v.....2.......2.......3...... 3.......3.......3.....`.3.....P.3./.....3.D...` 4.\.... 4.q....:4.......4.......4.......4.....P.4.......4.......4.......4.......4.7...@.4.L...P.6.a.....7.v.....;.....@8;......\;......x;......x;......;.....@.;.. ..0.<.! ....<.6 ..pn<.K ...n<.c ..0o<.x ...<.. ....<.. ....<.. ...<.. ....=.. ..p0=..!...0=..!..@1=.2!...1=.J!.. 2=._!.. .=.t!...=..!....=..!....=..!..@.=..!....=..!....=.."..0.=.,"...">.I"..@#>.f"..

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libEGL.dll Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	103424
Entropy (8bit):	6.645987301672349
Encrypted:	false
SSDEEP:	1536:M2uK+kq7jnqf7l2UYMUkTSq+/0pFCQB4uPTLZVsWKJcd59/07LsunLRQE/+188FO:M2pl2UYd6+/8vP3L59c3suLRZ/+y8FO
MD5:	222FAE9BB84A4EF4A5198BDA24C2E4B2
SHA1:	99AA8FEC03EFB23E622B55F7271F99888AEF63F4
SHA-256:	A060999854C47E2D481DC526C7ECB3694CB764C4130A26B19BE06313AC438C38
SHA-512:	5A29F35AE9FD084FE68EBBF662DA9823C043E1AC9B48B1269D5A21CBA41A382510B8B38BA52C5FF6F00358B8AD00169396F958F636E16DFB8298DF561C177C18
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........[.C.:\|..:\|..:\|..^...:\|..^y..:\|..^x..:\|..d...:\|..dy..:\|..dx..:\|..^}..:\|.0d}..:\|..:}..:\|.0dy..:\|.0d\|..:\|.0d...:\|..:...:\|.0d~..:\|.Rich.:\|.................PE..L.....l\.........."!.................................................................8....@..........................4..0....:..<....................\..h7.............8..............................@............................................text............................... ..`.rdata..pi.......j..................@..@.data........P.......8..............@....gfids.......p.......@..............@..@.rsrc................B..............@..@.reloc...............J..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libGLESv2.dll Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1655296
Entropy (8bit):	6.7830233529490345
Encrypted:	false
SSDEEP:	24576:83G/W8s2nTwA0yFQ+d/v5990lQI0FvE0F5eNCL0/UeZRQ67G:Q32ZFZd/vj+lQrsS5wCLSS67G
MD5:	887811E68328733DA8129F171707F8A4
SHA1:	C3386E67582046967202E5DB86A31691BDCF145C
SHA-256:	EB27E13405F6B89BEF0E3D9970719849B82FA849197B7639C52E14CD0B584E01
SHA-512:	483E0F439696D6B50FF620C1EDFE3548CA6DA720C16AB84D916FAA11F7B61D8D758D370CD9AB16D04915FF491863581168DB0F7DAE24596217521BF57388CD2A
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........=..Q\x.Q\x.Q\x.>8{.`\x.>8}..\x.>8\|.x\x.j.{.K\x.j.}.c\x.j.\|.q\x.>8y.X\x.Q\y.)\x...}..\x...x.P\x.....P\x.Q\.P\x...z.P\x.RichQ\x.................PE..L.....l\.........."!.....T..........-........p............................................@.........................`....[......d.......................h7..........P...8..............................@............p...............................text...WR.......T.................. ..`.rdata.......p.......X..............@..@.data...tY...0...*..................@....gfids..p............:..............@..@.tls.................>..............@....rsrc................@..............@..@.reloc...............H..............@..B........................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libcef.dll Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	49763840
Entropy (8bit):	6.990951437117866
Encrypted:	false
SSDEEP:	786432:6Gef2UiBDMxVI07lf0gtuPaa94GqEdxzVxNeZrp6PajHylGVQaiSNlyIvsln4rhl:AkBX07lf0gtuia94GqGxBxodgPajyGVr
MD5:	FE5219BE2DDA0FB7352BCEE497556E75
SHA1:	FE9EE85DF3932826FAC6A0AC6204C13F5860642A
SHA-256:	2ADDAACCEC335C662CAFDB5B36735C108E235FB03D2597EDBF85C09B52AAFF04
SHA-512:	6ED683A16C39382B2FA8F6A7AB8425D8093C4C9E972CD8E98C2F174A33F77A06E4F7820990E8FDFB92FDD461E6025C9766A32D1351095D877F4230D9C7196144
Malicious:	false
Preview:	MZ......................@...................................8...........!..L.!This program cannot be run in DOS mode....$.........^k..08..08..08..39..08B].8..08.39..08.49..08.59..08..08..08v.49..08v.99{.08..79..08..69..08..59<.08..49..08..19..08..18#.08v.59..08v.09..08v..8..08...8..08v.29..08Rich..08........PE..L...#.l\.........."!......K..........7........K...........................................@.............................................................h7...P...d...?..8...................(@......P...@.............K..............................text.....K.......K................. ..`.rdata........K.......K.............@..@.data........P.......0..............@....gfids.......0......................@..@.tls.........@......................@..._RDATA..0....P......................@..@.rodata.P....`......................@..@.rsrc...............................@..@.reloc...d...P...f..................@..B................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\am.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	67979
Entropy (8bit):	4.928324470758982
Encrypted:	false
SSDEEP:	1536:6gwdwi4Y8YShhyO5nVZOWBARfJ7wmmrYfQrgE43/AXNX2dLaYKJn/kUZZbCKeQcU:6gji4Y8YShhyO5nVJBARfJ7wmmrYfQrV
MD5:	C8E9074FAA1D9428089FE39A6340C43D
SHA1:	3D345AA7462EF82E000057E49DFE7D48F6F049EB
SHA-256:	3ABF4B49EC48EA46D97C7DEF4C4DBCE5D24D452710E8BD113CD7CFCF6280F95E
SHA-512:	F32201FFA1CE3B1DB75193C4F737FF7973F6E449C7482B3871B8AF612B2D25453FEA0000A7B47026E44C91F627E9F56CE5278DA14C34467F77F005653CC95889
Malicious:	false
Preview:	.........(#9...)#:...#A...+#O...,#R...-#U....#s.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)$....)3....)>....)M....)R....)X....)a....)k....)q....)~....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........G..............:..............?....+.....+.....+,....+i....+.....+:....+.....+,....+.....+. ...+} ...+. ...+Z!...+.!...+."...+ "...+,"...+4"...+U"...+k"...+\|"...+."...+."...+."...+."...+."...+.#...+.#...+.#...+%#.. +1#..!+:#.."+V#..#+s#..$+.#..%+.#..&+.#..'+.#..(+.#..)+.#..*+.$..++.$..,+4$..-+N$...+[$../+e$..0+l$..1+v$..2+.$..3+.$..4+.$..5+.$..6+.$..7+ %..8+@%..9+]%..:+v%..;+.%..<+.%..=+.%..>+.&..?+&&..@+_&..A+}&..B+.&..C+.&..D+1'..E+^'..F+.'..G+.'..H+.'..I+.'..J+.'..K+.'..L+.'..M+.'..N+.'..O+.'..P+.'..Q+.'..R+.(..S+.(..T+.(..U+((..V+;(..W+Q(..X+](..Y+j(..Z+l(..[+o(..\+x(..]+~(..^+.(.._+.(..`+.(..a+.(..b+.)..c+.)..d+.)..e+#)..f+-)..g+9)..h+?)..i+H)..j+Q)..k+Z)..l+c)..m+l)..n+v)..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ar.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	67998
Entropy (8bit):	4.988919258802474
Encrypted:	false
SSDEEP:	1536:FxYq7fOD2NWAPPtivQoFKyZhAIptPQIBXiHSIccZo4s6qyJ+8N3l8O+oo7:FxPXivQodZhAFSIccZqyBY
MD5:	3E0F34E58AF836DE6B1FFA787E0653B2
SHA1:	BDD143EB4ABD1ADF116FF7F6FB15381157CA0630
SHA-256:	1804CAB9FA42D7735689E9CDD7A17ECC1660AA70FE0FFD4EB634F5C3B5A1C9BF
SHA-512:	875138895E23944B5A67C06F4519114067ECF2B0EF7D8365171D542F7DF66ED8F9AC9EF2E0A20F74F3446BC7CF11C7D8C7C6E6840C3E9339F73AA78084A386D6
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#m.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)-....)8....)G....)L....)R....)[....)e....)k....)x....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....).............../.........g..............S....+.....+.....++ ...+. ...+U!...+3"...+.#...+.#...+.$...+.%...+k&...+3'...+.'...+.(...+h)...+r)...+x)...+.)...+.)...+.)...+.)...+.)...+....+....+"...+7...+R...+\...+d...+n.. +x..!+..."+...#+...$+...%+...&+...'+...(+.+..)+ +..*+B+..++d+..,+.+..-+.+...+.+../+.+..0+.+..1+.+..2+.+..3+.+..4+.+..5+.+..6+",..7+E,..8+_,..9+{,..:+.,..;+.,..<+.,..=+.,..>+.-..?+B-..@+.-..A+.-..B+.-..C+....D+b...E+....F+....G+....H+....I+./..J+./..K+./..L+./..M+-/..N+>/..O+[/..P+u/..Q+./..R+./..S+./..T+.0..U++0..V+L0..W+n0..X+s0..Y+}0..Z+.0..[+.0..\+.0..]+.0..^+.0.._+.0..`+.0..a+/1..b+H1..c+O1..d+U1..e+]1..f+y1..g+.1..h+.1..i+.1..j+.1..k+.1..l+.1..m+.1..n+.2..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\bg.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	75625
Entropy (8bit):	4.7469052795391375
Encrypted:	false
SSDEEP:	1536:xyebb4grW76g2rzMkGSlEdXneom1Ktj8uADDViwfj3a+mqtIaU:Ye/VrW76g2rzMkG1dXneom1Ktj8uADDW
MD5:	5DB5F8E5B0B52076AA0462D382C15C4D
SHA1:	BC240E4B1C1697B86FCF916947A48393A3A1A6B1
SHA-256:	4FBA49DCA07E767405AB42A07B9273554A9DED4FF48ED0AF64C5E11296317610
SHA-512:	93E9E56AE2F25406F52CD8C3271B54CF32095EF080B746695824FCB658B493337F4E5EF6F3D450EB36F13A79D4C546C9BE00F6B4EB1D09F89C9BD793D4304D4D
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..............g...................K.........+.....+.....+.....+=....+o....+.....+.....+Z....+.....+.....+>....+.....+.....+.....+G....+O....+Y....+g....+.....+.....+.....+.....+. ...+1 ...+O ...+s ...+. ...+. ...+. ...+. .. +. ..!+. .."+.!..#+&!..$+5!..%+F!..&+U!..'+d!..(+.!..)+.!..+.!..++.!..,+."..-+$"...+1"../+D"..0+U"..1+h"..2+{"..3+."..4+."..5+."..6+.#..7+>#..8+r#..9+.#..:+.#..;+.#..<+;$..=+`$..>+.$..?+.$..@+I%..A+.%..B+.%..C+!&..D+.&..E+.&..F+.'..G+6'..H+R'..I+T'..J+^'..K+p'..L+s'..M+.'..N+.'..O+.'..P+.'..Q+.'..R+.'..S+.'..T+.'..U+.'..V+.(..W+.(..X+#(..Y+3(..Z+5(..[+8(..\+A(..]+O(..^+[(.._+.(..`+.(..a+.(..b+.)..c+.)..d+.)..e+')..f+3)..g+D)..h+I)..i+O)..j+V)..k+])..l+d)..m+k)..n+w)..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\bn.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	100062
Entropy (8bit):	4.334214135800687
Encrypted:	false
SSDEEP:	768:3Wcv/ZImKtO2AUIXYReB00WxIenYW+K/tsg1wVjk+1NbTr19s1VBgSlgp75vedYB:3WJsBzTr1fZ5zcEu6
MD5:	1442225A0A7FD12CA7ED34F6ED37FF22
SHA1:	80E86CE712326D37A30EEF8725C6A07A26EAE577
SHA-256:	5328BFD92B9C1AC61CA43591574118D970AE7B158ABBD9D331668E94583E5B14
SHA-512:	CEF1294CBC46EDC4D13F3EA4E2639BEF62795393222BBC6CED75D7FFD4FBAC78CB304FDEA10484BFBF75DDFC64BF89BF66946F4F9995B981AC9BEF4B350E0834
Malicious:	false
Preview:	.........(#9...)#:...#@...+#F...,#I...-#L....#R.../#X...0#[....)_....)n....)y....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)"....)'....)-....)6....)@....)F....)S....)[....)a....)n....)u... )....!)....")....#)....$)....%)....&)....')....()....))....)..........B..............k.........:.........+.....+\....+.....+.....+V....+.....+v....+.....+r ...+. ...+W!...+.!...+."...+.#...+.#...+.#...+.#...+.#...+.#...+.$...+.$...+.$...+.$...+.$...+.%...+.%...+4%...+C%...+R%...+^%.. +t%..!+.%.."+.%..#+.%..$+.&..%+5&..&+D&..'+P&..(+o&..)+.&..+.&..++.'..,+/'..-+^'...+.'../+.'..0+.'..1+.'..2+.'..3+.(..4+A(..5+p(..6+.(..7+.)..8+S)..9+.)..:+.)..;+.)..<+8..=+Z..>+...?+...@+x+..A+.+..B+%,..C+g,..D+.,..E+1-..F+.-..G+.-..H+.-..I+.-..J+.-..K+....L+....M+....N+....O+'...P+...Q+-...R+1...S+6...T+@...U+K...V+S...W+]...X+b...Y+w...Z+y...[+\|...\+....]+....^+...._+....`+&/..a+m/..b+./..c+./..d+./..e+./..f+./..g+./..h+./..i+./..j+./..k+./..l+./..m+./..n+./..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ca.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	49278
Entropy (8bit):	5.287029435704102
Encrypted:	false
SSDEEP:	1536:THxARU+AKn1h911Rx/TlRKgq5qmHg0uec38CtY+H1LjclR4+LXZY:iOQh91/x/5Mgq5qmHTueO8iH1LjW4+Lq
MD5:	63F9363AA965E0B6835B1B84C48B1AE8
SHA1:	8DCCB0F28805885A34ABB183A3C74E8D9F017774
SHA-256:	132F24640EF6E7BEB6BD5E7A8E556ADC2C8B209576D9A92B4D2CFFAF162958EF
SHA-512:	A81DB236F338CF33E58F102E2BB1AA2C7E625038F251DAB3081076CA3AA7A1671D857332DA397C780A05C1AEF2C63BA5FF22F8A5311B2C5DAE2B2FA5C1A8B009
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....).......... ....L....x...................)....+Q....+.....+.....+.....+.....++....+h....+.....+.....+.....+L....+u....+.....+.....+.....+.....+.....+.....+!....+1....+@....+b....+y....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+....'+ ...(+'...)+....*+H...++`...,+s...-+.....+..../+....0+....1+....2+....3+....4+....5+....6+. ..7+9 ..8+X ..9+y ..:+. ..;+. ..<+. ..=+. ..>+. ..?+.!..@+@!..A+Y!..B+.!..C+.!..D+.!..E+.!..F+,"..G+9"..H+?"..I+F"..J+P"..K+U"..L+X"..M+`"..N+c"..O+r"..P+v"..Q+x"..R+."..S+."..T+."..U+."..V+."..W+."..X+."..Y+."..Z+."..[+."..\+."..]+."..^+.".._+."..`+(#..a+J#..b+c#..c+j#..d+p#..e+v#..f+~#..g+.#..h+.#..i+.#..j+.#..k+.#..l+.#..m+.#..n+.#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\cs.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	49160
Entropy (8bit):	5.70308885471918
Encrypted:	false
SSDEEP:	768:szl8FnAQG35P5Iq8Qb6ySisHKYjyAfJYhEyN12o9ZuxafeYhPLs9qVqriVqTxuI7:seFg8Q3s9RYhN119Hh8AsRx
MD5:	4D08959D93C5F8F665EF2824856F5E64
SHA1:	56D19A6DA933186467ADFAD896D58E78A4C12E65
SHA-256:	220AA7EE2524FF663FF866A589A99BDCD8238FE2F5F1676896E881ED713A4ECE
SHA-512:	AFE2624A566BE5DC22B47EDF25D22E5286120B6F6E4856584AE5512B43C83491C41BAB82CE0DE318A84AE1D828B8C9EF60C131D7C35769E3162028A2C6751A0C
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........5...................R..............+5....+.....+.....+.....+S....+.....+.....+x....+.....+I....+.....+.....+I ...+. ...+. ...+.!...+.!...+.!...+2!...+B!...+Q!...+q!...+.!...+.!...+.!...+.!...+.!...+.!...+.!...+.!.. +.!..!+.!.."+.!..#+.!..$+."..%+."..&+."..'+$"..(+3"..)+D"..*+P"..++]"..,+i"..-+t"...+z"../+."..0+."..1+."..2+."..3+."..4+."..5+."..6+."..7+."..8+.#..9+.#..:+$#..;+5#..<+X#..=+j#..>+.#..?+.#..@+.#..A+.#..B+.$..C+/$..D+`$..E+{$..F+.$..G+.$..H+.$..I+.$..J+.$..K+.$..L+.$..M+.$..N+.$..O+.%..P+.%..Q+.%..R+&%..S+4%..T+I%..U+_%..V+u%..W+.%..X+.%..Y+.%..Z+.%..[+.%..\+.%..]+.%..^+.%.._+.%..`+.%..a+.&..b+.&..c+"&..d+(&..e+0&..f+=&..g+F&..h+J&..i+O&..j+T&..k+Y&..l+^&..m+c&..n+i&..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\da.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	44996
Entropy (8bit):	5.292668439694716
Encrypted:	false
SSDEEP:	768:+hW1usun9x6J7siMZ3XCX+K6ek4w7Oybg+y6TWNK5BomXbuDNveGGgEAZOnU4:+U1ux9xQuCX+zTLbXy6omCUAj4
MD5:	B99E86C8F7B181322ECE052E1A57A2BE
SHA1:	6CBC6A960F9E071F23AEE5D75F362CA5092924C6
SHA-256:	98214079C6D17EB7D878E23CFB3A87B6191D40BACCFA4895BCCF13324C1C29F4
SHA-512:	B03841B14868BBC1D9A65E23F86C3801EC8DC118D13EFB267239F795B2ADDDBDD94907FDEC7B558EC2767FAC83EE82417CD283418A0756F9A55821479D9C888B
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........1....o...................g.........+.....+.....+L....+\|....+.....+.....+Z....+.....+.....+G....+.....+.....+3....+.....+.....+.....+.....+.....+.....+. ...+. ...+1 ...+< ...+C ...+K ...+U ...+_ ...+e ...+i ...+l .. +s ..!+\| .."+. ..#+. ..$+. ..%+. ..&+. ..'+. ..(+. ..)+. ..*+. ..++. ..,+. ..-+. ...+. ../+. ..0+.!..1+.!..2+.!..3+.!..4+"!..5+-!..6+K!..7+h!..8+.!..9+.!..:+.!..;+.!..<+.!..=+.!..>+."..?+#"..@+M"..A+h"..B+."..C+."..D+."..E+.#..F+A#..G+H#..H+U#..I+W#..J+_#..K+b#..L+e#..M+i#..N+l#..O+q#..P+t#..Q+w#..R+{#..S+.#..T+.#..U+.#..V+.#..W+.#..X+.#..Y+.#..Z+.#..[+.#..\+.#..]+.#..^+.#.._+.#..`+.#..a+.$..b+.$..c+.$..d+ $..e+($..f+3$..g+?$..h+C$..i+H$..j+M$..k+R$..l+W$..m+\$..n+e$..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\de.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	48672
Entropy (8bit):	5.329461064013263
Encrypted:	false
SSDEEP:	768:JwDgump1xwsJXusqGvl8TR16f49VX658lK9iXryiSolAsjvCs8RElXZxUM2i5G36:J4guQosF9L8TR1a5R9iXry5YX4Mx8XL4
MD5:	6A2B3005805A7500570E442251EFEBE8
SHA1:	DA2127683F6FB31D5E065DB13CE39AD4651C5DFB
SHA-256:	D84DDDA26F4F6122F05C2BF06924097D374FB6F339693A0F5F0A30A52B2FCE8F
SHA-512:	D30A8E10E9BC5A8A3FBCEDFA8D16CBFB8DE9C449CB48C81F2696E399BBEEB5B55529BF12B297C1248BE4432669C1D3C7D4219F8F8C57C50236547FF7CF79C019
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........&....V........................E....+q....+.....+.....+.....++....+b....+.....+.....+.....+M....+.....+.....+.....+.....+C....+H....+O....+U....+h....+t....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+...#+;...$+F...%+R...&+V...'+[...(+d...)+n...+....++....,+....-+.....+..../+....0+....1+....2+....3+. ..4+. ..5+7 ..6+T ..7+o ..8+. ..9+. ..:+. ..;+. ..<+. ..=+. ..>+. ..?+.!..@+1!..A+E!..B+m!..C+}!..D+.!..E+.!..F+.!..G+.!..H+.!..I+.!..J+.!..K+.!..L+.!..M+."..N+."..O+."..P+."..Q+."..R+."..S+ "..T+*"..U+5"..V+C"..W+P"..X+U"..Y+`"..Z+b"..[+e"..\+o"..]+t"..^+\|".._+."..`+."..a+."..b+."..c+."..d+."..e+."..f+.#..g+.#..h+.#..i+.#..j+.#..k+.#..l+"#..m+'#..n+0#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\el.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	84473
Entropy (8bit):	4.80600665541308
Encrypted:	false
SSDEEP:	1536:CEI+xVsjrqyKKDrzUlXIgTlv0pod/Ayc6jKpKxGh5LSdKnwrhdGN:CXKGzUlX9lv0pod/AycKKpuE9SdKnwrC
MD5:	9CA20DA58E84E6F426DEAF7821530EC6
SHA1:	8D3B3EE5A2A3EB977AC6E88F4D3A448DE89A87A6
SHA-256:	9A7BBBA149721C583A42A74EC6A6579EED9999A8EA4B25D37315C5CC5A14B0BD
SHA-512:	F26A7B6CEEFB96D37AD0818A22A35DF5717331CB74835E7010CE8E1430A49C2A2467B7078B75068B7C8A422D40E89CE17E03C2DE82086FE66E3CC7349B3B39B0
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........0...................<..............+.....+ ....+M....+.....+.....+:....+.....+.....+a....+.....+.....+{....+.....+. ...+q ...+} ...+. ...+. ...+. ...+. ...+. ...+!!...+>!...+a!...+~!...+.!...+.!...+.!...+.!...+.!.. +."..!+.".."+-"..#+@"..$+Y"..%+l"..&+x"..'+."..(+."..)+."..+."..++."..,+.#..-+.#...+/#../+>#..0+Q#..1+f#..2+w#..3+.#..4+.#..5+.#..6+.$..7+[$..8+.$..9+.$..:+.$..;+.%..<+j%..=+.%..>+.%..?+3&..@+.&..A+.&..B+m'..C+.'..D+.(..E+P(..F+.(..G+.(..H+.(..I+.)..J+.)..K+.)..L+")..M+0)..N+3)..O+L)..P+O)..Q+R)..R+V)..S+[)..T+v)..U+.)..V+.)..W+.)..X+.)..Y+.)..Z+.)..[+.)..\+.)..]+.)..^+..._+4..`+h..a+...b+...c+...d+...e+...f+...g+...h+...i+.+..j+.+..k+.+..l+.+..m+.+..n+.+..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\en-GB.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	40510
Entropy (8bit):	5.329180273047909
Encrypted:	false
SSDEEP:	768:9YKjUTS5rq2bJg2fmgglS7d0+VEIFEpJQFAxSMW80Blnz1SI/QBoRYSc3:LjU2pfmgglS7dZEpqABUBvS2eoRYS4
MD5:	3A0A0F6B73F7F7E8A021EE435F494139
SHA1:	D63B91C0923872B2BA2CABF5BD8B00B6437B3B3F
SHA-256:	0150CCA64343E7C4E29DDBB1E266A77FDED9DBE42A09D4ADEEDB1DCA61F07FA8
SHA-512:	5B895F8D1DA1C5C1F7A6C29B06D8816FAFDB518140D648B0A7B0747CD0349DA25148999EED37DA1BAD44B1D48BE92110AC8B35E8BC21B5B50C4DE9D535DB5766
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........%....S........................=....+e....+.....+.....+.....+.....+E....+}....+.....+.....+.....+H....+x....+.....+.....+.....+.....+.....+.....++....+4....+A....+X....+e....+n....+w....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+....'+....(+....)+....+....++....,+....-+.....+..../+....0+$...1+...2+1...3+<...4+K...5+Y...6+t...7+....8+....9+....:+....;+....<+....=+....>+. ..?+. ..@+: ..A+I ..B+m ..C+. ..D+. ..E+. ..F+. ..G+. ..H+. ..I+. ..J+.!..K+.!..L+.!..M+.!..N+.!..O+.!..P+.!..Q+.!..R+.!..S+#!..T+-!..U+8!..V+@!..W+J!..X+O!..Y+T!..Z+V!..[+Y!..\+b!..]+g!..^+m!.._+}!..`+.!..a+.!..b+.!..c+.!..d+.!..e+.!..f+.!..g+.!..h+.!..i+.!..j+.!..k+.!..l+.!..m+.!..n+.!..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\en-US.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	40614
Entropy (8bit):	5.311820890684837
Encrypted:	false
SSDEEP:	768:obq1iD/eqv9gNfDggl+dON+VcCwEpgmA1EmW+BlnkVSI/SBURkSNl:obq1iIfDggl+dO/EpVAppBAS2MURkSD
MD5:	EA20F7EF299CA680A72E9163C8ED0093
SHA1:	F9EF3B9CC76F34F83142E1FCB67BF5C3F9031953
SHA-256:	A76263A6B5C969A0B0A2CC90BDB86D35F3ADADDEF41884FA84832C24B0940192
SHA-512:	C0D217475E81A629ABCE4CC3557F1AE3422EEFCB27C71A36CDBA607036977492EB5C28F31F3B9E9724FBDA78661D29F27DB816D18B86EFC845B015298A6FE53D
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........)....[...................'....Y....+.....+.....+.....+.....+C....+y....+.....+.....+'....+]....+.....+.....+.....+,....+]....+b....+k....+r....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+)...&+,...'+2...(+9...)+B...+M...++Y...,+b...-+m....+r.../+v...0+{...1+....2+....3+....4+....5+....6+....7+....8+....9+. ..:+. ..;+. ..<+7 ..=+A ..>+` ..?+n ..@+. ..A+. ..B+. ..C+. ..D+.!..E+.!..F+F!..G+M!..H+Q!..I+S!..J+Y!..K+^!..L+a!..M+d!..N+g!..O+k!..P+n!..Q+q!..R+u!..S+z!..T+.!..U+.!..V+.!..W+.!..X+.!..Y+.!..Z+.!..[+.!..\+.!..]+.!..^+.!.._+.!..`+.!..a+.!..b+."..c+."..d+."..e+."..f+!"..g+"..h+."..i+3"..j+8"..k+="..l+B"..m+G"..n+M"..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\es-419.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	47850
Entropy (8bit):	5.247501831724061
Encrypted:	false
SSDEEP:	768:hbRytj/884TLyoKmP2sbBgHTMNh6S/z28/RfArKgBCAIQUuY8BKRJFX11V0:+jDwLyePzm06S7DdAUuY8BKRJFXvV0
MD5:	4E39E879E5A53DF3D78DB05328BFE87E
SHA1:	80B1ABC10C0917A99E1F76F946A8F39471DB83AA
SHA-256:	F56A343F0AA70ACE3BD982D8DBDDD59CD297CFFD2BA2CF7A49E664A752C70606
SHA-512:	FE865F4F4CBABCCD115AD926C2AFEC84FA8ABF34DC4E32D17D4B593A5A29F436F5EBD2F7D461905F76620DCF4E7E5841F7B47A33A08E74F367585DBB034889F0
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....).........."....T........................E....+o....+.....+.....+.....+!....+U....+.....+.....+.....+F....+~....+.....+.....+.....+O....+R....+V....+^....+u....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.... +$...!+-..."+6...#+M...$+\...%+i...&+q...'+y...(+....)+....*+....++....,+....-+.....+. ../+. ..0+. ..1+. ..2+. ..3+. ..4+? ..5+Q ..6+y ..7+. ..8+. ..9+. ..:+. ..;+. ..<+.!..=+2!..>+_!..?+.!..@+.!..A+.!..B+."..C+2"..D+n"..E+."..F+."..G+."..H+."..I+."..J+."..K+."..L+."..M+."..N+."..O+.#..P+.#..Q+.#..R+.#..S+.#..T+-#..U+;#..V+H#..W+T#..X+Y#..Y+e#..Z+g#..[+j#..\+\|#..]+.#..^+.#.._+.#..`+.#..a+.#..b+.#..c+.$..d+.$..e+.$..f+.$..g+($..h+,$..i+1$..j+6$..k+;$..l+@$..m+E$..n+K$..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\es.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	49520
Entropy (8bit):	5.204767746678177
Encrypted:	false
SSDEEP:	768:isK3WDRLeNearNkrBvcqflXDwS5pN8IBCEfIQgRCPJRvX6wTTgsgWJ49zdgK3:4hFroB0qtwSrWlhchRvXPTEsgq49zKK3
MD5:	3A7434E0EDE68CD976502CF490C6B8E2
SHA1:	0590CEE58D9E6B435B8B26E5F52BC919AC9F4F34
SHA-256:	D2DF093E94AEB5ABB31F1482BEBCD1302AE699B98271072386EBBC803496DCD2
SHA-512:	C8F21D4BA907F68DC68CDD458A0C150DF0CFEC4337646D58365BE1626569CFEA8D27CEF8BBEF49D77AEB034B4DF94123F894CF2F3CA5876D33F8F861A5DEC447
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....).......... ....P........................7....+_....+.....+.....+.....+.....+9....+v....+.....+.....+.....+N....+{....+.....+.....+.....+.....+.....+.....+5....+G....+W....+{....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+)...&+1...'+9...(+K...)+Z...*+v...++....,+....-+.....+..../+....0+....1+....2+....3+....4+....5+. ..6+6 ..7+Z ..8+s ..9+. ..:+. ..;+. ..<+. ..=+. ..>+(!..?+H!..@+.!..A+.!..B+.!..C+.!..D+-"..E+N"..F+."..G+."..H+."..I+."..J+."..K+."..L+."..M+."..N+."..O+."..P+."..Q+."..R+."..S+."..T+."..U+.#..V+.#..W+ #..X+%#..Y+,#..Z+.#..[+1#..\+C#..]+G#..^+N#.._+h#..`+.#..a+.#..b+.#..c+.#..d+.#..e+.#..f+.#..g+.#..h+.#..i+.#..j+.#..k+.#..l+.$..m+.$..n+.$..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\et.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	42620
Entropy (8bit):	5.372101421577419
Encrypted:	false
SSDEEP:	768:+Cqf8JNsulBv3Lr5igUAMAOfB0ZUJo+RF7vg63Uoy1psCR:2WOB0ZUJHBlFCR
MD5:	EFDE79DD01A9A54343213E92E0F0FD17
SHA1:	5E7E14AA6BE07871797A5DD6D322717DF7E1DD5E
SHA-256:	556BEF8CE02FDB594DAF3BECAFAA474EF0DC12B127289E63B3D8D8F34325802B
SHA-512:	AED31BC8AA639C246ED0CFE4495EABBD1D3F214CDCEC52F51A8E26994554CC6E994F6F82DBB8DA57D792F118638F83E8D4D1BD3C20E8C1286B31AE4AA0EFC981
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....).......... ....O....~...................4....+\....+.....+.....+.....+.....+I....+.....+.....+.....+T....+.....+.....+.....+1....+h....+m....+q....+x....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.... +(...!+2..."+8...#+A...$+K...%+U...&+Z...'+a...(+q...)+....*+....++....,+....-+.....+..../+....0+....1+....2+....3+....4+....5+. ..6+ ..7+3 ..8+M ..9+f ..:+w ..;+. ..<+. ..=+. ..>+. ..?+. ..@+$!..A+A!..B+o!..C+.!..D+.!..E+.!..F+.!..G+.!..H+.!..I+.!..J+."..K+."..L+."..M+."..N+."..O+."..P+."..Q+."..R+ "..S+%"..T+."..U+7"..V+@"..W+H"..X+U"..Y+["..Z+]"..[+`"..\+q"..]+u"..^+\|".._+."..`+."..a+."..b+."..c+."..d+."..e+."..f+."..g+.#..h+.#..i+.#..j+.#..k+.#..l+.#..m+##..n+)#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\fa.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	66307
Entropy (8bit):	5.0918261334420105
Encrypted:	false
SSDEEP:	1536:HFHhwLeXFkTEwhw+Y+smpAVlg+EkhPK/ofjHw9BVRlWaXZl0pPxeAkriLijiti4z:lmLeX6TEwGssmpulg+rP8Uw3/lthipLP
MD5:	8B70D5FD5CD6756F1741BF06BC45440C
SHA1:	31D7407B576777420E8EE921988E54181AC82839
SHA-256:	1C0AF7FA747D3C5906191FE47C1D17F7FEA3984C42F0432927E5E52D02DBC64E
SHA-512:	8DDC4ECC9E520F31B609E5BE1E58A6E439AD1AEE0955204189E77BF67445443526BC6763088E2833D7104DC9BE7960C2B9552D54B400AC2C5FB5BFAA974B073E
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#m.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)-....)8....)G....)L....)R....)[....)e....)k....)x....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........G...................c..............+<....+.....+.....+.....+B....+.....+r....+.....+.....+2 ...+. ...+.!...+s!...+.!...+."...+."...+("...+2"...+U"...+k"...+\|"...+."...+."...+."...+."...+.#...+##...+-#...+>#...+F#.. +W#..!+h#.."+v#..#+.#..$+.#..%+.#..&+.#..'+.#..(+.#..)+.#..*+.$..++.$..,+4$..-+P$...+[$../+b$..0+i$..1+x$..2+.$..3+.$..4+.$..5+.$..6+.$..7+.$..8+.%..9+-%..:+E%..;+W%..<+.%..=+.%..>+.%..?+.%..@+.&..A+;&..B+u&..C+.&..D+.&..E+.&..F+''..G+='..H+P'..I+Z'..J+`'..K+h'..L+k'..M+n'..N+q'..O+y'..P+.'..Q+.'..R+.'..S+.'..T+.'..U+.'..V+.'..W+.'..X+.'..Y+.'..Z+.'..[+.'..\+.'..]+.(..^+.(.._+/(..`+G(..a+c(..b+v(..c+}(..d+.(..e+.(..f+.(..g+.(..h+.(..i+.(..j+.(..k+.(..l+.(..m+.)..n+.)..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\fi.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	44516
Entropy (8bit):	5.287952317607699
Encrypted:	false
SSDEEP:	768:zUZLzZ0LdAyHXHhKDfTtxZGSC16ZrC0xH6zxStVA9X99nZDAYW6I4:LLHXHhKDfTtHC8VtxH6tStmbZDAWI4
MD5:	D4A7BA8027CFCA09CAF1A7296EB3E7EC
SHA1:	7FAE130235012413DD7C2049BF790AF0EF89F219
SHA-256:	84F9FF560F3DF29722E75F47E29E978E4D963F36109A28D432DDBBA8737F977F
SHA-512:	488B282D83EF3BCF1BC058CC383B8FFFB3767B8AF51D93E7D37C866BCF84827ACFCAE7AD766B454DE08CFA9AC9C0FEDD9B65FF455B16CB857DEC4ED42B8F034D
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....).......... ....P........................E....+o....+.....+.....+.....+/....+h....+.....+.....+3....+s....+.....+.....+.....+U....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+$....+2....+B....+J....+O....+T... +]...!+e..."+l...#+\|...$+....%+....&+....'+....(+....)+....*+....++....,+....-+.....+..../+....0+. ..1+. ..2+. ..3+# ..4+5 ..5+F ..6+^ ..7+w ..8+. ..9+. ..:+. ..;+. ..<+. ..=+. ..>+.!..?+9!..@+n!..A+.!..B+.!..C+.!..D+.!..E+."..F+:"..G+G"..H+T"..I+V"..J+]"..K+b"..L+e"..M+o"..N+r"..O+y"..P+\|"..Q+."..R+."..S+."..T+."..U+."..V+."..W+."..X+."..Y+."..Z+."..[+."..\+."..]+."..^+.".._+."..`+.#..a+&#..b+6#..c+=#..d+C#..e+K#..f+W#..g+^#..h+b#..i+g#..j+l#..k+q#..l+v#..m+{#..n+.#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\fil.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	49907
Entropy (8bit):	5.085365081063145
Encrypted:	false
SSDEEP:	768:qxu3ggT0vzpJLWm6RSdoOHJrkOo3SmqucTkef7VdMOz8k+eD4My31YpB:F5RSdo8YOodqucTkefx3/a31o
MD5:	BA30C440E34A828C656B3057A6EF50D2
SHA1:	CB223B3CC624A316CE4AF12D0505C000A6820ADD
SHA-256:	C9AC272850E1DA405981EC9C22C04280190988C69F20D8FA9D4EC35CF179D0A2
SHA-512:	3AF89E096D1ED5C6814A331A00925FBFEC6A971122BDA17BF21402FE1A81A04C143744723106D0B7B5DFED55FCDACBC187E34BEFF5C51C22A18FDF2ED17E79AF
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........=....}..............7..............+.....+3....+h....+.....+.....+[....+.....+V....+.....+F....+.....+# ...+. ...+. ...+G!...+M!...+T!...+b!...+{!...+.!...+.!...+.!...+.!...+.!...+.!...+.!...+."...+."...+."...+.".. +'"..!+/".."+:"..#+I"..$+U"..%+b"..&+h"..'+q"..(+w"..)+."..*+."..++."..,+."..-+."...+."../+."..0+."..1+."..2+."..3+.#..4+"#..5+C#..6+g#..7+.#..8+.#..9+.#..:+.#..;+.#..<+.$..=+.$..>+>$..?+Y$..@+.$..A+.$..B+.$..C+.$..D+.%..E+6%..F+l%..G+z%..H+~%..I+.%..J+.%..K+.%..L+.%..M+.%..N+.%..O+.%..P+.%..Q+.%..R+.%..S+.%..T+.%..U+.%..V+.%..W+.%..X+.%..Y+.%..Z+.%..[+.%..\+.%..]+.%..^+.%.._+.&..`+0&..a+H&..b+T&..c+[&..d+a&..e+i&..f+s&..g+\|&..h+.&..i+.&..j+.&..k+.&..l+.&..m+.&..n+.&..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\fr.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	51933
Entropy (8bit):	5.273343864129208
Encrypted:	false
SSDEEP:	768:+N0Y7nP9CqzpfliN+XdG0m0skOc/N4SUG7cCmHL5n32YY0gyroFpwu:A0m8qHiNMOc/OcYCmGtyroFGu
MD5:	62EF4AB8C2884194759A32A45F4FC260
SHA1:	BA939B19B995B7A4438C86902377A1C22594B3E3
SHA-256:	DE82F49719BA9B941DFC9A2141043A9C78A6F54B8933FEE5C1BFC3A5175AE500
SHA-512:	D2AF98D51E77930A617D5F060D9ABE94DDA5E8F54BF1B79B76F16BEC5CFB4837A72C3C0BA37E004A3448D92402E884FA98C977AAD97061C5E0045B7F92C6323F
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........+....l...................l.........+.....++....+d....+.....+.....+'....+.....+.....+.....+.....+.....+.....+]....+.....+.....+. ...+. ...+. ...+. ...+. ...+> ...+d ...+\| ...+. ...+. ...+. ...+. ...+. ...+. ...+. .. +. ..!+. .."+. ..#+.!..$+.!..%+#!..&+!..'+-!..(+>!..)+K!..+e!..++.!..,+.!..-+.!...+.!../+.!..0+.!..1+.!..2+.!..3+.!..4+.!..5+."..6+8"..7+]"..8+y"..9+."..:+."..;+."..<+."..=+.#..>+?#..?+o#..@+.#..A+.#..B+-$..C+Q$..D+.$..E+.$..F+.$..G+.$..H+.%..I+.%..J+.%..K+.%..L+.%..M+.%..N+#%..O+*%..P+/%..Q+2%..R+9%..S+?%..T+E%..U+K%..V+O%..W+R%..X+Y%..Y+_%..Z+a%..[+d%..\+j%..]+q%..^+y%.._+.%..`+.%..a+.%..b+.&..c+.&..d+.&..e+.&..f+&&..g+6&..h+;&..i+A&..j+G&..k+M&..l+S&..m+Y&..n+`&..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\gu.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	94190
Entropy (8bit):	4.423866245013474
Encrypted:	false
SSDEEP:	1536:z2sgszl3/NifmzduKOeEozoVtG2BCXyQIXnSAcfU4RXtwAdjbXOgJBC4uKBBxj7F:Nzl3/NifGduKOeEozo7j4i9XnSAcs4RJ
MD5:	470244ADC1084B9411B6BD8F0A028EA7
SHA1:	589C30309FC65E546A740A5D6EF04DD41919C2FC
SHA-256:	5A64CB26F7E95C44B9D400D8B30BEFE53C09096FB0385856F4B5B9E9006F9FD5
SHA-512:	D094F52F4F39D7DCE640102B5CA09A65CE360620A9B259FBCB5BCD14366F07E90C2A0641B15766D73C5FE6559C9FE56CFBF611A168871A28EC3225CFB30A4203
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#m.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)-....)8....)G....)L....)R....)[....)e....)k....)x....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........8..............I..............i....+.....+.....+h....+.....+.....+\|....+.....+b....+.....+O ...+. ...+2!...+.!...+%"...+."...+."...+."...+."...+.#...+)#...+>#...+.#...+.#...+.#...+.#...+.$...+$$...+=$...+L$...+_$.. +x$..!+.$.."+.$..#+.$..$+.%..%+3%..&+<%..'+N%..(+g%..)+.%..+.%..++.%..,+.&..-+0&...+S&../+`&..0+w&..1+.&..2+.&..3+.&..4+.&..5+&'..6+x'..7+.'..8+.(..9+E(..:+a(..;+}(..<+.(..=+.)..>+k)..?+.)..@+&..A+e..B+...C+.+..D+.+..E+.+..F+;,..G+T,..H+g,..I+p,..J+.,..K+.,..L+.,..M+.,..N+.,..O+.,..P+.,..Q+.,..R+.,..S+.,..T+.,..U+.,..V+.-..W+!-..X+&-..Y+5-..Z+7-..[+:-..\+C-..]+^-..^+s-.._+.-..`+.-..a+....b+7...c+>...d+D...e+L...f+a...g+m...h+y...i+~...j+....k+....l+....m+....n+....o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\he.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	56107
Entropy (8bit):	4.747702256805146
Encrypted:	false
SSDEEP:	1536:2mLx1igXzDXq8AUfGEBgVE/DXDTRx9DVUZoUTKPYmOCjMUy+xxXhvJCpXTed2scz:NxX/r1MUy+D1JCpXTiVcI/0N
MD5:	A322FE105DF1A8FF7BBB5411B2DDF744
SHA1:	B546989536C7FDF2EA7852CEF72D4690ED6F52DF
SHA-256:	3525F253E1E2C575C22FDD87385D631FF848BE6D065CAFD2710E5CB00DD6E27B
SHA-512:	77112989A0E8391E991F5E30901BBA9EC3FDC7E6C49955236C1856F7B74B64B1688FABC15B759ECFC7646FD1C573B1CCC0E8AE8E8A374FAD18606B58CDE0AD06
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........N..............Y..............b....+.....+.....+k....+.....+.....+.....+%....+.....+! ...+. ...+.!...+.!...+."...+}"...+."...+."...+.#...+.#...+2#...+C#...+U#...+w#...+.#...+.#...+.#...+.#...+.#...+.#...+.#...+.#.. +.#..!+.#.."+.#..#+.$..$+.$..%+-$..&+7$..'+A$..(+P$..)+]$..*+p$..++.$..,+.$..-+.$...+.$../+.$..0+.$..1+.$..2+.$..3+.$..4+.$..5+.%..6+%%..7+B%..8+c%..9+.%..:+.%..;+.%..<+.%..=+.%..>+.&..?+1&..@+j&..A+.&..B+.&..C+.&..D+.'..E+8'..F+o'..G+.'..H+.'..I+.'..J+.'..K+.'..L+.'..M+.'..N+.'..O+.'..P+.'..Q+.'..R+.'..S+.'..T+.'..U+.'..V+.'..W+.(..X+.(..Y+.(..Z+.(..[+.(..\+&(..]+.(..^+8(.._+X(..`+}(..a+.(..b+.(..c+.(..d+.(..e+.(..f+.(..g+.(..h+.(..i+.(..j+.(..k+.(..l+.(..m+.)..n+.)..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\hi.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	96483
Entropy (8bit):	4.39980282382201
Encrypted:	false
SSDEEP:	1536:SrFi05kT4PSLfgx4JtqT386/TOfFT3mcp:4i/gx4JtqT3TTOfFrmC
MD5:	A8DBE08E837AF7350D12B0C6797E8F26
SHA1:	C9142ED1D8A1B3A5BDC2DDD04F803A4A82C6ABE0
SHA-256:	7607F601E7F7BC4A7DEB1F68CF3D5791EC4D2811F37FAC0EFC658EB1CA1D9B04
SHA-512:	594A9E18AC99148418C866BE74385249A44CD0C8B98065C0F0CA852DCC4532AB1DBFAC884635E173BE11348B42527ABCD8F8DD238FECB0231B167072ED94A616
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#m.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)-....)8....)G....)L....)R....)[....)e....)k....)x....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........S..............I..............E....+.....+.....+;....+{....+.....+F....+.....+#....+.....+.....+S ...+. ...+B!...+.!...+."...+ "...+3"...+A"...+y"...+."...+."...+.#...+2#...+Q#...+p#...+.#...+.#...+.#...+.#...+.#.. +.$..!+'$.."+X$..#+.$..$+.$..%+.$..&+.$..'+.$..(+.$..)+.%..+2%..++a%..,+.%..-+.%...+.%../+.%..0+.&..1+4&..2+D&..3+e&..4+.&..5+.&..6+.'..7+G'..8+.'..9+.'..:+.'..;+.(..<+O(..=+v(..>+.(..?+.(..@+U)..A+.)..B+.)..C+9..D+...E+...F+J+..G+g+..H+~+..I+.+..J+.+..K+.+..L+.+..M+.+..N+.+..O+.+..P+.+..Q+.+..R+.+..S+.+..T+.,..U+0,..V+C,..W+Y,..X+^,..Y+c,..Z+e,..[+h,..\+q,..]+.,..^+.,.._+.,..`+.,..a++-..b+M-..c+T-..d+Z-..e+b-..f+q-..g+z-..h+.-..i+.-..j+.-..k+.-..l+.-..m+.-..n+.-..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\hr.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	46251
Entropy (8bit):	5.4078672775850105
Encrypted:	false
SSDEEP:	768:u0UUzsAu0EnGmYIp0YwpyZs9XtS6DgBx/KlsoPYVWS/ok/yR+RPj:um5uNq/9yOXtS6DgrCCzVDVFPj
MD5:	D88949FD915BCB7A18AD44474EF74DA7
SHA1:	D1FA82BB1D7DD27FBD95CF08CADBEF7A874B5333
SHA-256:	1ED331FBBA49E120E97ECDB00E95EF6907DFBD060A061381FB5B12D712E32E58
SHA-512:	8AC613F86DD25ED77D7296313292272F8532D13E2DA0111256F771311D95D715AD7235036E48CC8AF46DE387C6A65B1696482148F7218EF147AF301FA488D756
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........0....{..............H..............+.....+d....+.....+.....+.....+f....+.....+.....+o....+.....+.....+W....+.....+.....+O ...+T ...+Y ...+a ...+y ...+. ...+. ...+. ...+. ...+. ...+. ...+. ...+. ...+. ...+.!...+.!.. +.!..!+ !.."+%!..#+2!..$+<!..%+E!..&+K!..'+P!..(+c!..)+w!..*+.!..++.!..,+.!..-+.!...+.!../+.!..0+.!..1+.!..2+.!..3+.!..4+.!..5+."..6+."..7+E"..8+^"..9+w"..:+."..;+."..<+."..=+."..>+."..?+.#..@+.#..A+E#..B+n#..C+.#..D+.#..E+.#..F+.#..G+.$..H+.$..I+.$..J+.$..K+#$..L+&$..M+-$..N+0$..O+A$..P+D$..Q+G$..R+K$..S+P$..T+_$..U+m$..V+.$..W+.$..X+.$..Y+.$..Z+.$..[+.$..\+.$..]+.$..^+.$.._+.$..`+.$..a+.$..b+.%..c+.%..d+.%..e+!%..f+-%..g+@%..h+D%..i+I%..j+N%..k+S%..l+X%..m+]%..n+c%..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\hu.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	49509
Entropy (8bit):	5.575236094710869
Encrypted:	false
SSDEEP:	1536:1dpEpE9r2tuVdD+DlK6Tk+wudBmFZfRRm0b+ZwUo:1dpEpE9ri+dD+Y6Tk+wudBmFZfHlv
MD5:	C81DF0315DB423D0C318D46E8FCE8E39
SHA1:	CB5E676E5CEBF20AE94C3062321DAB37520D2689
SHA-256:	6D7620CA3059FCF4FB2DCD935BFAA45968EF4851CD8DCE9F435A6D5B129B2399
SHA-512:	A5E39C53F0D66CA4B8356C05D6F3AD6F4F1F8F3559B9B9F5DFA8716E5C256EA3649B8D53E6BFF6C593D9F2D1207D4BA7BF6785A443D56D446A6252B98DA45CB4
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....).........."....W........................:....+a....+.....+.....+.....+.....+F....+.....+.....+.....+L....+.....+.....+.....+.....+=....+?....+E....+L....+^....+j....+x....+.....+.....+.....+.....+.....+.....+.....+.....+.... +....!+!..."+1...#+?...$+H...%+R...&+Z...'+^...(+g...)+p...*+....++....,+....-+.....+..../+....0+....1+....2+....3+. ..4+. ..5+, ..6+C ..7+Z ..8+t ..9+. ..:+. ..;+. ..<+. ..=+. ..>+. ..?+. ..@+&!..A+8!..B+h!..C+t!..D+.!..E+.!..F+.!..G+.!..H+.!..I+.!..J+.!..K+.!..L+.!..M+.!..N+.!..O+.!..P+."..Q+."..R+."..S+."..T+."..U+'"..V+5"..W+B"..X+G"..Y+O"..Z+Q"..[+T"..\+]"..]+d"..^+l".._+}"..`+."..a+."..b+."..c+."..d+."..e+."..f+."..g+."..h+."..i+."..j+."..k+."..l+."..m+."..n+.#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\id.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	43040
Entropy (8bit):	5.2296544658108175
Encrypted:	false
SSDEEP:	768:ErwdHrJ9PIYvAQhXOcCu3QXVsPajTunJc9StA3hMLcpSYIcfbmsYYL8L:8WJccCLqajTa7tARMLWL8L
MD5:	07428CA91EEAD354D60DC8FD68738F54
SHA1:	D227C7023F9A28BD5D9DFB9CB95246470E7EA6FB
SHA-256:	C8744256F22CA0D32F22B2D7A5CBEC9D0BFE86C112632718DFA53452298833A7
SHA-512:	3EDB476603234B4D336FA6AC88C25BC0475AAEA7792AC514BFE77DB220779D73A1510D0A5C48D526322FCC799B742A90311B7380ED0281A2CD6952790F367C07
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........$....O....z...................,....+Q....+.....+.....+.....+.....+,....+a....+.....+.....+.....+&....+a....+.....+.....+.....+.....+.....+&....+;....+K....+X....+s....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+....'+....(+....)+....*+....++(...,+5...-+C....+I.../+P...0+V...1+]...2+c...3+o...4+....5+....6+....7+....8+....9+....:+....;+. ..<++ ..=+: ..>+Z ..?+m ..@+. ..A+. ..B+. ..C+. ..D+.!..E+.!..F+A!..G+O!..H+W!..I+Z!..J+_!..K+d!..L+g!..M+j!..N+m!..O+t!..P+w!..Q+.!..R+.!..S+.!..T+.!..U+.!..V+.!..W+.!..X+.!..Y+.!..Z+.!..[+.!..\+.!..]+.!..^+.!.._+.!..`+.!..a+."..b+."..c+&"..d+,"..e+4"..f+>"..g+I"..h+M"..i+R"..j+W"..k+\"..l+a"..m+f"..n+n"..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\it.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	47456
Entropy (8bit):	5.162207971428432
Encrypted:	false
SSDEEP:	768:Bv3IHSRg2ITUO9aGM884d1FxDpKnf1SsY25tea7REbaSz:V3CWOkw8Kwnf1bhhaeSz
MD5:	23F243B5399FBCF3D3A96A5219A1F80D
SHA1:	C6945745B5A0A84E64149E53101ABCDA8CFAA992
SHA-256:	2D9EFA8A626D16E8AD571813A3901E8FA0532ECF0DA34760B8C725492C418244
SHA-512:	215F72DCC9B505EF6B413CE14CDE69C0857F08DA5B7EC44E80105B63514EE7F0B183652CEF4B7268712C06056FB8C8B2B7176FFDD154F07480B356FCCCB18AD9
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........$....S........................6....+[....+.....+.....+.....+.....+@....+.....+.....+.....+8....+v....+.....+.....+.....++....+/....+3....+:....+Q....+]....+j....+.....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+(...&+/...'+7...(+@...)+K...*+\...++k...,+~...-+.....+..../+....0+....1+....2+....3+....4+....5+....6+. ..7+. ..8+3 ..9+L ..:+W ..;+h ..<+. ..=+. ..>+. ..?+. ..@+.!..A+1!..B+c!..C+\|!..D+.!..E+.!..F+.!..G+.!..H+.!..I+.!..J+."..K+."..L+."..M+."..N+."..O+."..P+!"..Q+%"..R+)"..S+/"..T+?"..U+M"..V+W"..W+c"..X+h"..Y+n"..Z+p"..[+s"..\+\|"..]+."..^+.".._+."..`+."..a+."..b+.#..c+%#..d++#..e+4#..f+>#..g+H#..h+L#..i+Q#..j+V#..k+[#..l+`#..m+e#..n+k#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ja.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	57827
Entropy (8bit):	5.750079208972845
Encrypted:	false
SSDEEP:	768:OSdNz1aIICoinJec52H9HgHO4lHNkg3c94NXm75iiq1Y0o86FH++O4E:OmNz1aIICznJealHNNc9F7DRRH+p4E
MD5:	B44747CE81C6936D62D52E7CE33107E7
SHA1:	5B0D1943B3173D7F2D3BE74602100F2D2F685594
SHA-256:	AE8AF09FDEE6C385BAE57D2D72562C3457DB1194D3492A9ECCA71219C6E6FDBD
SHA-512:	057958E47FD9407EE15BDD965F454CF65871F907219D1CB47893AF70E0C11C0969279A860CF3E7919EFE296CE4B32CFE05C4E68172808D52D73BD0FEDEB91328
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#q.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....)(....)-....)<....)G....)V....)[....)a....)j....)t....)z....).....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........6....]........................"....+M....+z....+.....+.....+.....+....+_....+.....+.....+.....+4....+a....+.....+.....+.....+.....+.....+.....+.....+0....+E....+r....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+2...$+8...%+>...&+G...'+J...(+\...)+n...+....++....,+....-+.....+..../+....0+....1+....2+. ..3+. ..4+" ..5+. ..6+@ ..7+R ..8+j ..9+. ..:+. ..;+. ..<+. ..=+. ..>+. ..?+.!..@+9!..A+N!..B+~!..C+.!..D+.!..E+.!..F+.!..G+.!..H+."..I+."..J+."..K+""..L+%"..M+("..N+."..O+7"..P+="..Q+@"..R+F"..S+N"..T+]"..U+l"..V+{"..W+."..X+."..Y+."..Z+."..[+."..\+."..]+."..^+.".._+."..`+."..a+.#..b+1#..c+8#..d+>#..e+F#..f+P#..g+Y#..h+]#..i+b#..j+g#..k+l#..l+q#..m+v#..n+~#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\kn.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	108050
Entropy (8bit):	4.276667415098973
Encrypted:	false
SSDEEP:	1536:cTEYbFkXhQRLD39o0zOiqU+3HnLgf6a6bnFSZxF84sjG9gNu3L5iFr9wavU01C3s:cclaU7l113J3AaiAoqpXxX
MD5:	3A02551FEE49F1FDF1D6F334E1F9C3C9
SHA1:	7CA83006A0B550704048236719F9F1948901E7C7
SHA-256:	58C0EDB1598CF8404699E532F2C4D6421958BC575D2F55E2F351C464440E3288
SHA-512:	CB7368D84C25ACB56DCAE9BE26C7CA539E4B62A9991264D71114740093FF1E52E6956E88A035A5F028CE29DFD46D7C80053CC6CA5212A752721D733F97E99F63
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#m.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)-....)8....)G....)L....)R....)[....)e....)k....)x....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........w.........i.........4.........5....+.....+ ....+\|....+.....+S....+5 ...+.!...+.!...+."...+U#...+.$...+.$...+;%...+.%...+@&...+L&...+^&...+l&...+.&...+.&...+.&...+='...+n'...+.'...+.'...+.'...+.(...+&(...+;(...+M(.. +e(..!+.(.."+.(..#+.(..$+.(..%+.)..&+.)..'+ )..(+6)..)+O)..+.)..++.)..,+.)..-+&...+B../+[..0+n..1+...2+...3+...4+.*..5+.+..6+[+..7+.+..8+.+..9+.,..:+.,..;+P,..<+.,..=+.,..>+L-..?+.-..@+....A+?...B+....C+./..D+./..E+./..F+P0..G+u0..H+.0..I+.0..J+.0..K+.0..L+.0..M+.0..N+.0..O+.0..P+.0..Q+.1..R+.1..S+.1..T+11..U+W1..V+.1..W+.1..X+.1..Y+.1..Z+.1..[+.1..\+.1..]+.1..^+.2.._+H2..`+}2..a+.2..b+.2..c+.2..d+.2..e+.2..f+.3..g+-3..h+13..i+63..j+;3..k+@3..l+E3..m+J3..n+P3..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ko.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	48903
Entropy (8bit):	6.037908064798389
Encrypted:	false
SSDEEP:	768:hqTznhlG8IKZ3Y347TS1zzQmtJuJ0JYJb+4sI6MjKf2y15aHPYfOiJpNzNbV7ZpO:oLHj7TS1zHGwkbAKjKf2uaHwfOM9bA40
MD5:	5B3A3241D2B048074CF841CEDFA48AB9
SHA1:	49EAAD312F6E1A84621BB3678E6477368DA455F7
SHA-256:	BEE7D8571D43883A5E90D06F59C6E60D63D354EFAAE6DA93446841A961E1D881
SHA-512:	565513E0A6F476C3712CEC30314D66D5D1FAAA023D58C5A193D52FC9DB6A2EDB660275D97865E5A71845477CF9090BDFCB09B05B3224BF30D571396E0A9ED614
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#..../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....)%....)4....)9....)H....)S....)b....)g....)m....)v....).....).....).....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........@....e........................ ....+I....+t....+.....+.....+.....+.....+I....+\|....+.....+.....+.....+C....+p....+.....+.....+.....+.....+.....+.....+.....+.....+4....+A....+N....+[....+h....+u....+~....+.....+.... +....!+...."+....#+....$+....%+....&+....'+....(+....)+....*+%...++8...,+H...-+[....+l.../+\|...0+....1+....2+....3+....4+....5+....6+....7+....8+. ..9+! ..:+1 ..;+D ..<+o ..=+. ..>+. ..?+. ..@+. ..A+.!..B+J!..C+[!..D+.!..E+.!..F+.!..G+.!..H+.!..I+.!..J+.!..K+.!..L+.!..M+.!..N+."..O+."..P+."..Q+."..R+."..S+."..T+("..U+;"..V+K"..W+["..X+`"..Y+f"..Z+h"..[+k"..\+t"..]+z"..^+.".._+."..`+."..a+."..b+."..c+."..d+."..e+."..f+."..g+.#..h+.#..i+.#..j+.#..k+.#..l+.#..m+.#..n+.#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\lt.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	49505
Entropy (8bit):	5.487157635151958
Encrypted:	false
SSDEEP:	768:BEmzv5Kl+p/mF69qTqAxUdE4eB2Y8+DwUaxJ9B/K7yEINv55zOTbUbdgBHaewf9D:BEmzF/T6NQxJ3BIqM+yi+6
MD5:	3638ECB7E65F15945EF8F4D88C1F55FF
SHA1:	6935747E844B561B28B3CF12C86F274D1DDB1C33
SHA-256:	E94E8CF76B9E7CE944F58E7A518CD34ED8D9B0FEF0E9393181A885E6F36C8539
SHA-512:	B396C1EC13C194685DF4EA2CBBB9BD25052C26295879E7414D08D6ED21CA52EAF432FA431EA321816BC1AAF2E977E693B7BAB6BB42AE2BC3993B09D590529F73
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........H..............[.........+.........+.....+S....+.....+.....+b....+.....+C....+.....+. ...+. ...+. ...+i!...+.!...+W"...+."...+."...+."...+."...+."...+.#...+.#...+<#...+O#...+`#...+p#...+.#...+.#...+.#...+.#...+.#.. +.#..!+.#.."+.#..#+.#..$+.#..%+.#..&+.$..'+.$..(+.$..)+)$..*+:$..++M$..,+_$..-+m$...+w$../+.$..0+.$..1+.$..2+.$..3+.$..4+.$..5+.$..6+.$..7+.%..8+.%..9+,%..:+;%..;+M%..<+.%..=+.%..>+.%..?+.%..@+/&..A+U&..B+.&..C+.&..D+.&..E+.'..F+Q'..G+d'..H+n'..I+s'..J+\|'..K+.'..L+.'..M+.'..N+.'..O+.'..P+.'..Q+.'..R+.'..S+.'..T+.'..U+.'..V+.(..W+.(..X+.(..Y+#(..Z+%(..[+((..\+<(..]+D(..^+O(.._+d(..`+.(..a+.(..b+.(..c+.(..d+.(..e+.(..f+.(..g+.(..h+.(..i+.(..j+.(..k+.(..l+.(..m+.)..n+.)..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\lv.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	50527
Entropy (8bit):	5.5056618885657365
Encrypted:	false
SSDEEP:	768:Qjh52P2d7B1TWSMJ8JUP9MEQxPp8ykGOfsWMZHuIkpI0pDou:Qj2PwbWSAZQ78ykcYPpI0pt
MD5:	4F3DB8BACDDF08035ED01EA66CC72D84
SHA1:	36B03BE97BDC2ABAE90D191BB2F6F3EACE7EE463
SHA-256:	9495C58645DF64DA9F12AF60276420145C47CD032465EE52B216B243CEC9022E
SHA-512:	EBD937084341926DC660972F13235C327514F9BAF33824ADFEDEA4F2FF04E57E3FE7243D2249271E75379EE98E6842562939B2D706A86C9E59D68904B7E18E58
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........5...................k..............+k....+.....+.....+Z....+.....+.....+.....+.....+m....+.....+P ...+. ...+. ...+`!...+.!...+.!...+.!...+.!...+.!...+.!...+."...+-"...+:"...+I"...+V"...+d"...+n"...+~"...+."...+.".. +."..!+.".."+."..#+."..$+."..%+."..&+."..'+."..(+."..)+."..*+."..++.#..,+.#..-++#...+3#../+<#..0+C#..1+M#..2+S#..3+e#..4+y#..5+.#..6+.#..7+.#..8+.#..9+.#..:+.$..;+.$..<+>$..=+P$..>+t$..?+.$..@+.$..A+.$..B+(%..C+G%..D+x%..E+.%..F+.%..G+.%..H+.%..I+.%..J+.%..K+.%..L+.&..M+.&..N+.&..O+.&..P+#&..Q+)&..R+0&..S+5&..T+B&..U+M&..V+Z&..W+e&..X+m&..Y+u&..Z+.&..[+.&..\+.&..]+.&..^+.&.._+.&..`+.&..a+.'..b+('..c+/'..d+6'..e+>'..f+H'..g+f'..h+k'..i+p'..j+v'..k+\|'..l+.'..m+.'..n+.'..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ml.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	117720
Entropy (8bit):	4.319709211164435
Encrypted:	false
SSDEEP:	384:zAV1wQGrB1Bq1k+eyU2cKcZcx9bQIkukjERHbwPI2QLOguzQFG/IYKrNpcAn8QHf:zAM9dWmIZxNnYrtr0ptrMfFcKS
MD5:	E53A7A75C56A080EAF70864602FDEEF0
SHA1:	88A2EB541037EA5C87568C7D9C7A8932F8E8C407
SHA-256:	76483B86B529D070DD5ACD32FBF217CBC97F32B1C8878B238162323535B0EAFF
SHA-512:	40606C964E95C51C348B32AA082425972F6A126174281E4E24115897782D148B135037C7E1F528A98B6EA20B3D0D75F3BD723D2EF465E619C25BC60022BE20B6
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#}.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....)#....)+....):....)?....)N....)Y....)h....)m....)s....)\|....).....).....).....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........x.........6..............I.........+.....+^....+.....+.....+K....+.....+.....+4 ...+. ...+x!...+."...+."...+.#...+.#...+.#...+.$...+.$...+&$...+l$...+.$...+.$...+&%...+l%...+.%...+.%...+.%...+'&...+T&...+r&...+.&.. +.&..!+.&.."+.&..#+='..$+Y'..%+u'..&+.'..'+.'..(+.'..)+.(..+Z(..++.(..,+.(..-+@)...+.)../+.)..0+.)..1+.)..2+.)..3+4..4+z..5+...6+.+..7+u+..8+.+..9+.,..:+F,..;+.,..<+ -..=+`-..>+.-..?+[...@+./..A+u/..B+00..C+.0..D+A1..E+.1..F+L2..G+.2..H+.2..I+.2..J+.2..K+.2..L+.2..M+.2..N+.2..O+.3..P+.3..Q+.3..R+ 3..S+%3..T+N3..U+.3..V+.3..W+.4..X+.4..Y+,4..Z+.4..[+14..\+a4..]+j4..^+.4.._+.4..`+05..a+t5..b+.5..c+.5..d+.5..e+.5..f+.5..g+.5..h+.5..i+.5..j+.5..k+.5..l+.5..m+.5..n+.6..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\mr.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	96994
Entropy (8bit):	4.362697457438771
Encrypted:	false
SSDEEP:	1536:biDkYC7WyrzGknqixCiAqHSinMhTfMlHFSv:b4xCqyrzG4qiRAqHSUMhTeFSv
MD5:	BC943169D21BBFD16DD412AE477B3DC0
SHA1:	D7BEFE9DDE62FF36E586F9D15C3719FBFBA618F7
SHA-256:	F35537E623A4B0E1D335FD38D69E1D1DF443F22AEA206D0E151733A577771973
SHA-512:	25892F8E63CC7B3C35929FC729A620C761DB5E528A30BBF00AD0471EFFD56B07D32768A0202E25F714414AF8DE92D6D775305329475E0119DE93B2C099298B37
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#m.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)-....)8....)G....)L....)R....)[....)e....)k....)x....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........8..............:..............c....+.....+.....+G....+.....+.....+.....+.....+.....+8 ...+. ...+4!...+.!...+b"...+."...+p#...+v#...+.#...+.#...+.#...+.#...+.#...+O$...+q$...+.$...+.$...+.$...+.$...+.$...+.%...+.%.. +-%..!+<%.."+g%..#+.%..$+.%..%+.%..&+.%..'+.%..(+.%..)+.&..+J&..++v&..,+.&..-+.&...+.&../+.&..0+.'..1+'..2+7'..3+T'..4+p'..5+.'..6+.'..7+#(..8+L(..9+u(..:+.(..;+.(..<+.)..=++)..>+.)..?+.)..@+...A+H..B+...C+...D+d+..E+.+..F+.,..G+*,..H+F,..I+Y,..J+o,..K+.,..L+.,..M+.,..N+.,..O+.,..P+.,..Q+.,..R+.,..S+.,..T+.,..U+.,..V+.,..W+.,..X+.,..Y+.-..Z+.-..[+.-..\+.-..]+4-..^+R-.._+.-..`+.-..a+.-..b+!...c+(...d+....e+6...f+E...g+Q...h+U...i+Z...j+_...k+d...l+i...m+n...n+t...o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ms.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	43817
Entropy (8bit):	5.1794635593027705
Encrypted:	false
SSDEEP:	768:llKJK/a9RRwiz8uUrTduWWzE9n9k8rpvwfvNSeaiZi3tUev5Q:lwD5z8usbWzE99X6oem5Q
MD5:	6CFD5B74D08C8A5D5596B4712647FEEF
SHA1:	7FD304A4CCCCE04A610F7C17E36B34C2B74BFECB
SHA-256:	D396545288768E70239190854577B1DF2AB8E6A935B0B839D651116EEB7B195B
SHA-512:	BAE13E8DF222E7E71888C896D8A2553F15346BDE966D6D700BC049677F847C194A55498DD5C7675604A6419562A0EB56B88561DE76B9B2F4B963C2010231C3B4
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........&....O....x.......................+O....+~....+.....+.....+.....+,....+_....+.....+.....+.....+(....+e....+.....+.....+.....+.....+"....+....+B....+L....+Y....+w....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+....'+....(+....)+"...*+/...++=...,+J...-+X....+b.../+i...0+o...1+v...2+\|...3+....4+....5+....6+....7+....8+. ..9+% ..:+5 ..;+D ..<+i ..=+y ..>+. ..?+. ..@+. ..A+.!..B+1!..C+K!..D+{!..E+.!..F+.!..G+.!..H+.!..I+.!..J+.!..K+.!..L+.!..M+.!..N+.!..O+.!..P+.!..Q+.!..R+."..S+."..T+."..U+,"..V+;"..W+K"..X+P"..Y+U"..Z+W"..[+Z"..\+e"..]+i"..^+o".._+."..`+."..a+."..b+."..c+."..d+."..e+."..f+."..g+."..h+."..i+."..j+."..k+."..l+."..m+."..n+.#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\nb.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	44056
Entropy (8bit):	5.272211712399811
Encrypted:	false
SSDEEP:	768:So8MysOlF2nsYhoX6xqggR80Ny9vKXiLoNmb4d3INsfg8/MXcrzXnspc1EW33Pw:SoppToX6edN/NmMd4OI
MD5:	134CB79B07D6BFA385CDD0F93CEC84E0
SHA1:	ACBD382820AFFAD858BF37A2A4DC36A5C9EF05FC
SHA-256:	651883DCAC3E615CCA3F9759EFA4F96672C788FD3E2524F1D7236A48FA8DC54B
SHA-512:	7C8187D8BC536879039D7810CD56D6B9FEF0CC30C1C3D9F92FEE86193C709A6744973D6BCCA5C7A73ED891C038730876C37A900360FA3C65526CAB45E3C46269
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........$....S........................>....+f....+.....+.....+.....+.....+E....+.....+.....+.....+"....+T....+.....+.....+.....+H....+M....+S....+X....+l....+v....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+....'+#...(++...)+3...*+C...++R...,+Z...-+b....+h.../+q...0+x...1+....2+....3+....4+....5+....6+....7+....8+....9+. ..:+. ..;++ ..<+O ..=+_ ..>+. ..?+. ..@+. ..A+. ..B+.!..C+)!..D+[!..E+v!..F+.!..G+.!..H+.!..I+.!..J+.!..K+.!..L+.!..M+.!..N+.!..O+.!..P+.!..Q+.!..R+.!..S+.!..T+.!..U+.!..V+.!..W+."..X+."..Y+."..Z+."..[+."..\+""..]+'"..^+.".._+B"..`+\"..a+r"..b+."..c+."..d+."..e+."..f+."..g+."..h+."..i+."..j+."..k+."..l+."..m+."..n+."..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\nl.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	46022
Entropy (8bit):	5.210990346825689
Encrypted:	false
SSDEEP:	768:+JpaVkrA8LVnuQtnHyG0LLv8wEDRlp6q5qR2D2GqRk5zJEZnsrJydE/:+zaFQtnHFwE1lp6q5ZZdidE/
MD5:	264FFE560B523D126C51DCEB311373CC
SHA1:	3EA124ACB4D1D5D76FD706279A0BEDECE200F08A
SHA-256:	2E50152C5F6215AC24DCE2A3DC233A220869183034948F0356232C57514CBEE0
SHA-512:	EF73EA8C1B7F486349BD39994561F4E303AC6600C7B5BE512D23E3A06CCD6CDAC1573D4FD328B0049E3AD20CF76E5CAE3B6BDD2164B996B82986E143961B3DDB
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........&....V........................A....+f....+.....+.....+.....+.....+I....+.....+.....+.....+B....+\|....+.....+.....+#....+Y....+`....+h....+n....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.... +&...!+3..."+=...#+Q...$+\...%+h...&+m...'+u...(+....)+....+....++....,+....-+.....+..../+....0+....1+....2+. ..3+. ..4+2 ..5+H ..6+g ..7+. ..8+. ..9+. ..:+. ..;+. ..<+.!..=+)!..>+V!..?+w!..@+.!..A+.!..B+.!..C+."..D+R"..E+r"..F+."..G+."..H+."..I+."..J+."..K+."..L+."..M+."..N+."..O+."..P+."..Q+."..R+."..S+."..T+."..U+.#..V+.#..W+.#..X+"#..Y+(#..Z+#..[+-#..\+6#..]+;#..^+B#.._+[#..`+u#..a+.#..b+.#..c+.#..d+.#..e+.#..f+.#..g+.#..h+.#..i+.#..j+.#..k+.#..l+.#..m+.#..n+.#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\pl.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	48480
Entropy (8bit):	5.608976810740617
Encrypted:	false
SSDEEP:	768:pBXySF1eIYFvW/ELwMbQyeZ1uRi0NUmLHA+ba7XCoe1nRTLchC+eVj2ho/k8ah:pBXyOWeUi0xH7+7XCogTLchU2x8m
MD5:	854A4765CB37D769A8B108B3B6335860
SHA1:	390F2289F120337E5D9D29DE757BAAFD452FB04F
SHA-256:	C4B00E4C223B241DC643F91531F0D503216D58D7DAB4EE79AB64D63123661290
SHA-512:	046923875D42304AF4C7A668B20887D48623C4418F1A6705A31671AD7EABF097509413A330333B2964FE872AB9B3EF3F72A39E62F1EF6AA6430070F87EF9A91E
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........1....\|..............J..............+-....+.....+.....+.....+Q....+.....+(....+.....+.....+x....+.....+( ...+x ...+. ...+'!...+.!...+5!...+<!...+Z!...+i!...+v!...+.!...+.!...+.!...+.!...+.!...+.!...+.!...+.!...+.!.. +.!..!+.".."+."..#+."..$+,"..%+?"..&+G"..'+O"..(+^"..)+l"..*+{"..++."..,+."..-+."...+."../+."..0+."..1+."..2+."..3+."..4+."..5+.#..6+.#..7+4#..8+O#..9+g#..:+w#..;+.#..<+.#..=+.#..>+.#..?+.#..@+0$..A+I$..B+{$..C+.$..D+.$..E+.$..F+.%..G+,%..H+2%..I+4%..J+:%..K+A%..L+D%..M+G%..N+J%..O+Y%..P+\%..Q+_%..R+c%..S+h%..T+x%..U+.%..V+.%..W+.%..X+.%..Y+.%..Z+.%..[+.%..\+.%..]+.%..^+.%.._+.%..`+.&..a+,&..b+@&..c+G&..d+M&..e+U&..f+_&..g+v&..h+z&..i+.&..j+.&..k+.&..l+.&..m+.&..n+.&..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\pt-BR.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	47944
Entropy (8bit):	5.297599494469311
Encrypted:	false
SSDEEP:	768:On84KgfbimUYaQTBQeb79OZiyXStLSoMX6B7yAJtOeIc6xQxGel2:On8zm7TBKXXStOoMqEPc6xQxGe8
MD5:	D0FA28DB4EE6AEFF783C79B94EC50E80
SHA1:	DA7BE8E7C2CF79679EBCDB562AE44E2525D3243B
SHA-256:	88C6AB714BA328DE98C1B59CACC1BA2F2229F8262A57B5BA0D7BE6FAE0BCB2DB
SHA-512:	D3668EEEDF1560F5B3E293639AD154D8892B733160BF59C16F0922DDE1629C469CEC7D784C8E4B0A316AF33F137ABBC04F3E9E6E81C700BB0A48777A245E7B8B
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........(....h.............. ....f.........+.....+.....+M....+~....+.....+.....+q....+.....+%....+x....+.....+.....+m....+.....+.....+. ...+. ...+. ...+( ...+9 ...+I ...+e ...+u ...+. ...+. ...+. ...+. ...+. ...+. ...+. .. +. ..!+. .."+. ..#+. ..$+.!..%+.!..&+.!..'+-!..(+>!..)+P!..*+e!..++y!..,+.!..-+.!...+.!../+.!..0+.!..1+.!..2+.!..3+.!..4+.!..5+.!..6+."..7+6"..8+N"..9+g"..:+w"..;+."..<+."..=+."..>+."..?+.#..@+G#..A+d#..B+.#..C+.#..D+.#..E+.$..F+/$..G+>$..H+E$..I+G$..J+O$..K+U$..L+X$..M+\$..N+_$..O+f$..P+i$..Q+l$..R+p$..S+u$..T+.$..U+.$..V+.$..W+.$..X+.$..Y+.$..Z+.$..[+.$..\+.$..]+.$..^+.$.._+.$..`+.%..a+,%..b+8%..c+?%..d+E%..e+M%..f+W%..g+c%..h+k%..i+p%..j+u%..k+z%..l+.%..m+.%..n+.%..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\pt-PT.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	47585
Entropy (8bit):	5.293974455203231
Encrypted:	false
SSDEEP:	768:KPPFK1teDzBz1dDBS4/oT0vfC+7LUyZPEDBQ0/DRFl+y6MN7qxzyqKDBN:KPk1ezLToT0vFEDBQ0/DqMNmxzyqKDX
MD5:	3CD4193D8640C6139982F884F1E5322E
SHA1:	1951B71A2F5BC8C8C42512003CA102F8826967CE
SHA-256:	861D4BC7876B968FFA5736127DA462A1B09D9DDD5534668F4A871D569033A962
SHA-512:	89017A859E1B50E8BF4B0899EFC7B251E18110C8F20C47DD8513B8659642C1B3EAFCF9A98EC210245B5C272E4FDC7921D6AB6F1834180F6A02903E9FF06A35BB
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........$....T........................=....+e....+.....+.....+.....+.....+?....+\|....+.....+.....+ ....+R....+.....+.....+.....+.....+.....+.....+.....+1....+C....+T....+o....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+ ...&+....'+<...(+M...)+_...*+z...++....,+....-+.....+..../+....0+....1+....2+....3+....4+. ..5+. ..6+= ..7+Y ..8+x ..9+. ..:+. ..;+. ..<+. ..=+. ..>+(!..?+E!..@+x!..A+.!..B+.!..C+.!..D+."..E+/"..F+^"..G+m"..H+t"..I+v"..J+~"..K+."..L+."..M+."..N+."..O+."..P+."..Q+."..R+."..S+."..T+."..U+."..V+."..W+."..X+."..Y+."..Z+."..[+.#..\+.#..]+.#..^+.#.._+7#..`+Y#..a+v#..b+.#..c+.#..d+.#..e+.#..f+.#..g+.#..h+.#..i+.#..j+.#..k+.#..l+.#..m+.#..n+.#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ro.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	49212
Entropy (8bit):	5.3419494890376535
Encrypted:	false
SSDEEP:	768:QGTSWhCoRxMcBQpBikEoqwTMU9cLUkh8cS7l8aTTZDtGY8LSg3de60BnsUejNv2Q:B4oRxABpEoqa9cgI8HyaTZtGSke6Wp6B
MD5:	228C2DC6DE89CC5889A556B04625277D
SHA1:	F2D4BB245ABF2AD71F9EA4FD67A82B826D9371B5
SHA-256:	EFE550DC85AB44038178BB99AFC10BCCCF8DCD7D0563FB6B4C31708407ECAB79
SHA-512:	3E8173244666F9BC3A8D3E79E895944970FBC725149196CE16DD1DBB548EE589E5D786B7FEBC7AE769F0D567BE583B3D54A9D5B9B9495D506B6DEDEF2A4C8717
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........1....r..............%....t.........+.....+)....+\....+.....+.....+.....+y....+.....+.....+e....+.....+.....+5....+w....+.....+.....+.....+.....+.....+.....+. ...+! ...+4 ...+G ...+Y ...+l ...+\| ...+. ...+. ...+. .. +. ..!+. .."+. ..#+. ..$+. ..%+. ..&+. ..'+. ..(+.!..)+.!..*+2!..++I!..,+[!..-+m!...+w!../+\|!..0+.!..1+.!..2+.!..3+.!..4+.!..5+.!..6+.!..7+ "..8+="..9+["..:+j"..;+~"..<+."..=+."..>+."..?+.#..@+B#..A+_#..B+.#..C+.#..D+.#..E+.$..F+H$..G+W$..H+^$..I+`$..J+i$..K+q$..L+t$..M+y$..N+\|$..O+.$..P+.$..Q+.$..R+.$..S+.$..T+.$..U+.$..V+.$..W+.$..X+.$..Y+.$..Z+.$..[+.$..\+.%..]+.%..^+.%.._+:%..`+a%..a+.%..b+.%..c+.%..d+.%..e+.%..f+.%..g+.%..h+.%..i+.%..j+.%..k+.%..l+.%..m+.%..n+.%..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ru.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	74285
Entropy (8bit):	4.902693906443642
Encrypted:	false
SSDEEP:	1536:UqgKW7SujESvL7dM7JOEo0tJotLVn0UItiy:UqgKWuujESvL7dM7JOEo0t6tLVn0UIp
MD5:	6CC147FF2E74EB4640A65E42F45459E1
SHA1:	11EAA5D4229173CFC621533F04FF11AC5AD31B59
SHA-256:	2A78C7B704CD403D488D7163BF13BE9C0CC61B7647A0F8FC832111807748756B
SHA-512:	9EB211149B22328194854680E2B7ED59CE3F440138A063E75AFB9C259B5223657625FCD644A76ABD0ADB4752C1738330488DF2F7291CCBE9EE620FAFEF275E6B
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........\.........\.........1........."....+.....+.....+G....+.....+.....+.....+. ...+C!...+."...+."...+m#...+.$...+.$...+0%...+.%...+.%...+.%...+.%...+.&...+!&...+2&...+e&...+z&...+.&...+.&...+.&...+.&...+.&...+.&...+.'.. +.'..!+.'.."+F'..#+u'..$+.'..%+.'..&+.'..'+.'..(+.'..)+.'..+.'..++.(..,+1(..-+L(...+](../+n(..0+.(..1+.(..2+.(..3+.(..4+.(..5+.)..6+Q)..7+.)..8+.)..9+.)..:+.)..;+...<+Q..=+l..>+...?+...@+M+..A+.+..B+.+..C+.,..D+m,..E+.,..F+.,..G+.,..H+.-..I+.-..J+!-..K+/-..L+2-..M+@-..N+C-..O+b-..P+e-..Q+w-..R+{-..S+.-..T+.-..U+.-..V+.-..W+.-..X+.-..Y+.-..Z+.-..[+.-..\+(...]+6...^+B..._+]...`+....a+....b+....c+....d+....e+....f+....g+....h+....i+....j+....k+./..l+./..m+./..n+./..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\sk.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	49566
Entropy (8bit):	5.649480060868657
Encrypted:	false
SSDEEP:	1536:W1hK+CGWCIvmsBTYpPnQnKQYwoqcHCY9O:WfK+CGv5sBT/KBwoqcHCY9O
MD5:	BD272AA038831BDA0CDFAB443849ABBD
SHA1:	176EED55B1668CA157E122941424C69017191C04
SHA-256:	AE2E05D6D0EA5A4BB798B550CB19FFEB6A940CBD9FC791F73DDAABBEE80F1423
SHA-512:	B352DCD8D926FAE34BEC5F014B4E1CBB4378F8FFC742C423F00C032F19DD8188F503989D6AB065E01125D31434A30B8FBF39809B321666B721F0A9D9439D19D5
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........1....}..............P..............+8....+.....+.....+&....+n....+.....+<....+.....+.....+~....+.....+) ...+y ...+. ...+!...+.!...+4!...+>!...+\!...+k!...+z!...+.!...+.!...+.!...+.!...+.!...+.!...+.!...+.!...+.!.. +."..!+.".."+#"..#+:"..$+F"..%+R"..&+V"..'+\"..(+c"..)+u"..+."..++."..,+."..-+."...+."../+."..0+."..1+."..2+."..3+."..4+.#..5+6#..6+U#..7+q#..8+.#..9+.#..:+.#..;+.#..<+.#..=+.$..>+-$..?+E$..@+o$..A+.$..B+.$..C+.$..D+.$..E+.%..F+G%..G+W%..H+\%..I+^%..J+f%..K+o%..L+r%..M+u%..N+x%..O+}%..P+.%..Q+.%..R+.%..S+.%..T+.%..U+.%..V+.%..W+.%..X+.%..Y+.%..Z+.%..[+.%..\+.%..]+.%..^+.%.._+.&..`+$&..a+E&..b+Z&..c+a&..d+g&..e+o&..f+{&..g+.&..h+.&..i+.&..j+.&..k+.&..l+.&..m+.&..n+.&..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\sl.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	46447
Entropy (8bit):	5.387229306576715
Encrypted:	false
SSDEEP:	768:RJQzdRo71JjG1S6nIDOtop30QqJ2BQdPyGTTXwlTN:RJt7/KnIDOGZ0QrMPyGTTX2Z
MD5:	A163522503DEE64ED9165D7810FC2ECC
SHA1:	BF0E8E185139D56B97812B2696267474EA5DB540
SHA-256:	51CDE2E6665ACEF0AB30C165006A6105B0F41235D050A4F1B6C5EE7395959ADB
SHA-512:	CB2C2C3B2A8D8ED9121ADEB57C223E87AFA21A79F519C8BBA20FFE7F98BA57E66D3A226E971A96E9484130F0835D037F068E871AA8069F920AE9B90A9E696613
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........8....s..............8..............+.....+\....+.....+.....+1....+.....+.....+(....+.....+.....+&....+z....+.....+6 ...+. ...+. ...+. ...+. ...+. ...+. ...+. ...+.!...+.!...++!...+9!...+G!...+S!...+Z!...+d!...+i!.. +s!..!+{!.."+.!..#+.!..$+.!..%+.!..&+.!..'+.!..(+.!..)+.!..*+.!..++.!..,+.!..-+.!...+.!../+.!..0+.!..1+."..2+."..3+."..4+("..5+7"..6+S"..7+l"..8+."..9+."..:+."..;+."..<+."..=+."..>+."..?+.#..@+/#..A+B#..B+i#..C+.#..D+.#..E+.#..F+.#..G+.#..H+.$..I+.$..J+.$..K+.$..L+.$..M+%$..N+($..O+-$..P+0$..Q+3$..R+7$..S+<$..T+J$..U+Y$..V+f$..W+s$..X+x$..Y+.$..Z+.$..[+.$..\+.$..]+.$..^+.$.._+.$..`+.$..a+.$..b+.$..c+.$..d+.$..e+.$..f+.%..g+.%..h+.%..i+"%..j+'%..k+,%..l+1%..m+6%..n+<%..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\sr.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	72828
Entropy (8bit):	4.8298098798354605
Encrypted:	false
SSDEEP:	1536:rBbH88/1k1JVNLHCWk2p8kFmSmndpyDP+fwws1NW780Q+gtksaYI:FbH88tk1JVNHNk2p8kFhmdpyDP+fwwse
MD5:	00B884AEFAC9F3D2FF05F910491081B0
SHA1:	C74034C271D347A9A9F58058311ADEEEED8C7953
SHA-256:	A8BCBB49CF933F2BB74BB6536EB2EA38F5082C8558C7BBED6F2F5FA89B6D536B
SHA-512:	5A61A9DAC4DCCE176CF31E690DA5DD899A4C74920F46BB7FC9C378508811FE8FC8C1E94E7F36A401EE7ED1FEA03BF49868B23E7302E27FAFB86AAA83DA2C3188
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........D..............Y..............z....+.....+.....+e....+.....+.....+h....+.....+N....+.....+* ...+. ...+. ...+T!...+.!...+."...+'"...+/"...+="...+j"...+."...+."...+."...+."...+.#...+:#...+[#...+r#...+.#...+.#...+.#.. +.#..!+.#.."+.#..#+.#..$+.#..%+.$..&+.$..'+.$..(+<$..)+Y$..+r$..++.$..,+.$..-+.$...+.$../+.$..0+.$..1+.$..2+.%..3+.%..4+5%..5+R%..6+}%..7+.%..8+.%..9+.%..:+.&..;+.&..<+L&..=+e&..>+.&..?+.&..@+.&..A+.'..B+_'..C+.'..D+.'..E+.'..F+1(..G+J(..H+V(..I+d(..J+p(..K+~(..L+.(..M+.(..N+.(..O+.(..P+.(..Q+.(..R+.(..S+.(..T+.(..U+.(..V+.)..W+!)..X+&)..Y+2)..Z+4)..[+7)..\+@)..]+J)..^+T).._+z)..`+.)..a+.)..b+.)..c+.)..d+...e+...f+...g+=..h+A..i+F..j+K..k+P..l+U..m+Z..n+`..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\sv.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	43700
Entropy (8bit):	5.368395226799122
Encrypted:	false
SSDEEP:	768:uBpgKmbIB5nC1XIvIb4COmX/wrJxiEnlG2qmznRMX1tTTbCp:uMVIvIb4C9I9xi+lflnRMX1trCp
MD5:	F7E36957C30DFE2BD84D0E4CAEB38665
SHA1:	8DEF0BBC31904575C554C6197331213D4F206B89
SHA-256:	7A5E440B0A92D28BE0F09A506011904C7869D3525EA9B401DCBD74926B20BFA6
SHA-512:	00FF87994062B22B7F5CB16925237D5AF48160D999F23200398F07608C0045C540A8C59715CEC3373A23668816F091D1C99ABDAD0A9AC2F85743CAB14D5EE7B5
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........$....S........................:....+d....+.....+.....+.....+.....+I....+.....+.....+.....+.....+N....+.....+.....+.....+D....+H....+M....+R....+c....+m....+y....+.....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+!...'+(...(+/...)+8...+J...++Z...,+f...-+r....+y.../+....0+....1+....2+....3+....4+....5+....6+....7+....8+. ..9+# ..:+- ..;+@ ..<+j ..=+{ ..>+. ..?+. ..@+. ..A+.!..B+9!..C+S!..D+.!..E+.!..F+.!..G+.!..H+.!..I+.!..J+.!..K+.!..L+.!..M+.!..N+.!..O+."..P+."..Q+."..R+."..S+."..T+!"..U+"..V+/"..W+5"..X+:"..Y+C"..Z+E"..[+H"..\+P"..]+U"..^+[".._+g"..`+v"..a+."..b+."..c+."..d+."..e+."..f+."..g+."..h+."..i+."..j+."..k+."..l+."..m+."..n+."..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\sw.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	43959
Entropy (8bit):	5.250369747283921
Encrypted:	false
SSDEEP:	768:QF0e4sBkyjRCWl9BiIMjuVilk/ceTphWz+sAjPhOTmLfn7oeyRad6FvRjVHygWT:dvxyjoWlHxhOT8mPVHyH
MD5:	3349962C8302CCF02250964B9E16DFD9
SHA1:	890073D6DBDAE60FAAE25913DFF3689BB3E63A98
SHA-256:	D76D7BCE5CE4CC34C94A496C1CD25851036BB3E2236AEE8B2D7DE2942F41F93A
SHA-512:	7A6E25CC8244E803465506818083AC072AF623210FFA779FEC986195BF6087BF15C9A17410C91395A47484F9A50DD946EDFBA57B6D6CD836279C3168886AC7B7
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........,....[........................F....+k....+.....+.....+.....+.....+S....+.....+.....+.....+N....+.....+.....+.....+G....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+#....+(....+-... +4...!+9..."+@...#+P...$+_...%+l...&+r...'+w...(+....)+....*+....++....,+....-+.....+..../+....0+....1+....2+....3+....4+. ..5+( ..6+B ..7+\ ..8+x ..9+. ..:+. ..;+. ..<+. ..=+. ..>+.!..?+#!..@+V!..A+t!..B+.!..C+.!..D+.!..E+."..F+<"..G+F"..H+K"..I+O"..J+U"..K+Z"..L+]"..M+d"..N+g"..O+m"..P+q"..Q+w"..R+{"..S+."..T+."..U+."..V+."..W+."..X+."..Y+."..Z+."..[+."..\+."..]+."..^+.".._+."..`+.#..a+.#..b+&#..c+-#..d+3#..e+;#..f+C#..g+O#..h+S#..i+X#..j+]#..k+b#..l+g#..m+l#..n+r#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ta.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	111763
Entropy (8bit):	4.119643067690597
Encrypted:	false
SSDEEP:	1536:3B2Q1UOIPUN9HGX2S3e6SpeiMC5ydLtZW0wQbQX5QNQKogKW+XbWsyWtjWYnpJYj:3TgX24
MD5:	CEE22DD06699F093804E4CC822403392
SHA1:	60B06291D29BC1588D83159058CCA44A352D5D6A
SHA-256:	80B46F4E73ECFF553FF815A0D406C9ED2C3D002909F1C1B2B57CDE95D3FE3E2F
SHA-512:	5291234C2534C2B256AD13B8F0C6B978A45A0886848B52D300F9D3988B1ADC5B2A26015D9C3729D55F880B744856128C35605D64D3366D0B6F28F4FF48644297
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........?...................k..............+f....+.....+.....+G....+.....+.....+f....+.....+l....+.....+C ...+. ...+7!...+.!...+."...+."...+/"...+="...+}"...+."...+."...+D#...+.#...+.#...+.#...+.#...+0$...+K$...+`$...+l$.. +.$..!+.$.."+.$..#+.$..$+.%..%+)%..&+5%..'+A%..(+l%..)+.%..+.%..++.%..,+.&..-+=&...+\&../+o&..0+.&..1+.&..2+.&..3+.&..4+.'..5+H'..6+.'..7+.'..8+)(..9+y(..:+.(..;+.(..<+2)..=+i)..>+.)..?+...@+...A+...B+v+..C+.+..D+N,..E+.,..F+.-..G+--..H+R-..I+[-..J+w-..K+.-..L+.-..M+.-..N+.-..O+.-..P+.-..Q+.-..R+.-..S+.-..T+.-..U+.-..V+....W+J...X+O...Y+d...Z+f...[+i...\+r...]+{...^+...._+....`+./..a+Y/..b+./..c+./..d+./..e+./..f+./..g+./..h+./..i+./..j+./..k+./..l+./..m+.0..n+.0..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\te.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	102971
Entropy (8bit):	4.308998063644209
Encrypted:	false
SSDEEP:	768:F8YlwYAnHfqlWCKeK8Agjf+9PzqeNWa+MfxYvYu5L/TMPNiqy9jcIq9ZVYSQ+d7w:dqjn6BAJ+KPNi+p9hq7HrwhIB
MD5:	B0C9B3CA840CADB88394128A2270A648
SHA1:	D242F4690DA8DFCD05D2620273848406E8F4A4D4
SHA-256:	0D3D78DD76F894242FEFD80D239F0F4B3052E2895AADDAA7E7E9AD640D6BF5D8
SHA-512:	F959B0592C701BD7DA7BF7A286FA11F07990566066D9A5A679A696F306E3DEC699DDE07880F5685DA0B45C02A714B681884209F7265CCE2B8F4E844CC33FFC35
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#m.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)-....)8....)G....)L....)R....)[....)e....)k....)x....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........3....x..............C..............+2....+.....+.....+.....+\....+.....+h....+.....+.....+. ...+. ...+. ...+A!...+.!...+.!...+."...+."...+'"...+d"...+."...+."...+.#...+>#...+m#...+.#...+.#...+.#...+.$...+.$...+1$.. +X$..!+.$.."+.$..#+.$..$+.%..%+%%..&+.%..'+=%..(+V%..)+~%..+.%..++.%..,+)&..-+k&...+{&../+.&..0+.&..1+.&..2+.&..3+.'..4+9'..5+m'..6+.'..7+.'..8+U(..9+.(..:+.(..;+.)..<+{)..=+.)..>+...?+Q..@+...A+.+..B+t+..C+.+..D+),..E+m,..F+.,..G+.-..H+.-..I+7-..J+Y-..K+q-..L+t-..M+.-..N+.-..O+.-..P+.-..Q+.-..R+.-..S+.-..T+.-..U+.-..V+.-..W+....X+....Y++...Z+-...[+0...\+9...]+E...^+W..._+....`+....a+....b+./..c+%/..d++/..e+3/..f+=/..g+F/..h+J/..i+O/..j+T/..k+Y/..l+^/..m+c/..n+i/..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\th.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	91898
Entropy (8bit):	4.375847425968603
Encrypted:	false
SSDEEP:	1536:FjhWt3hRbKDWhOyF7IqfrmMp8iReeyiPIiSztED:F6RbKDW3F7DfrmMp8iRee7UtED
MD5:	F836E6CC433D1144620B7774F3230EFE
SHA1:	1FE000B10EB44DF261FB346DFBF4E294EB0BEC8A
SHA-256:	75D3BD312D2CEF6A0F24A57DDAED316E34BA38B791E14B25B173E896A5431D4F
SHA-512:	856C1807E1F64B6B0985734C7C2AD09EF7D956766A64C9148DEECB66F40E52BC5386ABED325CCB1D69282F209BA0C8408A972B48E9B30AB46545616815D39360
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#`.../#q...0#t....)w....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)1....)7....)@....)J....)P....)]....)e....)k....)x....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..............o..............&..............+.....+v....+.....+.....+E....+.....+.....+h....+.....+....+z....+.....+d ...+. ...+I!...+[!...+\|!...+.!...+.!...+.!...+."...+V"...+}"...+."...+."...+."...+."...+.#...+.#...+.#.. +.#..!+"#.."+4#..#+^#..$+s#..%+.#..&+.#..'+.#..(+.#..)+.#..+$$..++H$..,+f$..-+~$...+.$../+.$..0+.$..1+.$..2+.$..3+.$..4+.%..5+&%..6+n%..7+.%..8+.%..9+.%..:+.%..;+(&..<+.&..=+.&..>+.'..?+B'..@+.'..A+.'..B+S(..C+.(..D+.)..E+R)..F+.)..G+.)..H+.)..I+.)..J+.)..K+...L+...M+...N+...O+-..P+0..Q+3..R+7..S+<..T+W..U+o..V+...W+...X+...Y+...Z+...[+...\+...]+...^+.*.._+'+..`+d+..a+.+..b+.+..c+.+..d+.+..e+.+..f+.+..g+.+..h+.+..i+.+..j+.,..k+.,..l+.,..m+.,..n+(,..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\tr.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	46294
Entropy (8bit):	5.523819991958526
Encrypted:	false
SSDEEP:	768:hjF0h4hQOnNYV6AlIOdIsLpLj3cLhMVinZNHzupDshvrgapqSWO0r2he4GKHWotX:TrCvV6AiOdIs8W4NHzsDs+SNDhJGK2ol
MD5:	034CBCB6D790B30C617E3A895D7B06EB
SHA1:	63DF99CD38FC2BE9BDFD7FAA32EE00C0C857F190
SHA-256:	ADAF6A166E9A0DDCBC244A7E3AA61D5CD8D305F974AC24C1350914220D9D67D9
SHA-512:	F6FC957CA4D8B742384EDA31B65E2BBB286ECFAB8A8F6375FB5DD4388B74D5D44C6BCFD51E9C30E01EC442E27F06C281D85495105ABA0625ABA436C433ED067F
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........$....Q....~...................4....+[....+.....+.....+.....+.....+7....+r....+.....+.....+.....+K....+~....+.....+.....+.....+.....+ ....+&....+?....+L....+]....+y....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+....'+....(+!...)+...+6...++C...,+R...-+b....+j.../+n...0+v...1+....2+....3+....4+....5+....6+....7+....8+. ..9+) ..:+5 ..;+= ..<+[ ..=+d ..>+. ..?+. ..@+. ..A+. ..B+. ..C+.!..D+?!..E+S!..F+}!..G+.!..H+.!..I+.!..J+.!..K+.!..L+.!..M+.!..N+.!..O+.!..P+.!..Q+.!..R+.!..S+.!..T+.!..U+.!..V+.!..W+.!..X+.!..Y+.!..Z+.!..[+.!..\+."..]+."..^+.".._+'"..`+>"..a+R"..b+a"..c+h"..d+n"..e+y"..f+."..g+."..h+."..i+."..j+."..k+."..l+."..m+."..n+."..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\uk.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	77049
Entropy (8bit):	4.908643870405628
Encrypted:	false
SSDEEP:	1536:+fPORoE+KZ9FfrBmohrMVkSpqMaDDDvobCaftDQIMVUMTEb4USI:+fWR7BmoZMVkSpPaDDDvobCaVQIMVUMC
MD5:	879BCA053BA87F9A8BF03CB46438188F
SHA1:	9F8A48A8C0BB6DC40A579888F664DD9060B9BB4B
SHA-256:	6B12D2D25AA996DBEFD4AF3D02B12EED86ECD8B75B8E8CADC317C13CFCBF5144
SHA-512:	DCAD289D91C8B05A3C8C5307BB63EFCFF973944CAB9DE98ED961CAEA44B1AA816A73F20F710FF9BA7F48C28FBF3F9A60FD049F227B59EC3B1A031DCD5E8898F1
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........>.........4........................+{....+.....+u....+.....+=....+.....+. ...+.!...+c"...+;#...+.#...+f$...+.$...+z%...+.%...+.&...+.&...+%&...+N&...+_&...+p&...+.&...+.&...+.&...+.&...+.'...+.'...+4'...+F'...+T'.. +d'..!+v'.."+.'..#+.'..$+.'..%+.'..&+.'..'+.'..(+.(..)+.(..+<(..++[(..,+x(..-+.(...+.(../+.(..0+.(..1+.(..2+.(..3+.)..4+=)..5+v)..6+.)..7+.)..8+%..9+Z..:+...;+.*..<+ +..=+T+..>+.+..?+.,..@+.,..A+.,..B+Z-..C+.-..D+....E+T...F+....G+....H+./..I+./..J+ /..K+./..L+1/..M+?/..N+B/..O+a/..P+d/..Q+g/..R+k/..S+p/..T+./..U+./..V+./..W+./..X+./..Y+./..Z+./..[+./..\+./..]+./..^+.0.._+,0..`+\0..a+.0..b+.0..c+.0..d+.0..e+.0..f+.0..g+.0..h+.0..i+.0..j+.0..k+.0..l+.0..m+.0..n+.1..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\vi.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	53252
Entropy (8bit):	5.738733398382373
Encrypted:	false
SSDEEP:	1536:d7mibcX2/NbqGNUlBTi99me8PNqM8NJYBCjlndx4C5se:d7mibcmd5CBO99OlqM8NJYB4tdX5z
MD5:	A2A7153A8B15820D1CA5BE492B4D9600
SHA1:	0FC2FA180C5785CE1432D19C0DB1ED56B2CE25E9
SHA-256:	6016D121F8A5A6286C54CC27509AF0B4DE0C4C229E8D69CEE6AF437F6ADEE2EF
SHA-512:	47B7B5E35859AE2CEF31711DEECCA342F31DD806C6730BF5B951B50E98EFD5F49481502B5D71F43C7A2B6B8C9D76E1A51D28B5C29EE47CA12439031577712353
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........(....S....~...................4....+]....+.....+.....+.....+.....+H....+}....+.....+.....+.....+L....+.....+.....+.....+;....+C....+K....+T....+t....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.... +!...!+..."+6...#+H...$+Y...%+k...&+w...'+....(+....)+....+....++....,+....-+.....+..../+....0+....1+....2+....3+. ..4+. ..5+. ..6+4 ..7+L ..8+Z ..9+j ..:+} ..;+. ..<+. ..=+. ..>+.!..?+3!..@+q!..A+.!..B+.!..C+.!..D++"..E+J"..F+."..G+."..H+."..I+."..J+."..K+."..L+."..M+."..N+."..O+."..P+."..Q+."..R+."..S+."..T+."..U+.#..V+.#..W+-#..X+2#..Y+=#..Z+?#..[+B#..\+K#..]+W#..^+k#.._+.#..`+.#..a+.$..b+0$..c+7$..d+=$..e+E$..f+O$..g+]$..h+a$..i+f$..j+k$..k+p$..l+u$..m+z$..n+.$..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\zh-CN.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	39499
Entropy (8bit):	6.625621251903422
Encrypted:	false
SSDEEP:	768:ijLnM3CfIIEafX6IWAepsuTaEa/g1rlW9HJFlzukK1TPAaIXoaRz:KOoIIEaSupf/g1eTZ
MD5:	C3FD82EC2CDDCF7192E9DE8D9834DBC5
SHA1:	F4CDB9879DEEF57D188B859744E4B1BADFCA7EDC
SHA-256:	77650516087C2A6C43E7B775BEB8148D8F9E6906DBE6BBCF5C3678FCBC02FA9A
SHA-512:	0542ACD610C055FCF68E5C94A616DF4B1FB0A0684B9C168F158E2AC97F1ED830FE68753C215D2837BE0C5553CB5CF0F3522AA7990E6C91995A7F85293FADFE8E
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#\|.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....)....)/....)>....)I....)X....)]....)c....)l....)v....)\|....).....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........8...._........................<....+g....+.....+.....+.....+.....+>....+s....+.....+.....+"....+T....+.....+.....+.....+.....+.....+.....+$....+3....+?....+N....+i....+x....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+....'+....(+....)+....+ ...++,...,+8...-+D....+N.../+X...0+b...1+l...2+v...3+....4+....5+....6+....7+....8+....9+....:+....;+....<+. ..=+. ..>+( ..?+7 ..@+[ ..A+j ..B+. ..C+. ..D+. ..E+. ..F+. ..G+. ..H+. ..I+. ..J+.!..K+.!..L+.!..M+.!..N+.!..O+.!..P+.!..Q+.!..R+.!..S+$!..T+0!..U+<!..V+H!..W+T!..X+Y!..Y+_!..Z+a!..[+d!..\+j!..]+p!..^+v!.._+.!..`+.!..a+.!..b+.!..c+.!..d+.!..e+.!..f+.!..g+.!..h+.!..i+.!..j+.!..k+.!..l+.!..m+."..n+."..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\zh-TW.pak Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	40229
Entropy (8bit):	6.614771767564868
Encrypted:	false
SSDEEP:	768:wolbXBdh4+Jt8IIqIhGa1bfe0wvRtMDZ8KtZPqdjryEfv11JxzdXcHKh1COQPLsj:worAI8IIqIcATwvRtMDVIjB1LxzdX+K9
MD5:	1A09C6B7412B2A5D7F1B379DD4FCBA1B
SHA1:	58AC3377BCBC8FDA31A0F77809128C9F0ECD82C5
SHA-256:	1F4B6A83D0E2CCEBB596D010F5146FE3A45FCADCEF786D696479E33BE8C9C905
SHA-512:	A444B9AD2F7F9F7C3FA20537B6385D2C31D9674E1B9BD02A5F018BED6877145EC1CF8497A51E48C77DEA64441EA5190BCB45DAD87ACC91CDAAB7525F463FD9E9
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#..../#....0#.....).....).....).....).....).....).....).....).....).....).....)%....)0....)8....)G....)L....)[....)f....)u....)z....).....).....).....).....).....).....).....).....).... )....!)....")....#)....$)....%)....&)....')&...()(...))...),.........U....\|...................,....Y....+.....+.....+.....+.....+&....+[....+.....+.....+.....+?....+q....+.....+.....+.....+,....+2....+8....+@....+O....+[....+j....+.....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+....'+....(+...)+6...*+B...++N...,+Z...-+f....+p.../+z...0+....1+....2+....3+....4+....5+....6+....7+....8+....9+. ..:+. ..;+. ..<+) ..=+/ ..>+J ..?+_ ..@+. ..A+. ..B+. ..C+. ..D+. ..E+.!..F+"!..G+(!..H+.!..I+4!..J+:!..K+@!..L+C!..M+F!..N+I!..O+O!..P+R!..Q+X!..R+\!..S+a!..T+j!..U+s!..V+\|!..W+.!..X+.!..Y+.!..Z+.!..[+.!..\+.!..]+.!..^+.!.._+.!..`+.!..a+.!..b+."..c+."..d+."..e+."..f+&"..g+8"..h+<"..i+A"..j+F"..k+K"..l+P"..m+U"..n+]"..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\natives_blob.bin Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	412130
Entropy (8bit):	5.59191728172975
Encrypted:	false
SSDEEP:	12288:ln3Cj7CQaMiyMzQ77Ua7Zm6ap4avfyM3G:lnk7CQWfy9
MD5:	8F4D6515F4D321313A39A659C3C5FF01
SHA1:	F4C95F1ABD24C715A3DD4B3E4C9CFF5DECDA7250
SHA-256:	7D9C0C4D88618BDD16BB0681FDEC1DD736E2ED1141AE527A27B22FB93F27848F
SHA-512:	3C00EB9A8CA8D076140DF0071CFA702E1C032EDBC20481BB7F7B7A88C1A82C959B8AC901182C2F9D235F55B4528C8E12B1E765119F1E784645C61F66C1C2B007
Malicious:	false
Preview:	..mirrors.t..(function(a,b){."use strict";.var c;.var d=a.Array;.var e=a.isNaN;.var f=a.JSON.stringify;.var g;.var h;.var i;.var j=a.Math.min;.var k=b.ImportNow("promise_status_symbol");.var l=b.ImportNow("promise_value_symbol");.var m;.var n;.var o;.b.Import(function(p){.c=p.ErrorToString;.g=p.MakeError;.h=p.MapEntries;.i=p.MapIteratorNext;.m=p.SetIteratorNext;.n=p.SetValues;.o=p.SymbolToString;.});.var q={.UNDEFINED_TYPE:'undefined',.NULL_TYPE:'null',.BOOLEAN_TYPE:'boolean',.NUMBER_TYPE:'number',.STRING_TYPE:'string',.SYMBOL_TYPE:'symbol',.OBJECT_TYPE:'object',.FUNCTION_TYPE:'function',.REGEXP_TYPE:'regexp',.ERROR_TYPE:'error',.PROPERTY_TYPE:'property',.INTERNAL_PROPERTY_TYPE:'internalProperty',.FRAME_TYPE:'frame',.SCRIPT_TYPE:'script',.CONTEXT_TYPE:'context',.SCOPE_TYPE:'scope',.PROMISE_TYPE:'promise',.MAP_TYPE:'map',.SET_TYPE:'set',.ITERATOR_TYPE:'iterator',.GENERATOR_TYPE:'generator',.}.var r=0;.var s=-1;.var t=[];.var u=true;.function MirrorCacheIsEmpty(){.return r==0&&t.length==

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\pepflashplayer.7z Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	7-zip archive data, version 0.4
Category:	dropped
Size (bytes):	7086750
Entropy (8bit):	7.9999693736939
Encrypted:	true
SSDEEP:	196608:98mpL8l6iIUt3Lh3LOnk/86nZ1/VH1j3BF84D:9LY6Zs13LOk/8GbH84D
MD5:	F541D00B14B9C08873D92077566FF63D
SHA1:	3E5610A7547FA6F852EC5959C9234BF1363A8877
SHA-256:	B8AB60859626690078BFC50645C33AE57E8CFDD597E5BF6BE33CC869452EB83A
SHA-512:	4B27AA7ADC65D2439F1C8F56D122BC91AC8929D59C9688B4578404D6F07CC6915833C932C43A18FB3BA1C089DA1E31D9F230637CC42CAB994B887FBB45D18541
Malicious:	false
Preview:	7z..'.......!l..................V..].&..p.........../D.N...'.J.u..a.s'..N/:.lz..........q.+.....S..U.^dq..~@..9en...@...~.}.6..)...{.....q..[u.N...v\.....3c....R.b_.\|wi...^=.Y0.../>.......D.\|UvQAnk.]....>......)G?............v.v..F.!.....b..9...IB..wg....q...LX.#.).S. .../.".pZ.......KSjM.L.(..{Ue.kF....BI.%O..$........Z.b,K...V....v3!:..p.#..G4.'...{.......4..aE1...s.0n.7...1N..........mc..3..y<...-......y...$.J,."...{<R.!...Z.`........<.8z13.&..jg............&..l.@.).c.N.:B.F...cJ....+.K..>.l.]..G1.u:....D3.e..N..>.S...h!e..].S..<..7)....H...Eb/......`=......E.....=3C...q$a....=..0..\|F.D...s...u....C.....K...^.w....4.c.>r..'ds..!.{].T...?>...?I..V..c8.V2....lf.V(....S.e..k]A........b.\..<.U.z.&....L......j....4...5.'`..K....108]........s8g..M.w/......8..../s..C..<...Uy@.{8.@.<.W..v....y.h...X...........Y>(..R..kT..U...t.,H.../..p..;.II.5El+..........)..z...2. ....<.L..T.7....V.Mj.....\|%szE........u.o......^...Cz...YH...g..6.Q.....%.s

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\pepflashplayer.dll Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	17848280
Entropy (8bit):	7.104578280343441
Encrypted:	false
SSDEEP:	393216:CzvAuAbPuXsTsaf7YQhvfod1zLH/mjxzSjj4rZUoZNH:Czv7AbPVfjed1zrAFJ+I
MD5:	6329CBE4B7487A6A4DFC000260F43219
SHA1:	2D33F64AFD22E5C7FF75B4361BE9D4B2EA9B64E6
SHA-256:	F6C41358472AE14914ECCF3E3CBD4688330E7F3E7A741C3CC71C4E3FC4BABAB4
SHA-512:	6346DDF3AFA8E905B7FED04A669D1A080C596D6ADA3ED0C49080A2E267CFBC341A81AF415AA680A7A40966D827DF30B4A665AE7DB9EAE85586BBB4DBAEEBA97F
Malicious:	false
Preview:	MZ......................@...................................X...........!..L.!This program cannot be run in DOS mode....$..........v.hq%.hq%.hq%..%.hq%..%ahq%..%.hq%@3t$.hq%y..%.hq%:.%.hq%.3r$.hq%.3t$.hq%.3u$.hq%.hq%.hq%v3u$.kq%V1u$.hq%.5u$.hq%y..%.hq%V1t$.hq%...%.hq%y..%.hq%.hp%.iq%v3t$.mq%v3q$.hq%v3.%.hq%.h.%.hq%v3s$.hq%Rich.hq%........PE..L......X...........!..........Z.....H........................................P............@.........................`...E.......,........................;...... ....$..T....................$......h$..@............................................text...\........................... ..`.rodata............................. ..`.rdata..0.6.......6.................@..@.data....R.......t..................@....tls.........`.......L..............@....gfids.......p.......N..............@..@.rsrc................R..............@..@.reloc.. ............\..............@..B........................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\snapshot_blob.bin Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	data
Category:	dropped
Size (bytes):	486072
Entropy (8bit):	5.837702590012418
Encrypted:	false
SSDEEP:	6144:h5a2x1hJCulzMq2+ok7G6RzkkR1Kjg2zE7TGrG2:/a2XfMq2+93zk41Cg2zE7R2
MD5:	594F4B02C26E84837108E2B9CC894D39
SHA1:	BEE0E10F6547D76BF91520F689429D87BC5B6431
SHA-256:	8DBD2F8C3708611755D103C3776B31C8A9F62E2408D0CB9F670BD79CF2F5A7D4
SHA-512:	BB9F472501658E2D6E61720627E79D543D4C982B512F4806070587D78060B97E79D199995FBC8DF39BCE5DE553A0F08023D40127876AA9CDBB6069DF0179D194
Malicious:	false
Preview:	....P....s..L.............f.............."...s...............:....\|...................,.,.,....,...... ....,........... ............,............ .........................................,...`........ .................rR......null..........."......object................................ .................,............ .................,............ .................,............ .....................,........... .....................5.H....undefined...~...,...D........ ..........................\........,........... ....................J.Z.....hole...............,........... ..........................true.........VR).....boolean................t.....false...................>5....................,.,....*...... ...................."M.8....uninitialized...............,.....-...... .................,............ .................,.....1...... .....................,............ ..................,............ .................,...&........ .................,...j........ ..............

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\version.txt Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	15
Entropy (8bit):	2.606238928653389
Encrypted:	false
SSDEEP:	3:SQkVVUrT:SQk/UrT
MD5:	CCDFF7DCE4B97B49AB39ED7B1AB98A13
SHA1:	38F8C5DE77ACD49C21F085ABDA7DA47D4B1CC28B
SHA-256:	07313E6077FF97BFF7503339EC15F737B8E54170FAFBD83CCB482074495E8CC1
SHA-512:	A79026C47F65D25F52AF796FF0C2419F7C1AFD2F95003EB093B40F46AB3F8461ED2535A4206955DBEBDA3ED0DA32A10A7A1470FA5F3E329F2F9A3AFE383FD3A0
Malicious:	false
Preview:	1.5019.1001.226

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\widevinecdmadapter.dll Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	232960
Entropy (8bit):	6.6918460017971
Encrypted:	false
SSDEEP:	3072:WneZIFk4WA3BiLvZT0lxJqFpd7YIRf6uIvTsPVd6Ag0Fujbkmf7WuJmbIrF0:We6dEcJqFpSIJMLAOjgbJ
MD5:	1775B40455C7F12D9261EAE9D9A2D2D7
SHA1:	68A4C8D424C6ADD253A161037CDF178D0BFCCCBB
SHA-256:	9CAFD68D4E23AE8FCB2E766175B3E5B5EA6519295365D4D8A0937D6063FAD378
SHA-512:	80CEB96F1AD6F1A2AF362CAF40AE64CB13671DB77783800E18D5AEB3A93C3696A5AC642C59B64EFB2A1ED427BE5DDACB82D3884FEA3B147805AD1A5388A2FB60
Malicious:	false
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......%.&.a.H.a.H.a.H...K.m.H...M...H...L.w.H.Z.K.w.H.Z.M.R.H.Z.L.A.H...I.c.H..I.b.H.a.I.;.H..M.z.H..H.`.H....`.H.a...`.H..J.`.H.Richa.H.........................PE..L.....l\.........."!........."...............@.......................................[....@.....................................<....`...............V..h7...p..l#..@...8...........................x...@............@..@............................text....,.......................... ..`.rdata.......@.......2..............@..@.data...\.... ......................@....gfids.......@....... ..............@..@.tls.........P.......$..............@....rsrc........`.......&..............@..@.reloc..l#...p...$...0..............@..B........................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\wow_helper.exe Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	81920
Entropy (8bit):	6.403817477915499
Encrypted:	false
SSDEEP:	1536:9f77+031ru/qpap4qUqm+rIqRqEp+85LQyiL1LOFfv5:VWo1/op4qUqfrIkb+aLQPFOFp
MD5:	36029141D8CFEA329C99C319989A05B9
SHA1:	4AC51C1EE3C9E005053B2A628EE4A056ED4AAE53
SHA-256:	16100CE36243801D03F6E1B9D6B1C6924C7C71E928B8F9E7EB8EED2D8D2447E1
SHA-512:	C391A170B182F875E0FB04867FB3311CFD1AB65B71E812AC28A928DCEB9746870D9C9182B147DBB69E34334DE22FE3EA72D4C060263C511B5FE6A7131935DAB1
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........V...............................A.........................Rich...................PE..d...+..I..........#..........Z......0$.........@.............................P.......r..........................................................(....@..x....0..........h7..............................................................8............................text............................... ..`.rdata...8.......:..................@..@.data....#..........................@....pdata.......0......................@..@.rsrc...x....@......................@..@........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\helper.zip Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	Zip archive data, at least v2.0 to extract
Category:	dropped
Size (bytes):	565188
Entropy (8bit):	7.997954290127298
Encrypted:	true
SSDEEP:	12288:VXJtf4lfb8XhxLW3y44OzAOYSCPjaemeDTNJSQ:VZtf4lfbixLW3y44AQPjamSQ
MD5:	7BBF919AC238FE6AA103A8D70BFD278B
SHA1:	BE007E073C298327AD47A27BA4CB6741602F1819
SHA-256:	A63541E0913C172C717B0B897BC033585B0B5F1561CBD391AA856224C783A421
SHA-512:	47E34A7850A4CAEC144E7C34D752638C3B3537CAFDE790B9697944EABC688279D088CA58041D579DA34591F100C154F07F1486E45141ED9D23685478224EB0F3
Malicious:	false
Preview:	PK..........R.O..L\..........CefHelper.dll.]{\|T.?..$.,.........j4...&.M.........1.....%.]..0..z.-m.`K[.5mQ........,.......).....f.n.>.......({...1...o~3...:.(....AE.W._....)&E.2..!....^\o....,..IZE.C.....{......}...J.....^..i.>t.}W..<p.^F.Q.%.]1:..@.h.x....x..c..,{8e..9.W....U).....<.}..h.x~4z.(k...x>.te.U<W.....HG.......9..SF..`....S.r..._...P...d..P.c.M"..l<..8.._.(....S.l.H.....,....=...-.bC..Z.V..hQ.-..o.([...<y...[.;.A.y.7..iI.?......-. .D.Z".)..+..w7..$.w.i1G....W.d.K.S...x.[..5\]......V....g.%.....x....u...syL...........Zk..F3S.c.48.<.....,.>..2..,1K.....e...#8b...(.C:~.H..QJ..R.L.i24e.B..@h.....I.g'..c...\|...?.(r..A..R...m...Q....w.A..2&.W.F...s...{7m@.3...{5wo.{..I-.C.{...f....k-......-..S...f._u....v....W\|.L._...kw..j. ..'......U\|..._G......ul...=..M\|uY+.{...I...9..U.d-.&....v[2_....!.......6..6..L.[!.. aJ[.`2K.j..n...K\|.O.0yV...%L...U....IB..........m...G..t.`.&.>....+%L..O...O.<..3.....E.#<..#<.....Xc.gQ.....#<...(

C:\Users\user\AppData\Roaming\WdGame\Utils\uninst.zip Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	Zip archive data, at least v2.0 to extract
Category:	dropped
Size (bytes):	206387
Entropy (8bit):	7.997072984150373
Encrypted:	true
SSDEEP:	3072:fR2pzs2baNkoXroAbeush1720hq/elCKLmxM8QTFTc+5ZEPDvlgpbhZw4aaVctvg:Z2pA2bEzbv4EvelCwwQTuiOWlwD7o
MD5:	6ADAB4FFBC921966D0700953265D653B
SHA1:	57E72408CA98B39B7656B93F5E3FC3EE6ECC3170
SHA-256:	6B9461BD8D2EB0B8A2CDDC69E053CDD6C2D0959C332456B1750C173B09326FE0
SHA-512:	728C171DB7465416C20F1FD7A5B2DFE15D34E4DDF2B538A64FF903A6DB3BDD1D55998E2B5D1E05202EC86D83B800A61F4A4D91EB18EF30B170DB50216B95C7E9
Malicious:	false
Preview:	PK........Tp.RC..-.%..........Uninst.exe..\|T..?~w.IVX..7.5j.Uc.j0Q..0.l.......$j5.V1.......\.[i.O.?m.R...HP.... A.A..i;.T.F\$p.....&..{...........3...[r..)A.$..WUI..._.t.y:I.x.....g.Z..q...?Y.............~.=.z..+..{O.O.I/ZP...{......<^....?O../..%...rR...'.......-......N...................H....Nz.N.....cI...H.../..:...J...Y.....T.W'..$.WP....u.....u.R.w..-..#.u.u.-.......u.#. PF.^..%..zK.I.)gBQz.`-E..w.E...K....#Q..E..L.R...$JK...w....J........P.C..i.2.]+<...o......I../...v..t.v.h......Pn.e".....(I..616^.e..j......JO..WpY.]w....j.Hy....x.Go..........6+..RY.-...ccO.n@...Y....l..cI.......dn3.5.6..6.V.A..f.o..X..UZ..T.J.G).Y ...B.4V..ml~.seE.I.86...q.Xq6..e..+?N6..8y.'_...d..U.X..-2...]......;..mS?n.....y..<x......s.=.{..d3L.4...P6.P...I...?..c.._5..O.@.<.....?..F.G.V.i........(x.\|\>.._.v.....6..O.Z.H....r...u....m......+)x.T....:v...y..5..].k.5v..y..5......k..l.#.[m....3}.{...l........r..R+O%P.".A.'..Sd3M?.O..}...l.~B

C:\Users\user\AppData\Roaming\WdGame\smy\???.lnk Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Mon Jun 14 03:22:25 2021, mtime=Mon Jun 14 03:22:25 2021, atime=Mon Jun 14 03:22:21 2021, length=3826088, window=hideshowminimized
Category:	dropped
Size (bytes):	1915
Entropy (8bit):	3.4067857671626944
Encrypted:	false
SSDEEP:	24:8hEM33eyKs9LNHwH1XLAh/hTrhd9GrqWwhDyMBm:8p33eTs9LVyaNVVd9G2Ww9
MD5:	5B5EF3E2D6FAA4A0D26C65482DD75AB8
SHA1:	5D23160A5DFB2EDC45D04D1427B01E9FDD0E1F7B
SHA-256:	4C72735761592FE2F97645BC633A81328173A87F6959612605C99E08B5215F97
SHA-512:	657C9C4046C3C5F9538FD1D3FC4AD2966466A99E3B34063AAFF7B28810A2DC1A0F47153EBDE7E1346E13166408DE70BEFE2FDE5B14E5A2F0E18423FF2A4DE838
Malicious:	false
Preview:	L..................F.@.. ...U}...`../....`..1....`...a:.......................:..DG..Yr?.D..U..k0.&...&...........-..@yEY.....o...`......t...CFSF..1......N....AppData...t.Y^...H.g.3..(.....gVA.G..k...@.......N...R.".....Y....................yN\|.A.p.p.D.a.t.a...B.V.1......N....Roaming.@.......N...R.".....Y.....................K..R.o.a.m.i.n.g.....T.1......R."..WdGame..>.......R.".R.".........................CR..W.d.G.a.m.e.....J.1......R."..smy.8.......R.".R."............................s.m.y.....V.2..a:..R." .smy.exe.@.......R.".R."...........................k..s.m.y...e.x.e.......`...............-......._.............y.....C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe......\.s.m.y...e.x.e.).C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.R.o.a.m.i.n.g.\.W.d.G.a.m.e.\.s.m.y...-.-.u.n.i.n.s.t.a.l.l. .-.-.f.r.o.m.=.s.t.a.r.t._.m.e.n.u.1.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.R.o.a.m.i.n.g.\.W.d.G.a.m.e.\.s.m.y.\.s.m.y...i.c.o.........%APPDATA%\WdGame\smy\smy.ico......

C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3826088
Entropy (8bit):	7.662244076501359
Encrypted:	false
SSDEEP:	98304:e1wpL+yII5n5PIdtsnZ3BxtBQzjumyCzEpq/:Ow4g95PIP2PQuZQz/
MD5:	043662A4B5E44EB83CEC615F2A519906
SHA1:	A3445FE53782B10E5903E41CA8AF89FAAC192DF4
SHA-256:	1CDED2A6AD0CE1864580E179B9DDD2A5EEC787E96236BC8EB0CDB61CE47A137C
SHA-512:	C12C0C0D356D81E085DF20CF6BBCB9ABE44F99051B235B249C3596A4AD9E18FD415CC506AFD452C82F4603B8940C3F61DCA82841C79918E7A883F0A64FF9FA3B
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...................................X...........!..L.!This program cannot be run in DOS mode....$........V.u.7.&.7.&.7.&$..&.7.&$..&"7.&$..&.7.&5^.'.7.&.7.&.7.&.P.'.7.&.^.'.7.&..&&.7.&._.'.7.&.^.'.7.&._.'.7.&._.'.7.&.Oe&.7.&.Ob&.7.&.Or&.7.&.7.&.5.&5^.'.7.&._.'.7.&5^.'.7.&5^.&.7.&.7v&.7.&5^.'.7.&Rich.7.&................PE..L...\|..`.....................l+......P............@...........................:.......:...@.................................\l.......@..HV&..........$:..=....9......c..T....................d.......c..@............................................text...+........................... ..`.rdata..V...........................@..@.data...,........d..................@....rsrc...HV&..@...X&.................@..@.reloc........9......<9.............@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe:Zone.Identifier Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Roaming\WdGame\smy\smy.ico Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	MS Windows icon resource - 7 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	393646
Entropy (8bit):	6.900526763646595
Encrypted:	false
SSDEEP:	12288:5gg+A6eRQj02jJTi39Mqw33dInLDVtY/RNJv:53L6eRQo2jhi39Mq+GLDoHv
MD5:	99ADCD471D32CBB7D7631576856E5D5C
SHA1:	FE438FDA6C8737BA1229D2211149957D448D4AB8
SHA-256:	303E3B87AE3BEBEDE1E925C92AE2618C2E0529148BA69C901E4926FE0916F5D6
SHA-512:	19EA900F2A987B9394A33DF3463C5794F55D59E205B43258CAE67E9686251E2F82AC8720B2163CEED3FC2234465C9A3060A4CEAF9FDC26C91CE96C5E9F38E811
Malicious:	false
Preview:	............ .h...v......... ......... .... .....f...00.... ..%......``.... ......D........ .(...^......... .( ......(....... ..... ...........................4...L.9k..<n..<o..<q..Jz..^...a...Nz..<m..8k..<k..<t...Fz...E..A...........n.V:-.E...9...O!..\|D .`%..s/...,..........\....@n.,`..][S.................U;..J#..a-..P&..O(..=...B"..J"..6..5o..%T.............................w...y..Z..q9..H...G"..C..6^...P.......................................r...J...E..J ..@..6d...U......b...l...pk.........................a/..[,..W(..G..2b.. a....O.Co..W...(I..Vi..hfx.....................tC..X-..E!.1]..!`......I...W...3Il.;Z..Jc.._]j...x.................J&..L*.3_...[....R.8...@...?s..3T..F]}.C]..EV~.Xcv.............}..`:.5a.. ^.../..;...k...U...A...Bj..9Jt.-Cq.2Bc.@Zy.Zee.........t[.6c...Y...%...Z..-k..........G...0`..:Nu.DYz.9G[.:Ji.EIL.xzq.....1d...X...$...2...4...]..a.......}...V...@m..8Wq.>Rb.$/M.TRO.dg^.0c...V...(...6..(\...k..'...S.......T...>...-b..>e..+Ac.LPV.WP=.)Z...T.......$

C:\Users\user\AppData\Roaming\WdGame\smy\smy.json Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	1586
Entropy (8bit):	5.8701833904363
Encrypted:	false
SSDEEP:	24:PnCN8y2Wxd7C+23NNsnEctdRf2LsjnQf4EiGaRazbFreFqtPH6WcJEjuOcUqp8:6uyJxU+Izc8gjC41kfFyY96WkpOcB8
MD5:	05A0FF1815BFC32B172DFB7B1066FCD6
SHA1:	9DB4529071D182F46642020C38BB811FF1088EA9
SHA-256:	599A0126CE8DF7E3E6CC67CDA03E0231BA94C9573454CF2A1DE19BB17183531D
SHA-512:	91615F48199D0D31880AA52891F13E80B0B2D02C07FE315D1AB6999169410D5B042F6376B014AAF9788ABCB45B9DBD057FE6135CC9D9876C67B64B00B64A8229
Malicious:	false
Preview:	G7x3XgTFor5Fruvy8WE3x9ohoRMbUUfBFX2TkfF%2BaOZZ%2BlJT212t7NeR0SIPZryY0iB75S5yt4PKVqR9eKfT1e%2FYbXV5kw%2BvTBrG2CcvmSjGYYMyWZucRW4Dv8zttS98LSZfCIVPmATXecn3PyNCMgoyEhrvDJuQ0pxlsebxGFyHziyGtxHl2Unr1crLeH75F4jFZYlO%2FmI58aQqLUHtbWJS8j%2FH%2B2uPEGBYkUx57IHP6gcJrsBq%2B%2B0lRAIBSEkqu15mb%2B4ZLzFfCwXV1%2Bwa8lh3QxpuE1EWbbXSuC7%2BckuwB1qezKNE9ghW5qDsRXte8MSita3X4G5S8o7Vh05h9cv66CAXiXtnQ5v1OLp8BbaHMMmKCqG9ly%2FBas%2FRIwZeNACUG61mm%2BjVsiSotxnt9qotHEtgif8aQ3Rhy9%2B38kDr%2BCgYhk1tZpdhcDWuUpxXxqp4F98BeJ1QgaSo6yvAt4U9pJI7iYeSV%2F%2FsRL6tt5JT%2BdlTyrUf5qtkcIlNAetCvdITNn2Kcot%2BlqldjRD6%2BhMBxCyHzOgYq2RwiU0B60JJmifgpCMdG4cwyYoKob2XL8Fqz9EjBl4MHnE9U6UgoGaS7%2FRuMdeVqbAlESBlYg3zVy9RK7HGNq0071UMk0Mvj%2ByQEK5fCfvfiEJY%2FN24jM%2FYu6hsLN8m79htdXmTD68N1%2BxRAClSZtQE8%2BXKwT3epSiSpaxn0jU6q0AnRvSWYNIge%2BUucreDp8ILUtdJioPv2G11eZMPr5kahIj6bywH3QqGeohu085EVL3EpBihqe7moijYMvDxBg%2BiWQNKrvMnCNVLXse5ZKk%2B1%2B4ROdQp2F%2FTdyX3Cz%2BWdO1l%2BbMkHASsPb%2Bqbzjm18ex9Ux882aVZ%2Bx1TOzY%2F3GLrn2VtVjPodNwTvcSn0wV%2FNZQS1SLj4ooTp

C:\Users\user\AppData\Roaming\WdGame\smy\smy.ui Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	Zip archive data, at least v2.0 to extract
Category:	dropped
Size (bytes):	824106
Entropy (8bit):	7.99093166303455
Encrypted:	true
SSDEEP:	24576:WOXP55n5PUR4bmGaELO3lJpsnag/FZQubt94YouZx1pNtQ:1XB5n5PUR4bm1wO3dsaAZ3bt+2tQ
MD5:	C45F626AD65405066D868DC253EDBF90
SHA1:	72E14FA66C4C4A4C3228FFB3941C08D3C2AAF4F9
SHA-256:	7BA51A5BB4D2D0A11683407CD165F619792D5CCEF90983344DAE6EAE86DFE88B
SHA-512:	DC2F242B5B8F4ECF647EEDF1F90C5F65445C6FF6E34FF63129EDDF8821E9A0449220FD4F1663409C458052955BD972EDAAE1583C5ECF622C96601A7BF042A8D2
Malicious:	false
Preview:	PK........(..R................BrowserDlg/PK........Y.,R.(W.....^.......BrowserDlg.xml.V..0.]..?Df.Mh..AA. ...,.,+'q[.....Vl......!X !.....KC._.e.+~..8....(..hj.{\|\|.+?..v.MF.D...Ev....=.S>.X.....I.}..']t.D.8.q`.......blD..l4...F..=....f.O......E....}...7...x.)#..,....=....A..D.I.4L.l...1..Z.1..4......;.S.K..]..r<...W;......[.QJ....``..,"..3........b...r~.....e..9OBI=....".)"K~..EO0....S...}.3".W...G7.5I.T2....CB.C.E...[...{'. .<.s..{Q.-.q..v..... V.hD]p..5."....O.Z(.m....i.L 0...q2^i./.$...O.!+.=.]..n..I&........;....7..\|.M.....qs......-..\|0U...u.sK.....Zzo...../\kf;K...z...q%...`...;.....U.ng..J..\.#.J4J.{v{..cg.U.Z.S.d C!.AP7...@.GC.Qo.H..A..9.{.&.X!l...A.\KsW........~..1.._.]... R...(.z.....Z....}..i..#.{...........M.w,h.dR...~.q.....2..'.0..`I....c...]V..S..i?Q(.c3.TBh.TR.,V.V..~V.{.^.ld....X....h.".....I.........F.....\|.7k.....'.R......K}.........vom..8X....c...M.,..@K.[.C..I.e..9o..j&e.[..n4M..dJ......[......u.$...ET.e...;.?.xt....\|.....

C:\Users\user\Desktop\???.lnk Download File
Process:	C:\Users\user\Desktop\UM6rAJhKEq.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Mon Jun 14 03:22:25 2021, mtime=Mon Jun 14 03:22:25 2021, atime=Mon Jun 14 03:22:21 2021, length=3826088, window=hideshowminimized
Category:	dropped
Size (bytes):	1945
Entropy (8bit):	3.4035575491807792
Encrypted:	false
SSDEEP:	24:8hEM33eycHBs9lNHhaSeXLAh/h/jrM82rqWwhDyMBm:8p33eL+9lVYSLNNY72Ww9
MD5:	DC9EECEE1750799FEF586A2D7071E411
SHA1:	746740D4BC8A4A5F94880251D1895DA6228D3FAA
SHA-256:	1DA580B790B22B5B7B30FC415314B5706EE64174A56702AA7F5CB5669F8D43EA
SHA-512:	54F92EA14D61834BE01785CC04CF7ACC18ACBEFA5B3BB89E9F450D402F1C1C2CB313B800140ACC7B7B2B20A634FD31EB2A147F9996D9ECE7508405168012B4FF
Malicious:	false
Preview:	L..................F.@.. ...U}...`../....`..1....`...a:.......................:..DG..Yr?.D..U..k0.&...&...........-..@yEY.....o...`......t...CFSF..1......N....AppData...t.Y^...H.g.3..(.....gVA.G..k...@.......N...R.".....Y....................yN\|.A.p.p.D.a.t.a...B.V.1......R."..Roaming.@.......N...R.#.....Y....................CR..R.o.a.m.i.n.g.....T.1......R."..WdGame..>.......R.".R.#..........................,d.W.d.G.a.m.e.....J.1......R.#..smy.8.......R.".R.#..........................W..s.m.y.....V.2..a:..R." .smy.exe.@.......R.".R."...........................k..s.m.y...e.x.e.......`...............-......._.............y.....C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe..%.....\.A.p.p.D.a.t.a.\.R.o.a.m.i.n.g.\.W.d.G.a.m.e.\.s.m.y.\.s.m.y...e.x.e.).C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.R.o.a.m.i.n.g.\.W.d.G.a.m.e.\.s.m.y...-.-.f.r.o.m.=.d.e.s.k._.i.c.o.n.1.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.R.o.a.m.i.n.g.\.W.d.G.a.m.e.\.s.m.y.\.s.m.y...i.c.o.........%APP

Static File Info

General
File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.662244076501359
TrID:	Win32 Executable (generic) a (10002005/4) 98.81% Windows ActiveX control (116523/4) 1.15% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	UM6rAJhKEq.exe
File size:	3826088
MD5:	043662a4b5e44eb83cec615f2a519906
SHA1:	a3445fe53782b10e5903e41ca8af89faac192df4
SHA256:	1cded2a6ad0ce1864580e179b9ddd2a5eec787e96236bc8eb0cdb61ce47a137c
SHA512:	c12c0c0d356d81e085df20cf6bbcb9abe44f99051b235b249c3596a4ad9e18fd415cc506afd452c82f4603b8940c3f61dca82841c79918e7a883f0a64ff9fa3b
SSDEEP:	98304:e1wpL+yII5n5PIdtsnZ3BxtBQzjumyCzEpq/:Ow4g95PIP2PQuZQz/
File Content Preview:	MZ......................@...................................X...........!..L.!This program cannot be run in DOS mode....$........V.u.7.&.7.&.7.&$..&.7.&$..&"7.&$..&.7.&5^.'.7.&.7.&.7.&.P.'.7.&.^.'.7.&..&&.7.&._.'.7.&.^.'.7.&._.'.7.&._.'.7.&.Oe&.7.&.Ob&.7.

File Icon


Icon Hash:	e1793cce62707eb6

Static PE Info

General
Entrypoint:	0x4a50b0
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	32BIT_MACHINE, EXECUTABLE_IMAGE
DLL Characteristics:	TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x60AB967C [Mon May 24 12:05:16 2021 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	d9c9b2207194e3b00f67e3fec7ad5f3e

Authenticode Signature

Signature Valid:	true
Signature Issuer:	CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US
Signature Validation Error:	The operation completed successfully
Error Number:	0
Not Before, Not After	8/30/2019 2:00:00 AM 11/12/2021 1:00:00 PM
Subject Chain	CN=å¤©æ´¥ååæ¸¸ç§ææéå¬å¸, OU=ææ¯é¨, O=å¤©æ´¥ååæ¸¸ç§ææéå¬å¸, L=å¤©æ´¥å¸, S=å¤©æ´¥å¸, C=CN
Version:	3
Thumbprint MD5:	7CE285D7ABC2DCD919E121EA107F1B90
Thumbprint SHA-1:	280B78AC066D43DD734936D20A130EE98604EC47
Thumbprint SHA-256:	9A3163D601CC35DDA09842BFE42ADCD2471B7BCBF8D80CE918D5016DADB4A320
Serial:	0B82ABA67F8BC674DF9FB3ECA591BDCE

Entrypoint Preview

Instruction
call 00007F7094787DD8h
jmp 00007F70947871BFh
int3
int3
int3
int3
int3
int3
mov ecx, 00000001h
movsd xmm5, qword ptr [005051E8h]
jmp 00007F709478735Eh
mov ecx, 00000002h
movsd xmm5, qword ptr [005051F0h]
jmp 00007F709478734Fh
mov ecx, 00000003h
movsd xmm5, qword ptr [005051E8h]
movd eax, xmm0
and eax, 7FFFFFFFh
cmp eax, 7F800000h
jnc 00007F7094787492h
cvtss2sd xmm0, xmm0
cmp ecx, 02h
jne 00007F709478735Ah
movsd xmm2, qword ptr [00505208h]
comisd xmm0, xmm2
jbe 00007F709478734Ch
mov edx, 00000010h
call 00007F7094787482h
comisd xmm0, xmm5
jnc 00007F7094787467h
movsd xmm6, qword ptr [005051E0h]
comisd xmm0, xmm6
jc 00007F7094787455h
movdqa xmm1, xmm0
psllq xmm1, 01h
psrlq xmm1, 01h
cmp ecx, 01h
je 00007F709478737Ch
movsd xmm2, qword ptr [00505200h]
comisd xmm1, xmm2
jnbe 00007F709478736Eh
xorpd xmm2, xmm2
comisd xmm1, xmm2
je 00007F7094787364h
push eax
wait
fstcw word ptr [esp]
mov ax, word ptr [esp]
test ax, 00000010h
pop eax
jne 00007F7094787354h

Rich Headers

Programming Language:

[C++] VS2008 SP1 build 30729
[ C ] VS2008 SP1 build 30729

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x126c5c	0x1cc	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x134000	0x265648	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x3a2400	0x3da8	.reloc
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x39a000	0xe700	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x1163a0	0x54	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x116498	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x1163f8	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0xed000	0x78c	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0xeb22b	0xeb400	False	0.476157761026	data	6.57063920103	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.rdata	0xed000	0x3c656	0x3c800	False	0.365924425362	data	5.15456491706	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x12a000	0x952c	0x6400	False	0.3468359375	data	5.7571675628	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_MEM_READ
.rsrc	0x134000	0x265648	0x265800	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x39a000	0xe700	0xe800	False	0.522225215517	data	6.55671650359	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
FILERES	0x134408	0x3b840	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows	Chinese	China
FILERES	0x16fc48	0x4aa	ASCII text	Chinese	China
ZIPRES	0x1700f4	0xc932a	Zip archive data, at least v2.0 to extract	Chinese	China
ZIPRES	0x239420	0x92	Zip archive data, at least v2.0 to extract	Chinese	China
ZIPRES	0x2394b4	0x89fc4	Zip archive data, at least v2.0 to extract	Chinese	China
ZIPRES	0x2c3478	0x9f179	Zip archive data, at least v2.0 to extract	Chinese	China
ZIPRES	0x3625f4	0x32633	Zip archive data, at least v2.0 to extract	Chinese	China
RT_ICON	0x394c28	0x25a8	data	Chinese	China
RT_ICON	0x3971d0	0x10a8	data	Chinese	China
RT_ICON	0x398278	0x988	data	Chinese	China
RT_ICON	0x398c00	0x468	GLS_BINARY_LSB_FIRST	Chinese	China
RT_STRING	0x399068	0x32	data	Chinese	China
RT_STRING	0x39909c	0x26	data	Chinese	China
RT_STRING	0x3990c4	0x22	data	Chinese	China
RT_GROUP_ICON	0x3990e8	0x3e	data	Chinese	China
RT_VERSION	0x399128	0x1e8	data	Chinese	China
RT_MANIFEST	0x399310	0x336	XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators	English	United States

Imports

DLL	Import
SHELL32.dll	SHCreateDirectoryExW, SHBrowseForFolderW, SHGetPathFromIDListW, ShellExecuteExW, SHFileOperationW, ShellExecuteW, SHChangeNotify, SHGetSpecialFolderPathW, Shell_NotifyIconW
WININET.dll	InternetGetCookieExW, InternetCrackUrlW
IPHLPAPI.DLL	GetAdaptersInfo
KERNEL32.dll	GetSystemDirectoryW, GetTempPathW, GetTempFileNameW, CreateFileW, Process32FirstW, Process32NextW, SleepEx, OutputDebugStringA, LocalAlloc, LocalFree, WaitForMultipleObjects, GetStartupInfoW, Module32FirstW, Module32NextW, MapViewOfFile, UnmapViewOfFile, CreateFileMappingW, lstrcmpW, GetLocalTime, CreateThread, GetSystemWindowsDirectoryW, SetEvent, CreateEventW, DeleteFileA, GetFileSize, GetLogicalDrives, GetExitCodeThread, WriteConsoleW, SetEnvironmentVariableA, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineW, GetCommandLineA, GetOEMCP, IsValidCodePage, FindFirstFileExW, SetFilePointerEx, OutputDebugStringW, GetConsoleMode, GetConsoleCP, GetTimeZoneInformation, EnumSystemLocalesW, GetUserDefaultLCID, VirtualFree, GetFileType, SetStdHandle, GetModuleHandleExW, FreeLibraryAndExitThread, ExitThread, RtlUnwind, CreateFileA, lstrcmpiA, lstrcmpA, DeviceIoControl, DosDateTimeToFileTime, VirtualAlloc, Thread32Next, Thread32First, CreateToolhelp32Snapshot, FlushInstructionCache, ReadFile, SetThreadContext, GetThreadContext, ResumeThread, SuspendThread, OpenThread, Sleep, HeapCreate, CompareStringW, FreeResource, DebugBreak, VirtualQuery, MultiByteToWideChar, IsBadReadPtr, GetModuleFileNameW, LoadLibraryExW, lstrcmpiW, GetTickCount, WaitForSingleObject, SetErrorMode, SetUnhandledExceptionFilter, VirtualProtect, InterlockedDecrement, InterlockedIncrement, GetVersionExW, MoveFileExW, FindNextFileW, FindFirstFileW, DeleteFileW, GetFileAttributesW, SetFileAttributesW, GetFullPathNameW, RemoveDirectoryW, GetModuleHandleW, LoadLibraryW, GetStringTypeW, FlushFileBuffers, LocalFileTimeToFileTime, SetFilePointer, WriteFile, ReadConsoleW, GetStdHandle, DecodePointer, LockResource, HeapDestroy, lstrlenW, lstrcpynW, HeapAlloc, HeapReAlloc, HeapFree, HeapSize, GetProcessHeap, RaiseException, GetLastError, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, SetFileTime, LoadResource, InitializeSListHead, QueryPerformanceCounter, IsProcessorFeaturePresent, UnhandledExceptionFilter, SetEndOfFile, GlobalFree, GetVersion, ResetEvent, InterlockedCompareExchange, InterlockedExchange, MulDiv, GlobalUnlock, GlobalLock, ExitProcess, GlobalAlloc, CloseHandle, FindClose, SizeofResource, FindResourceW, FindResourceExW, GetCurrentThreadId, GetACP, IsDebuggerPresent, GetCPInfo, GetLocaleInfoW, LCMapStringW, GetSystemTimeAsFileTime, TlsFree, TlsSetValue, TlsGetValue, TlsAlloc, SwitchToThread, InitializeCriticalSection, EnterCriticalSection, EncodePointer, LeaveCriticalSection, CopyFileW, WideCharToMultiByte, FreeLibrary, GetProcAddress, GetShortPathNameW, OpenProcess, SetLastError, GetProcessId, GetCurrentThread, TerminateProcess, GetCurrentProcessId, GetCurrentProcess, IsValidLocale
USER32.dll	EnableWindow, KillTimer, SetTimer, IsZoomed, MoveWindow, DestroyWindow, GetMessageW, PostThreadMessageW, PeekMessageW, GetIconInfo, GetWindow, ReleaseDC, GetDC, RegisterWindowMessageW, SetForegroundWindow, SetWindowTextW, UpdateWindow, GetSystemMetrics, SetFocus, IsWindowVisible, ShowWindow, SendMessageW, SetWindowsHookExW, MessageBoxW, CharNextW, DefWindowProcW, PostQuitMessage, LoadImageW, DestroyIcon, PostMessageW, MapWindowPoints, SetWindowPos, IsWindow, SystemParametersInfoW, FindWindowExW, GetParent, PtInRect, IsRectEmpty, GetCursorPos, GetWindowRect, SwitchToThisWindow, wvsprintfW, SetCursor, InflateRect, OffsetRect, LoadCursorW, TranslateMessage, DispatchMessageW, CreateWindowExW, IsChild, UpdateLayeredWindow, GetFocus, GetKeyState, SetCapture, ReleaseCapture, BeginPaint, EndPaint, GetUpdateRect, InvalidateRect, GetClientRect, ScreenToClient, GetWindowLongW, SetWindowLongW, GetClassNameW, CallWindowProcW, RegisterClassW, RegisterClassExW, GetClassInfoExW, GetMenu, SetPropW, GetPropW, AdjustWindowRectEx, IntersectRect, RemovePropW, IsIconic, SetWindowRgn, MonitorFromWindow, GetMonitorInfoW, CopyRect, CharPrevW, DrawTextW, SetRect, DrawIconEx, CreateCaret, HideCaret, ShowCaret, SetCaretPos, GetCaretPos, ClientToScreen, GetSysColor, CreateAcceleratorTableW, InvalidateRgn, FillRect, SetLayeredWindowAttributes, RedrawWindow, GetWindowTextW, GetWindowTextLengthW, GetWindowDC
GDI32.dll	CreateDCW, CreateSolidBrush, GetDeviceCaps, ExtTextOutW, TextOutW, MoveToEx, CreateDIBSection, SetTextColor, SetStretchBltMode, SetBkMode, SetBkColor, ExtSelectClipRgn, SelectClipRgn, RestoreDC, RoundRect, SaveDC, GetTextMetricsW, GetObjectW, LineTo, GetClipBox, GetCharABCWidthsW, CreateRectRgnIndirect, CombineRgn, CreateRoundRectRgn, SetDIBitsToDevice, StretchBlt, SelectObject, GetTextExtentPoint32W, GetStockObject, GetDIBits, DeleteObject, SetWindowOrgEx, BitBlt, CreateCompatibleBitmap, CreateCompatibleDC, CreateFontIndirectW, CreatePen, DeleteDC, Rectangle
ADVAPI32.dll	OpenThreadToken, GetTokenInformation, EqualSid, AllocateAndInitializeSid, FreeSid, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, CloseServiceHandle, OpenSCManagerW, OpenServiceW, QueryServiceStatus, RegCreateKeyExW, RegDeleteKeyW, RegDeleteValueW, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, AdjustTokenPrivileges, LookupPrivilegeValueW, RegCreateKeyW, GetUserNameW, SetTokenInformation, CreateWellKnownSid, GetLengthSid, DuplicateTokenEx, RegQueryValueExA, RegOpenKeyExA, RegEnumKeyExA, OpenProcessToken
ole32.dll	OleLockRunning, CreateStreamOnHGlobal, CoCreateInstance, CLSIDFromString, CLSIDFromProgID, CoInitialize, CoInitializeSecurity, CoCreateGuid, CoTaskMemFree, CoTaskMemRealloc, CoTaskMemAlloc, CoUninitialize
OLEAUT32.dll	SafeArrayPutElement, SysAllocString, SysFreeString, VariantChangeType, SysAllocStringLen, VariantInit, VarUI4FromStr, VariantClear, SafeArrayCreate
SHLWAPI.dll	PathFileExistsW, StrStrIW, wnsprintfW, PathCombineW, PathIsDirectoryW, PathRemoveFileSpecW, SHDeleteKeyW, PathFindExtensionW, PathFindFileNameW, PathAppendW, PathCanonicalizeW, SHGetValueW, StrStrIA, SHGetValueA, SHSetValueA, StrCmpNIW, StrTrimA, SHSetValueW, StrCmpIW, AssocQueryStringW
COMCTL32.dll	InitCommonControlsEx, _TrackMouseEvent
PSAPI.DLL	EnumProcessModules, GetModuleFileNameExW, EnumProcesses
VERSION.dll	VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW
gdiplus.dll	GdipDrawPath, GdiplusStartup, GdiplusShutdown, GdipAlloc, GdipFree, GdipGetImageEncoders, GdipGetImageEncodersSize, GdipDrawImageRectRectI, GdipDrawImagePointsI, GdipFillPath, GdipGraphicsClear, GdipSetInterpolationMode, GdipBitmapUnlockBits, GdipBitmapLockBits, GdipCloneBitmapAreaI, GdipCreateHBITMAPFromBitmap, GdipCreateBitmapFromScan0, GdipCreateBitmapFromFile, GdipCreateBitmapFromStream, GdipGetImageGraphicsContext, GdipSaveImageToFile, GdipCreateTexture, GdipAddPathArcI, GdipClosePathFigure, GdipDrawImageRectI, GdipGetPropertyItem, GdipGetPropertyItemSize, GdipImageSelectActiveFrame, GdipImageGetFrameCount, GdipImageGetFrameDimensionsList, GdipImageGetFrameDimensionsCount, GdipGetImageHeight, GdipGetImageWidth, GdipDrawEllipseI, GdipCloneImage, GdipDeletePen, GdipCreatePen1, GdipCloneBrush, GdipDeleteBrush, GdipCreateSolidFill, GdipLoadImageFromStream, GdipDeletePath, GdipCreatePath, GdipFillEllipseI, GdipSetSmoothingMode, GdipDeleteGraphics, GdipCreateFromHDC, GdipDisposeImage, GdipLoadImageFromStreamICM
urlmon.dll	URLDownloadToCacheFileA
Secur32.dll	GetUserNameExW
WINMM.dll	timeGetTime
CRYPT32.dll	CryptBinaryToStringW, CryptStringToBinaryW, CertGetNameStringW
WINTRUST.dll	WTHelperProvDataFromStateData, WinVerifyTrust
MSIMG32.dll	GradientFill, AlphaBlend
IMM32.dll	ImmSetCompositionWindow, ImmGetContext, ImmReleaseContext
dbghelp.dll	MakeSureDirectoryPathExists

Version Infos

Description	Data
LegalCopyright
ProductVersion	3.2.124.1372
ProductName
FileVersion	3.2.124.1372
FileDescription
Translation	0x0804 0x04b0

Possible Origin

Language of compilation system	Country where language is spoken	Map
Chinese	China
English	United States

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 14, 2021 06:22:25.689948082 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:25.690675974 CEST	49737	80	192.168.2.4	47.117.76.6
Jun 14, 2021 06:22:25.964843988 CEST	80	49737	47.117.76.6	192.168.2.4
Jun 14, 2021 06:22:25.965271950 CEST	49737	80	192.168.2.4	47.117.76.6
Jun 14, 2021 06:22:25.965864897 CEST	49737	80	192.168.2.4	47.117.76.6
Jun 14, 2021 06:22:25.971247911 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:25.971388102 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:25.971842051 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.251085043 CEST	80	49737	47.117.76.6	192.168.2.4
Jun 14, 2021 06:22:26.253473997 CEST	80	49737	47.117.76.6	192.168.2.4
Jun 14, 2021 06:22:26.253598928 CEST	49737	80	192.168.2.4	47.117.76.6
Jun 14, 2021 06:22:26.262793064 CEST	49737	80	192.168.2.4	47.117.76.6
Jun 14, 2021 06:22:26.276339054 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.282758951 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.282812119 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.282890081 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.282921076 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.282943010 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.282947063 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.282993078 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.283003092 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.283040047 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.283052921 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.283082008 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.283082962 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.283179045 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.283229113 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.283427000 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.283514023 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.283581972 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.284297943 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.583060980 CEST	80	49737	47.117.76.6	192.168.2.4
Jun 14, 2021 06:22:26.583183050 CEST	49737	80	192.168.2.4	47.117.76.6
Jun 14, 2021 06:22:26.589831114 CEST	49737	80	192.168.2.4	47.117.76.6
Jun 14, 2021 06:22:26.624459028 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.624512911 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.624564886 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.624623060 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.624675989 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.624727964 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.624783993 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.624840975 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.624918938 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.624975920 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.625030994 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.625096083 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.625160933 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.625211954 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.625262976 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.625309944 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.625358105 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.625385046 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.625421047 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.625431061 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.625437021 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.625442028 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.625446081 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.625449896 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.625453949 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.625458002 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.625462055 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.625464916 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.625469923 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.917498112 CEST	80	49737	47.117.76.6	192.168.2.4
Jun 14, 2021 06:22:26.917568922 CEST	49737	80	192.168.2.4	47.117.76.6
Jun 14, 2021 06:22:26.972466946 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972496986 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972508907 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972522020 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972538948 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972554922 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972568989 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972580910 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972587109 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.972594023 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972606897 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972620010 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972631931 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972644091 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972656965 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972667933 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972681046 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972692966 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972703934 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972716093 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972727060 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972739935 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972750902 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972763062 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972775936 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972788095 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972799063 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972811937 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972824097 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972836971 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972848892 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972866058 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972877979 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972894907 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972913027 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.972928047 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:26.973001003 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:26.973047018 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.320800066 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.320821047 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.320833921 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.320847034 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.320868015 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.320883989 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.320904970 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.320923090 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.320966959 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.320991993 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.321386099 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321403027 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321423054 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321444035 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321446896 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.321463108 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321472883 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.321492910 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321501017 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.321516037 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.321541071 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.321552992 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321568966 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321589947 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321607113 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.321609974 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321633101 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.321644068 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321676016 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321680069 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.321696043 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321703911 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.321717978 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321734905 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.321738005 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321753979 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.321758986 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321773052 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.321779013 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321794987 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321818113 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.321851969 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.321871996 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.321892977 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321913004 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321932077 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321943045 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.321950912 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321969032 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321989059 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.321995020 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322006941 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322021961 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322038889 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322071075 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322082996 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322088957 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322175026 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322201967 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322237015 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322251081 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322252035 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322284937 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322312117 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322344065 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322357893 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322357893 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322386980 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322442055 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322446108 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322458982 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322463989 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322496891 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322510004 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322524071 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322544098 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322550058 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322562933 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322578907 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322586060 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322603941 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322618008 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322632074 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322637081 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322655916 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322660923 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322671890 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322688103 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322702885 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322717905 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322732925 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322748899 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322751999 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322763920 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322807074 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322834015 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322838068 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322853088 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322854996 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322875977 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322884083 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322912931 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322920084 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322937012 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322952032 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.322971106 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.322999001 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.323014021 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.323024035 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.323040962 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.323066950 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.323077917 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.323091030 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.323097944 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.323120117 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.323149920 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.323153973 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.323179960 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.323210001 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.323225975 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.323235989 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.323245049 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.323270082 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.323291063 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.667316914 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667346954 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667357922 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667377949 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667397022 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667413950 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667429924 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667445898 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667460918 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667467117 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.667476892 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667493105 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667506933 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.667511940 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667514086 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.667519093 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.667522907 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.667526960 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.667546988 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.667567968 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.667834044 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667850971 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667862892 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667880058 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667895079 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667911053 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667913914 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.667927027 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667947054 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667960882 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.667963982 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667979956 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.667993069 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.668004990 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.668045044 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.669393063 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669420004 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669435978 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669450998 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669466972 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669482946 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669488907 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.669502020 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669519901 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669528961 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.669534922 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669550896 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669565916 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669574976 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.669581890 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669598103 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669614077 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669632912 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669650078 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669665098 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669681072 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669682980 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.669709921 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.669714928 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.669718981 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.669723034 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.669730902 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669745922 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.669745922 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.669781923 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.669815063 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671222925 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671248913 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671266079 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671279907 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671295881 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671310902 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671318054 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671329975 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671346903 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671353102 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671363115 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671379089 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671395063 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671410084 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671426058 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671441078 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671447039 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671458960 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671459913 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671478033 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671489954 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671494007 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671509981 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671515942 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671521902 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671525955 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671541929 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671555996 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671557903 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671574116 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671580076 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671593904 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671611071 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671612978 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671627045 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671636105 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671643019 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671658039 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671670914 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671674013 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671689034 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671704054 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671704054 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671724081 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671741009 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671753883 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671756029 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671772003 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671775103 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671787024 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671802998 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671818018 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671819925 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671833038 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671852112 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671878099 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671884060 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671894073 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671900988 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671916962 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671921968 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671931982 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671947956 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671962976 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671972990 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.671982050 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.671999931 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672015905 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672019005 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672032118 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672048092 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672049046 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672063112 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672079086 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672080040 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672091961 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672094107 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672113895 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672131062 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672137976 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672147036 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672163010 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672178030 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672194004 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672199011 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672209024 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672225952 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672240019 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672245026 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672261953 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672277927 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672281027 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672296047 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672308922 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672319889 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672327995 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672346115 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672355890 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672360897 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672377110 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672385931 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672393084 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672401905 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672409058 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672425032 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672440052 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672502995 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672509909 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672518969 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672522068 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672528028 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672534943 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672544956 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672632933 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672636986 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672650099 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672666073 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672682047 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672692060 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672697067 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672713041 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672717094 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672728062 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672748089 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672765017 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672780037 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672780037 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672796011 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672816038 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672833920 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672847033 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672848940 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672853947 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672868013 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672883034 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672894001 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672909975 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672911882 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672925949 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672941923 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672956944 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.672960043 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.672997952 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.673008919 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.673021078 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.673070908 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:27.673075914 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.673120975 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:27.918117046 CEST	80	49737	47.117.76.6	192.168.2.4
Jun 14, 2021 06:22:27.918229103 CEST	49737	80	192.168.2.4	47.117.76.6
Jun 14, 2021 06:22:28.013389111 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013417006 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013428926 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013456106 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013472080 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013489008 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013500929 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013516903 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013528109 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013534069 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.013540030 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013556004 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013571978 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013581991 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.013586998 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013598919 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013613939 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013617039 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.013626099 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013639927 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013639927 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.013653040 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013657093 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.013664007 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013676882 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013691902 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013695955 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.013704062 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013719082 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013731003 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013746023 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013746977 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.013758898 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013771057 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013772964 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.013782978 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013794899 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013806105 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013816118 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.013822079 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013834000 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013842106 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.013854027 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013861895 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.013870955 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013883114 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013890028 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.013894081 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013906002 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013917923 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013930082 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013941050 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013952971 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.013964891 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.013964891 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.014036894 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.015883923 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.015902996 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.015914917 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.015927076 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.015944004 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.015959978 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.015961885 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.015970945 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.015984058 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.015990973 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016027927 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016036987 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016067028 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016083956 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016098976 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016117096 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016119003 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016129017 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016140938 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016144991 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016153097 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016181946 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016184092 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016211033 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016223907 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016227007 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016230106 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016247988 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016249895 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016272068 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016278028 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016293049 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016304016 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016309023 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016321898 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016330004 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016377926 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016436100 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016452074 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016464949 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016477108 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016489029 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016519070 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016546965 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016565084 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016581059 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016597986 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016613007 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016633034 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016639948 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016649961 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016661882 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016664982 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016681910 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016693115 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016696930 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016711950 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016726017 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016727924 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.016768932 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.016799927 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.018404961 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018421888 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018435001 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018450975 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018495083 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.018517971 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.018528938 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018544912 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018559933 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018574953 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018593073 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.018619061 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.018625021 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018656969 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.018677950 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.018702030 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018718004 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018731117 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018764019 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.018764019 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018780947 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018793106 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.018795967 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018811941 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018825054 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.018862963 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.018901110 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018929005 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018944979 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018961906 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018975973 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.018976927 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018989086 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.018995047 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019001007 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019005060 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019012928 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019030094 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019051075 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019081116 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019110918 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019144058 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019160032 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019176006 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019186974 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019195080 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019212008 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019221067 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019258022 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019299030 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019315004 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019340992 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019366026 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019372940 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019382954 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019398928 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019414902 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019416094 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019447088 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019479036 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019479990 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019496918 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019516945 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019531965 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019541025 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019551039 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019567966 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019572973 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019587994 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019596100 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019609928 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019623041 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019653082 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019680023 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019715071 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019725084 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019733906 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019751072 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019752979 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019773960 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019785881 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019810915 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019829988 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019845009 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019853115 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019864082 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019886971 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019918919 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019920111 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019937992 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019954920 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019963980 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.019970894 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.019979954 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020001888 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020020962 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020086050 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020109892 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020128965 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020129919 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020143986 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020155907 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020178080 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020222902 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020243883 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020261049 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020292044 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020311117 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020313025 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020325899 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020340919 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020345926 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020363092 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020369053 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020378113 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020387888 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020406961 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020426989 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020459890 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020478010 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020494938 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020509005 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020512104 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020536900 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020540953 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020560026 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020569086 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020582914 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020601034 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020612001 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020621061 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020654917 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020807981 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020823956 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020837069 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020849943 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020858049 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020862103 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020874023 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020886898 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020889997 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020905018 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020921946 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020922899 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020935059 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.020947933 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.020977974 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021029949 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021055937 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021076918 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021100044 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021109104 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021121979 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021130085 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021136999 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021152020 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021166086 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021172047 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021193981 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021202087 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021214008 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021223068 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021229029 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021234989 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021250963 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021260977 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021290064 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021295071 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021311045 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021327019 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021343946 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021357059 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021373034 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021404028 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021404028 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021425962 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021442890 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021450043 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021457911 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021470070 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021492004 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021503925 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021632910 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021650076 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021663904 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021676064 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021703005 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021720886 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.021723032 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021739006 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.021781921 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.360546112 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.360582113 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.360616922 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.360632896 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.360641956 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.360656023 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.360670090 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.360678911 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.360696077 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.360702038 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.360728979 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.360733032 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.360758066 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.360758066 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.360781908 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.360785007 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.360805988 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.360811949 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.360829115 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.360837936 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.360852003 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.360863924 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.360876083 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.360889912 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.360901117 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.360915899 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.360930920 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.360948086 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.360961914 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.360976934 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.360985041 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361001968 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361028910 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361031055 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361053944 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361083984 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361087084 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361105919 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361114979 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361140013 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361140966 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361166000 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361172915 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361195087 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361202002 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361218929 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361227989 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361241102 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361253977 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361264944 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361279964 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361289978 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361323118 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361368895 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361394882 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361413002 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361421108 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361434937 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361447096 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361459970 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361473083 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361488104 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361499071 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361510992 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361525059 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361534119 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361557007 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361586094 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361635923 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361639977 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361656904 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361685038 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361711025 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361738920 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361766100 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361800909 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361824989 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361852884 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361871958 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.361887932 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.361917973 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.362308025 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.362334967 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.362363100 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.362387896 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.362401962 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.362420082 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.362432003 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.362449884 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.362464905 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.362497091 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.362746954 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.362775087 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.362799883 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.362804890 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.362826109 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.362832069 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.362854958 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.362859964 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.362876892 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.362885952 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.362901926 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.362911940 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.362929106 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.362938881 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.362950087 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.362963915 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.362977982 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.362989902 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363001108 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363014936 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363027096 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363045931 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363048077 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363096952 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363146067 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363184929 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363209963 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363235950 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363239050 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363245964 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363264084 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363271952 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363287926 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363296032 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363316059 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363325119 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363341093 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363349915 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363363028 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363375902 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363389969 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363401890 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363416910 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363428116 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363444090 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363454103 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363467932 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363477945 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363496065 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363509893 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363519907 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363538027 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363557100 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363563061 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363584042 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363589048 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363612890 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363615036 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363636971 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363640070 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363665104 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363666058 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363687992 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363692045 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363711119 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363725901 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.363737106 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.363765001 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.364870071 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.364900112 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.364927053 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.364948034 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.364952087 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.364978075 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.364984035 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365005016 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365031004 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365036964 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365068913 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365072966 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365087032 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365097046 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365113020 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365139008 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365144014 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365164995 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365180016 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365190983 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365216970 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365250111 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365268946 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365295887 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365322113 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365346909 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365349054 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365379095 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365382910 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365407944 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365426064 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365452051 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365457058 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365478039 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365504026 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365530014 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365530014 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365560055 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365561962 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365590096 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365597010 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365618944 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365636110 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365638971 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365679979 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365706921 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365725994 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365741968 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365777016 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365781069 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365823984 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365856886 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365871906 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365885973 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365897894 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365911961 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365936995 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365938902 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365966082 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.365969896 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.365989923 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366000891 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366017103 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366027117 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366043091 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366055965 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366077900 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366082907 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366101980 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366111994 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366132021 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366137981 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366161108 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366185904 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366235018 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366264105 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366290092 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366298914 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366317034 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366317987 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366338968 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366342068 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366364956 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366369963 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366394043 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366394997 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366422892 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366426945 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366451025 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366456032 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366468906 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366482019 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366497040 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366508007 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366523027 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366534948 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366547108 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366559029 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366583109 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366585970 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366611004 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366611004 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366636038 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366643906 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366657972 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366672039 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366683006 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366698027 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366724968 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366728067 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366750956 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366765976 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366776943 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366779089 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366802931 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366811037 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366828918 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366854906 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366859913 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366889000 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366889954 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366914988 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366924047 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366942883 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366950989 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366969109 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.366977930 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.366993904 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.367006063 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.367021084 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.367033005 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.367047071 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.367075920 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.367079020 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.367108107 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.367130041 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.367140055 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.367157936 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.367166996 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.367185116 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.367209911 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.367211103 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.367240906 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.367265940 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.367805958 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.367831945 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.367862940 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.367892027 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.367912054 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.367960930 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.367969036 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368004084 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368062019 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368089914 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368124962 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368156910 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368181944 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368189096 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368216038 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368221998 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368242979 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368247032 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368267059 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368268967 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368293047 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368294001 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368319988 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368319988 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368341923 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368351936 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368365049 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368381977 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368398905 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368407011 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368427038 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368439913 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368453026 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368479013 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368479967 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368505955 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368530989 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368534088 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368557930 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368557930 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368583918 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368585110 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368618011 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368642092 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368644953 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368645906 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368659019 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368670940 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368689060 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368696928 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368719101 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368722916 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368746996 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368748903 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368767977 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368774891 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368792057 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368801117 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368818045 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368833065 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368854046 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368866920 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368881941 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368897915 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.368916035 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.368949890 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.708319902 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708359957 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708384037 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708406925 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708427906 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708450079 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708453894 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.708472967 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708478928 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.708498955 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.708499908 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708523035 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708532095 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.708544970 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708566904 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708578110 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.708589077 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708611012 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708617926 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.708632946 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708640099 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.708653927 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708677053 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.708681107 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708703995 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708709955 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.708725929 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708745956 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.708746910 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708771944 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708780050 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.708792925 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708813906 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.708816051 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708837032 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708847046 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.708861113 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708885908 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708887100 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.708905935 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708929062 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708935976 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.708950043 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708959103 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.708971977 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708992958 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.708997011 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.709013939 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.709038973 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.709041119 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.709062099 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.709064960 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.709089994 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.709099054 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.709114075 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.709124088 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.709136963 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.709153891 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.709158897 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.709166050 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.709183931 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.709202051 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.709207058 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.709227085 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.709233046 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.709259987 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.709285021 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.709954023 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.709985971 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710010052 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710032940 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710053921 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710057974 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710074902 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710098028 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710108042 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710119963 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710140944 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710149050 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710161924 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710172892 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710184097 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710206032 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710212946 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710225105 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710244894 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710253000 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710264921 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710277081 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710284948 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710304976 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710325003 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710325956 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710347891 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710369110 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710378885 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710388899 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710391045 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710410118 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710421085 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710431099 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710449934 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710453987 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710470915 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710474968 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710490942 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710514069 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710520983 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710535049 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710555077 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710562944 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710571051 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710576057 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710596085 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710599899 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710616112 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710622072 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710637093 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710638046 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710656881 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710666895 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710680962 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710701942 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710705042 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710721970 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710742950 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710750103 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710762024 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710771084 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710782051 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710803032 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710815907 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710823059 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710844994 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710858107 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710865974 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.710889101 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.710922003 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.711532116 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.711566925 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.711610079 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.711620092 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.711632967 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.711642981 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.711666107 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.711694956 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.711882114 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.711937904 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.712009907 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.712065935 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.712116957 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.712152958 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.712168932 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.712176085 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.712201118 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.712203026 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.712227106 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.712249041 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.712301016 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.712323904 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.712354898 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.712358952 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.712388992 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.712395906 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.712416887 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.712419033 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.712445974 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.712446928 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.712472916 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.712498903 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.713370085 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713402987 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713424921 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713442087 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.713452101 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713476896 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713485956 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.713501930 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713522911 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.713529110 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713553905 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713556051 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.713582039 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713587999 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.713608027 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713618040 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.713629961 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713649035 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.713654041 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713675976 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713685036 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.713699102 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713721037 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713728905 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.713743925 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713752985 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.713769913 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713793039 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.713793039 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713814974 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713831902 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.713861942 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713871002 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.713901997 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713911057 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.713941097 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713959932 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.713963032 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713985920 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.713995934 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.714010954 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.714020014 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.714035988 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.714046955 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.714076996 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.714081049 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.714099884 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.714103937 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.714132071 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.714133978 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.714158058 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.714158058 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.714186907 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.714212894 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.714224100 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.714250088 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.714272022 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.714283943 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.714293957 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.714315891 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.714324951 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.714337111 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.714339972 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.714390993 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715142965 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715178013 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715203047 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715225935 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715243101 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715260029 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715301991 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715349913 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715373993 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715404987 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715431929 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715432882 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715456009 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715481043 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715491056 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715504885 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715519905 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715526104 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715543985 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715548992 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715565920 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715568066 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715589046 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715590000 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715610981 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715622902 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715632915 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715658903 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715670109 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715682030 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715691090 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715694904 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715703964 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715728045 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715737104 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715750933 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715764046 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715775013 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715796947 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715800047 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715821028 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715830088 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715848923 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715858936 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715874910 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715883970 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715898037 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715900898 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715919971 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715922117 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715944052 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715945959 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715969086 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.715970039 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.715985060 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.716000080 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.716012001 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.716021061 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.716041088 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.716048956 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.716062069 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.716080904 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.716083050 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.716108084 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.716115952 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.716130018 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.716144085 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.716150999 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:28.716176987 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.716207027 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:28.758656979 CEST	49737	80	192.168.2.4	47.117.76.6
Jun 14, 2021 06:22:28.760963917 CEST	49740	80	192.168.2.4	47.117.76.6
Jun 14, 2021 06:22:28.949652910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:29.085683107 CEST	80	49737	47.117.76.6	192.168.2.4
Jun 14, 2021 06:22:29.093251944 CEST	80	49740	47.117.76.6	192.168.2.4
Jun 14, 2021 06:22:29.093343019 CEST	49740	80	192.168.2.4	47.117.76.6
Jun 14, 2021 06:22:29.094547987 CEST	49740	80	192.168.2.4	47.117.76.6
Jun 14, 2021 06:22:29.323342085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:29.323476076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:29.323944092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:29.424726963 CEST	80	49740	47.117.76.6	192.168.2.4
Jun 14, 2021 06:22:29.427181005 CEST	80	49740	47.117.76.6	192.168.2.4
Jun 14, 2021 06:22:29.427256107 CEST	49740	80	192.168.2.4	47.117.76.6
Jun 14, 2021 06:22:29.752907038 CEST	80	49736	115.231.152.244	192.168.2.4
Jun 14, 2021 06:22:29.752994061 CEST	49736	80	192.168.2.4	115.231.152.244
Jun 14, 2021 06:22:30.130238056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:30.181035995 CEST	80	49740	47.117.76.6	192.168.2.4
Jun 14, 2021 06:22:30.181169987 CEST	49740	80	192.168.2.4	47.117.76.6
Jun 14, 2021 06:22:30.427583933 CEST	80	49740	47.117.76.6	192.168.2.4
Jun 14, 2021 06:22:30.427823067 CEST	49740	80	192.168.2.4	47.117.76.6
Jun 14, 2021 06:22:30.504085064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:30.676424026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:30.676508904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:30.676554918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:30.676594019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:30.676632881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:30.676668882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:30.676716089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:30.676760912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:30.676769972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:30.676790953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:30.676815033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:30.676820993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:30.676908970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.047686100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.047741890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.047781944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.047820091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.047857046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.047864914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.047889948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.047894955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.047925949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.047934055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.047955990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.047976971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.047980070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.048022985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.048027992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.048059940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.048069000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.048099041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.048103094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.048136950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.048146963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.048173904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.048186064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.048218012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.048234940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.048274040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.048290014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.048316956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.048327923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.048363924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.048367023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.048409939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.048413038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.048446894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.048455954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.048485994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.048495054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.048527002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.176932096 CEST	80	49740	47.117.76.6	192.168.2.4
Jun 14, 2021 06:22:31.177139044 CEST	49740	80	192.168.2.4	47.117.76.6
Jun 14, 2021 06:22:31.420779943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.420840979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.420881033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.420922995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.420960903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.420979977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.420984983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421027899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421045065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421077013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421089888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421134949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421134949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421184063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421196938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421232939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421246052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421283007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421289921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421329021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421343088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421379089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421385050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421427011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421437979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421473026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421484947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421528101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421530008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421577930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421590090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421623945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421636105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421670914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421683073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421719074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421727896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421766996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421777964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421813011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421833992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421864033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421870947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421919107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.421919107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421967983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.421974897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422013044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422024965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422060966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422072887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422107935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422120094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422154903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422166109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422203064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422215939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422250032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422262907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422305107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422311068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422354937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422362089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422401905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422414064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422450066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422462940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422496080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422509909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422544956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422557116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422594070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422605991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422641039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422653913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422697067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422698021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422745943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422759056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422791004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422804117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422840118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422851086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422887087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.422898054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.422944069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.794754028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.794791937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.794811010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.794831038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.794857025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.794884920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.794912100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.794939995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.794960976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.794972897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.794986010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795016050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795042038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795061111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795070887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795098066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795099020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795130968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795151949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795176983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795181036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795207977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795216084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795234919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795248985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795260906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795291901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795295000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795320034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795347929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795356035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795386076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795398951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795413017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795428991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795439005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795466900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795474052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795495033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795510054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795521975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795548916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795553923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795574903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795599937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795604944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795631886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795641899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795658112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795684099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795692921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795711040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795737028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795737028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795775890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795779943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795806885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795835972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795842886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795876026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795892000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795907974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795933008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.795939922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795970917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.795990944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796000957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796032906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796046019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796065092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796084881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796101093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796133995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796137094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796164036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796180964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796195984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796227932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796237946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796258926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796291113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796292067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796324015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796350002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796360016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796386957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796395063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796428919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796438932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796461105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796492100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796493053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796523094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796547890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796554089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796585083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796616077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796619892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796654940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796657085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796685934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796717882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796719074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796751022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796772957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796783924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796809912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796814919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796847105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796869040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796881914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796915054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796924114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796947002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.796977997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.796978951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797010899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797035933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.797041893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797070980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.797075033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797106028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797135115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.797142982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797175884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797187090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.797208071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797231913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.797241926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797275066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797283888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.797306061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797326088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.797338963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797369957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797379971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.797405958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797435999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.797441006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797472954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797497988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.797502995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797534943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797535896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.797564983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797590971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.797596931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797626972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797652006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.797662020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797688961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.797697067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797728062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797756910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.797761917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797792912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797816038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.797823906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:31.797852039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:31.797902107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171257019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171291113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171308994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171324968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171343088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171351910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171391010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171410084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171427011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171431065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171439886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171457052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171477079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171479940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171494961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171509027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171511889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171530962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171545982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171561956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171561956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171577930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171588898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171596050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171616077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171633959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171636105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171649933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171650887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171667099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171680927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171683073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171700001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171716928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171734095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171736956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171755075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171772957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171778917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171789885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171798944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171807051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171824932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171840906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171852112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171857119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171873093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171891928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171895027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171910048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171921015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171926022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171942949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171958923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171964884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171972036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.171986103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.171998024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172013998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172017097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172041893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172121048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172172070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172238111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172343016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172362089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172378063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172414064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172415972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172434092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172434092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172455072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172472000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172496080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172512054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172524929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172532082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172538042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172559977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172575951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172595024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172600031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172611952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172621012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172627926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172646046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172662973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172665119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172683001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172700882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172702074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172717094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172728062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172735929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172753096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172770023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172775030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172785997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172801971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172817945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172821999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172836065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172843933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172852039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172869921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172873974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172887087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172902107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172908068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172926903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172944069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172949076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172956944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172972918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.172981977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.172992945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173008919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.173010111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173027039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173043966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173054934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.173060894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173078060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173079014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.173094988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173110962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173125982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.173130989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173149109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173156977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.173166037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173182964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173192024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.173198938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173207045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.173216105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173233032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173249960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173258066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.173269987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173288107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173300028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173305035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.173311949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173329115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173337936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.173348904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.173372984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.173449993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.173459053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174222946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174243927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174262047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174278021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174292088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174304008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174308062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174320936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174324036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174334049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174355030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174374104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174374104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174391031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174391031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174407959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174424887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174442053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174443007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174458027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174474955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174494982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174498081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174511909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174519062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174529076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174545050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174546003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174561977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174577951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174582958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174595118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174602985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174612045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174632072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174649954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174653053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174666882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174684048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174696922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174700022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174716949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174721003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174736023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174753904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174767017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174772978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174782991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174791098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174808025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174810886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174824953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174840927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174856901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174866915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174869061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174885988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174902916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174913883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174921036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174936056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174937010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174953938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174968958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.174972057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.174992085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.175005913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.175009966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.175025940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.175049067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.175065041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.175093889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.543364048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.543401003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.543422937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.543445110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.543467045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.543478012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.543492079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.543504953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.543514013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.543550968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.543559074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.543574095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.543598890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.543601990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.543622971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.543643951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.543646097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.543668032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.543680906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.543689966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.543711901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.543720961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.543732882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.543756008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.543864965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.543965101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.544039011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.544063091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.544085979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.544095039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.544109106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.544131994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.544138908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.544157028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.544183969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.544224977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.545435905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545464039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545515060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.545550108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.545607090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545629978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545654058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545659065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.545675993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545697927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545708895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.545721054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545746088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545749903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.545769930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545779943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.545790911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545814037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545820951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.545835972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545859098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545861959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.545881987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545886040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.545903921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545926094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.545929909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545953989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545962095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.545975924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.545999050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546015978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546022892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546045065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546046972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546070099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546072960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546092033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546107054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546117067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546134949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546139956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546163082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546175003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546185017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546207905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546216965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546230078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546252966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546257973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546276093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546284914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546300888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546324015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546330929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546345949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546365023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546367884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546391964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546400070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546413898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546437979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546446085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546459913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546473980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546484947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546508074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546514988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546529055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546551943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546557903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546574116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546583891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546623945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546684027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546708107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546729088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546736956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546751022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546773911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546782970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546797991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546822071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.546823978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.546852112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.547339916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.918334007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918354034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918370962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918385029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918418884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918438911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918461084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918483973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918504953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918529987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918550968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918576956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918601036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918622017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918637037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.918644905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918665886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918688059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918711901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918734074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918751955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.918761015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918786049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918806076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.918809891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918832064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918854952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.918857098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918879986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918896914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.918900967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918924093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918942928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.918947935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918971062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.918992043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919001102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.919008970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919025898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919042110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919059038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919061899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.919075966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919095039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919095993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.919122934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919145107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919154882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.919159889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919177055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919189930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919198990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.919210911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919229031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919245005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919260979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919272900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.919277906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919295073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919312000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919327974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919348955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919369936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.919372082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919395924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919416904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919420004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.919439077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919464111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919487000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919497013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.919506073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919526100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919543982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919559002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919569016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.919575930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919591904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919608116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919620037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.919624090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919641018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919660091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919676065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.919677019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919692993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919708967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919724941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919729948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.919740915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919758081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919774055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919792891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919801950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.919811010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919826984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919842958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919855118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.919858932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919873953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919891119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919908047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919917107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.919928074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919945955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919961929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919975042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.919979095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.919997931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920012951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920030117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920041084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.920047045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920067072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920084953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920100927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920103073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.920118093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920135021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920150995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920166016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.920166969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920183897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920203924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920222044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920238018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920245886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.920253992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920270920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920286894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920304060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920304060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.920320034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920340061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920357943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920373917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920386076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.920389891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920407057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920422077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920438051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920454979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920469046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.920475006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920491934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920507908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920523882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920542002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920557976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920571089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.920573950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920595884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920619965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920639038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920655012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920659065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.920670986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920692921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920711994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920728922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920742035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.920744896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920763969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920785904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920804024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.920806885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920829058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920850039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920869112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920881987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.920887947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920911074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920937061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.920948029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.920981884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.921005964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.921024084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.921030045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.921075106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.921086073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.921092987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.921106100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.921122074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.921128035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:32.921135902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:32.921232939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.294809103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.294859886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.294903040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.294940948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.294980049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295017958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295109034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.295209885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.295241117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295281887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295320034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295334101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.295358896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295407057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295422077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.295449018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295514107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.295523882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295562029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295574903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.295608997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295650005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.295653105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295691013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295730114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295733929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.295768023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295803070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.295805931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295851946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.295851946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295928001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.295943975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.295986891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296025991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296026945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.296061993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296111107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.296165943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296185970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.296211004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296252966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.296258926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296304941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.296336889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296355963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.296380043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296416998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296422005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.296456099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296462059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.296494007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296514988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.296533108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296562910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296569109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.296593904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296623945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296653032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296683073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296740055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296746969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.296771049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296821117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296881914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296900988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.296925068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296962976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.296964884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.297000885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297012091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.297070980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297096014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.297113895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297173977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.297173977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297211885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297250032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.297250986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297288895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297336102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297336102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.297378063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297389030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.297415018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297452927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297470093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.297492027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297528982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297553062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.297568083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297605038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.297605038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297652960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297657967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.297696114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297732115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.297734022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297772884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297811031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297813892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.297848940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297863007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.297887087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297924995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.297943115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.297970057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298012972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298029900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.298048973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298083067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.298088074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298125982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298135996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.298162937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298201084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298211098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.298238993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298285961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298290968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.298329115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298343897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.298369884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298403978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.298407078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298445940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298481941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.298481941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298521042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298557997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298568964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.298605919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298638105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.298646927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298683882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298696041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.298744917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298789978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.298825026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298861980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298877001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.298898935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298937082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.298968077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.298973083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299010992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299041986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.299050093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299087048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.299097061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299169064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.299170017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299212933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299242973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.299251080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299297094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299336910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.299380064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299421072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.299422979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299459934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299496889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299514055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.299535990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299573898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.299573898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299621105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299627066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.299663067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299700022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299710035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.299736977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299791098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.299803019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299839973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.299840927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299880028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299916983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299922943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.299954891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.299990892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300000906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.300029039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300052881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.300065994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300108910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.300113916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300156116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300192118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300194025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.300230980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300270081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300273895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.300329924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.300335884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300371885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300405025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.300410032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300451040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300487995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300487995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.300554991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300569057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.300594091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300631046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.300632000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300668955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300707102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300709009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.300772905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300787926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.300808907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300842047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.300858021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300899982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300924063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.300935984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300972939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.300997019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.301003933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.301035881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.301074982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.301106930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.301135063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.301163912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.301215887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.668459892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.668524981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.668584108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.668601036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.668621063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.668631077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.668632984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.668685913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.672665119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.672707081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.672743082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.672766924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.672781944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.672810078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.672828913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.672848940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.672902107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.672903061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.672947884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.672964096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.672967911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673022032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673036098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673074007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673077106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673130035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673135996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673190117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673192978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673243999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673248053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673295975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673310995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673350096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673351049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673403025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673415899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673458099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673458099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673506021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673542023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673567057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673576117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673629999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673656940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673705101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673710108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673758030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673758984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673810005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673810959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673858881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673861980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673912048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673913002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.673964024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.673964977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.674014091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.674015999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.674076080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.674077988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.674129963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.674133062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.674176931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.674192905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.674231052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.674233913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.674280882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.674293995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.674334049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.674340010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.674386978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.674387932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.674433947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.674447060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.674491882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.674495935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.674546957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.674554110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.674596071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.674612999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.674635887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.674654961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.674696922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.674721956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.674746990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.674807072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.674860954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.677705050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.677756071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.677805901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.677814007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.677845001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.677862883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.677871943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.677920103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.677927971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.677974939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.678177118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.678220987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.678246021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.678277016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.678277016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.678339005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.678456068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.678513050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.678566933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.678632021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.678677082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.678755999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.681303024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.681351900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.681399107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.681420088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.681420088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.681474924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.681476116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.681535959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.681539059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.681588888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.681591034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.681639910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.681643009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.681691885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.681694031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.681745052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.681752920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.681803942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.681803942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.681854010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.681855917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.681902885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.681907892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.681957960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.681957960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682008982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682010889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682056904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682063103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682112932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682113886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682167053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682171106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682224989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682229042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682285070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682288885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682341099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682342052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682393074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682394028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682444096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682446003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682496071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682497978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682549953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682549953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682611942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682615042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682662964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682684898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682718039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682723999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682774067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682787895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682827950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682830095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682878017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682883024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682929039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682938099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.682984114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.682985067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683037996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683042049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683094025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683106899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683146954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683176994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683223963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683224916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683274984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683276892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683326006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683331966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683382988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683386087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683445930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683456898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683490038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683492899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683542013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683546066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683598042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683598995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683653116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683661938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683716059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683716059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683762074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683796883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683803082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683820963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683845043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683845043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683890104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683906078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683933973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.683937073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683978081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.683989048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684026957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684046984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684066057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684086084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684106112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684111118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684144020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684164047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684182882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684205055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684230089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684246063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684278011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684290886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684319019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684341908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684344053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684360981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684366941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684377909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684391975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684391975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684405088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684417963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684422970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684441090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684457064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684467077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684478998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684494972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684506893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684513092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684525967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684529066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684550047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684554100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684566021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684583902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684601068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684602976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684617996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684629917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684633970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684652090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684659958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684673071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:33.684689999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:33.684722900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.039768934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.039818048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.039858103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.039916992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.039921999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.039948940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.039957047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.039963961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.039978981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.040040016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.040095091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.040112019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.040141106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.040189981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.040206909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.040250063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.040252924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.040303946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.040313005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.040374041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.040374994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.040432930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.040436029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.040491104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.040512085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.040550947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.040558100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.040611982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.040617943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.040673971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.040673971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.040733099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.055901051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.055937052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.055991888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.055996895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.056021929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.056047916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.056061029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.056068897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.056072950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.056073904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.056097984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.056113958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.056138039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.056154966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.056160927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.056189060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.056212902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.056212902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.056226015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.056231976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.056232929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.056236029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.056253910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.056269884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.056274891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.056281090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.056296110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.056303978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.056318045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.056339025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.056349993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.056355000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.056374073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.056385040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.056396008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.056420088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.056431055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.056535006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.411705017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.411750078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.411812067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.411870956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.411925077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.411973000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.412023067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.412054062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.412072897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.412128925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.412170887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.412188053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.412246943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.412261009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.412394047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.430022955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430083990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430124044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430155993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430190086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430222034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430226088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.430253983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430283070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.430294991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430330038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430361986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430393934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430413961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.430425882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430468082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430484056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.430504084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430535078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430567980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430586100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.430602074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430634022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430646896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.430669069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430701017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430721998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.430740118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430775881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430807114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430840015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430871964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430908918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430948973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.430994034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431035042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431071043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431102991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431106091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.431124926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.431166887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431206942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431241035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431273937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431307077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431339025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431370020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431401014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.431401968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431433916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431473970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431482077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.431509972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431541920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431560993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.431575060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431608915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431638956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.431639910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431674004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431705952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431723118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.431745052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431777954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.431783915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431817055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431848049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.431849003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431881905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431912899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431921959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.431945086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431977034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.431997061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.432015896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432050943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432079077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.432081938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432115078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432147026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432149887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.432178020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432209015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432216883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.432240963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432281017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432301044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.432317019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432348013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432360888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.432383060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432415009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432439089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.432446003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432478905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432509899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432526112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.432549000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432584047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432593107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.432616949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432648897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432653904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.432681084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432713032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432744980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432765007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.432776928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432816982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432852030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432859898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.432883978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432915926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432923079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.432948112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.432979107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.433011055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.433029890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.433043957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.433084011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.433119059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.433141947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.433149099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.433182001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.433213949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.433232069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.433244944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.433276892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.433294058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.433309078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.433350086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.433372974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.433386087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.433444977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.433500051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.436780930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.814285040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814332962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814368963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814400911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814436913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814470053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814476013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.814513922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814553022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814579010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.814588070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814621925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814635038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.814659119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814694881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814702034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.814719915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.814730883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814766884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814775944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.814811945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814832926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.814851046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814888000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814901114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.814927101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814961910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.814989090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.814996004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815032005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815067053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815088987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.815110922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815139055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.815184116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815220118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815246105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.815263033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815306902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815321922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.815346956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815382004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815396070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.815417051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815449953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.815453053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815489054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815506935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.815526962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815562963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815587044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.815615892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815655947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815675974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.815690994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815732956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.815735102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815773964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815788984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.815809965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815845966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815865040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.815881968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815915108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815943003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.815951109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815985918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.815994024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.816030025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816046000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.816070080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816104889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816132069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.816140890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816179037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816212893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816219091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.816250086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816276073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.816286087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816334009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816349030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.816374063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816407919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816427946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.816445112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816479921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816512108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.816514015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816550970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816585064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816598892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.816629887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816653013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.816672087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816705942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816708088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.816742897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816777945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816796064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.816817045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816852093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816869974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.816888094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816932917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816937923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.816972971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.816992044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.817028046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817061901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817074060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.817100048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817137003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817152977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.817172050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817207098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817210913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.817241907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817265987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.817285061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817322969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817326069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.817358017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817394018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817409992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.817429066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817462921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817481041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.817497015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817532063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817538023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.817575932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817593098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.817615032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817650080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817653894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.817687035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:34.817727089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:34.817805052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.190391064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.190445900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.190495014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.190498114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.190536976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.190537930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.190542936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.190577030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.190592051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.190618038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.190625906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.190655947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.190690994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.190699100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.190737963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.190777063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.190778017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.190821886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.190824986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.190875053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191181898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191253901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191291094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191332102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191338062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191370964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191389084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191411018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191427946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191459894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191464901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191503048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191518068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191541910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191550970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191581964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191590071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191621065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191625118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191659927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191679001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191700935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191719055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191741943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191751003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191791058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191796064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191833973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191842079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191873074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191891909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191912889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191921949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191951990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.191961050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.191989899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192012072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192029953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192045927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192069054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192090034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192116022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192120075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192163944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192167997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192202091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192210913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192241907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192260981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192281008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192293882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192318916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192332029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192359924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192367077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192399025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192409992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192446947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192454100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192491055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192498922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192528009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192537069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192567110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192578077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192606926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192621946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192645073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192651033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192686081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192708015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192723989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192742109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192774057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192780018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192817926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192825079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192857027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192871094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192897081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192903042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192935944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192943096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.192972898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.192991018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.193011999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.193044901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.193048954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.193058968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.193098068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.193121910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.193139076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.193140030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.193178892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.193214893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.193217039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.193255901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.193259001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.193293095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.193299055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.193331957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.193345070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.193389893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.562948942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.563021898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.563024998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.563085079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.563090086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.563143015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.563184023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.563240051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.565248013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.565294027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.565315962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.565334082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.565373898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.565376997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.565414906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.565423012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.565438986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.565469980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.565485001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.565515995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.565522909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.565571070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.565572023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.565624952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.565629005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.565680981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.565697908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.565746069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.565756083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.565805912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.565815926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.565862894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.565875053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.565921068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.565937042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.565987110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.565998077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566051960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.566062927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566111088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.566112041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566149950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566157103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.566190958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566195965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.566234112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566246986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.566277981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.566292048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566339970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.566353083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566399097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566400051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.566443920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.566447973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566498995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.566509962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566560984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.566575050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566621065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566627026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.566663027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566672087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.566714048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.566723108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566775084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.566778898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566831112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.566839933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566903114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566936970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566967010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.566987038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567011118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567020893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567051888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567064047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567091942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567131996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567184925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567224979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567229033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567234993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567267895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567279100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567306995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567312956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567351103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567354918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567389011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567399979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567429066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567441940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567467928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567480087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567514896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567528963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567579985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567589045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567648888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567655087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567689896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567706108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567732096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567739010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567781925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567787886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567835093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567847013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567898989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567907095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.567961931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.567972898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568030119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568034887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568077087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568115950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568135977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568155050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568178892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568192959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568207979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568233013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568248987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568272114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568284988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568320036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568320036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568365097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568377018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568403006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568416119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568444014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568450928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568484068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568495989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568521023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568533897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568561077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568573952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568598986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568617105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568645954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568651915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568687916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568696976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568727970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568737030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568768024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568779945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568806887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568819046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568844080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568856001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568883896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568896055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568921089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568933964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.568969011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.568969965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.569010973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.569020033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.569050074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.569067955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.569087982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.569103956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.569127083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.569142103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.569164038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.569178104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.569202900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.569214106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.569241047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.569253922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.569289923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.569292068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.569333076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.569339991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.569370985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.569385052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.569408894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.569422007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.569447994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.569463015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.569484949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.569499016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.569524050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.569536924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.569561958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.569575071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.569608927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.569613934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.569665909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.936719894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.936755896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.936880112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.937442064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.937474012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.937541008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.937572956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.937591076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.937649965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.937671900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.937674046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.937809944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.943444967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.943485022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.943509102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.943532944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.943552017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.943644047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.943758965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.944403887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.944432974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.944495916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.944521904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.944545984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.944566965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.944590092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.944602966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.944613934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.944669008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.944675922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.944698095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.944720984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.944740057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.944742918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.944835901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.944876909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.944897890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.944930077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.945019007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.945039034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945064068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945086002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945106030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945127010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945142031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.945147991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945169926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945209026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945233107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945254087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.945283890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945317984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.945357084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945386887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.945432901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945460081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945477962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.945482969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945523024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945547104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945552111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.945588112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945646048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.945653915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945679903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945725918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.945727110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945753098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945808887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945822001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.945893049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945918083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.945919037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945944071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945966959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.945990086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946038008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.946089029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946110010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946110964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.946135044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946157932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946177006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946187973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.946196079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946234941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946255922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946275949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.946325064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.946352005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946389914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946410894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946424961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.946506023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.946506023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946533918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946556091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946578026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946582079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.946635008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946665049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.946695089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946719885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946739912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.946774960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946799040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946816921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.946821928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946861029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946882963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946892977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.946924925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946949005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.946957111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.946995020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947005987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.947019100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947042942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947066069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947067976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.947107077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947154999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947155952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.947180033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947202921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947227001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.947227955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947271109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947278023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.947295904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947334051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947339058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.947359085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947381020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947393894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.947422028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947444916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947458029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.947468042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947504997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947509050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.947544098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947570086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947581053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.947594881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947633982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.947637081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947659969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:35.947688103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:35.947866917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.310415030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.310445070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.310465097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.310486078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.310688972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.310885906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.310906887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.310956001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.310992956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.310998917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.311069965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.316456079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.316481113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.316500902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.316601992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.316651106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.317362070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.317383051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.317445993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.317473888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.317500114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.317527056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.317539930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.317570925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.317647934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.317667961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.317739010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.318001986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318025112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318046093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318065882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318089008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.318116903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318181038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318202019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.318253994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.318274975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318311930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318331957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.318332911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318355083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318383932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.318464994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.318562031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318584919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318650007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.318739891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318779945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318829060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318851948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.318881035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318905115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318912983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.318927050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.318986893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.319061995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319132090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.319152117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319173098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319194078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319207907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.319257021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.319288015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319315910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319339991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.319402933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319413900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.319432020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319459915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319469929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.319485903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319511890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319518089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.319539070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319565058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319597006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319607019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.319627047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319658995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.319674969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319709063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.319720030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319747925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319775105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319787025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.319808006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319837093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319863081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319874048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.319890976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319921970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.319935083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.319988966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.320066929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.320095062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.320122957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.320148945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.320173025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.320199966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.320271015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.684051037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684106112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684145927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684171915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.684195042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684209108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.684242010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684269905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.684279919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684308052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.684320927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684339046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.684360027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684370995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.684397936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684412956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.684437037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684437990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.684475899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684499025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.684523106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684540987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.684566021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684571028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.684604883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684622049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.684644938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684668064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.684683084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684694052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.684720039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684721947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.684760094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.684781075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.684822083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.689762115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.689805031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.689843893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.689872026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.690222979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.690268040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.690299034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.690308094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.690326929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.690346956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.690360069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.690386057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.690820932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.690860987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.690896034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.690927982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.691023111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.691061974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.691109896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.691128969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.691183090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.691232920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692178965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692223072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692261934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692265987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692300081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692303896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692338943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692352057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692385912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692392111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692429066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692450047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692466974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692493916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692507029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692517996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692544937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692545891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692584991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692593098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692625999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692650080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692666054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692689896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692713976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692715883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692756891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692770004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692796946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692820072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692840099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692842960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692878962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692900896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692917109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692944050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692955971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.692970991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.692994118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693001032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693042040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693084002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693097115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693121910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693154097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693161011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693200111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693226099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693237066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693264008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693276882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693305016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693315983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693332911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693363905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693367004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693407059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693434000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693448067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693474054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693487883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693500042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693525076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693528891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693567038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693578005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693625927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693656921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693696022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693708897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693732023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693732023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693773031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693773985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693814993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693828106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693850040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693854094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693892956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693928957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.693939924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693974018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:36.693977118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:36.696017981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.056778908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.056858063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.056910992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.056965113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.056968927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057007074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057013035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057019949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.057035923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057080984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.057081938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057137012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.057142019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057192087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.057200909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057249069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.057255030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057301044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.057310104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057356119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.057358980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057409048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.057414055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057459116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.057468891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057517052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.057518005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057574034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057575941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.057629108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.057631969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057693005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057714939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.057777882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.057784081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057838917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.057854891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057895899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.057913065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.057957888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.057962894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.058012009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.058017015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.058074951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.058078051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.058129072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.058135986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.058187008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.058187008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.058248997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.058296919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.058335066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.058361053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.058362007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.058417082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.058420897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.058470964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.058478117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.058526993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.058535099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.058582067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.058583021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.058635950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.062783003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.062827110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.062865019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.062882900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.062903881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.062911034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.062916994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.062942028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.062961102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.062979937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.062994957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.063035011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.063083887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.063157082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.063158035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.063204050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.063220978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.063245058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.063262939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.063283920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.063302994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.063323021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.063339949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.063370943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.063378096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.063412905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.063426018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.063451052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.063466072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.063492060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.063508034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.063532114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.063545942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.063569069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.063586950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.063625097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.063699007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.063738108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.063757896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.063779116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.063791990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.063817978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.063837051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.063869953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.066447020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.066495895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.066529036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.066540956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.066550016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.066580057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.066593885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.066621065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.066633940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.066663027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.066670895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.066701889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.066715956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.066741943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.066755056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.066783905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.066796064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.066833019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.066834927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.066879034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.066884995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.066919088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.066931009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.066956997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.066971064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.066997051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067008972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067035913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067049026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067075968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067084074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067145109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067166090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067212105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067259073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067265034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067269087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067307949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067320108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067348957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067361116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067388058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067400932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067429066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067444086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067466021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067481041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067507029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067518950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067545891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067558050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067595005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067610025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067639112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067651033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067677021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067687988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067715883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067723989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067755938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067763090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067805052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067814112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067848921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067856073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067888021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067900896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067934036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.067934990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067977905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.067991018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068027020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068028927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068068981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068088055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068108082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068123102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068145037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068161964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068185091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068221092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068222046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068240881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068263054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068272114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068315029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068325996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068366051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068367004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068407059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068419933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068445921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068450928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068484068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068496943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068525076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068536043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068563938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068574905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068612099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068645954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068672895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068686008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068712950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068736076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068739891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068777084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068793058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068825006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068840027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068870068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068872929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068907976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068919897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068948030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068959951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.068986893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.068998098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069025040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069032907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069063902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069075108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069103003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069114923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069150925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069152117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069195032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069211960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069232941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069245100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069272041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069283962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069323063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069350958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069363117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069391012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069401026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069413900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069442034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069456100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069490910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069534063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069574118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069605112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069611073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069612026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069613934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069619894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069650888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069662094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069688082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069699049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069727898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069734097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069766998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069778919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069820881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069839001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069866896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069880009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069905996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.069933891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.069943905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.430514097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.430569887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.430608034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.430655956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.430699110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.430736065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.430764914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.430784941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.430831909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.430849075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.430871964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.430900097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.430912971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.430949926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.430952072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431000948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431039095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.431044102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431077957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.431082964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431160927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431160927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.431204081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431245089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431247950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.431282997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431308031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.431323051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431361914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431374073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.431410074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431438923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.431453943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431507111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431561947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431602001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431613922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.431639910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431670904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.431678057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431716919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431718111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.431765079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431790113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.431807041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431843042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431857109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.431885004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431910992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.431925058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431963921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.431999922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.432003021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432043076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432065010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.432089090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432102919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.432132959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432169914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.432171106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432212114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432214975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.432250977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432262897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.432288885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432322979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.432328939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432367086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432400942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.432416916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432460070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432491064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.432497025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432533026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.432535887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432575941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432602882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.432612896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432651997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432668924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.432691097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432713985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.432739973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432774067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.432782888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432821989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432826042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.432862043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432874918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.432900906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432938099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.432950020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.432977915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.433017015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.433037996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.433063030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.433104992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.433104992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.433152914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.433217049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.434578896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.434618950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.434658051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.434696913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.434752941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.434818983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.434870005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.434909105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435009003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.435086012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435129881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.435149908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435189962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435197115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.435225010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.435229063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435269117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435306072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435322046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.435333967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.435375929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.435415030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.435496092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435560942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435570002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.435600996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435647964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435666084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.435692072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435733080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435755968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.435772896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435811996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435816050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.435863018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435902119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435909986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.435951948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435988903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.435991049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.436028957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436052084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.436069965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436115980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436132908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.436158895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436187029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.436197996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436227083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.436238050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436276913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436279058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.436314106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436321974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.436355114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436366081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.436393023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436439991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436440945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.436481953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436492920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.436521053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436547995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.436568975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436600924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436606884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.436633110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436666965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436674118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.436698914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.436794043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.436845064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.441699982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.441735983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.441768885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.441802979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.441834927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.441868067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.441895962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.441900969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.441937923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.441945076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.441948891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.441958904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.441982985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.441997051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442027092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442032099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442065954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442066908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442084074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442101955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442123890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442132950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442147970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442167997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442198992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442199945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442240953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442265034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442277908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442286015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442289114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442313910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442328930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442347050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442362070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442379951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442389965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442413092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442439079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442445993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442472935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442480087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442492962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442521095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442542076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442574978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442581892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442608118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442627907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442641973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442651987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442675114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442697048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442707062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442719936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442739964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442755938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442771912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442794085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442812920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.442823887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.442863941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.443013906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.443054914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.443068027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.443090916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.443119049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.443156958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.443160057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.443192959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.443226099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.443258047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.443269014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.443290949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.443325996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.443358898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.443365097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.443383932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.443399906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.443418026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.443437099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.443454027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.443469048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.443485975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.443501949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.443512917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.443540096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805181026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805212021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805229902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805246115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805263996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805282116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805300951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805305004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805320024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805337906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805346012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805355072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805356026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805373907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805393934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805396080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805408001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805412054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805425882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805444956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805459976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805464029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805486917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805505991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805522919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805524111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805536985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805541992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805557013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805562019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805579901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805598021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805609941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805615902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805639982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805649042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805660963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805681944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805682898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805695057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805716038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805728912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805736065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805756092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805766106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805773020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805783033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805792093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805810928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805819035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805830002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805849075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805852890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805874109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805890083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805891037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805907011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805924892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805926085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805947065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805958033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805968046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.805974007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.805984974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806003094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806016922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806020975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806039095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806041002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806055069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806061983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806072950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806088924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806094885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806109905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806116104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806133032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806133986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806150913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806159973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806169033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806185961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806201935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806204081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806212902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806221008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806230068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806242943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806262016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806281090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806281090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806292057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806298971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806317091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806333065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806335926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806350946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806366920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806368113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806382895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806389093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806408882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806417942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806425095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806442022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806451082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806458950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806468964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806474924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806493044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806504011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806509972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806530952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806540966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806550980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806556940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806566954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806585073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806591988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806602955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806617975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806622028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806639910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806649923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806657076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806677103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806688070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806695938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806699038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806713104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806730032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806737900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806746960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806762934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806766033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806780100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806796074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806799889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806816101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806829929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806834936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806848049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806852102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806869984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806884050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806889057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806905985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806917906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806925058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806932926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806942940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806963921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806974888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.806982994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.806998968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.807004929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.807017088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.807025909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.807035923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.807053089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.807065010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.807070017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.807086945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.807096958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.807106972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.807121038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.807152987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.807154894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.807174921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.807212114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.807243109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.815908909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.815928936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.815942049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.815953970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.815968037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.815979958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.815999985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816019058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816032887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816036940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816055059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816072941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816082001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816091061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816107035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816107988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816124916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816124916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816144943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816164970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816165924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816174984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816186905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816200018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816205978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816224098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816225052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816241026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816257000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816258907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816277981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816298008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816298962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816318035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816318035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816335917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816344976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816355944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816370964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816374063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816392899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816400051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816411018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816427946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816427946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816448927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816459894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816468954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816487074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816494942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816505909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816515923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816521883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816540003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816556931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816561937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816581964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816586018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816605091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816608906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816626072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816634893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816646099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816656113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816663980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816677094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816682100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816696882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816700935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816719055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816719055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816737890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816751957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816759109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816778898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816787958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816796064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816813946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816814899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816831112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816834927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816849947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816867113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816870928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816884995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816900969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816905975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816926003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816936016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816941977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816961050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816962957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816983938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.816986084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.816999912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817017078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817017078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817034960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817048073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817051888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817070961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817080975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817087889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817107916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817111015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817126989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817133904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817142963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817161083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817163944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817177057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817193985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817197084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817212105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817217112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817229986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817250013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817251921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817269087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817282915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817285061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817302942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817313910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817320108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817347050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817348957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817363977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817367077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817382097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817394972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817401886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817420006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817424059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817436934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817456007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817456961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817478895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817480087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817496061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817507029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817512035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817528009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817538977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817549944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817569017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:37.817576885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817598104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:37.817629099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.178543091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.178592920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.178632975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.178670883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.178709030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.178746939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.178761959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.178786039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.178788900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.178797007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.178808928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.178843021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.178848028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.178881884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.178896904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.178922892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.178936005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.178966045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.178970098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.179003954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179014921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.179042101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179058075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.179080963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179091930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.179138899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.179157019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179208994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179209948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.179254055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179294109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179299116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.179327965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.179336071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179374933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179413080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179420948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.179450989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.179452896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179491997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179538012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.179539919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179584026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179620028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179626942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.179661036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179699898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179702044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.179739952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179778099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179790974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.179816961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179862976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.179866076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179909945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179949999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179950953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.179985046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.179991961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.179992914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.180032015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.180068970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.180080891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.180109024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.180111885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.180146933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.180151939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.180192947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.180195093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.180238008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.180274963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.180286884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.180315018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.180315018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.180356979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.180372953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.180401087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.180505037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.180588961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.180634022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.180665970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.180738926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.180784941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.180839062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.180986881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.181041956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.181082010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.181173086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.181233883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.181246996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.181391954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.181457043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.181499958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.181687117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.181777000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.181787014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.181819916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.181849957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.181875944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.181889057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.181917906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.181973934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182003021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182037115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182075024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182100058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182117939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182132959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182151079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182168961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182178974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182208061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182220936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182238102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182250023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182259083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182276011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182291031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182300091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182313919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182322979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182338953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182347059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182363033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182373047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182383060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182395935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182406902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182420015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182427883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182441950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182457924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182478905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182493925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182509899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182523012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182538033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182553053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182563066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182580948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182585955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182600975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182621002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182626009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182641983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182648897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182665110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182679892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182687998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182723045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182730913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182746887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182763100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182779074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182796001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182804108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182825089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182831049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182847023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182853937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182873011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182881117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182899952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182913065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182928085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182945967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182971954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.182977915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.182997942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183010101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183024883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183038950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183054924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183068037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183077097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183094978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183109999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183150053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183160067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183178902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183192968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183209896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183224916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183234930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183254957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183273077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183288097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183304071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183316946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183331966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183347940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183360100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183377028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183387995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183404922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183418989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183430910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183448076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183461905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183480024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183486938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183523893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183540106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183554888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183574915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183595896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183617115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183626890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183640003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183655977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183671951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183685064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183692932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183711052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183732033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183738947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183773041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183811903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183831930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183852911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183877945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183896065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183908939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183924913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183936119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.183957100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183975935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.183986902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.184006929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.184021950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.184032917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.188256025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.189341068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.189361095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.189380884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.189433098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.189471960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.189481974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.189512968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.189528942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.189552069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.189572096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.189598083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.189606905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.189623117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.189635038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.189646959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.189665079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.189681053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.189690113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.189708948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.189730883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.189738989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.189742088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.189763069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.189771891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.189790010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.189800024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.189817905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.189829111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.189843893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.189857960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.190036058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.559570074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.559603930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.559626102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.559647083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.559667110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.559680939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.559710026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.559737921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.559745073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.559763908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.559779882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.559802055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.559813023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.559828043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.559848070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.559859037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.559883118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.559899092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.559915066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.559926033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.559952974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.559961081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.559986115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.560003042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.560019016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.560039997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.560051918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.560064077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.560084105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.560092926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.560117006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.560127020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.560151100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.560170889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.560184956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.560206890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.560215950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.560236931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.560251951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.560262918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.560312033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564102888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564136982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564160109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564181089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564202070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564220905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564251900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564280987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564289093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564320087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564327955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564358950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564383984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564404964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564415932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564439058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564448118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564470053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564482927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564502001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564523935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564537048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564558983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564567089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564579964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564599037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564614058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564630032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564639091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564660072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564670086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564691067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564714909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564722061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564743042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564769030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564776897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564804077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564810991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564835072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564846039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564871073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564894915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564903975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564925909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564939976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564959049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.564980030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.564991951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565013885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565025091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565042019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565056086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565066099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565087080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565095901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565116882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565126896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565148115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565169096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565179110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565201998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565212011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565233946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565252066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565262079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565288067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565294027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565315962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565335989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565356970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565368891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565391064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565399885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565421104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565443993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565452099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565473080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565481901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565504074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565512896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565534115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565548897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565567970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565586090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565603971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565614939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565645933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565654993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565677881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565695047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565711021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565733910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565743923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565752029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565773964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565787077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565804958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565814018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565834999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565845013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565874100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565886021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565907001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565936089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.565957069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565962076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.565980911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566004992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566026926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566036940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566073895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566081047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566103935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566113949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566142082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566148996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566169977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566184998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566204071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566220045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566236973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566245079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566267014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566277027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566306114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566320896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566337109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566354036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566401958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566410065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566431046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566442966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566462994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566482067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566498995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566508055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566529989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566550016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566559076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566581964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566591024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566617966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566623926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566647053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566654921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566679001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566690922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566719055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566725969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566749096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566765070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566787958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566803932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566824913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566836119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566859961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566875935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566910982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.566926003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566951990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566973925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.566996098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567003965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567027092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567035913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567055941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567071915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567091942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567111969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567146063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567173004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567197084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567218065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567245007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567251921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567276001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567286015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567322016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567347050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567367077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567382097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567394972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567418098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567431927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567454100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567464113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567487955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567507029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567523003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567544937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567559004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567569017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567596912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567605019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567629099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567646027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567663908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567683935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567698956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567709923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567734003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567753077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567769051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567787886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567805052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567814112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567841053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567847967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567868948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567886114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567903042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567924023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567935944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567950010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.567970991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.567981005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568006039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568012953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568037033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568051100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568070889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568090916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568104029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568114042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568134069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568144083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568166018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568192005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568198919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568221092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568229914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568252087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568265915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568285942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568308115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568316936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568341970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568351984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568372965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568393946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568404913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568425894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568438053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568455935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568470001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568481922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568501949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568511009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568536043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568542957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568567038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568581104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568600893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568620920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568631887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568645000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568662882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568675995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568698883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568706036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568730116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568746090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568768024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568788052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568800926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568810940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568837881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568845034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568869114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568878889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568902016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568917990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568938017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568948030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.568969011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.568995953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.569001913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.569024086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.569032907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.569055080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.569073915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.569087029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.569108009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.569117069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.569139004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.569150925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.569163084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.569181919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.569191933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.569215059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.569224119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.569245100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.569268942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.569277048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.569302082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.569312096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.569334984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.569348097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.569370031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.569385052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.569405079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.569413900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.569434881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.569458008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.569466114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.569499016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.569523096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.932282925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.932369947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.932413101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.932482958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.932507992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.932550907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.932607889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.932626009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.932702065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.932719946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.932796001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.932812929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.932871103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.932934046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.932950974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.933013916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933068037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.933108091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933173895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933226109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.933244944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933290958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933340073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933351040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.933389902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933425903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933448076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.933469057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.933495998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933533907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933554888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.933572054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.933607101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933643103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933681011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933698893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.933727980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.933756113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933794975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933830976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933851004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.933881998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.933916092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933958054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.933978081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.934014082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.934045076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934084892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934123993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934139967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.934174061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.934195995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934233904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934271097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934286118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.934314966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.934346914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934389114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934407949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.934428930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.934473991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934513092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934551954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934566975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.934601068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.934623957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934662104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934698105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934715033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.934742928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.934781075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934820890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934838057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.934878111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.934891939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934931040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934967995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.934986115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.935025930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.935055017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.935084105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.935156107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.935167074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.935206890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.935247898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.935302019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.942425013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.942466974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.942492008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.942513943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.942533970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.942558050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.942583084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.942591906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.942600965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.942627907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.942637920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.942666054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.942691088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.942708015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.942727089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.942739010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.942761898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.942771912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.942796946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.942821026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.942842960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.942859888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.942869902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.942893028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.942903042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.942929983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.942939997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.942966938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.942977905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943034887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943041086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943067074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943075895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943100929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943109989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943171978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943195105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943226099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943250895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943275928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943286896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943310022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943325996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943350077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943363905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943387032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943397999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943424940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943434954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943461895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943485975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943496943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943522930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943536043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943561077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943571091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943595886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943604946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943629026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943645000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943664074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943675995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943697929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943711996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943731070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943741083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943763971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943788052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943808079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943824053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943835974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943856955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943865061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943891048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943917036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943934917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943950891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943965912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.943984032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.943994999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944019079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944026947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944051027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944076061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944092989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944108963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944123030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944142103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944153070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944175005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944183111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944206953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944221973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944242954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944251060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944278002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944303036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944320917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944336891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944351912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944370985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944380999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944403887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944427013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944446087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944461107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944474936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944494963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944504976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944528103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944546938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944561958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944576025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944598913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944605112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944628954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944653034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944673061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944690943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944704056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944729090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944736958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944760084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944783926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944803953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944823980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944833040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944859982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944885969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944900990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944925070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944933891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944958925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.944968939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.944993019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945003033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945027113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945034981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945059061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945067883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945091963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945101023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945125103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945151091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945163965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945192099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945198059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945224047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945240974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945261955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945271015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945293903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945302963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945327997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945353031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945373058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945388079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945403099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945421934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945431948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945456028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945466042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945488930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945497990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945522070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945545912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945563078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945581913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945593119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945616961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945626020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945650101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945674896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945693016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945712090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945722103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945750952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945760965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945786953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945796967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945821047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945831060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945858002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945883036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945904016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945919037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945930958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.945955038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.945986986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.946012020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.946036100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.946060896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.946072102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.946085930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.946106911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.946116924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.946141005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.946155071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.946173906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.946187019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.946208000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:38.946217060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:38.946278095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.306252003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.306307077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.306355953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.306400061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.306423903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.306479931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.306490898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.306531906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.306569099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.306585073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.306624889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.306663990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.306679964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.306719065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.306767941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.306807995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.306848049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.306885958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.306900978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.306941032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.306979895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.306994915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.307034016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.307071924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.307090998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.307178974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.307219028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.307250023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.307271957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.307328939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.307374001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.307413101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.307431936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.307461023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.307487965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.307526112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.307563066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.307579041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.307605982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.307634115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.307672024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.307708025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.307723999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.307750940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.307790995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.310218096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.681901932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.681957006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.681986094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682012081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682040930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682065010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682089090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682121992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682140112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682171106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682200909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682216883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682243109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682254076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682276011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682296038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682301998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682323933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682332039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682343006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682365894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682372093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682389975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682410002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682434082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682440996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682461023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682473898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682493925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682511091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682518005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682524920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682537079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682559967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682566881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682585955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682605028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682622910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682631016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682646990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682660103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682670116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682684898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682693958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682709932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682720900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682737112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682748079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682755947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682775021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682792902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682810068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682817936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682833910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682847023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682857037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682871103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682879925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682895899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682905912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682923079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682933092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682943106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.682960987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682981014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.682991982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683002949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683015108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683022976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683038950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683057070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683073044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683089018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683100939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683131933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683142900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683151960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683168888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683183908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683195114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683212996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683222055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683233976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683240891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683259010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683269024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683290005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683295965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683317900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683324099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683334112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683351994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683367968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683379889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683391094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683408976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683422089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683435917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683454037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683464050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683474064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683491945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683511019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683520079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683537006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683543921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683562040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683567047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683583021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683593988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683610916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683619022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683621883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683640957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683651924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683669090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683686018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683695078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683711052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683721066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683733940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683743954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683760881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683767080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683782101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683789968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683805943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683815956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683830023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683840990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683851004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683865070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683881044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683888912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683907986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683914900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683932066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683943033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683949947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.683968067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683984041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.683993101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684006929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684026003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684031963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684047937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684053898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684068918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684086084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684093952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684111118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684118986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684138060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684148073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684161901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684181929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684187889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684204102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684211016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684226036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684232950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684247971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684258938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684282064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684287071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684297085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684309959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684318066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684333086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684349060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684359074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684372902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684390068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684398890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684417009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684432030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684448004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684457064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684467077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684480906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684495926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684504986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684520006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684525967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684540033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684549093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684561968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684572935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684585094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684596062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684604883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684617996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684633970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684648991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684659004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684674025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684693098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684700966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684715986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684726000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684745073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684752941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684762001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684777975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684793949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684806108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684823990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684829950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684847116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684854984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684870005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684878111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684896946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684905052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684922934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684931040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684942007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684957027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684972048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.684981108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.684993029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.685003042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.685014009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.685026884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.685035944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.685050964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.685066938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.685084105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.685095072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.685108900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.685129881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.685136080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.685144901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.685162067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.685178041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.685185909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.685199022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.685211897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.685219049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.685234070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.685250044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.685261011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.685276985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.685286999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.685295105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.685311079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.685327053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.685343981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:39.685353041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:39.685389042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.056463003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.056502104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.056526899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.056544065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.056562901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.056577921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.056612015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.056621075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.056624889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.056648970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.056663990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.056684017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.056703091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.056732893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.056747913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.056771994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.056788921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.056806087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.056821108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.056840897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.056853056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.056878090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.056889057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.056914091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.056925058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.056950092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.056962967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.056982994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.056992054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057015896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057037115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057050943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057065010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057086945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057096004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057118893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057137966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057157040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057168961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057195902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057205915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057233095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057248116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057267904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057286024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057301044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057320118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057337046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057348013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057370901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057398081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057423115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057442904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057456017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057466030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057491064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057514906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057528973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057553053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057563066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057581902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057605982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057622910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057642937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057656050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057681084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057699919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057717085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057728052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057754040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057765961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057790041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057805061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057825089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057837963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057859898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057873011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057893991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057904959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057928085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057948112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057962894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.057976007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.057996035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058006048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058028936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058043957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058063030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058072090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058095932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058113098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058130980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058141947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058166027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058173895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058201075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058218002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058234930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058245897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058269024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058279991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058301926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058311939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058335066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058346987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058372021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058382034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058408022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058420897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058455944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058463097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058501959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058507919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058532953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058559895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058567047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058584929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058602095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058609009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058631897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058644056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058665037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058674097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058696985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058707952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058729887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058753014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058763981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058780909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058803082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058809996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058832884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058845997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058866978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058880091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058901072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058909893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058934927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058945894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.058969975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.058983088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059001923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059019089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059035063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059051037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059068918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059082031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059103966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059134007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059160948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059168100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059191942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059206963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059228897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059247017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059267998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059278965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059303999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059328079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059340954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059351921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059375048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059386015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059407949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059421062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059443951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059462070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059480906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059504986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059514999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059521914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059544086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059556961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059582949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059602022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059612036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059638977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059649944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059674025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059689999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059710979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059721947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059745073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059765100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059779882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059792042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059815884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059828043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059854984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059870005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059890985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059909105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059925079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059938908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059959888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.059978008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.059993982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060012102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060029984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060041904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060066938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060080051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060106039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060122967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060143948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060154915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060178995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060194969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060215950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060226917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060250998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060266972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060285091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060306072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060318947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060333014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060354948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060368061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060389042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060411930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060421944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060440063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060457945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060468912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060492992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060513973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060534954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060544014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060569048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060578108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060601950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060616970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060636044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060647964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060668945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060683012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060702085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060710907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060734987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.060749054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.060781956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.163177967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.433799028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.433849096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.433887005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.433923006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.433943987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.433980942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.434019089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.434056997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.434072971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.434092045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.434132099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.434148073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.434194088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.434206963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.434248924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.434273005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.434315920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.434331894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.434365034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.434400082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.434438944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.434454918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.434483051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.434509993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.434549093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.434566975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.434602976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.434618950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.434655905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.434672117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.434752941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.434791088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.434827089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.434870005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.434880018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.434919119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.434942961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.434982061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.435002089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.435051918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.435085058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.435103893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.435174942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.435231924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.435244083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.435288906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.435300112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.435348988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.435359001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.435403109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.435414076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.435451984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.435471058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.435523033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.435540915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.435579062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.435595989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.435636044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.435653925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.435692072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.435708046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.435753107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.435771942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.435846090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.435874939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.435915947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.435933113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.435966969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.435988903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.436027050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.436043978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.436084986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.810616016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.810652018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.810673952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.810698032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.810713053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.810777903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.810789108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.810813904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.810836077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.810844898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.810868025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.810878992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.810899019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.810920000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.810930967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.810956955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.810964108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.810985088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.810993910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811007023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811027050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811042070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811059952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811081886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811105013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811141968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811167955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811196089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811209917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811229944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811248064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811270952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811295986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811306953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811322927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811343908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811384916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811395884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811420918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811460972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811471939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811495066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811503887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811527967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811543941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811559916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811583042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811592102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811614037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811628103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811651945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811665058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811676025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811701059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811723948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811738968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811757088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811777115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811815977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811824083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811861038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811883926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811908960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811916113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811942101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.811952114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.811976910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812001944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812011957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812033892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812043905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812066078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812082052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812102079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812119007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812143087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812155962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812180996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812195063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812218904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812228918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812258959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812266111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812289000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812300920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812323093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812347889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812356949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812374115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812391996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812401056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812422991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812433004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812454939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812465906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812486887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812496901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812521935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812535048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812557936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812566996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812589884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812602043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812635899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812649965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812674046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812702894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812721014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812727928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812751055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812767982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812783957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812794924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812815905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812835932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812849045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812864065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812880993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812891960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812913895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812925100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812947989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812957048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.812980890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.812995911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813014030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813025951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813045025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813054085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813079119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813093901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813112974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813121080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813143015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813154936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813180923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813191891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813216925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813226938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813252926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813282967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813292980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813319921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813344002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813365936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813385963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813396931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813421965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813441992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813460112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813471079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813493967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813514948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813529015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813544035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813565016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813576937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813600063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813611984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813633919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813642979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813666105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813674927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813711882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813721895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813746929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813770056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813779116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813793898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813817024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813823938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813847065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813857079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813879013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813901901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813911915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813920975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813944101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813952923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.813975096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.813986063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814007044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814017057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814038992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814059019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814074993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814085960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814105988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814120054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814145088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814171076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814193010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814208031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814238071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814285994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814307928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814332962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814358950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814369917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814397097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814420938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814444065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814486980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814495087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814538956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814548969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814590931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814611912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814635038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814654112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814668894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814682961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814703941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814724922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814748049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814757109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814785957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814795017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814824104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814830065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814852953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814863920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814886093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814894915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814919949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814929962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814955950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.814965010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.814994097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.815016031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.815042019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.815057039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.815077066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.815085888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.815112114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.815140009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.815164089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.815175056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.815197945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:40.815207958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:40.815244913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.188173056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.188249111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.188301086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.188350916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.188385010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.188431978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.188467026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.188522100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.188544035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.188591957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.188622952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.188678026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.188700914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.188746929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.188788891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.188843966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.188868046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.188913107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.188954115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.189014912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.189032078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.189068079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.189116001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.189171076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.189196110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.189245939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.189281940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.189333916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.189357042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.189398050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.189440966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.189506054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.189521074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.189558029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.189603090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.189656973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.189678907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.189728022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.189766884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.189831018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.189846992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.189879894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.189930916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.189992905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.190007925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.190059900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.190093994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.190156937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.190174103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.190217018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.190258980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.190320969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.190336943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.190378904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.190422058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.190485001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.190500975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.190570116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.190584898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.190653086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.190668106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.190737963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.190754890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.190812111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.190835953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.190886974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.190908909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.190946102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.190994978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.191056013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.191072941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.191112995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.191221952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.191277981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.191298962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.191344976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.191382885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.191445112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.564790964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.564824104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.564850092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.564879894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.564909935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.564939976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.564955950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.564987898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565015078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565047026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565073013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565087080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.565115929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565144062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565161943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.565190077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565226078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565232992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.565259933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565285921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565299034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.565329075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565357924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565370083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.565402985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565432072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.565449953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565479994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565494061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.565520048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565550089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565567970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.565596104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565630913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565649986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.565671921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565695047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565709114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.565735102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565767050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565776110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.565798044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565819979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.565839052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565862894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.565876961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565907001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565937042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.565953970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.565985918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566020012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566026926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.566051960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566071033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.566092968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566118956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.566134930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566160917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566190958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.566200018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566230059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566262960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566272974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.566298962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566312075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.566339970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566378117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566386938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.566414118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566443920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.566461086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566490889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.566503048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566528082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566540956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.566565037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566600084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566611052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.566641092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566679001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566688061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.566720009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566734076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.566759109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566787004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.566800117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566833019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566865921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566878080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.566909075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566945076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.566953897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.566982985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567018032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567028046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.567059040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567075968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.567105055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567167044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.567241907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.567274094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567307949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567337036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567369938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567382097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.567428112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567442894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.567482948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567518950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567534924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.567574978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567586899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.567626953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567679882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567692995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.567734003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567765951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.567781925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567821026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567847013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.567869902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567895889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567910910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.567945957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567972898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.567991972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.568041086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568070889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568088055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.568124056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568146944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.568185091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568217993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.568242073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568276882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568308115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568330050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.568366051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568382025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.568411112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568444967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568456888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.568490982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568538904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568552017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.568583965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568625927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568646908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.568679094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568703890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.568733931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568769932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568784952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.568818092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568851948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568867922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.568897963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568928957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.568943977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.568974018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569015026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569025993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.569052935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569088936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569103003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.569139957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569169998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.569186926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569221020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569255114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.569273949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569298029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569329023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569363117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569396019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569410086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.569447994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569483042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569494009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.569529057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569538116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.569572926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569593906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.569632053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569658041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569679022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.569708109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569726944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.569756031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569788933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569804907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.569833040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569860935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.569878101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.569936991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.569989920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.942739010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.942774057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.942792892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.942817926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.942842007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.942858934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.942888975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.942910910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.942924976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.942934990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.942959070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.942971945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.942997932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943011045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943049908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943069935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943080902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943094015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943128109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943140984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943166018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943186045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943200111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943213940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943234921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943244934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943269014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943279028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943303108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943325996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943336010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943357944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943383932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943389893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943414927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943443060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943449974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943469048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943483114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943492889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943516016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943537951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943552017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943574905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943603992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943629980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943638086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943659067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943674088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943685055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943710089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943726063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943753958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943778038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943787098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943811893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943830013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943846941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943867922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943878889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943900108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943909883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943924904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943943977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.943953037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943977118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.943991899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944025993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944039106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944061041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944072008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944096088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944112062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944137096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944153070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944178104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944200039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944226027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944247961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944262028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944287062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944302082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944329977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944336891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944341898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944372892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944392920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944418907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944439888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944462061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944492102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944499969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944504023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944529057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944540024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944570065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944582939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944606066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944616079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944638968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944662094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944694996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944700956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944725990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944773912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944785118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944808960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944822073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944839001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944858074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944871902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944881916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944909096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944915056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944938898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944958925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.944974899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.944988966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945014000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945023060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945058107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945076942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945102930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945125103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945139885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945152998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945179939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945188046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945210934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945219994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945246935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945257902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945286036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945300102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945327044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945338011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945367098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945374966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945410967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945417881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945451021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945466995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945483923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945503950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945522070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945530891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945554018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945566893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945590973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945602894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945624113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945633888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945658922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945667982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945692062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945719004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945728064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945756912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945782900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945807934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945815086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945837975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945851088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945871115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945892096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945904970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945914030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945940018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.945957899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.945988894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946016073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946022987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946042061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946059942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946069956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946090937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946111917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946129084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946154118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946161985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946171045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946202040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946213961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946249962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946263075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946283102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946294069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946336031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946363926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946369886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946376085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946399927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946427107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946434021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946460962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946466923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946491003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946504116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946522951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946535110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946557999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946573019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946594954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946604967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946629047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946651936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946670055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946683884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946701050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946718931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946731091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946753025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946778059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946787119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946814060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946820021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946846962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946852922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946876049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946885109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946908951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946918011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946945906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946952105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.946974993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.946983099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.947005987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.947016001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.947038889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.947051048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.947072029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.947093010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.947104931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.947130919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.947154999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.947165012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.947189093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.947201967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.947237015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.947249889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.947277069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.947302103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.947309971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.947323084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.947346926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.947356939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.947381020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.947392941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.947415113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.947432041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.947452068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.947462082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.947484016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.947503090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.947520971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:41.947541952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:41.947562933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.320156097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.320209026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.320265055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.320281029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.320317030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.320367098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.320379972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.320425034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.320458889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.320497036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.320534945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.320584059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.320615053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.320657015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.320689917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.320714951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.320750952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.320772886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.320810080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.320825100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.320863008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.320899963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.320915937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.320954084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.320997953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321007967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.321044922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321073055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.321103096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321120024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.321157932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321188927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.321222067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321253061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.321293116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321310043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.321348906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321393013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.321425915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321465015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321480989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.321520090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.321536064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321573973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321611881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.321628094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321664095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321711063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321724892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.321774006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321799994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.321851015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321861982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.321902037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321922064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.321964025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.321984053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.322026014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.322062016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.322087049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.322129965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.322155952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.322185040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.322235107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.322266102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.322308064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.322360992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.322387934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.322436094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.322447062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.322473049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.322503090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.322519064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.322557926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.322585106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.322613001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.322647095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.322669029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.322688103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.322722912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.322737932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.322773933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.322792053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.322827101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.322854042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.322882891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.322920084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.322937012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.322957993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.322992086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.323009968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.323065042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.323076963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.323153019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.323196888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.323240042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.323272943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.323340893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.323354959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.323399067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.323415995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.323467970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.323504925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.323545933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.323580027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.323605061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.323642969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.323662996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.323683023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.323718071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.323734045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.323780060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.323798895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.323836088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.323872089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.323889971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.323925018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.323956966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.323971987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.324014902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.324064016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.324105978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.324136019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.324173927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.324193954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.324249983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.324269056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.324323893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.324359894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.324407101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.324425936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.324466944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.324486017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.324527025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.324549913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.324592113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.324615002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.324656010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.324685097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.324726105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.324745893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.324789047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.324810028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.324851036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.324875116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.324920893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.324932098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.324970961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.325001001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.325032949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.325067043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.325102091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.325119972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.325165987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.325207949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.325249910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.325285912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.325335026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.325354099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.325392962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.325419903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.325448990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.325488091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.325504065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.325530052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.325557947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.325573921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.325608969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.325640917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.325679064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.325707912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.325736046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.325762987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.325793982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.325814962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.325855017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.325865984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.325916052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.325937986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.325973988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.326004982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.326030970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.326047897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.326086044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.326148033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.326191902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.326215982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.326266050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.326292038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.326334000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.326349020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.326414108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.326426983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.326483011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.326494932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.326543093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.326560020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.326606035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.326623917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.326661110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.326680899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.326719046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.326742887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.326773882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.326817989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.326828957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.326853037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.326884985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.326911926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.326941967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.326957941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.327002048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.327013016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.327050924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.327080011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.327156067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.327197075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.327272892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.698483944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.698535919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.698575020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.698612928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.698651075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.698688030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.698710918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.698772907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.698827982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.698841095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.698882103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.698911905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.698968887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.698982000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.699014902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.699059010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.699078083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.699147940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.699160099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.699204922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.699237108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.699263096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.699301958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.699331045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.699359894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.699395895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.699413061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.699459076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.699496984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.699532032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.699579954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.699589968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.699630022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.699661016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.699687004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.699723005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.699740887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.699790001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.699829102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.699852943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.699892044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.699909925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.699949026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.699991941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.700002909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.700041056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.700073004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.700097084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.700125933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.700153112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.700196981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.700229883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.700275898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.700289011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.700335026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.700376987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.700408936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.700493097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.700527906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.700608015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.700645924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.700694084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.700736046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.700773001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.700810909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.700849056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.700885057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.700925112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.700948954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.700989008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.701026917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.701062918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.701086998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.701118946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.701158047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.701176882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.701214075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.701230049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.701268911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.701291084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.701337099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.701360941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.701400995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.701426029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.701481104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.701500893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.701539993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.701580048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.701611042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.701647997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.701667070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.701709986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.701721907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.701756954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.701798916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.701819897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.701855898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.701884985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.701926947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.701966047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.701993942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.702044964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.702092886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.702111006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.702163935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.702199936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.702241898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.702265024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.702308893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.702326059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.702375889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.702393055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.702440023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.702460051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.702514887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.702527046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.702575922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.702609062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.702642918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.702683926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.702701092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.702732086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.702774048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.702786922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.702826977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.702863932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.702881098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.702919006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.702935934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.702974081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.703010082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.703027964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.703064919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.703099966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.703140974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.703183889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.703207970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.703248024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.703263044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.703310966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.703331947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.703372955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.703411102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.703428030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.703493118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.703546047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.703561068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.703605890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.703639984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.703666925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.703708887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.703726053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.703773022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.703794003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.703838110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.703855038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.703902960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.703937054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.703970909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.703988075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.704026937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704044104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.704087973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704098940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.704137087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704152107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.704190016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704205990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.704243898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704265118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.704298973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704315901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.704354048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704380035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.704411030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704426050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.704463959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704479933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.704516888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704560041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704570055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.704618931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704634905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.704680920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704709053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.704749107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704782009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.704818010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704834938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.704873085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704890013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.704929113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704950094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.704984903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.704999924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705038071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705053091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705091953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705107927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705147028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705163002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705200911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705215931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705254078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705279112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705328941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705343008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705389023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705425978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705456972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705512047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705521107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705544949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705566883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705579996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705612898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705626011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705656052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705682993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705697060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705728054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705735922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705765963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705773115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705801964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705809116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705835104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705846071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705872059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705883026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705909967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705935955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.705946922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705971956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.705993891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.706011057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.706037045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.706048965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.706075907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:42.706101894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.706156969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:42.707340956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.078224897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.078265905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.078284979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.078306913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.078327894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.078349113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.078367949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.078383923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.078448057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080054998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080079079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080099106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080115080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080132961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080142021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080157995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080174923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080183983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080202103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080218077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080230951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080250025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080259085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080276012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080282927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080298901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080317020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080324888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080339909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080353975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080363989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080379009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080385923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080401897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080415010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080425024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080440044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080447912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080462933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080477953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080485106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080499887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080508947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080538988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080545902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080560923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080578089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080590010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080658913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080662966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080681086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080687046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080704927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080720901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080730915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080744982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080760002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080770016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080784082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080806971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080830097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080883026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080899954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080913067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080933094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080940962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080957890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.080967903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.080986977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081008911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081018925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081032991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081044912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081064939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081073999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081093073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081100941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081115007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081129074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081142902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081156969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081170082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081185102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081193924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081212997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081222057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081240892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081255913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081269026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081284046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081296921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081310034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081330061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081353903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081361055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081379890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081388950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081409931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081415892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081433058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081442118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081461906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081470966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081487894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081497908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081521034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081526995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081543922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081552982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081568003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081581116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081603050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081609964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081620932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081638098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081648111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081666946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081681967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081696033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081708908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081723928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081732988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081752062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081769943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081779957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081803083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081804991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081820965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081832886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081841946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081860065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081871033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081878901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081891060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081906080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081913948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081928968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081947088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081952095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081969976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.081974983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081981897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.081996918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082005978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082025051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082040071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082050085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082062006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082073927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082093000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082097054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082113981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082118988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082134008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082142115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082159042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082164049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082179070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082185030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082200050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082206964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082220078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082230091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082246065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082252979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082268000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082274914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082292080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082297087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082309961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082319021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082329988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082341909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082351923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082365036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082371950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082386971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082397938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082410097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082417965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082432032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082438946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082454920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082468987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082479000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082489967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082501888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082515955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082525015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082537889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082550049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082559109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082575083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082582951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082600117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082617998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082624912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082639933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082655907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082664967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082681894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082689047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082707882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082715988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082731009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082747936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082753897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082770109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082779884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082793951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082803965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082819939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082837105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082844973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082861900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082869053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082887888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082895994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082909107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082921982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082933903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082946062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082959890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082968950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.082978010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.082992077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083003998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083014011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083031893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083043098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083050013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083065033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083080053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083086014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083103895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083132029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083144903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083192110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083209038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083224058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083230972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083246946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083254099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083271027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083276033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083291054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083297014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083311081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083317995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083336115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083343983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083353996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083367109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083379030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083389997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083403111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083411932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083425999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083435059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083444118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083456993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083463907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083478928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083486080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083499908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083511114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083523035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083534002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083554029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083559990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083575964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083587885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083601952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083621025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083626986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083641052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083652973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083659887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083676100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083686113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083702087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083708048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083723068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083740950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083749056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083767891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083776951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083792925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083803892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083816051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083832026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083837986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083853006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083859921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083873987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083883047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083893061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083904982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083925009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083940029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083947897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.083962917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083980083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.083987951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.084002018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.084016085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.084033012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.084047079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.084059954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.084079027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.084089041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.084096909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.084115982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.084129095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.084140062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.084156990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.084166050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.084181070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.084188938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.084199905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.084222078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.450033903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.450114965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.450160027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.450181961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.450242996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.450318098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.450335979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.450393915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.450418949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.450467110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.450510979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.450561047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.450596094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.450630903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.450664043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.450747967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.452264071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.452326059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.452348948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.452410936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.452461958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.452514887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.452536106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.452599049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.452619076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.452668905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.452712059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.452773094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.452794075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.452851057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.452879906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.452939987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.452960968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.453007936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.453049898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.453109980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.453130007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.453197002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.453212023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.453274012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.453298092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.453347921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.453371048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.453414917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.453458071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.453537941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.455589056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.455646038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.455698967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.455733061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.455744982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.455796003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.455812931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.455871105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.455883980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.455938101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.455962896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.456029892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.456046104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.456115961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.456129074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.456187010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.456212997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.456283092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.456298113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.456368923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.456398964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.456459999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.456484079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.456536055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.456577063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.456630945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.456653118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.456707954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.456744909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.456799030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.456820965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.456887960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.456902981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.456962109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.456984997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.457058907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.457076073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.457139969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.457163095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.457215071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.457252979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.457309008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.457336903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.457372904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.457412958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.457482100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.457495928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.457561970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.457576036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.457643032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.457657099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.457715988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.457739115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.457794905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.457814932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.457882881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.457896948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.457953930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.457973003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.458023071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.458051920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.458102942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.458126068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.458178997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.458199978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.458252907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.458273888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.458322048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.458357096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.458415031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.458436966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.458492041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.458542109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.458566904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.458635092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.458650112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.458698034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.458730936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.458787918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.458811998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.458853006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.458889961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.458940983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.458960056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.459008932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.459028959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.459076881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.459095955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.459156990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.459193945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.459232092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.459256887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.459287882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.459310055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.459342003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.459372997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.459399939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.459417105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.459456921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.459481955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.459520102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.459558010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.459574938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.459606886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.459645987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.822609901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.822649002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.822674036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.822698116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.822787046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.822832108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.822943926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.831687927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.831724882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.831803083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.831829071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.831871986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.831890106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.831902027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.831913948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.831923962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.831934929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.831945896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.831962109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832005024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832089901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832139969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832202911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832220078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832231045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832268953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832289934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832298994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832329035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832345009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832353115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832392931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832441092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832468987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832503080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832526922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832545042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832571030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832587957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832597017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832612991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832628965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832638025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832655907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832672119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832674026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832689047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832706928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832715034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832732916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832741976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832757950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832768917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832782030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832798004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832811117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832823038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832839966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832849026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832868099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832887888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832896948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832906961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832921028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832937002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832948923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832957983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832967043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.832983971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.832988977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833003998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833018064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833019018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833034039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833045959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833051920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833065987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833082914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833091974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833106995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833118916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833136082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833153009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833161116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833178997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833194017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833225965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833239079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833261013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833290100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833297014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833321095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833328009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833353996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833360910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833367109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833394051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833405018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833427906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833446026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833477974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833491087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833511114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833533049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833544016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833565950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833575010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833595037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833616018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833626032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833647013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833659887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833672047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833689928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833712101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833717108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833739996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833750963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833772898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833781958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833797932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833818913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833841085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833859921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833874941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833897114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833909035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833935022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.833954096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.833978891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834005117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834019899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834028959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834050894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834058046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834080935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834098101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834129095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834147930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834168911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834197044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834207058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834228039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834240913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834253073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834295034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834301949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834325075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834343910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834367037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834392071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834403038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834427118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834433079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834448099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834465027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834474087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834520102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834525108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834542036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834557056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834575891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834584951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834626913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834636927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834654093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834676027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834693909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834709883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834719896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834743023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834759951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834774017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834795952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834805965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834821939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834836006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834850073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834867954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834887981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834897041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834918022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834937096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834950924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.834975004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.834983110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835011959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835020065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835032940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835052013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835062981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835088015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835104942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835145950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835165024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835187912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835215092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835226059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835239887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835263014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835279942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835300922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835324049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835339069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835351944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835376024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835386992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835413933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835428953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835448980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835464001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835483074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835498095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835516930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835530996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835550070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835561037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835583925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835604906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835618019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835633039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835650921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835663080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835684061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835699081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835716963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835726976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835751057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835769892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835783958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835807085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835817099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835836887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835850954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835875034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835886002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835901976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835917950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835931063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.835949898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835973978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.835983038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836009979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836015940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836040020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836050034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836059093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836081982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836091042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836114883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836134911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836147070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836155891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836182117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836204052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836219072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836240053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836256981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836267948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836291075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836309910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836327076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836337090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836363077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836375952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836400986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836425066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836435080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836457968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836467981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836494923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836500883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836518049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836538076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836546898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836580038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836601019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836612940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836649895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836664915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836678982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836700916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836719990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836736917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836755037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836772919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836782932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836807013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836822033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836838007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836863995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836878061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836895943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:43.836905003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836927891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:43.836957932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.173923016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.173974991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.174012899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.174036980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.174061060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.174099922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.174118996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.174149990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.174170971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.174230099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.186539888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.186583996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.186626911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.186644077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.186695099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.186727047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.186752081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.186780930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.186790943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.186831951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.186850071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.186882973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.186911106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.186937094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.186947107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.186985970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187002897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187036037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187051058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187086105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187096119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187164068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187202930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187237024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187263966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187292099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187311888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187367916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187381983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187421083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187433004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187474012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187489033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187521935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187546015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187561035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187583923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187614918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187637091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187661886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187684059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187710047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187726021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187756062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187768936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187807083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187838078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187855005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187877893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187913895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187927008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.187958956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.187988997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188007116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.188016891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.188045025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.188072920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188107014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188136101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188153982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.188165903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.188194990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.188221931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188255072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188287973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.188306093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188338041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.188360929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188393116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.188426018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188438892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.188474894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188488960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.188532114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188544035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.188576937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188602924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.188623905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.188652992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188687086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188707113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.188733101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.188756943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188791037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188810110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.188843966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188870907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188904047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188935995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188961029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.188992977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189008951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189022064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189059019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189086914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189110994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189143896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189176083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189194918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189208031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189237118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189253092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189285040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189300060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189337015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189346075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189383984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189393044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189429998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189440012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189476967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189486027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189517975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189529896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189559937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189575911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189624071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189635038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189680099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189692020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189730883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189749956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189785957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189800978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189840078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189862967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189898014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.189938068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189955950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.189973116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190010071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190041065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190067053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190095901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190124035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190149069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190182924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190213919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190244913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190253973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190289021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190306902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190339088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190361977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190392017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190413952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190449953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190471888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190500975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190520048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190556049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190568924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190602064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190617085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190653086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190660954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190694094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190709114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190740108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190753937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190788031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190802097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190838099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190846920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190884113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190892935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190924883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.190938950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.190970898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191001892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191014051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191032887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191060066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191072941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191104889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191142082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191170931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191200972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191241026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191257954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191292048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191304922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191338062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191369057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191400051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191415071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191430092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191462040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191477060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191509008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191538095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191556931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191570044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191602945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191618919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191646099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191670895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191703081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191719055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191742897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191762924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191793919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191812038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191854000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.191864967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.191924095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.505229950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.505294085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.505346060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.505364895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.505388021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.505419970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.505453110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.505497932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.505513906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.505558968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.505579948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.505619049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.505634069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.505669117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.505692959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.505736113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.505755901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.505789042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.505825996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.505882025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.505906105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.505956888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.506011963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.506048918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.506067991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.506108046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.506136894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.506180048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.506197929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.506232977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.506290913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.506335020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.506350994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.506387949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.506411076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.506459951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.506474972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.506514072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.506530046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.506570101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.506596088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.506642103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.506656885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.506699085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.506719112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.506757975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.506772995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.506812096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.506828070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.506866932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.506885052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.506922960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.506941080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.506974936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.507000923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.507044077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.507061958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.507091045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.507210970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.507255077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.507272005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.507304907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.507328987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.507366896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.507400036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.507426977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.507441998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.507482052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.507498026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.507544041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.507555008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.507599115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.507610083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.507652998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.507664919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.507709026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.507719040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.507759094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.507774115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.507812023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.507827044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.507864952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.507882118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.507927895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.507950068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.507994890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.508013010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.508049011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.508070946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.508106947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.508122921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.508156061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.508177042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.508214951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.508230925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.508265972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.508290052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.508327961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.508343935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.508373976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.508399010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.508439064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.508455992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.508490086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.508524895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.508579969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.508594036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.508631945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.508663893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.508719921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.508733034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.508771896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.508801937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.508857012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.508871078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.508909941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521249056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521295071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521311998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521327972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521343946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521359921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521373987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521394014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521409988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521420002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521436930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521451950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521461964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521480083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521496058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521507978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521523952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521537066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521555901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521564960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521584034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521591902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521614075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521619081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521641970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521647930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521673918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521681070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521697044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521716118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521724939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521744013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521761894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521773100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521786928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521802902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521811008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521826029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521842003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521852016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521866083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521874905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521889925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521904945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521920919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521929979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.521945000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.521979094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522002935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522340059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522357941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522373915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522389889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522403955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522416115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522433996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522440910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522458076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522478104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522483110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522502899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522516012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522527933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522545099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522555113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522571087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522588015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522597075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522614956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522634983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522653103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522663116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522679090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522695065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522705078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522720098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522732019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522742987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522759914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522766113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522782087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522794962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522804976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522820950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522830963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522845984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522861958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522874117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522886992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522902012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522914886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522927999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522943974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522965908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522970915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.522989988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.522995949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523011923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523020983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523036003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523044109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523058891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523075104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523087025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523111105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523130894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523153067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523164034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523184061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523201942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523217916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523228884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523241997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523257971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523267031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523284912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523302078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523310900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523327112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523334026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523354053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523375034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523380041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523396015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523411036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523420095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523435116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523452997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523459911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523478985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523485899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523503065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523511887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523526907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523544073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523551941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523569107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523577929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523593903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523612022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523621082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523638964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523654938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523667097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523679972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523694992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523716927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523724079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523740053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523751974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523762941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523778915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523787022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523806095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523816109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523834944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523852110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523860931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523875952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523888111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523901939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523919106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523929119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523947954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523957014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.523976088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.523991108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524000883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524017096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524025917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524043083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524060011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524069071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524087906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524101019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524111986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524128914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524147034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524164915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524174929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524193048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524203062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524221897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524230957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524246931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524257898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524271965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524286032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524295092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524313927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524333000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524343967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524360895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524374962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524395943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524405003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524415970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524434090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524441957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524461031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524488926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524507999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524518967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524538994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524558067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524565935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524585962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524595022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524616957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524622917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524645090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524651051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524667978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524677992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524696112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524704933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524720907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524733067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524744034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524760008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524780035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524791956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524808884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524826050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524832010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524846077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524868011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524874926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524893999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524905920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524921894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524945974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.524956942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524976015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.524983883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.525001049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.525006056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.525019884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.525032997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.525044918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.525052071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.525079012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.525129080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.829476118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.829505920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.829520941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.829536915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:44.829550982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:44.829741955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.148871899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.148893118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.148909092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.148926020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.148941994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.148957968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.148973942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.148989916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149008036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149020910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149039030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149056911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149077892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149090052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149106026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149120092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149133921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149147034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149163961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149183035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149189949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149207115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149214983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149244070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149250984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149269104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149277925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149292946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149302006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149317980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149326086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149341106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149348974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149363995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149374962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149389982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149401903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149418116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149434090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149446011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149462938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149472952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149491072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149509907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149514914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149530888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149548054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149555922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149570942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149584055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149600029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149620056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149627924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149646997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149663925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149672031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149688959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149696112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149712086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149730921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149739981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149759054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149771929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149786949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149807930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149816990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149832964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149849892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149857044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149869919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149884939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149898052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149934053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149947882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.149965048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.149980068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150000095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150015116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150033951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150039911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150057077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150064945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150089979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150094032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150110006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150116920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150131941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150146008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150158882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150173903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150187969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150207043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150214911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150230885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150245905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150254965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150269032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150285006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150295019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150324106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150329113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150343895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150360107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150368929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150388002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150408983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150414944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150434017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150443077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150460958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150479078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150487900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150502920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150518894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150527000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150547028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150561094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150574923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150592089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150600910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150612116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150625944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150636911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150652885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150664091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150685072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150703907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150712967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150742054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150759935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150775909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150789022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150801897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150815964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150829077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150845051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150871038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150886059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150897980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150928020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150945902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150952101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150968075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.150978088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.150993109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151002884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151019096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151027918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151043892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151053905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151068926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151082993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151093006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151109934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151138067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151165962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151171923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151190042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151206017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151216030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151240110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151252031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151264906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151281118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151290894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151304007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151319027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151326895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151355982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151366949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151384115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151396990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151408911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151422977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151439905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151468039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151479006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151503086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151516914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151536942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151545048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151561022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151576996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151583910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151602983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151612997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151632071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151643038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151655912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151671886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151678085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151695013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151700020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151715040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151724100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151738882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151748896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151765108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151774883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151783943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151799917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151818991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151823997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151834011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151845932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151858091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151869059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151885986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151897907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151915073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151921988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151940107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151945114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151961088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151968002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.151982069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.151988983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152010918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152015924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152033091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152039051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152051926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152065992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152072906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152089119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152105093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152110100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152127028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152134895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152151108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152158022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152173042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152180910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152199030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152204037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152218103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152225971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152241945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152250051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152265072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152271986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152288914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152293921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152309895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152317047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152333021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152339935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152355909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152364016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152378082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152384996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152403116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152410984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152422905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152436972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152455091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152461052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152473927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152487040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152499914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152510881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152523041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152534962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152544975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152558088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152573109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152580023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152597904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152606964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152625084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152630091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152645111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152652979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152671099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152677059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152692080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152699947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152717113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152723074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152735949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152746916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152762890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152770042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152786970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152795076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152808905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152825117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152841091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152848005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152862072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152869940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152888060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152898073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152910948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152921915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152934074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152944088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.152960062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152983904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.152990103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.153007984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.153017044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.153034925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.153047085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.153099060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.478746891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.478780985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.478815079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.478836060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.478852034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.478874922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.478887081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.478908062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.478929996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.478948116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.478977919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.478985071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479008913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479022980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479047060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479091883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479099989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479151964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479177952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479202032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479237080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479249954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479269981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479284048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479305029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479320049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479337931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479367971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479377985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479388952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479417086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479427099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479450941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479460955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479484081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479496002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479528904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479537010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479559898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479572058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479594946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479604959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479625940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479640007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479676008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479687929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479708910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479729891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479741096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479752064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479770899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479779959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479823112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479830027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479852915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479872942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479887009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479898930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479921103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479933023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479954004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479976892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.479985952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.479995012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480015993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480034113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480050087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480077982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480092049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480102062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480124950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480143070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480156898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480175972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480189085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480201960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480220079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480232954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480254889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480261087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480283976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480295897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480319023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480334044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480355024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480365038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480387926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480396986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480418921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480432987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480451107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480463982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480485916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480493069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480515957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480525017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480561018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480607986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480653048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480669022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480690956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480712891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480722904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480736971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480763912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480772972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480796099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480806112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480827093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480839014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480858088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480866909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480887890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480896950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480918884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480935097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480950117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.480967045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480983973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.480992079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481014967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481030941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481046915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481056929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481080055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481093884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481113911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481122971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481142998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481163025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481184006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481192112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481215000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481225014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481277943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481327057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481348991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481372118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481380939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481400967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481414080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481422901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481448889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481463909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481484890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481496096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481519938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481533051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481555939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481565952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481584072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481601000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481617928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481631994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481654882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481664896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481688023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481698990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481722116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481730938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481750011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481767893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481781006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481796980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481823921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481890917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481911898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481934071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481962919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.481970072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.481992960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482004881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482050896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482075930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482120991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482129097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482153893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482165098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482193947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482201099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482222080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482234955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482254028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482264996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482285023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482294083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482315063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482326984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482343912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482355118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482378960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482388973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482430935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482438087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482470989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482481003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482502937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482511997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482532024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482547045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482566118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482582092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482604027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482609987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482645035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482661963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482686996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482707024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482748032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482762098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482783079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482806921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482812881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482832909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482842922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482855082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482875109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482887030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482912064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.482930899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.482959986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.805259943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805289984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805301905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805318117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805334091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805346012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805362940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805375099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805387020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805398941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805411100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805418015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.805423021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805438995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805450916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805454016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.805463076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805474997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805488110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805500031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805511951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805516958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.805527925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805545092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805565119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805584908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805605888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805618048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805629969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805644035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805682898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.805768013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.805813074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805834055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805852890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805874109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805882931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.805893898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805915117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805934906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.805953026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.805959940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806001902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806021929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806025982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806046963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806060076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806072950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806086063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806097031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806097984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806111097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806116104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806123018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806135893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806164026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806191921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806282997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806302071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806314945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806328058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806340933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806351900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806355000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806372881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806391954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806407928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806415081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806438923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806457996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806478024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806483030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806498051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806498051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806514978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806535006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806535006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806550026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806557894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806576967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806596994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806601048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806613922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806631088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806643963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806647062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806663036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806670904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806682110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806699038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806720018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806734085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806737900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806746960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806759119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806771994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806785107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806797028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806802034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806809902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806823015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.806859970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.806910992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.807015896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.807035923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.807064056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.807085991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.807099104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.807106018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.807161093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.807184935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.807189941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.807209015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.807235956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.807265043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.807284117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.807328939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.807348967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.807349920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.807382107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.807415009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.807421923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.807444096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.807452917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.807456017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.807472944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.807507038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.807555914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.809022903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.809053898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.809067011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.809084892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.809103012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.809132099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.809154034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.809154034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.809282064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.809297085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.809309006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.809328079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.809344053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.809360027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.809360027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.809379101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.809391022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.809443951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.809931040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.809956074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.809988022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.810018063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.810043097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.810056925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.810070038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.810089111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.810103893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.810111046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:45.810127974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:45.810168028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.126981974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127058029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127103090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127154112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127181053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127219915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127229929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127259016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127290010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127321005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127360106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127397060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127402067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127430916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127434969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127445936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127453089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127456903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127474070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127491951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127521038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127525091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127564907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127603054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127644062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127681971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127692938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127706051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127715111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127720118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127758026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127795935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127808094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127823114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127832890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127840042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127841949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127846956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127886057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127899885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.127923965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127963066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.127994061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128024101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128040075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128052950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128082991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128113031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128133059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128144026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128163099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128182888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128216982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128218889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128257036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128294945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128297091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128307104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128341913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128362894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128375053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128385067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128392935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128422022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128460884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128499031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128509998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128521919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128530979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128535986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128575087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128606081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128622055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128635883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128671885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128674984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128695965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128721952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128741026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128767967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128807068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128809929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128845930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128885031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128905058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128917933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128922939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128925085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128932953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128962040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.128995895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.128999949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129046917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129090071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129106045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129126072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129127979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129163980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129165888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129173040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129204988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129242897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129246950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129262924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129270077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129282951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129287004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129328966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129380941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129400015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129415035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129424095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129461050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129501104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129528046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129539013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129540920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129547119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129550934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129575968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129590034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129615068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129652977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129673958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129682064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129720926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129756927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129764080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129779100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129793882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129796028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129801035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129832029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129847050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129878044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129882097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.129980087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.129986048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130023003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130059958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130062103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130080938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130104065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130105972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130150080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130156040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130187988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130225897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130228043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130264997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130292892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130322933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130332947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130353928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130378962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130384922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130420923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130459070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130475044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130490065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130496025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130500078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130506992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130543947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130589008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130621910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130628109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130644083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130654097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130666018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130705118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130717993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130729914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130742073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130750895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130781889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130799055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130821943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130870104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130880117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130912066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130949020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.130954027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130966902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130979061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.130989075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131000042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131026983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131063938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131099939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131107092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131124020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131160975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131196976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131200075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131210089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131223917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131242990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131258011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131285906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131289959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131323099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131361008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131398916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131400108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131413937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131437063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131462097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131467104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131505966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131531954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131546021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131558895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131584883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131603956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131623983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131638050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131661892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131676912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131699085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131712914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131746054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131753922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131788015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131800890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.131824970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131863117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131891966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131922007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131949902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131979942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.131982088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.132010937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.132035017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.132057905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.132064104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.132101059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.132108927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.132138014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.132177114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.132194996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.132211924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.132214069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.132220030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.132250071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.132339001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.132349968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.458981037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459009886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459028006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459044933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459062099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459084034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459105968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459140062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459156036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459172010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459176064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459193945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459204912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459211111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459228039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459237099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459244013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459244967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459263086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459264994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459279060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459295034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459310055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459316015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459333897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459350109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459350109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459363937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459378958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459379911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459386110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459399939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459419012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459429026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459435940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459449053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459460974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459479094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459487915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459491014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459497929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459502935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459521055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459533930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459537983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459553957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459568024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459572077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459590912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459608078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459609985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459625959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459642887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459644079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459656954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459669113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459670067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459688902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459700108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459705114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459721088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459733963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459738016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459748030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459758043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459775925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459785938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459791899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459810019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459819078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459825993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459840059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459841967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459858894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459871054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459876060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459896088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459911108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459913015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459928989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459932089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459945917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459963083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459966898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.459988117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.459997892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460004091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460022926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460033894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460040092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460042000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460061073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460077047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460077047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460093021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460104942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460109949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460122108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460125923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460143089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460159063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460160017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460179090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460195065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460196972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460212946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460223913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460232973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460246086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460248947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460266113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460275888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460283995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460300922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460305929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460319996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460329056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460339069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460354090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460369110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460371017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460386992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460397005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460402966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460412979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460418940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460423946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460436106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460452080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460457087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460474968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460488081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460491896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460508108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460520029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460524082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460540056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460541964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460556984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460567951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460572958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460593939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460602045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460612059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460628986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460638046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460647106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460656881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460663080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460679054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460690022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460695028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460711002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460725069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460731030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460742950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460748911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460761070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460766077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460781097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460783958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460800886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460813999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460817099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460833073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460844994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460849047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460851908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460871935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460880041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460890055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460901022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460906029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460922003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460933924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460937977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460953951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460966110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460971117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.460987091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.460987091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461005926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461024046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461035967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.461038113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461055994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461057901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.461071968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461081028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.461088896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461100101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.461105108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461121082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461133957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.461141109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461158991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461169958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.461175919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461189032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.461191893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461209059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461219072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.461224079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461241007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461251974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.461256981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461275101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.461280107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461298943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461308002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.461313963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461329937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461347103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.461347103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461364031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461371899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.461379051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461388111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.461395979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461416006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461421013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.461433887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.461450100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.461481094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795219898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795280933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795320988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795358896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795382977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795396090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795422077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795430899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795433998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795438051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795445919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795481920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795484066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795527935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795562029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795566082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795598984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795603991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795641899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795667887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795672894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795681000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795716047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795721054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795736074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795749903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795798063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795798063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795836926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795840979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795860052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795877934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795900106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795917034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795942068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795955896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.795955896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.795991898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796003103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796030045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796044111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796067953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796078920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796113968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796116114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796158075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796169996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796195030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796205997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796233892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796243906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796272039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796283007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796308994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796319008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796348095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796353102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796386003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796396017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796432972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796432972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796475887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796480894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796514034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796530962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796551943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796562910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796590090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796601057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796627045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796637058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796674967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796675920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796715975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796725988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796752930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796756983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796791077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796802044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796827078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796845913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796874046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796875000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796916962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796932936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796953917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796964884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.796992064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.796998024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797030926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797036886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797068119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797075033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797106981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797131062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797144890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797157049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797193050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797197104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797235012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797246933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797271967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797292948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797310114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797327042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797348022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797363997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797384977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797396898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797421932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797435045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797458887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797477961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797507048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797508955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797549963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797563076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797585964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797607899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797626019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797652960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797679901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797873020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797925949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797930956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.797969103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.797976017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798006058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798023939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798043966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798057079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798082113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798098087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798120022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798132896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798157930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798178911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798196077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798233986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798243046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798255920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798285007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798305035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798321009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798338890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798360109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798374891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798397064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798408031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798434019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798460960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798471928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798475027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798508883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798521042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798557043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798563957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798599005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798612118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798636913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798640013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798676014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798686028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798715115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798722029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798752069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798768997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798789978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798800945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798826933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798865080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798873901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798873901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798916101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798927069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798953056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.798964977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.798990965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.799001932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.799029112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.799060106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.799066067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.799072027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.799103975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.799115896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.799161911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.799196005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.799237967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.799274921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.799278975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.799295902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.799314022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.799338102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.799351931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.799377918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.799387932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.799422979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.799426079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.799439907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.799463987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.799490929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.799505949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.799510956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.799551964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.799559116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.799588919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:46.799601078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:46.799633026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.139209032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139269114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139306068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139354944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139358997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.139393091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.139395952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139398098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.139434099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139477015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139486074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.139517069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139540911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.139558077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139583111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.139596939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139612913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.139636993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139659882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.139686108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.139687061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139733076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139753103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.139771938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139802933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.139811993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139826059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.139851093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139870882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.139889002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139915943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.139929056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.139956951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.139967918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140008926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140017033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140060902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140063047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140077114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140100002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140114069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140140057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140162945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140180111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140211105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140218019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140235901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140258074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140275955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140296936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140322924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140346050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140362978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140388966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140407085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140427113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140455961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140465975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140497923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140503883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140521049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140542984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140567064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140582085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140603065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140619993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140635967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140667915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140674114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140712023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140727043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140749931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140779972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140788078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140803099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140825987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140842915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140862942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.140882015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.140922070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.141284943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141324997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141364098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141365051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.141387939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.141402006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141429901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.141449928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141453028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.141493082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141515970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.141530037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141560078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.141568899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141575098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.141608000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141623974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.141644955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141665936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.141684055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141700029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.141722918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141757965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.141771078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.141771078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141814947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141836882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.141851902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141869068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.141891003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141918898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.141928911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141966105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.141969919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.141978979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142004967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142028093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142043114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142066002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142090082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142102957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142132998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142151117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142170906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142187119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142210007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142237902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142246962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142260075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142283916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142306089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142322063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142335892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142359972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142374992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142406940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142409086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142450094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142477989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142487049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142525911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142529011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142545938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142564058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142580986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142601013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142617941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142640114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142657042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142678022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142694950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142726898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142741919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142767906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142795086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142805099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142831087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142843008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142874002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142904043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142934084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.142966986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.142978907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.143022060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.143030882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.143053055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.143059015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.143090010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.143098116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.143122911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.143178940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.143220901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.143234968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.143256903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.143280983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.143292904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.143296003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.143297911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.143332958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.143357992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.143371105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.143383026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.143414021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.143445015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.143462896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.143484116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.143486023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.143522978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.143523932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.143532991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.143570900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.490288973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490318060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490335941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490353107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490369081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490380049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.490389109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490406990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490422964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490431070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.490437984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490453959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490470886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490478992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.490487099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490504026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490511894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.490523100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490540028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490546942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.490556002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490569115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.490572929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490588903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490603924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490614891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.490621090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490638018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490655899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490663052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.490674019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490688086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.490689993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490705967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490722895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490730047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.490739107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490756035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490772963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490778923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.490792990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490803003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.490809917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490825891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490833044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.490842104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490856886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.490859032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490875006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490890980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490900040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.490906954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490926027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490942955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490958929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490971088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.490973949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.490991116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491003036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491005898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491023064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491034031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491039038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491059065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491065979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491076946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491092920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491094112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491110086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491144896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491161108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491162062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491177082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491193056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491199970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491209030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491229057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491235971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491245985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491261959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491265059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491277933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491292953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491297960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491309881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491322041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491326094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491341114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491358042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491359949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491379023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491384983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491394043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491411924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491419077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491426945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491441965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491444111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491460085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491475105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491493940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491504908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491512060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491527081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491544008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491553068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491559982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491575956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491584063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491591930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491601944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491606951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491626024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491640091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491646051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491662025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491677999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491692066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491693974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491709948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491724968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491725922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491743088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491750002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491761923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491775990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491780043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491795063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.491813898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.491857052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.492564917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492595911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492613077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492628098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.492630959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492650986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492657900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.492662907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492675066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492692947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492706060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492707014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.492723942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492744923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492753029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.492763996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492782116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492782116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.492794037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492825985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.492847919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492852926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.492866039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492877960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492902040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492921114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492933035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.492933989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492948055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492964029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492979050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.492991924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.492996931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493012905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493027925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493029118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493046999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493062019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493062973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493082047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493089914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493099928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493115902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493124962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493132114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493148088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493155003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493164062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493177891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493217945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493460894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493515968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493522882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493534088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493550062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493578911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493621111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493645906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493664980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493680954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493694067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493694067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493711948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493724108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493731976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493741035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493752956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493768930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493784904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493793011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493817091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493824005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493834019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493849039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493851900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493868113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493884087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493891001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493901014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493916988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493937016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.493938923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493968010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.493990898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.494189978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494208097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494224072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494244099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494246960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.494261026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494277000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494287014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.494293928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494311094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494319916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.494327068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494338989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494349957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.494359016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494374990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.494376898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494393110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494409084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494421959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494429111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.494437933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494451046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494460106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.494462967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494481087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494493008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494504929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494504929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.494517088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494524956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.494529009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494548082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494564056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494579077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.494585991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494601965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494616985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494630098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.494633913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494651079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.494659901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.494684935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.843972921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844001055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844019890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844033003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844048977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844065905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844083071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844093084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844099045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844115973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844129086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844142914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844146967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844163895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844166040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844180107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844188929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844196081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844211102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844213009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844232082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844244003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844249964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844265938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844280958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844281912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844297886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844305038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844314098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844326973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844331026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844347954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844362020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844367981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844384909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844394922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844400883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844414949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844417095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844433069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844444990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844449043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844465971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844477892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844481945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844501019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844502926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844520092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844527960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844536066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844552040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844556093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844568968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844578028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844585896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844602108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844613075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844618082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844635010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844636917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844655037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844667912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844671011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844686985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844700098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844702005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844719887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844722986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844732046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844749928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844755888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844768047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844784021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844785929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844800949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844811916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844816923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844830990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844832897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844851971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844866037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844870090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844886065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844898939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844902039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844916105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844918966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844935894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844947100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844952106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844968081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.844976902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.844986916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845005035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845020056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845036030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845036030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845051050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845063925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845067978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845069885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845083952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845099926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845108986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845118999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845123053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845136881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845149994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845153093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845169067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845185041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845185995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845202923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845216036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845218897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845236063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845237017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845254898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845273018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845273972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845288992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845292091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845305920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845323086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845330954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845336914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845355034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845364094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845370054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845383883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845390081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845407963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845417023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845422983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845433950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845439911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845457077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845472097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845472097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845488071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845491886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845499992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845513105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845527887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845534086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845554113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845560074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845571995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845587969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845596075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845604897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845609903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845621109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845635891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845638990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845652103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845664024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845678091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845680952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845694065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845695019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845716000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845727921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845733881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845742941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845750093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845767021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845782995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845783949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845798016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845813990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845819950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845829964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845839024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845843077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845859051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845860004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845875025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845890999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845901012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.845906973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845927954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845944881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845959902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845976114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845988989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.845993996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846000910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846012115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846016884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846018076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846020937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846034050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846043110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846050024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846062899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846066952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846086025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846095085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846103907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846120119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846121073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846137047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846151114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846152067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846158981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846168041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846184969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846200943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846203089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846220016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846229076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846236944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846251011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846252918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846270084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846285105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846287012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846298933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846314907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846314907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846332073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846347094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846348047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846364021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846369028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846375942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846390963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846391916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846409082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846426010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846430063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846441984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846456051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846457005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846472979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846477032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846487999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846508026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846513987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846524954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846539021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846540928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846556902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846558094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846574068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846590042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846590042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846605062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846621037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846626043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846641064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846652031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846657991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846668959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846673012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846682072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846700907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:47.846704960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:47.846744061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.200942039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.200988054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201028109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201042891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201065063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201067924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201087952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201112986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201113939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201155901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201194048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201226950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201232910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201270103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201272964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201309919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201311111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201332092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201348066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201359034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201385975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201404095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201432943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201438904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201477051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201493979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201514006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201553106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201590061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201606035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201626062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201633930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201647997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201663971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201702118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201747894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201761961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201790094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201792955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201798916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201817036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201838970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201869965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201900959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201946020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201950073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.201984882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.201993942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202030897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202033997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202044964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202069044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202109098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202145100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202151060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202162981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202184916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202224016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202229023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202244997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202270985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202275991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202312946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202349901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202380896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202388048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202425957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202430010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202460051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202464104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202502012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202502966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202518940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202539921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202564001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202586889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202600956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202630997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202670097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202708006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202744961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202780962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202820063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202826977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202835083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202838898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202857018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202857018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202903986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202914953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202928066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202946901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.202964067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.202985048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.203022957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.203046083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.203077078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.203280926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.203326941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.203363895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.203401089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.203411102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.203438997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.203476906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.203540087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.203614950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.203625917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.203675985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.203691006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.203717947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.203751087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.203777075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.203819036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.203856945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.203891039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.203896046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.203932047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.203934908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.203953028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.203983068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204000950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204025030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204056978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204063892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204088926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204102993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204122066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204142094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204173088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204180002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204217911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204217911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204241991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204255104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204273939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204303026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204320908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204348087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204366922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204390049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204427958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204453945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204466105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204503059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204504013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204541922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204545021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204577923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204579115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204596043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204731941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204763889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204775095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204790115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204817057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204854012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204894066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204901934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204938889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.204945087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204982996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.204993010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.205022097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205037117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.205060005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205081940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.205097914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205137968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205173016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.205176115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205183029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.205219030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.205223083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205252886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.205266953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205287933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.205303907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205336094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.205343008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205382109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205401897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.205415010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.205420017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205459118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205460072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.205468893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.205497026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205521107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.205543995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205550909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.205585957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205622911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205652952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205682993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.205703020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.205751896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.568177938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568238974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568276882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568315029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568351984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568387032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.568399906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568443060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568444014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.568473101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.568480968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568511963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.568520069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568532944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.568557024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568567038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.568593979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568634987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568644047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.568672895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568677902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.568720102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.568720102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568763018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568803072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568816900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.568847895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.568852901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568892002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568907976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.568928003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568943024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.568965912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.568975925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569003105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569051027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569051027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569093943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569130898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569158077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569169044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569184065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569207907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569221973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569243908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569247961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569283962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569293022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569322109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569333076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569370031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569411993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569418907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569449902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569452047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569488049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569492102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569525957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569539070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569561958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569577932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569600105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569606066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569638014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569648981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569680929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569684982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569727898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569741011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569766045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569776058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569803953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569822073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569844007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569859028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569880962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569884062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569919109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569925070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.569958925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.569969893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570005894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570007086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570049047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570086956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570096970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570123911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570137978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570162058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570171118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570199013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570208073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570235968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570274115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570282936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570317984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570319891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570362091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570373058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570400000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570403099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570437908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570450068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570473909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570477009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570513010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570550919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570560932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570588112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570600033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570627928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570636034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570678949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570682049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570715904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570725918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570755005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570765018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570792913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570808887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570831060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570842028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570864916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570868969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570905924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570952892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.570951939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.570996046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571006060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571032047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571037054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571070910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571109056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571131945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571156025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571186066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571229935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571233988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571274996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571285963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571311951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571322918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571351051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571362019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571389914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571394920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571424961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571425915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571464062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571501017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571516037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571547031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571548939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571590900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571602106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571628094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571638107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571666002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571680069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571703911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571717978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571739912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571744919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571778059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571796894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571815014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571834087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571857929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571863890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571907043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571943998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571955919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.571980953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.571991920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.572020054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.572026014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.572056055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.572072029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.572093964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.572104931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.572133064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.572138071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.572180033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.572182894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.572221041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.572222948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.572259903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.572299004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.572309971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.572335958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.572350979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.572372913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.572386980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.572411060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.572437048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.572448015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.572458029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.572494984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.572505951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.572535992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941087961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941113949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941190004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941210032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941230059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941250086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941283941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941310883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941322088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941334963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941356897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941356897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941379070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941386938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941401005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941420078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941425085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941447020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941461086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941472054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941492081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941495895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941519022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941529989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941541910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941562891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941564083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941586018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941596985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941608906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941631079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941638947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941657066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941679955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941683054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941700935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941709042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941725016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941746950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941750050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941768885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941791058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941793919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941812038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941822052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941836119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941859961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941863060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941886902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941901922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941909075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941931009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941941977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941952944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941973925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.941981077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.941996098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942006111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942019939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942043066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942044973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942066908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942089081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942090988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942111015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942116976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942132950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942153931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942162037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942177057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942200899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942203045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942226887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942229033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942250013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942271948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942271948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942289114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942303896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942318916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942334890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942352057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942368984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942387104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942403078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942413092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942436934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942439079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942457914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942476034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942481995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942503929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942507982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942524910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942547083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942549944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942569017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942584991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942593098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942611933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942616940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942637920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942650080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942661047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942677975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942683935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942707062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942713976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942729950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942751884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942754030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942779064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942792892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942802906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942823887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942825079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942847967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942862034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942871094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942893028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942899942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942915916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942938089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942944050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942965031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.942977905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.942987919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943010092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943017006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943031073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943053961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943061113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943075895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943087101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943099022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943130970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943145037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943169117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943170071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943193913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943206072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943217993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943240881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943248987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943264008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943285942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943286896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943306923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943327904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943330050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943351984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943352938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943382978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943397999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943406105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943428040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943435907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943449020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943471909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943479061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943492889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943516016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943516016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943537951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943542957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943562984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943584919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943587065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943607092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943629026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943633080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943650007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943659067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943671942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943695068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943701982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943717003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943742037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943746090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943767071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943768978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943789005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:48.943811893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:48.943845987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.313007116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.313133001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315249920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315310955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315335035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315352917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315354109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315377951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315403938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315408945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315419912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315432072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315448046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315457106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315474033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315480947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315499067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315504074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315524101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315526962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315548897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315550089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315572023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315573931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315593004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315593958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315617085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315618992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315633059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315642118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315656900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315665960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315687895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315690994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315711021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315711975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315735102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315735102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315753937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315757036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315777063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315778971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315795898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315819025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315819979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315840960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315865993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315875053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315891027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315898895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315913916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315927029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315937042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315959930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315962076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.315982103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.315989971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316004038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316010952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316026926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316030979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316051960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316052914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316076040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316076994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316098928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316121101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316144943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316167116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316184998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316190958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316227913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316250086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316265106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316273928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316296101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316303968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316318035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316320896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316333055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316342115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316365004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316365957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316386938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316387892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316405058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316410065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316426039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316435099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316447973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316458941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316479921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316482067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316498041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316503048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316517115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316526890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316545963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316549063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316562891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316572905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316596031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316596985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316620111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316621065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316644907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316647053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316665888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316668987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316689968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316696882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316713095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316713095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316736937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316736937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316760063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316765070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316781044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316782951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316807985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316808939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316823006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316833019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316844940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316854954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316884995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316885948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316903114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316909075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316929102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316932917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316942930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.316955090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316977978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.316978931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317001104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317008018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317023039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317028046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317044973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317049026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317071915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317071915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317094088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317095995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317111969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317118883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317138910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317141056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317162991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317162991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317186117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317186117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317209005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317209005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317224979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317231894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317253113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317257881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317272902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317281008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317296982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317303896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317317009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317327023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317338943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317349911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317362070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317372084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317385912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317394972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317403078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317418098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317435026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317445040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317451954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317471027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317481995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317493916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317507982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317517042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317524910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317539930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317555904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317562103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317573071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317584038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317599058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317606926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317627907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317632914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317646027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317656040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317668915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317677975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317688942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317701101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317709923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317723989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.317749977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.317764044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.318394899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.684606075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.684739113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.687378883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.687491894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.688855886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.688956022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689105988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689125061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689167976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689198971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689219952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689228058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689251900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689254999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689273119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689275026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689292908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689310074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689315081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689327955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689346075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689358950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689363956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689366102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689380884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689388037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689390898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689399958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689412117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689416885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689435005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689450979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689460993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689471960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689483881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689491987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689510107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689522982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689523935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689537048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689549923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689567089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689568043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689580917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689591885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689599037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689616919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689630032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689635038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689651966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689661026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689670086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689681053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689687967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689706087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689713001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689727068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689742088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689747095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689764023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689776897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689780951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689802885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689806938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689822912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689831972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689841032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689858913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689877033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689888954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689889908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689903975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689927101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689944983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689959049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689963102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.689981937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.689981937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690001011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690006971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690015078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690028906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690037966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690043926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690063000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690074921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690079927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690093994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690100908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690110922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690131903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690140963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690186024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690201044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690223932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690243006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690260887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690278053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690290928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690290928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690294981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690306902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690325022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690335035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690340042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690342903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690361023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690370083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690373898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690378904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690402031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690407038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690422058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690438986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690458059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690468073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690476894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690479994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690484047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690494061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690511942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690529108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690538883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690551996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690565109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690572023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690589905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690602064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690608978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690620899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690625906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690643072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690651894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690660000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690670967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690679073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690700054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690709114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690718889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690736055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690741062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690749884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690768003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690768003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690788031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690798998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690808058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690820932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690834999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690841913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690851927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690862894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690870047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690884113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690886974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690906048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690918922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690928936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690936089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690948963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690949917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690963984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690982103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.690987110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.690999985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.691016912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.691016912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.691036940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.691040993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.691054106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.691075087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:49.691087961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.691097021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:49.691128016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.055933952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.055974007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.056164980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.060050964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.060075998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.060211897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.061755896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.061778069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.061814070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.061832905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.061866045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.061903954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.062645912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.062665939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.062679052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.062695026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.062719107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.062740088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.062757015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.062760115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.062777042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.062793970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.062809944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.062810898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.062830925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.062848091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.062851906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.062864065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.062879086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.062916994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063169956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063189030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063206911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063222885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063239098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063247919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063260078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063277960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063288927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063293934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063311100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063328028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063328028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063339949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063357115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063358068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063374043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063390970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063405991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063416004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063419104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063421965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063437939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063441038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063455105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063473940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063482046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063492060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063510895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063528061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063529968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063549042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063559055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063560963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063580036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063590050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063597918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063615084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063616037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063635111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063651085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063652039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063667059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063683033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063694000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063698053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063714027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063723087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063725948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063739061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063745975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063755035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063774109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063788891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063791990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063807964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063824892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063834906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063841105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063858032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063865900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063874006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063888073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063891888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063910961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063927889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063945055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063951969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063961029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063972950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.063977957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.063992977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064003944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064004898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064021111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064037085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064037085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064053059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064062119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064069033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064085007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064097881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064100981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064121008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064131021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064138889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064155102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064162016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064171076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064183950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064187050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064202070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064218044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064234018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064244032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064246893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064264059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064279079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064287901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064295053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064311028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064325094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064331055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064348936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064358950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064366102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064383030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064384937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064399004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064409971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064415932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064434052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064449072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064450026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064470053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064486980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064495087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064502954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064518929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064519882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064537048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064552069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064568043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064568996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064584017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064601898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064615965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064620018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064635992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064651966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064662933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.064662933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064677954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.064708948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.427352905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.427378893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.427390099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.427402973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.427452087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.427476883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.431036949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.431058884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.431109905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.431138992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.433454990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.433480978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.433496952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.433512926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.433549881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.433567047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.434096098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.434115887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.434132099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.434148073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.434154987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.434165001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.434180975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.434184074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.434201956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.434211969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.434217930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.434232950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.434235096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.434252024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.434259892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.434267044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.434283018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.434290886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.434319973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.435416937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435439110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435451984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435463905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435477018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435488939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435489893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.435501099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435513973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435527086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435532093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.435539007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435583115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.435602903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.435651064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435668945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435684919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435698032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435713053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.435714960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435730934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435734987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.435748100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435764074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435772896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.435781002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435787916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.435792923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435806036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435817957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435821056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.435830116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435846090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435853958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.435864925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435878038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.435883045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435894966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435906887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435914993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.435920000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435939074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435954094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.435955048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435975075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.435992002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436001062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436006069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436007023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436023951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436033010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436039925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436054945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436062098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436070919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436086893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436086893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436105967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436117887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436124086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436136007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436150074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436156988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436165094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436182022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436182976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436194897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436207056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436212063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436219931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436232090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436233997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436244011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436256886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436259985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436270952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436290979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436291933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436309099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436311960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436321020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436330080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436333895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436347008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436358929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436361074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436371088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436383009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436388016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436394930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436408043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436419010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436428070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436431885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436444044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436455011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436455965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436467886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436475039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436480045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436491966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436503887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436506033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436515093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436527967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436530113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436539888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436551094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436552048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436564922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436575890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436575890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436603069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436603069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436624050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436638117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436645031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436661959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436674118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436686039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436692953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436714888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436717987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436731100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436745882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436747074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436764002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436775923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436779976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436810970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436830044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.436928988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436945915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436969042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436985970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436997890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.436999083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.437005043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.437021017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.437030077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.437037945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.437050104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.437072039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.437093019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.800724030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.800762892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.800781012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.800796032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.800822020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.800842047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.800844908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.800874949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.800915003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.804553986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.804579020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.804651022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.807293892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.807318926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.807338953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.807363987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.807383060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.807410955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.807869911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.807898998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.807925940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.807938099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.807960987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.807972908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.807990074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.808013916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.808018923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.808047056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.808047056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.808073044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.808074951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.808099985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.808101892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.808126926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.808130980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.808155060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.808156967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.808180094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.808191061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.808203936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.808242083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.808794975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.808825016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.808851957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.808861017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.808878899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.808902979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.808904886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.808939934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.808962107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.808984995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.809051037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.809077978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.809103966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.809106112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.809134007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.809137106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.809161901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.809185982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.809828997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.809864044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.809892893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.809895992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.809912920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.809923887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.809941053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.809951067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.809971094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.809978008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.809997082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810005903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810026884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810034037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810050964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810065031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810100079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810100079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810110092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810132027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810158968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810159922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810189009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810189962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810218096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810218096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810242891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810245991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810269117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810273886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810302019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810302019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810321093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810338020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810348034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810368061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810394049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810403109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810415983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810422897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810448885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810451031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810472012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810477972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810502052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810508013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810523987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810537100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810558081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810570955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810586929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810606003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810616970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810633898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810652018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810662985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810691118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810699940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810718060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810725927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810729980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810745001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810759068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810774088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810787916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810807943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810821056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810839891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810853958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810868979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810887098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810898066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810920000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810925961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810940027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810955048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810973883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.810982943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.810997009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811021090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811048031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811054945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811085939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811089039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811129093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811142921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811145067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811178923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811193943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811207056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811232090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811233997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811259031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811265945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811290026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811296940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811310053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811323881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811338902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811352015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811367989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811378956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811399937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811404943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811430931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811433077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811455011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811460018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811482906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811494112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811506033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811526060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811537027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811552048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811564922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811580896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811594963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811608076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811623096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811634064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811651945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811661005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811678886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811690092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811708927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811722994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811733007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811753035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811779976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811780930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811806917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811834097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811835051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811861038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811870098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811888933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811913013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811914921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811949015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811950922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.811978102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.811994076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.812005043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.812033892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.812035084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.812060118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.812062025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.812083006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.812088966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.812108040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.812115908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.812129974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.812143087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.812165022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.812175989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.812186003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.812206984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.812232971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.812235117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.812263012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.812274933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.812289953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.812318087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.812335014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.812345982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:50.812350988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.812381983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:50.812411070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.173820972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.173919916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.173957109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.173978090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.173985958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.174032927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.174083948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.174158096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.174165010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.174213886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.174238920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.174293041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.176167965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.176213980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.176290989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.176321030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.178834915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.178875923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.178906918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.178924084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.178925991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.178968906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.178981066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.179012060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.179851055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.179892063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.179908991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.179934025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.179939032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.179982901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.179994106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.180022955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.180033922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.180066109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.180068016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.180105925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.180116892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.180145025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.180152893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.180185080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.180211067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.180223942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.180227995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.180265903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.180274963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.180318117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.180318117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.180371046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.181866884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.181910038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.181955099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.181958914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.181972027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.182003975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.182014942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.182044029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.182046890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.182085037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.182087898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.182135105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.182647943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.182689905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.182714939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.182746887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.184271097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.184334040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.184365988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.184384108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.184387922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.184432030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.184436083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.184472084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.184475899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.184513092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.184528112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.184551954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.184562922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.184592009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.184596062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.184631109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.184640884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.184669971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.184679985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.184715986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.184720039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.184765100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.184766054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.184803963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.184814930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.184844971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.184847116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.184885979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.184890032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.184925079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.184942007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.184966087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.184977055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185005903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185007095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185050964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185055971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185101986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185103893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185142040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185146093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185183048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185194969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185223103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185226917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185261011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185265064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185301065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185302019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185339928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185343981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185389042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185400963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185432911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185439110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185473919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185476065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185516119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185522079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185555935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185558081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185596943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185600996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185636997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185651064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185676098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185681105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185717106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185725927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185769081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185769081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185810089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185812950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185849905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185853004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185889959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185893059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185929060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.185931921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.185971975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.186172009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.186213017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.186224937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.186253071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.186264992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.186291933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.186302900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.186331034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.186342955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.186372995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.186374903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.186420918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.186868906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.186924934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.186966896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.187011957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.187015057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.187058926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.187071085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.187103033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.187319040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.187370062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.187371016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.187417030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.187428951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.187474966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.187480927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.187525988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.187530994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.187575102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.187608957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.187649965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.187657118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.187690020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.187706947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.187730074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.187757969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.187771082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.187796116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.187812090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.187832117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.187856913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.187860012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.187905073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.187918901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.187943935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.187948942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.187988043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188075066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.188193083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188236952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188241959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.188287973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188293934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.188332081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188333988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.188370943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188404083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188443899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188476086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188513994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188524008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.188529015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.188544989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188575983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188606977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188618898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.188636065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.188648939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188679934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.188685894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188688993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.188725948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188726902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.188766956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.188766956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188807011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188808918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.188846111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.188847065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188886881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.188888073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188927889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.188937902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.188978910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.188982010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.189019918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.189033031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.189063072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.189069033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.189102888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.189112902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.189142942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.189146996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.189183950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.189188957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.189245939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.545799017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.545825958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.545842886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.545857906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.545875072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.545888901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.545989037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.546066999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.547651052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.547669888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.547807932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.549866915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.549890995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.549911976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.549930096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.549943924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.550012112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.551337004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.551354885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.551386118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.551403046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.551418066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.551425934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.551434040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.551484108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.551565886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.551583052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.551599026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.551614046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.551620960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.551647902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.551664114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.551686049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.551754951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.553484917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.553510904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.553529978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.553550005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.553556919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.553571939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.553596020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.553638935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.553716898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.558058977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.558094978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.558161020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.558206081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.558212996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.558244944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.558267117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.558274984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.558303118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.558306932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.558335066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.558336020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.558367014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.558367968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.558398962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.558399916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.558427095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.558435917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.558456898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.558485031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.558485031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.558511972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.558536053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.558567047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.558609009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.558665991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.558744907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.558799028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.558836937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.558887959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.559678078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.559756994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.559777975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.559844017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.559894085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.559926987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.559950113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.559992075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.560245991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.560266972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.560307980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.560359001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.560657978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.560694933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.560717106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.560770035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.561445951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.561480045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.561511040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.561511993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.561548948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.561582088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.561633110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.562835932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.562872887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.562907934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.562961102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563085079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563144922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563167095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563205957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563220978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563242912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563271999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563278913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563303947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563316107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563333035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563359976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563374043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563396931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563415051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563431025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563447952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563467026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563491106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563503981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563525915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563540936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563570023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563577890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563604116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563615084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563642979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563657999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563668966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563697100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563709021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563731909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563743114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563769102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563774109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563806057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563832045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563842058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563878059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563879013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563910007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563915968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563951015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563958883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.563977957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.563996077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564007044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564030886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564039946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564066887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564078093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564105988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564112902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564141035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564152002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564177036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564188004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564212084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564223051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564249992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564256907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564284086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564299107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564318895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564327955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564356089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564364910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564393044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564403057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564426899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564433098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564462900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564471960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564498901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564511061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564543009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564543962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564578056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564588070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564610004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564620972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564642906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564651966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564675093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564683914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564707041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564726114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564739943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564755917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564770937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564784050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564801931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564810991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564827919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564845085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564851999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564874887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564877033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564894915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564903975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564914942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564935923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564963102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.564968109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.564999104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.565001011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.565015078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.565038919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.565049887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.565078020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.565082073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.565114975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.565138102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.565150976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.565160990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.565186977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.565191031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.565222979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.565232992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.565258980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.565267086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.565294027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.565308094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.565335035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.565365076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.565433979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.920327902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.920396090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.920416117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.920442104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.920449972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.920505047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.920511961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.920559883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.920572996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.920630932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.920703888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.920830965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.920886040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.920891047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.920944929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.921833038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.921879053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.921907902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.921917915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.921931028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.921963930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.921966076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.922019005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.923152924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.923228979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.923237085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.923288107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.923290968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.923342943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.923347950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.923387051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.923393011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.923425913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.923437119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.923468113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.923475981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.923507929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.923518896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.923547983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.923559904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.923593998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.923597097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.923633099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.923638105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.923681974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.923688889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.923728943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.925915956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.925960064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.926002026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.926039934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.929549932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.929594994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.929635048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.929651022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.929672956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.929672956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.929703951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.929713964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.929728031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.929750919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.929764032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.929796934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.929797888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.929841995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.929846048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.929879904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.929891109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.929919958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.929930925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.929975033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.932280064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.932326078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.932357073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.932431936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.932471037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.932507992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.932524920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.932559013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.932602882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.932641983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.932653904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.932683945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.932709932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.932723045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.932761908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.932764053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.932800055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.932837963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.932845116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.932885885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.932928085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.932929993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.932967901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.932977915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.933007956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.933047056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.933128119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.933352947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.933392048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.933429956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.933433056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.933469057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.933532953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.934827089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.934870958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.934921026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.934999943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.937448025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.937495947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.937544107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.937558889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.937588930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.937627077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.937649012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.937666893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.937705994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.937735081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.937747002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.937783003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.937787056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.937825918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.937851906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.937874079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.937916040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.937935114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.937954903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.937997103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938010931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.938035965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938061953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.938075066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938116074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938150883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.938158035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938205957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938237906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.938249111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938286066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938287973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.938327074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938360929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.938364983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938404083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938431978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.938441992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938482046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938487053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.938530922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938563108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.938575029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938613892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938649893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.938652992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938692093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938713074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.938730955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938770056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938772917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.938808918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938853979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.938858032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938900948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938931942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.938939095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.938978910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939001083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.939018011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939049959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.939133883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.939162970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939205885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939229012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.939245939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939285040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939308882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.939332008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939377069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939388037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.939415932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939451933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.939455986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939497948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939536095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.939536095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939551115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.939578056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939616919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939639091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.939666986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939698935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.939712048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939750910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939788103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.939790964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939831018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939865112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.939878941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939923048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.939924002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939961910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.939999104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.940001011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.940041065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.940073013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:51.940078020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:51.940135956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.291892052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.291929007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.292015076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.292061090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.292157888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.292195082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.292237043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.292265892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.292381048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.292416096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.292448044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.292448997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.292481899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.292506933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.292515039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.292547941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.292556047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.292593002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.292617083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.293296099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.293340921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.293378115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.293395042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.293411016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.293447018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.293493032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.294899940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.294945002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.294976950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.295011044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.295020103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.295042992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.295075893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.295077085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.295105934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.295110941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.295164108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.295169115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.295186043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.295201063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.295222998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.295243025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.295254946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.295279980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.295306921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.295312881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.295346022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.295375109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.297388077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.297425985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.297521114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.300740957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.300765991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.300842047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.300860882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.300873995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.300892115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.300911903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.300930023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.300934076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.301095963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.301250935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.301269054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.301351070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.304636955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.304660082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.304766893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.304795980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.304814100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.304828882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.304847002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.304858923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.304867983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.304872990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.304891109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.304904938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.304905891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.304922104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.304939985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.304943085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.304953098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.304966927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.304975986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.304980040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.304992914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.305006027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.305008888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.305020094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.305052996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.305080891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.305105925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.305124998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.305138111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.305170059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.305179119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.305211067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.305246115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.306446075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.306468964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.306560040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.311202049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311223984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311237097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311249018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311399937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.311503887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311526060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311544895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311562061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311578035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311592102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311593056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.311614037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311633110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311650038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311667919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311669111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.311686039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311703920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311719894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311733961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.311738968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311760902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311769009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.311779976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311794996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.311796904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311814070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311832905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311841011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.311850071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311866999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311882973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311891079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.311903000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311918974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.311922073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311939955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311954021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.311956882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311975956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.311986923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.311992884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312011003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312020063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.312028885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312041998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.312091112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.312160969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312177896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312192917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312226057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.312232018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312268972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.312269926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312328100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312346935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312351942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.312364101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312377930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.312381983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312392950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.312400103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312422037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312424898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.312441111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312454939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.312457085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312475920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312550068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312581062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312609911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.312628031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.312696934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.312742949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312762976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312778950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312796116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.312802076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.312849045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.662756920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.662848949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.663044930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.663088083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.663117886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.663157940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.663196087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.663239002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.663254023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.663275957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.663306952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.663316011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.663330078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.663397074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.664196014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.664239883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.664278030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.664299965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.664321899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.664325953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.667789936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.667835951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.667854071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.667871952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.667885065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.667915106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.667944908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.667953014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.667974949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.667993069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.668010950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.668034077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.668046951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.668073893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.668093920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.668124914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.668996096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.669045925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.669066906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.669110060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.672656059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.672697067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.672727108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.672744989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.672753096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.672790051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.672795057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.672838926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.672972918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.673022985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.673037052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.673078060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.676861048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.676903963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.676929951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.676943064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.676951885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.676984072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.676990032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.677022934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.677035093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.677062988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.677063942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.677103996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.677119970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.677143097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.677158117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.677200079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.677218914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.677242994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.677274942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.677283049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.677298069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.677323103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.677335024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.677362919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.677376986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.677401066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.677403927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.677439928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.677452087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.677486897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.678744078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.678787947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.678807974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.678855896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.683830976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.683877945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.683901072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.683914900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.683927059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.683968067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.683983088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684012890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684014082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684055090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684067011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684096098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684103012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684137106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684149027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684175014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684176922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684220076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684231997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684259892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684259892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684305906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684309959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684355021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684380054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684391975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684425116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684432983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684444904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684473038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684480906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684511900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684526920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684551954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684562922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684592009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684602976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684638023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684639931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684683084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684695959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684721947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684734106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684762001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684766054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684803009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684808016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684839964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684854031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684880018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684892893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684919119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684935093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.684967995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.684969902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.685010910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.685015917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.685050011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.685060978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.685090065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.685096979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.685128927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.685134888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.685165882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.685180902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.685209036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.685209990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.685247898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.685264111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.685296059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.685297966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.685338974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.685343981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.685376883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.685391903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.685416937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.685422897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.685456038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.685461998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.685493946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.685493946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.685534000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.685553074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.685571909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.685584068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.685620070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:52.685621977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:52.685666084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.036515951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.036570072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.036598921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.036619902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.036623955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.036667109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.036678076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.036705017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.036720991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.036744118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.036765099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.036803007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.036892891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.036952972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.037018061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.037059069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.037075996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.037096977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.037096977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.037143946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.037210941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.037266970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.037300110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.037358046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.040189028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.040236950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.040256023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.040273905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.040312052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.040313959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.040344000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.040350914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.040363073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.040390015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.040429115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.040467024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.040512085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.040513992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.040517092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.040519953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.040546894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.040558100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.040560007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.040596008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.040601015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.040637016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.040640116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.040684938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.044179916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.044212103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.044235945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.044251919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.044280052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.044298887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.044329882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.044352055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.044373035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.044477940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.044536114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.049280882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.049304008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.049356937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.049371958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.049381018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.049400091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.049423933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.049427986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.049474001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.049499989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.049530029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.049551964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.049575090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.049607038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.050242901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.050265074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.050291061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.050297976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.050316095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.050324917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.050343037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.050359964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.050767899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.050817966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.057564020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.057594061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.057621956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.057626009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.057652950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.057681084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.057683945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.057715893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.057727098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.057749033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.057758093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.057777882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.057790041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.057806969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.057811975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.057837009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.057847977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.057866096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.057877064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.057894945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.057897091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.057924032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.057933092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.057960033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.057971001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.057991982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.058003902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.058024883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.058036089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.058056116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.058064938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.058085918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.058103085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.058114052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.058135986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.058140993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.058151960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.058170080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.058176041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.058204889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.058209896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.058238983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.058248043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.058265924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.058279037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.058300972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.058681965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.058712006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.058728933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.058751106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.058751106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.058782101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.058790922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.058810949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.058824062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.058840036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.058849096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.058876991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.059551001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.059608936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.411370993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.411489964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.414084911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.414139986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.414179087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.414179087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.414203882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.414218903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.414223909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.414282084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.415241003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.415287018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.415324926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.415329933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.415363073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.415364027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.415390015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.415404081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.415419102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.415446043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.415452957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.415497065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.415503025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.415534973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.415539026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.415575027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.415581942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.415615082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.415627956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.415653944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.415668011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.415699959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.418992996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.419034004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.419071913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.419101954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.419110060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.419203997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.419210911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.419233084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.419284105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.421292067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.421331882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.421367884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.421411991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.421435118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.421437025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.421482086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.421487093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.421520948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.421526909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.421561003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.421571970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.421601057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.421612024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.421653986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.422507048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.422549009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.422569990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.422588110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.422605038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.422626972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.422633886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.422686100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.422791004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.422828913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.422840118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.422875881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.429757118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.429821968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.429853916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.429867029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.429879904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.429908037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.429910898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.429948092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.429960012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.429986954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.429997921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430027008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430043936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430066109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430078030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430104971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430105925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430155993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430156946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430201054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430205107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430238962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430244923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430280924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430290937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430320024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430322886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430356979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430367947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430397034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430399895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430437088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430443048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430479050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430488110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430531025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430536032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430569887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430581093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430603981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430609941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430649042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430653095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430685997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430701017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430725098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430737019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430764914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430779934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430814028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430814981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430859089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430860043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430898905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430900097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430938005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430948973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.430978060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.430982113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.431015968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.431026936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.431055069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.431057930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.431094885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.431102037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.431163073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.789999008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.790066004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.790153980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.790657997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.790703058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.790743113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.790771961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.790781021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.790791988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.790822983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.790839911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.790863037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.790872097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.790911913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.790918112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.790955067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.790966034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.790993929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.791033030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.791052103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.791070938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.791109085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.791111946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.791122913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.791174889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.791223049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.791264057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.791280985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.791631937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.794584036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.794626951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.794665098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.794703960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.794842958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.794869900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.794877052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.796582937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.796623945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.796660900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.796708107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.796751976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.796752930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.796766996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.796772957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.796777964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.796791077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.796824932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.796828985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.796838045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.796868086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.796897888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.796906948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.796947002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.797089100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.797101974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.797108889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.798167944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.798208952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.798237085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.798244953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.798275948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.798297882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.798340082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.798377991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.798472881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.798496008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.798507929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.798515081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.805511951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.805555105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.805591106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.805619001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.805638075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.805645943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.805682898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.805697918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.805721998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.805753946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.805784941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.805823088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.805860043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.805861950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.805872917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.805900097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.805941105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.805943966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.805951118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.805979013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.805980921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.805996895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806032896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806037903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806075096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806093931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806113958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806153059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806171894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806191921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806216955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806230068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806261063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806271076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806287050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806309938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806332111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806356907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806365967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806400061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806437016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806459904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806474924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806492090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806514025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806538105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806551933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806574106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806591034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806628942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806646109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806658983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806674957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806677103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806719065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806756973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806773901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806792974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806794882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806833982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:53.806843996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806863070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:53.806921959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.161772966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.161848068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.161897898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.161937952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.161942959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.161969900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.162010908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.162345886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.162384987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.162446976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.162508965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.162550926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.162589073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.162611961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.162625074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.162652969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.162662983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.162686110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.162714005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.162730932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.162771940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.162787914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.162818909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.162827015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.162862062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.162877083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.162899017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.162924051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.162938118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.162961960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.162975073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.163005114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.163043976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.165899992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.165944099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.166023970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.166066885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.166188002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.166237116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.166301966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.168174982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.168217897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.168266058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.168317080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.168538094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.168574095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.168621063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.168633938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.168663025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.168678045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.168700933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.168716908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.168740034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.168744087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.168777943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.168797016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.168813944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.168840885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.168869972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.169575930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.169615030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.169653893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.169667006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.169691086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.169713020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.169728041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.169751883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.169765949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.169781923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.169809103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.177689075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.177731991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.177795887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.177859068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.177896976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.177934885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.177961111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.177977085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178016901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178026915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.178056002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178071022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.178093910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178105116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.178132057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178169012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178179026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.178205013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178210974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.178251982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178263903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.178293943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178328991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.178332090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178349972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.178369045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178374052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.178406954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178417921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.178443909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178455114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.178482056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178518057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178529978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.178565025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178567886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.178606033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178642035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178670883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178700924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178740025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178777933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178811073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.178812981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178837061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.178850889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178862095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.178888083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178899050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.178934097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178976059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.178992987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.179012060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.179030895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.179049969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.179060936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.179086924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.179116964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.179140091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.179151058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.179191113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.179249048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.179277897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.533231974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.533279896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.533318996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.533338070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.533346891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.533394098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.533402920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.533550978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.533715010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.533752918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.533802986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.533809900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.533859015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.533898115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.533915043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.533953905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.533994913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.534004927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.534048080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.534086943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.534104109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.534142017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.534193039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.534195900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.534245968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.534285069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.534301043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.534341097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.534396887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.537236929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.537287951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.537377119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.540041924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.540095091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.540110111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.540157080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.540158987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.540206909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.540246964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.540262938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.540304899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.540306091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.540359020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.540397882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.540414095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.540453911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.540504932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.540546894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.540564060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.540602922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.540621042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.540649891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.540662050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.540709019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.541407108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.541445971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.541480064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.541497946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.541507959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.541557074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.541609049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.541613102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.541668892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.541716099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.549412012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.549468994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.549509048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.549525976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.549530029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.549577951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.549583912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.549773932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.550862074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.550916910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.550962925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.550964117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.550983906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.551017046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.551022053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551071882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551134109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551141977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.551156998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.551203012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551243067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551271915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.551290035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.551296949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551301003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.551352024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551356077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.551409960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551450968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551467896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.551506042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551544905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551562071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.551601887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551655054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551712036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551753044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.551767111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.551796913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551856995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.551856995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551914930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551970005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.551975965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.552028894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.552082062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.552084923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.552140951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.552196026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.552200079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.552258968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.552310944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.552321911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.552381992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.552421093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.552447081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.552467108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.552474976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.552524090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.552561998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.552581072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.552628994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.905757904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.905813932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.905864000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.905905962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.906033993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.906176090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.906219959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.906255960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.906256914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.906270027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.906296968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.906316042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.906335115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.906349897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.906383991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.906424999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.906441927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.906461954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.906476021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.906501055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.906516075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.906538963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.906544924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.906574965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.906598091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.906613111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.906635046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.906650066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.906697989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.906712055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.906747103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.909157991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.909198999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.909236908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.909265041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.912019014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.912090063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.912154913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.912194014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.912194967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.912444115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.912458897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.912520885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.912579060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.912594080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.912635088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.912693977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.912703037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.912750006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.912756920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.912806988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.912863970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.912877083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.912929058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.913008928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.913197041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.913264990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.913280964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.913328886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.913425922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.913484097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.913655996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.913676023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.923152924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.923213005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.923254013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.923280954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.923290968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.923333883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.923335075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.923372984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.923388958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.923425913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.924190044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924228907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924261093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924299002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924314976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.924340963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924381018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924393892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.924433947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.924499989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924536943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924566984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924606085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.924628019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.924634933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924671888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924690008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.924709082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924725056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.924747944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924752951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.924786091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924799919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.924823046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924838066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.924865007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924880028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.924904108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924917936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.924938917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924963951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.924977064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.924988985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.925013065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.925018072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.925049067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.925086021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.925097942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.925122976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.925134897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.925164938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.925170898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.925204039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.925216913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.925239086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.925260067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.925276041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.925308943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.925312996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.925344944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.925348997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.925384045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.925385952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.925405025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.925424099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.925434113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.925467014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:54.925496101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:54.925537109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.276979923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.277045965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.277209044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.277578115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.277637959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.277678013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.277731895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.277751923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.277889967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.277930975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.277966976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.278022051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.278037071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.278059006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.278079033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.278085947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.278121948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.278161049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.278184891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.278211117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.278212070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.278254032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.278269053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.281893015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.283498049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.283521891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.283601046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.284172058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.284198999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.284270048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.284301996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.284324884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.284343958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.284370899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.284384012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.284400940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.284399986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.284423113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.284436941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.284456015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.284472942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.284735918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.284797907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.285012007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.287462950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.295154095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.295248985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.295275927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.295304060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.295409918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.295459986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.296211004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.296521902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.296551943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.296593904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.296633959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.297640085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.297668934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.297693968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.297739983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.297766924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.297772884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.297822952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.297852039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.297877073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.297918081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.297929049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.297934055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.297964096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.297992945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.298027039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.298027039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.298058987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.298062086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.298082113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.298098087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.298114061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.298127890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.298182011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.301681995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.651293993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.651344061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.651376963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.651410103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.651444912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.651478052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.651500940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.651547909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.653330088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.653378010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.653434038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.653485060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.654402018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.654447079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.654519081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.655301094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.655340910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.655388117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.655416012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.655430079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.655447006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.655469894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.655495882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.655508995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.655546904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.655575037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.655584097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.655601978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.655642986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.655715942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.655759096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.655826092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.667931080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.667989016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.668028116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.668085098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.668109894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.668644905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.668688059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.668728113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.668766022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.668802023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.669750929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.669791937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.669874907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.669897079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.670464993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.670536041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.670545101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.670588970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.670625925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.670659065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.670664072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.670701981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.670703888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.670710087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.670741081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.670753002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.670782089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.670804024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:55.670809984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:55.670876980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.025841951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.025885105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.025903940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.025938988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.026062965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.026124001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.026129007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.026304007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.026329041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.026365995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.026385069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.026678085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.026701927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.026724100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.026731014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.026746988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.026767015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.026772976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.026798010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.026808023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.026814938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.026833057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.026849985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.026874065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.026892900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.026897907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.026921988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.026922941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.026946068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.026956081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.026983023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.026988983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.027013063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.027034998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.027036905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.027079105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.027129889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.039655924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.039683104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.039704084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.039767981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.039819002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.040054083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.040107012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.040138006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.040147066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.040164948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.040186882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.040230036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.040266037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.041224957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.041270971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.041294098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.041327000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.041891098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.041966915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.042100906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.042144060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.042181015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.042186022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.042202950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.042227030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.042248964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.042273998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.042274952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.042319059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.042341948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.042357922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.042376041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.042412996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.397526979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.397589922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.397631884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.397670984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.397697926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.397711039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.397727966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.397752047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.397802114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.398533106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.398572922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.398607016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.398672104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.398675919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.398715019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.398744106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.398755074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.398793936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.398819923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.398833990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.398868084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.398873091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.398916960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.398922920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.398952007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.398967028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.398993015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.399005890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.399020910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.399044991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.399063110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.399084091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.399097919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.399143934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.399149895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.399189949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.399204969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.399244070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.411176920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.411226034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.411264896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.411302090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.411328077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.411350012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.411385059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.411387920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.411427021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.411436081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.411462069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.411478996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.411485910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.411536932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.412503004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.412544012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.412570000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.412600994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.413114071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.413171053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.413186073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.413235903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.413645983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.413683891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.413710117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.413753033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.414273024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.414314985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.414351940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.414397955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.414635897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.414680958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.414700985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.414730072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.771608114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.771653891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.771692991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.771732092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.771755934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.771770954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.771783113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.771809101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.771833897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.771850109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.771862030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.771888018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.771899939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.771933079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.773416996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.773458004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.773495913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.773509026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.773526907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.773536921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.773547888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.773586035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.773587942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.773628950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.773629904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.773669004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.773674011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.773708105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.773709059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.773749113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.773751020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.773788929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.773794889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.773828983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.773832083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.773870945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.773873091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.773915052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.773920059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.773963928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.773966074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.774003029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.774007082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.774043083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.774045944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.774085999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.782556057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.782632113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.782665014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.782671928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.782689095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.782710075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.782728910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.782757998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.782759905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.782803059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.782807112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.782841921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.782843113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.782881975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.782886028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.782922983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.782923937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.782967091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.783761024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.783802986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.783823013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.783847094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.784485102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.784528017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.784545898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.784581900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.785017967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.785059929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.785078049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.785104036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.786271095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.786313057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.786334038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.786351919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.786364079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.786390066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:56.786392927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:56.786432981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.145358086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.145416021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.145456076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.145459890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.145488977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.145497084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.145529985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.145553112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.145756006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.145796061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.145812035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.145834923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.145844936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.145874023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.145885944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.145926952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.147387981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.147439957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.147470951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.147484064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.147495031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.147524118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.147532940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.147564888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.147573948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.147613049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.147623062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.147665024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.147730112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.147778034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.147794008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.147840977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.147842884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.147886038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.147897005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.147924900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.147937059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.147963047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.147965908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.148005009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.148006916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.148042917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.148051977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.148082972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.148093939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.148135900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.148214102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.148266077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.148278952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.148318052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.148328066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.148363113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.155667067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.155744076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.155769110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.155801058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.155808926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.155848026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.155854940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.155903101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.155904055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.155956984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.155960083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.156011105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.156013012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.156068087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.156068087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.156122923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.156862020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.156927109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.157059908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.157114029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.157116890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.157164097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.157172918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.157222033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.158340931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.158389091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.158416033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.158442974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.159748077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.159787893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.159811974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.159822941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.159853935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.159861088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.159895897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.159934998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.518273115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.518332958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.518371105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.518410921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.518435955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.518449068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.518476963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.518498898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.518543005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.518580914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.518534899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.518620968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.518660069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.518681049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.518692017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.518699884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.518706083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.518712997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.518718958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.519819021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.519857883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.519896030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.519911051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.519932985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.519934893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.519949913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.520005941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.527738094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.527779102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.527826071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.527869940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.527908087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.527947903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.527988911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.528027058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.528065920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.528089046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.528105021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.528152943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.528198004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.528233051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.528273106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.530648947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.530709982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.530750990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.530754089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.530791044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.530803919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.530828953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.530833006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.530868053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.530874014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.530908108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.530909061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.530951023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.530956984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.530987978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.530999899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.531028032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.531039953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.531059980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.531100988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.540465117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.540579081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.540580988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.540638924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.540651083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.540704966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.540714979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.540770054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.540779114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.540848970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.540865898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.540930033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.540940046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.541001081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.541008949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.541064978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.541083097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.541146040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.541156054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.541215897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.889945030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.889977932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.889995098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.890006065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.890017986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.890033007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.890033960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.890053988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.890072107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.890089035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.890108109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.890120029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.890158892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.890196085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.890202045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.890207052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.890818119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.890846014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.890885115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.890924931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.891047001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.891083956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.891159058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.891177893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.899863005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.899895906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.899909973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.899925947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.899940014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.899952888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.899966002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.899996042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.900002003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.900015116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.900028944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.900075912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.900116920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.900152922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.900176048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.902223110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.902250051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.902277946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.902308941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.902326107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.902343035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.902369022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.902374029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.902374983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.902393103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.902417898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.902446985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.902455091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.902482986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.902498007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.902534962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.902550936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.913789988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.913815022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.913826942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.913841963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.913861990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.913878918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.913894892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.913906097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.913912058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.913928986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.913945913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:57.913957119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.913971901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:57.914000034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.263439894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.263470888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.263485909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.263498068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.263510942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.263523102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.263561964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.263602018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.263632059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.263643026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.263684034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.263706923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.263717890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.263735056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.263748884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.263765097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.263778925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.263787031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.263818979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.263854027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.267713070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.271898985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.271936893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.271954060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.271971941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.271989107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.272005081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.272022009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.272031069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.272063017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.272064924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.272084951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.272129059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.272142887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.272172928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.272712946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.272753954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.272779942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.272845984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.274236917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.274264097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.274276972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.274324894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.274333000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.274355888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.274375916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.274405956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.274408102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.274451017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.274456978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.274477959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.274488926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.274529934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.274537086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.274555922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.274600983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.274602890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.274665117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.285536051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.285562992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.285573959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.285588980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.285614014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.285654068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.285703897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.285725117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.285736084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.285737038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.285769939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.285778046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.285800934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.285824060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.285938025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.287718058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.635860920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.635890007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.635905981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.635919094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.635931015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.635946035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.635965109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.635981083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.635998011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.636014938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.636032104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.636033058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.636048079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.636077881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.636080980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.636099100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.636107922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.636132956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.643501043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.643537998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.643568993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.643610954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.643657923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.643677950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.643691063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.643724918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.643738985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.643755913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.643759966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.643804073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.644463062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.644484043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.644553900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.644584894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.645077944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.645098925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.645179033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.646171093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.646193981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.646209002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.646220922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.646236897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.646253109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.646269083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.646291018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.646331072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.646365881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.646382093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.646393061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.646424055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.646446943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.657255888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.657284021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.657300949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.657316923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.657336950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.657355070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.657371998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.657388926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.657429934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.657443047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.657459974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:58.657459974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:58.657507896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.009727001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.009757996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.009771109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.009783030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.009797096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.009809971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.009834051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.009836912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.009850025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.009892941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.009938002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.009954929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.009984016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.010013103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.010031939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.010035038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.010046005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.010062933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.010081053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.010118008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.010148048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.010166883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.010184050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.010214090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.010229111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.017312050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.017344952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.017365932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.017376900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.017412901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.017420053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.018201113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.018265963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.018328905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.018359900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.018381119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.018390894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.018409967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.018423080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.018445015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.018462896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.018484116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.018517017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.018536091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.018552065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.018980026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.019026041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.019062996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.019095898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.019125938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.019150019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.019170046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.019217968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.019251108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.019296885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.019301891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.019340992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.019467115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.019504070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.019526005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.019546986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.019603014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.019644976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.019754887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.019792080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.019814014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.019824982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.019846916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.019867897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.031639099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.031668901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.031702995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.031702995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.031737089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.031745911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.031776905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.031786919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.031811953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.031817913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.031848907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.031868935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.031873941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.031917095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.031923056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.031950951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.031975031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.032001019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.032011032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.032061100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.380912066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.380939007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.380956888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.380974054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.380980968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.380990982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.381010056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.381016970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.381047010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.381068945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.381392956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.381443977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.381525040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.381541967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.381558895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.381572962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.381576061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.381597042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.381597996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.381618023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.381624937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.381634951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.381663084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.381798029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.390254974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.390312910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.390330076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.390356064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.390372038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.390398979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.390404940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.390439034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.390450954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.390484095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.390484095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.390522003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.390532970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.390566111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.390571117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.390605927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.390618086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.390646935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.390657902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.390881062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.392987967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.393048048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.393066883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.393090010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.393107891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.393132925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.393143892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.393172026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.393177032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.393210888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.393215895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.393251896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.393285990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.393337965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.393426895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.393471003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.393487930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.393788099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.393826962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.393830061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.393841982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.393876076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.404778957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.404845953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.404875040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.404891968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.404913902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.404932976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.404934883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.404973984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.404977083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.405015945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.405040979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.405065060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.405080080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.405126095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.405129910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.405177116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.405195951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.405244112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.405256033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.405297041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.754427910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.754475117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.754513979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.754520893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.754543066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.754554033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.754570961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.754592896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.754604101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.754632950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.754652977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.754673004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.754712105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.754714012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.754724979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.754757881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.755392075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.755434990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.755459070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.755474091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.755481005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.755515099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.755521059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.755557060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.755770922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.755812883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.755825996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.755860090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.764301062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.764343977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.764369965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.764389038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.764403105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.764424086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.764429092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.764468908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.764472961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.764508009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.764509916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.764548063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.764553070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.764584064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.764588118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.764626980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.764631987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.764667034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.764674902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.764717102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.766278028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.766319036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.766347885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.766359091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.766366959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.766392946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.766400099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.766441107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.767072916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.767133951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.767141104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.767184973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.767191887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.767225027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.767239094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.767262936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.767272949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.767302036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.767313957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.767339945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.767343998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.767383099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.767389059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.767432928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.776530981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.776573896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.776612043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.776650906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.776690960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.776714087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.776735067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.776777029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.776789904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.776818991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.776818991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.776859045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.776861906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.776906967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.776909113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.776951075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:22:59.776957989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:22:59.776992083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.126988888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.127074003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.127177000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.127213001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.127234936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.127259016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.127290964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.127290964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.127347946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.127403975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.127404928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.127460957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.127516031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.127516985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.127573013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.127629995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.127695084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.127749920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.127751112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.127818108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.127873898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.127876997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.127969980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.128027916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.128067017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.128118992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.136099100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.136149883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.136182070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.136215925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.136246920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.136281013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.136286974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.136323929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.136324883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.136348009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.136358976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.136378050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.136393070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.136394024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.136426926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.136430025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.136461020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.137870073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.137912989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.137960911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.137991905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.139627934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.139651060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.139681101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.139703989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.139725924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.139729977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.139744043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.139764071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.139775038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.139785051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.139802933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.139806032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.139823914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.139827967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.139858961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.148324966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.148351908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.148370981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.148387909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.148407936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.148458958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.148458004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.148483038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.148518085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.148653984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.148674011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.148696899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.148718119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.148734093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.148762941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.498859882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.498891115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.498903036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.498919964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.498938084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.498969078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.499025106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.499059916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.499078035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.499094963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.499111891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.499140978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.499145985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.499155998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.499166012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.499174118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.499185085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.499193907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.499202013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.499213934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.499218941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.499238014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.499243975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.499253988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.499285936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.499306917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.508068085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.508099079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.508119106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.508136034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.508152962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.508164883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.508171082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.508188963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.508202076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.508207083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.508223057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.508224964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.508244991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.508253098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.508284092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.508301973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.509727001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.509751081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.509812117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.511312962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.511332989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.511349916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.511367083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.511387110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.511404991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.511420012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.511431932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.511435986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.511450052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.511471033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.511481047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.511507034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.520096064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.520124912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.520147085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.520169973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.520190954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.520205021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.520211935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.520236969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.520266056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.520294905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.520318031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.520342112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.520351887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.520361900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.520364046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.520389080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.520409107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.870611906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.870702028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.870774984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.870816946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.871220112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.871241093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.871257067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.871279001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.871299028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.871311903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.871323109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.871330023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.871368885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.871387959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.871397972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.871404886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.871423960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.871436119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.871442080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.871459961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.871476889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.871491909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.871503115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.871505022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.871520996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.871552944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.879699945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.879734993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.879748106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.879760027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.879774094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.879791975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.879806042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.879818916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.879832029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.879843950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.879916906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.879960060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.881025076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.881051064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.881129980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.882531881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.882551908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.882565022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.882576942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.882589102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.882601976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.882615089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.882627010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.882638931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.882651091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.882653952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.882693052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.882760048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.891665936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.891696930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.891712904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.891732931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.891743898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.891751051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.891769886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.891772032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.891788960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.891807079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.891824007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.891832113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.891840935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:00.891853094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:00.891879082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.244255066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244285107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244344950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.244376898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.244462967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244484901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244502068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244518042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.244518995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244539022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244554996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.244555950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244574070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244587898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.244590044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244607925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244616985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.244633913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.244643927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244662046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244672060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.244678020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244692087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.244695902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244710922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.244713068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244733095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244745970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.244750023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244771957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244781017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.244791031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.244815111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.244832993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.251108885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.251162052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.251182079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.251199007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.251214981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.251230955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.251247883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.251262903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.251281023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.251301050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.251492023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.253963947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.254061937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.254081011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.254093885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.254112959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.254129887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.254160881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.254177094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.254194021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.254205942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.254240036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.254353046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.254383087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.254399061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.254407883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.254420042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.254436016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.254437923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.254455090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.254477978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.254503012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.263879061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.263909101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.263921976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.263936996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.263955116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.263971090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.263987064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.263992071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.264003992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.264019966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.264020920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.264031887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.264040947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.264069080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.264087915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.615768909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.615794897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.615811110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.615828037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.615844965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.615856886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.615861893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.615895033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.615940094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.615961075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.615994930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.616014004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.616018057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.616030931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.616046906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.616082907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.616122007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.616142988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.616158962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.616174936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.616175890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.616193056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.616209984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.616218090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.616226912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.616245031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.616255999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.616265059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.616282940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.616282940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.616300106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.616313934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.616317987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.616341114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.616375923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.622445107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.622471094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.622487068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.622502089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.622512102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.622523069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.622541904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.622546911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.622559071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.622575045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.622576952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.622592926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.622606039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.622610092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.622639894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.622659922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.626571894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.626599073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.626678944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.626701117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.626966953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.626987934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.627026081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.627058029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.627172947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.627185106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.627197981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.627209902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.627223015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.627228022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.627240896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.627258062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.627264977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.627275944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.627295017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.627320051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.634989023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.635005951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.635025978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.635046005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.635065079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.635081053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.635092974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.635106087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.635104895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.635116100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.635143995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.635155916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.635171890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.635175943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.635293007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.635350943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.986912012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.986944914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.986965895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987006903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.987020016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987049103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.987051010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987067938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987083912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987099886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987108946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.987129927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987131119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.987145901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987155914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.987162113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987179041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987195969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.987221956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.987265110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.987333059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987365961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987385035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.987395048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987426043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987442017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987448931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.987457991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987473965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987477064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.987485886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987505913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987514019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.987524986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987536907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987552881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.987555981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987571001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.987571955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987590075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.987592936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.987633944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.987654924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.994191885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.994244099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.994275093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.994282961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.994296074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.994323015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.994339943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.994362116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.994386911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.994398117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.994412899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.994437933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.994476080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.994503021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.994523048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.994545937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.994565964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.994625092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.998830080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.998883009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.998922110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.998960018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.998976946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.998996019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.999008894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.999033928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.999052048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.999089956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.999116898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.999156952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.999164104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.999196053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.999221087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.999234915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.999253988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.999274015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.999313116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:01.999335051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:01.999361038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.008580923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.008645058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.008699894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.008735895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.008750916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.008758068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.008810043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.008810043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.008868933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.008877039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.008922100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.008979082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.008985043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.009026051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.009083033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.009090900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.009172916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.359499931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.359565973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.359607935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.359667063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.359674931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.359704971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.359707117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.359738111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.359749079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.359751940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.359801054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.359808922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.359893084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.359947920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.359970093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360008001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360060930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.360065937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360102892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360153913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.360158920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360202074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360239029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360250950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.360306978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360353947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.360441923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360483885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360522985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360539913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.360565901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360611916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.360613108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360655069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360692978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360703945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.360732079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360770941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360781908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.360807896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360845089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360856056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.360882044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360929012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.360930920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.360974073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.361068010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.366590977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.366628885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.366662025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.366667032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.366683006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.366703987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.366714954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.366740942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.366746902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.366779089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.366784096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.366816044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.366832018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.366863966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.366866112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.366904974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.366942883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.366952896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.366985083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.371774912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.371835947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.371862888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.371875048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.371886015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.371913910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.371925116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.371962070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.372004032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.372016907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.372041941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.372046947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.372080088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.372091055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.372117043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.372133017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.372176886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.372196913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.372226000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.372242928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.372283936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.372332096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.383176088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.383227110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.383266926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.383297920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.383304119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.383328915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.383341074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.383368969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.383379936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.383407116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.383418083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.383431911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.383465052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.383471012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.383506060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.383517027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.383543968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.383554935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.383582115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.383593082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.383620024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.383630037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.383680105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.732482910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.732527971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.732671022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.732789040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.732842922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.732897997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.732903957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.733012915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.733040094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.733253956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.733390093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.733457088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.733494043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.733515978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.733551979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.733572960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.733614922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.733675003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.733711958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.733731985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.733786106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.733819962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.733843088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.733892918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.733897924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.733952999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.733989000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.734008074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.734069109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.734095097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.734128952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.734172106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.734184027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.734237909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.734257936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.734293938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.734348059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.734385014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.734400988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.734452963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.734457016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.734519005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.734556913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.734576941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.734618902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.734632969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.734688044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.734728098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.734741926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.734796047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.734817982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.734852076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.734888077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.734905005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.734966993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.735004902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.735116005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.738401890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.738518953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.738581896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.738636017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.738688946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.738729000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.738744020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.738799095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.738821030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.738852978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.738893986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.738907099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.738969088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.739006042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.739027023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.739100933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.743484974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.743537903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.743576050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.743593931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.743613958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.743622065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.743653059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.743701935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.743726015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.743765116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.743802071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.743818998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.743849039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.743860960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.743891001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.743913889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.743927956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.743948936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.743967056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.743982077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.744004965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.744028091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.744041920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.744066000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.744082928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.744093895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.744139910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.755085945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.755172968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.755197048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.755215883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.755218029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.755240917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.755244017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.755261898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.755265951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.755284071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.755305052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.755320072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.755331039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.755347013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.755353928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.755374908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.755374908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.755397081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:02.755408049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.755433083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:02.755506992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.108812094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.108870029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.108908892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.108947992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.108962059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.108987093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.108998060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.109025955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.109033108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.109071970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.109074116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.109119892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.109210968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.109252930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.109301090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.109332085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.109476089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.109529018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.109580994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.109621048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.109659910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.109667063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.109755039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.109802008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.109818935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.109858036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.109894991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.109905958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.109930992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.109967947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.109973907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.110004902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110052109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.110052109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110120058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110166073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.110177994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110214949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110260010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.110287905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110343933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110390902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.110425949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110480070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110518932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110529900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.110555887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110594034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110605001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.110630989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110675097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.110677958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110719919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110755920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110765934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.110794067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110831976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110841990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.110867977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110905886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.110915899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.111217022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.113249063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.113308907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.113347054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.113384008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.113400936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.113421917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.113431931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.113468885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.113470078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.113512993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.113523006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.113549948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.113560915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.113590002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.113604069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.113627911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.113639116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.113677979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.117253065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.117306948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.117403984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.117866039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.117908955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.117947102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.117973089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.117985010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.117995977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.118024111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.118026972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.118073940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.118082047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.118124962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.118161917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.118171930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.118201971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.118208885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.118251085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.118252993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.118289948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.118338108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.118364096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.120121956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.128634930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.128665924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.128798008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.128984928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.129034042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.129056931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.129077911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.129096031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.129103899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.129122019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.129127979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.129142046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.129148960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.129169941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.129178047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.129190922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.129194021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.129211903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.129219055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.129232883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.129235983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.129254103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.129256010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.129272938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.129291058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.482021093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482059956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482080936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482110977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482142925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482171059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482193947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482232094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.482238054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482275963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.482289076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.482295036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.482372999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482391119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482454062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482469082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.482486010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482508898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482552052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482558966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.482574940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.482585907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482619047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.482657909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.482690096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482742071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482769966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.482774019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482805967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482811928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.482829094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482851028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.482861042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482861996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.482949972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.482959032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.482976913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.482984066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483042002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483043909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.483067036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483128071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.483135939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483192921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483216047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483242035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483257055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.483278036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.483284950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483323097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.483336926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.483371973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483397007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483418941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483453989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.483488083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.483493090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483527899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483553886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483581066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483583927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.483618021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.483648062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483653069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.483676910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483704090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483726978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483747959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.483793020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.483794928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483844995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483879089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483902931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.483928919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.483942986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483972073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.483997107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.484035969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.485521078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.485553980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.485580921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.485601902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.485622883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.485641956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.485655069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.485727072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.485758066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.485759020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.485775948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.485783100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.485790968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.485816002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.485822916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.485841990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.485886097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.485908985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.485908031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.485960960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.489518881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.489552975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.489584923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.489617109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.489635944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.489650965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.489666939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.489691019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.489703894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.489742041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.489758015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.489793062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.489813089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.489826918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.489854097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.489871979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.489882946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.489897013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.489932060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.489933014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.489972115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.489989042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.492646933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.492714882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.492830038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.500952959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.500988007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.501009941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.501041889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.501061916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.501091003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.501121998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.501126051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.501148939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.501156092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.501180887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.501226902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.501406908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.501431942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.501465082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.501503944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.501512051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.501537085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.501544952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.501583099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.501585007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.501600027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.501632929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.853430033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.853456020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.853507042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.853535891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.853631020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.853632927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.853657961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.853658915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.853717089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.853774071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.853790998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.853792906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.853801966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.853830099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.853856087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.853861094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.853900909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.853904009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.853915930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.853974104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.853985071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854002953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854033947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854058027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854079962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854099035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854101896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854118109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854121923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854125977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854132891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854139090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854156971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854180098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854351997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854420900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854419947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854448080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854481936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854501963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854502916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854532003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854547977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854584932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854589939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854607105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854645967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854664087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854676008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854697943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854732990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854738951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854770899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854783058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854908943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854943037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854975939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.854995012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.854996920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855037928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855056047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855082035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855098009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855109930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855143070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855155945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855220079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855262995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855302095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855307102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855345964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855346918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855357885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855401993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855429888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855451107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855472088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855501890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855509996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855544090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855570078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855576038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855587959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855627060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855629921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855659962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855669975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855699062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855700016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855715990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855745077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855761051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855762959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855792999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855798006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855814934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855845928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855846882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855895042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855899096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855942011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.855947971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.855977058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.856003046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.856031895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.856764078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.856786966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.856853962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.856874943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.856920958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.856939077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.856985092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.857007027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.857182980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.857201099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.857251883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.857269049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.857919931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.857939959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.857961893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.857983112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.858006001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.858011007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.858026028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.858028889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.858074903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.858089924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.861265898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.861300945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.861330032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.861382008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.861407042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.861407042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.861418962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.861430883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.861440897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.861455917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.861479998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.861488104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.861504078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.861524105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.861527920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.861550093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.861576080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.861582041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.861598969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.861618042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.861629963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.861641884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.861654997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.861679077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.861701965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.867419958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.867441893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.867522001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.867563009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.872575998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.872597933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.872613907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.872629881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.872646093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.872664928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.872667074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.872684956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.872688055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.872741938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.872752905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.872785091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.872806072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.872812033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.872832060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.872843027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.872854948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.872878075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.872904062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.872914076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:03.872953892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:03.872976065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.224912882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.224957943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.224992990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.225027084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.225070000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.225106955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.225109100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.225174904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.225367069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.225425005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.225435972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.225472927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.225481987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.225519896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.225534916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.225568056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.225581884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.225615025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.225620031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.225661039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.225671053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.225709915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.225725889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.225754023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.225764036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.225806952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.225809097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.225862026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.225863934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.225909948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.225927114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.225948095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.225965977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.225991964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226011038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226038933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226051092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226087093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226090908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226136923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226144075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226197004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226203918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226252079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226265907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226300955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226315022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226347923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226356983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226396084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226413012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226430893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226445913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226464987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226490974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226499081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226527929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226542950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226548910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226583004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226602077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226617098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226643085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226654053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226663113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226700068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226732016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226742983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226771116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226792097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226808071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226838112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226897001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226901054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226946115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.226964951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.226994991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227003098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227046967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227049112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227098942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227106094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227169991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227170944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227205992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227226973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227241039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227274895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227276087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227294922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227318048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227327108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227358103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227376938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227391005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227412939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227427006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227442026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227463007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227484941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227495909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227524042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227530956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227543116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227566957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227588892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227616072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227632999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227655888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227673054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227689981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227725029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227726936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227745056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227758884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227780104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227792978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.227814913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227838993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.227958918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.228012085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.228046894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.228061914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.228075027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.228097916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.228125095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.228132963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.228167057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.228177071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.228194952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.228264093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.229418039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.229474068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.229520082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.229569912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.229588032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.229614019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.229619026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.229659081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.229667902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.229696035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.229727983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.229732990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.229748964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.229773998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.229789019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.229829073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.232758045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.232799053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.232825041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.232840061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.232852936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.232880116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.232903957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.232928038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.232939005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.232976913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.232990980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.233014107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.233026981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.233052015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.233063936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.233089924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.233105898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.233119011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.233144999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.233149052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.233175039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.233184099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.233196974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.233221054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.233256102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.233257055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.233278990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.233289003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.233314991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.233319044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.233346939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.233366013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.238751888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.238799095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.238825083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.238872051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.244244099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.244278908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.244299889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.244323015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.244330883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.244343042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.244365931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.244380951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.244385958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.244409084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.244426012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.244426012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.244446993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.244460106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.244466066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.244491100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.244498968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.244508982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.244517088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.244524956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.244569063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.244611979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.598150969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.598174095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.598195076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.598211050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.598222971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.598239899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.598256111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.598275900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.598335981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.598452091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.600840092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.600895882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.600967884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.600970984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601041079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.601061106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601097107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.601102114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601140022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601145983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.601178885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601197958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.601218939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601243973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.601289034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.601291895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601334095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601371050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601385117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.601418972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601461887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601478100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.601499081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601536989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601546049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.601584911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601622105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601630926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.601659060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601674080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.601697922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601733923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601772070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601779938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.601809025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601856947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601887941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.601898909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601936102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.601949930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.601974010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602013111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602030993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.602049112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602096081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.602127075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602168083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.602175951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602233887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602250099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.602271080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602309942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602332115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.602348089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602385044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602407932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.602422953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602463007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602504015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.602509022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602551937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602555990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.602588892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602627039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602632046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.602664948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602701902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602716923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.602740049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602771044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.602777958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602826118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602866888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602904081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602904081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.602942944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.602962971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.602981091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603017092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603055000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603091955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603092909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.603106022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.603163004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603183031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.603212118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603255987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603292942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603297949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.603332043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603369951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603406906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603431940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.603446007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603490114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.603496075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.603498936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603552103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603573084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.603588104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603626013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603636026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.603662968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603698969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.603708982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603751898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603764057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.603790998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603827953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603853941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.603866100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603903055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603940964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.603954077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.603979111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.604010105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.604047060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.604060888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.604113102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.604160070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.604202986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.604243994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.604275942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.606146097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.606226921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.606241941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.606291056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.606312990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.606365919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.606378078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.606432915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.606467962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.606494904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.606496096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.606554985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.606560946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.606626034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.606627941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.606686115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.606686115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.606745958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.606745005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.606803894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.606806040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.606864929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.606865883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.606924057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.606930971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.606981039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.606981993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.607038975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.607043982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.607096910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.607105017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.607197046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.607220888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.607256889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.607259035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.607320070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.612271070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.612324953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.612354994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.612381935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.616899014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.616931915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.616956949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.616971970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.616980076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.616993904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.617002010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.617007017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.617021084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.617031097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.617044926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.617055893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.617070913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.617075920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.617091894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.617094040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.617116928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.617121935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.617140055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.617141008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.617157936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.617167950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.617181063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.617192984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.617197037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.617211103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.617225885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.617242098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.617250919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.617280006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.617311001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.971065044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.971179962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.971184969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.971240997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.971251965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.971287012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.971339941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.971378088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.971380949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.971390009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.971406937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.971426964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.971447945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.971451044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.971476078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.971488953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.971546888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.976694107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.976731062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.976756096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.976779938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.976804018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.976826906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.976854086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.976878881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.976902008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.976902008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.976927042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.976948977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.976952076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.976965904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.976978064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977000952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977005005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977016926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977021933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977025986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977052927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977063894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977077961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977092981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977102041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977108002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977125883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977123022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977149010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977161884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977174044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977174044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977197886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977210045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977221012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977226973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977248907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977252007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977273941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977284908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977298021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977310896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977320910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977323055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977344990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977360010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977369070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977375031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977391958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977392912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977412939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977417946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977444887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977446079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977458000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977469921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977493048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977515936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977533102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977540016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977557898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977564096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977591038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977597952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977617025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977619886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977647066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977655888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977674961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977677107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977691889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977700949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977726936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977751017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977776051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977798939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977802038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977807999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977828026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977844000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977857113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977860928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977885008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977889061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977910042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977921963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977946043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977962017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.977963924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.977991104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978019953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978040934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978044987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978070974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978075981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978086948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978096008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978106976 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978126049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978132010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978146076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978152990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978163004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978176117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978202105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978205919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978233099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978233099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978250027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978256941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978281021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978306055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978313923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978328943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978333950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978354931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978369951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978379011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978383064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978405952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978411913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978426933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978430986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978450060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978456020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978481054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978487968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978504896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978506088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978527069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978529930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978545904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978553057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978576899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978586912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978604078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978604078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978611946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978630066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978652954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978665113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978677034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978677034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978697062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978703022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978725910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978729010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978750944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978754044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978770971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978775978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978801012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978801966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978827000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978833914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978843927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978849888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978873968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978882074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978897095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978899002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978907108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978920937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978945017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978950977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978967905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.978969097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978996992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.978996992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.979006052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.979021072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.979074955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.979422092 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.979449987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.979834080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.979861021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.979883909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.979897022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.979904890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.979924917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.979927063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.979942083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.979947090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.979991913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.980006933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.980025053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.980046034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.980067015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.980083942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.980089903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.980110884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.980110884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.980132103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.980134964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.980154037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.980155945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.980178118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.980182886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.980200052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.980211973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.980221033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.980235100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.980258942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.980278969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.983418941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.983454943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.983535051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.988601923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.988627911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.988650084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.988670111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.988676071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.988702059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.988717079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.988723040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.988746881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.988769054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.988789082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.988807917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.988809109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.988832951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.988836050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.988854885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.988864899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.988898993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.988923073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.988935947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.988950014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.988975048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.988981962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.988996029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.989000082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.989023924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.989026070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.989048004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.989058018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.989068031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.989072084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:04.989085913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:04.989136934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.342653036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.342700958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.342749119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.342793941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.342808008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.342832088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.342835903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.342842102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.342870951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.342891932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.342911005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.342948914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.342967987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.342988014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.343002081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.343025923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.343030930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.343074083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.343076944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.343146086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.343147993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.343657017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.349972963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350018978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350055933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350111008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350115061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.350150108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350171089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.350187063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350204945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.350234032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350270033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.350277901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350341082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.350342989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350354910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.350389957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350428104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350466013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350480080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.350492954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.350500107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.350506067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350518942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.350544930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350581884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350641966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350642920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.350656986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.350667953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.350691080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350733995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350763083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350790977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.350792885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350831985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350871086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350908995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350944996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.350950003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.350984097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351001024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351022005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351047993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351069927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351069927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351111889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351150036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351180077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351193905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351217031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351234913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351254940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351295948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351308107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351311922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351345062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351383924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351422071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351424932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351463079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351469994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351471901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351512909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351545095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351548910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351584911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351592064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351634026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351670027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351695061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351705074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351708889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351723909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351754904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351763010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351794958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351818085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351861000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351867914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351897955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351898909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351937056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351955891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351964951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.351975918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.351994991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352013111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352037907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352051020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352067947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352089882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352138042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352149963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352159023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352289915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352314949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352360010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352416039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352454901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352461100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352477074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352494001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352526903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352530956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352538109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352569103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352593899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352606058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352621078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352669001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352685928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352711916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352750063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352780104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352788925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352792978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352813005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352828979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352847099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352864981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352886915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352904081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352924109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.352945089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.352993011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353002071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353017092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353035927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353044987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353074074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353115082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353121042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353140116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353152990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353168011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353193045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353233099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353260994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353271961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353303909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353327036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353333950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353377104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353415012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353452921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353456020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353471994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353491068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353518963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353527069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353538990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353564978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353579998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353600979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353626966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353647947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353667021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353689909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353704929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353728056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353744984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353765011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353805065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353817940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353841066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353864908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353878975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353893042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353916883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353933096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.353964090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.353988886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354006052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354055882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354055882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354085922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354094982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354115009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354132891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354154110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354168892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354202986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354207039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354262114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354264975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354270935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354326010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354367971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354372978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354404926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354425907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354456902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354482889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354495049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354517937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354525089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354531050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354568958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354588032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354607105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354646921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354654074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354675055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354685068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354696035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354727030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354732990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354756117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354770899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354793072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354809999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354847908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.354866982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.354904890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.360506058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.360529900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.360682964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.360693932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.360708952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.360744953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.360774040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.360796928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.360819101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.360826015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.360841036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.360863924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.360879898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.360888958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.360896111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.360905886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.360929012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.360934019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.360950947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.360972881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.360977888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.360990047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.361016035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.361022949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.361037016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.361047029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.361068010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.361073971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.361090899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.361102104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.361112118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.361123085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.361138105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.361141920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.361160994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.361175060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.361183882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.361191034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.361207008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.361208916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.361227989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.361241102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.361249924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.361255884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.361272097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.361289024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.361300945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.361311913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.361319065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.361356020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.714559078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.714591980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.714617014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.714637995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.714648962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.714658022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.714678049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.714687109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.714699984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.714714050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.714725018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.714735031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.714750051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.714773893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.714782000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.714798927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.714812994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.714823008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.714848042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.714852095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.714874029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.714878082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.714898109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.714900970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.714925051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.714931011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.714940071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.714976072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.723546982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.723586082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.723613977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.723639965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.723675013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.723681927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.723706007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.723715067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.723720074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.723737001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.723762989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.726519108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.726552010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.726579905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.726634026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.726651907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.726658106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.726670027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.726717949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.726773024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.726805925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.726835012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.726867914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.726895094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.726924896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.726933002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.726947069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.726953983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.726982117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.726983070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727009058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727041960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727046967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727051973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727072001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727078915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727102995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727108002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727138042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727160931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727201939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727202892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727231979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727235079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727252007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727262020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727288008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727289915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727304935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727318048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727338076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727348089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727376938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727380991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727395058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727411985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727435112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727442980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727469921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727473974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727489948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727499962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727529049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727531910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727545023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727560997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727591038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727610111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727621078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727628946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727638960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727673054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727689028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727714062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727729082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727745056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727772951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727802038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727830887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727848053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727864027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727870941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727884054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727904081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727921963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727931976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.727966070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727982998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.727983952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728019953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728049994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728076935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728081942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728106022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728112936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728135109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728151083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728162050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728172064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728190899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728198051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728219032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728219986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728239059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728252888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728271008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728290081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728317976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728329897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728352070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728353024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728384018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728391886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728411913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728418112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728440046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728441954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728467941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728471994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728494883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728506088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728523016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728535891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728559017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728564978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728595018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728600025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728612900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728626013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728651047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728653908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728682041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728684902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728713036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728713989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728730917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728741884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728763103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728770018 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728796959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728799105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728811979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728832006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728846073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728863001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728890896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728919029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728920937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728948116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728948116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728976011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.728982925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.728992939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729003906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729020119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729032040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729058981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729068041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729079962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729099035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729127884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729156017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729156971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729183912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729188919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729212046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729223967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729238987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729240894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729257107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729268074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729296923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729302883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729307890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729335070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729362965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729392052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729393005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729415894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729419947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729446888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729451895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729464054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729475021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729486942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729502916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729538918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729559898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729571104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729582071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729598999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729618073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729628086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729650974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729655981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729684114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729688883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729707956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729712009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729731083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729759932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729805946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729835033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729863882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729891062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729899883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729923010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729928017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729958057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729960918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.729980946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.729989052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.730047941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.732640982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.732672930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.732701063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.732754946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.732770920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.732775927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.732806921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.732840061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.732865095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.732872963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.732880116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.732916117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.732916117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.732932091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.732945919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.732975006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.732990026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733004093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733016014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733020067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733047009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733078957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733093977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733117104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733129978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733139038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733161926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733198881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733220100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733234882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733253956 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733277082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733304977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733305931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733333111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733352900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733367920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733371019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733403921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733403921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733419895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733439922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733450890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733472109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733484030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733499050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733516932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733526945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733537912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733555079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733582020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733608961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733619928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733640909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733647108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733675003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733680964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733702898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733717918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733719110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733753920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733782053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733787060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733805895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733828068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733861923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733870983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733872890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733901978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733931065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733952999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.733972073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.733987093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.734006882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.734026909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.734035969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.734065056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.734066963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.734091043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.734101057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.734102011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.734142065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.734157085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.734189034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.734199047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.734220028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.734240055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.734247923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.734277964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:05.734282970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.734292984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:05.734344959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.086095095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086139917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086169958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086210012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086249113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086287975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086327076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086364985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086395025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086440086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086479902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086519003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086558104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086606026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086664915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086723089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086770058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086817026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086841106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.086859941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086899996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.086988926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.087085009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.095179081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.095231056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.095276117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.095314026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.095338106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.095355034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.095387936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.095392942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.095479012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.098543882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.098587990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.098685980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.098798990 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.102271080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.102328062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.102376938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.102408886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.102430105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.102484941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.102500916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.102541924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.102581024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.102597952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.102634907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.102677107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.102679968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.102732897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.102768898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.102791071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.102813959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.102845907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.102885962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.102904081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.102946997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.102977037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.103029966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.103035927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.103070021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.103096008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.103159904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.103184938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.103197098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.103260994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.103277922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.103321075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.103380919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.103360891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.103425980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.103471041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.103518009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.103565931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.103616953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.103625059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.103683949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.103722095 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.103739023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.103790045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.103791952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.103849888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.103863955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.103910923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.103956938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.103969097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104026079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104036093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.104054928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.104087114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104156017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104156971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.104218006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104244947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.104268074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104309082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104371071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.104372025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104425907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104468107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104475975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.104521990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104546070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.104567051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.104582071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104629040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.104638100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104691029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104716063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.104753017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104803085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.104813099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104872942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104886055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.104908943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.104933023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104985952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.104994059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.105045080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.105082035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.105098963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.105104923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.105168104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.105206013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.105222940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.105263948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.105277061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.105323076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.105366945 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.105442047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.106668949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.106724024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.106762886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.106790066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.106817007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.106877089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.106920958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.106926918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.106940031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.106982946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.107038975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.107048035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.107104063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.107168913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.107187986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.107234955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.107244015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.107291937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.107342005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.107346058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.107398033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.107436895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.107449055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.107506037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.107522011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.107567072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.107608080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.107624054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.107681036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.107697010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.107737064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.107754946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.107799053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.107839108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.107851982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.107911110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.107911110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.107954979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.107973099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.108016968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.108026028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.108066082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.108083010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.108125925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.108181953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.108269930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.108325958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.108364105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.108412027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.108421087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.108474016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.108484030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.108536959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.108577967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.108592033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.108598948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.108666897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.108690977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.108726978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.108769894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.108815908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.108820915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.108839035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.108881950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.108927965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.108936071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.108989954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.109031916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.109041929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.109086990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.109105110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.109143972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.109194040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.109195948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.109249115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.109282017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.109302044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.109335899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.109358072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.109419107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.109433889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.109457016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.109498978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.109519005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.109561920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.109565973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.109615088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.109653950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.109694004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.109730959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.109747887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.109766960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.109812021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.109819889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.109875917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.109914064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.109951973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.109977961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.110012054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.110029936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.110070944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.110081911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.110131979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.110174894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.110183954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.110234976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.110239983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.110280991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.110292912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.110326052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.110351086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.110369921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.110413074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.110414982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.110469103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.110502958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.110521078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.110563040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.110584021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.110610962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.110661030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.459450960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459495068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459520102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459539890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.459542990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459566116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459573984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.459589958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459613085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459613085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.459635973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459640026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.459661961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459672928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.459686041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459690094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.459708929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459713936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.459732056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459737062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.459753990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459764004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.459775925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459784985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.459800005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459820032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.459822893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459832907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.459849119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459850073 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.459867001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459883928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459899902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459917068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459940910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.459944963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.459986925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.460573912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.460606098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.460701942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.460727930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.468939066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.468971968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.468993902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.469017982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.469022036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.469042063 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.469053984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.469064951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.469088078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.469130993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.472084045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.472119093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.472141981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.472167969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.472197056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.472229958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.476862907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.476897955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.476918936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.476938963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.476958990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.476983070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.476990938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477003098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477024078 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477032900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477042913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477052927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477062941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477072954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477082014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477102041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477118015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477121115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477144957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477149963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477165937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477168083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477185965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477206945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477214098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477226973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477247000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477264881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477267027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477286100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477287054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477297068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477308989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477323055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477334023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477355003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477358103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477376938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477390051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477397919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477418900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477437973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477443933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477464914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477479935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477488995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477495909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477511883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477519035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477534056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477535963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477540970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477559090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477581978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477588892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477605104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477616072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477627993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477648973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477668047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477691889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477690935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477709055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477719069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477744102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477746964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477766991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.477770090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477794886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.477817059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.481982946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482021093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482044935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482064962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482088089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482109070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482119083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482127905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482146978 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482151985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482156038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482162952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482177019 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482189894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482207060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482212067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482223988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482234955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482255936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482258081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482284069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482300043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482306004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482328892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482346058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482355118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482356071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482381105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482394934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482402086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482410908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482418060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482428074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482465982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482467890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482510090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482532978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482563972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482584953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482588053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482601881 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482611895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482620955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482635975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482649088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482659101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482660055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482666016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482681036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482686043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482705116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482722044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482741117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482743025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482762098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482768059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482786894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482793093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482840061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482856035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482862949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482886076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482909918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482925892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482928038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482942104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482952118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482975006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.482981920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.482997894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.483014107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.483022928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.483046055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.483064890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.483074903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.483081102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.483098030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.483143091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.483143091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.483155966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.483249903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.854513884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.854566097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.854628086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.854630947 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.854661942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.854670048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.854682922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.854727030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.854779959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.854794979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.854818106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.854850054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.854857922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.854866028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.854896069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.854916096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.854943991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.854945898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.854986906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.855003119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.855024099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.855067968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.855081081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.855106115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.855182886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.855225086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.855262995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.855285883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.855300903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.855307102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.855339050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.855355024 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.855387926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.855408907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.855449915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.855489016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.855515957 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.855528116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.855540991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.855566978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.855582952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.855602980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.855642080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.855662107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.855691910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.855860949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.856220961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.856306076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.856349945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.856400967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.856446028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.856461048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.856467009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.856518984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.856537104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.856571913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.856579065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.856618881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.856636047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.856677055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.856683969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.856729984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.856731892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.856786013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.856790066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.856841087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.856846094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.856884956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.856925964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.856972933 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.856982946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.856988907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.857028008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857068062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857089996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.857116938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857168913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857178926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.857227087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857238054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.857284069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857328892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857347965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.857378006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857417107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857445955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.857474089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857505083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857542992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.857563019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.857564926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857611895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857650042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857680082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.857696056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.857707024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857755899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857767105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.857815981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857819080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.857880116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.857888937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857944965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.857947111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.857996941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858002901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.858058929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.858059883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858107090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858122110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.858163118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858201027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.858210087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.858237982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858283043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858339071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858341932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.858402014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858445883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858467102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.858501911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858505011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.858555079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858601093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858617067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.858647108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858689070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858710051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.858752012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858757973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.858798027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858838081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858870029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.858896017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.858897924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.858948946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859006882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859021902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.859055042 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859096050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859132051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.859148026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.859181881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859222889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859275103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859287977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.859323978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859361887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859386921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.859417915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859420061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.859476089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859515905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859536886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.859570980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859591961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.859630108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859633923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.859678030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859688044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.859730005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859740973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.859781027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859791994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.859832048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859842062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.859884024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859893084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.859936953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859951973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.859996080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.859997034 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.860050917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.860054970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.860109091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.860126019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.860169888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.860203028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.860229969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.860244036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.860282898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.860296011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.860336065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.860342026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.860385895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.860413074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.860440969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.860483885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.860539913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:06.860539913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.860560894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:06.860622883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.233325005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.233352900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.233375072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.233397007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.233418941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.233431101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.233443022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.233469009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.233493090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.233499050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.233514071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.233531952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.233537912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.233558893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.233594894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.233886957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.233907938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.233926058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.233942032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.233947992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.233966112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.233971119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234008074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234025955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234034061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234065056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234081984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234090090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234102011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234124899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234146118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234158039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234169006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234188080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234191895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234217882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234225035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234241009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234245062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234262943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234273911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234286070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234304905 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234308958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234321117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234345913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234347105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234370947 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234373093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234388113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234396935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234415054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234440088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234451056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234462976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234479904 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234484911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234508038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234518051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234530926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234541893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234551907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234576941 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234580994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234603882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234611988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234626055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234651089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234656096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234674931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234695911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234711885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234714985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234741926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234750032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234759092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234764099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234781981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234786987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234790087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234814882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234813929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234827995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234838963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234842062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234862089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234883070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234899044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234900951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234906912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234914064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234921932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234922886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234944105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234955072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234966040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234977007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.234987974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.234997988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235011101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235033989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235057116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235078096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235079050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235086918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235109091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235142946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235153913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235162973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235163927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235187054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235202074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235218048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235234022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235251904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235274076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235297918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235311031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235321999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235322952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235331059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235336065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235341072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235344887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235347033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235348940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235352993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235371113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235394001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235403061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235415936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235470057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235477924 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235480070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235502958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235503912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235527039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235541105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235553980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235573053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235591888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235594988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235614061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235630989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235637903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235660076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235667944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235682011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235682964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235702991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235703945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235728025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235743999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235743046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235765934 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235766888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235773087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235786915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235809088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235820055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235829115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235847950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235851049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235866070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235874891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235888958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235891104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235909939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235927105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235927105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235941887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235946894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235963106 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235977888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.235985041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.235991955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.236005068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.236011982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.236028910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.236047983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.236049891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.236069918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.236088991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.236099958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.236105919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.236129999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.236141920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.236150026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.236154079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.236172915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.236181974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.236195087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.236202002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.236217022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.236222982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.236241102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.236247063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.236269951 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.236284018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.604429007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.604464054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.604489088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.604511023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.604533911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.604552984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.604558945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.604604006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.604617119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.604679108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.605082989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.605520010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.608319044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.608347893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.608369112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.608392000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.608424902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.608432055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.608464003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.608478069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.608491898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.608504057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.608519077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.608539104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.608541965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.608558893 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.608571053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.608576059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.608592987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.608613968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.608630896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.608653069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.608660936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.608678102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.608688116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.608722925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.608792067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609257936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609287024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609307051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609329939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609329939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609352112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609371901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609383106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609395981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609416008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609430075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609440088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609450102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609462976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609467983 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609503984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609508038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609539032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609543085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609559059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609580994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609590054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609606028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609628916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609651089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609673023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609698057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609713078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609723091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609755993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609771013 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609777927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609808922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609808922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609838009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609843016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609864950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609868050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609886885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609893084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609911919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609913111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609936953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609958887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609962940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609971046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.609981060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.609986067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610008955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610018015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610035896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610050917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610059023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610074043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610097885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610107899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610124111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610140085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610150099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610181093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610213995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610215902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610220909 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610249996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610260963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610275030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610282898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610299110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610313892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610321999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610347986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610348940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610354900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610373974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610383987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610410929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610416889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610440969 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610441923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610471010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610476971 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610502005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610527992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610528946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610533953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610546112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610555887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610578060 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610579014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610599041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610624075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610636950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610661030 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610665083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610680103 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610682011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610713005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610726118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610733986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610749960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610774040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610776901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610820055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610831022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610835075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610852957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610872030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610893011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610902071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610919952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610943079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610945940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.610965014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.610989094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611004114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611018896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611042023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611044884 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611062050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611073017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611094952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611100912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611131907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611140013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611167908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611170053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611183882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611200094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611227989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611228943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611253023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611258030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611274004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611283064 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611300945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611304045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611325026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611346960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611356020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611371994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611381054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611398935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611401081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611433029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611438036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611454964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611457109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.611511946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611515045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.611792088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.976491928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.976538897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.976562023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.976583958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.976591110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.976605892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.976620913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.976666927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.980878115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.980920076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.980943918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.980957031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.980966091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.980993986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.980993986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.981018066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.981026888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.981040001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.981062889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.981065035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.981084108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.981102943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.981106043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.981127977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.981127977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.981163025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.981163025 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.981185913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.981198072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.981211901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.981235027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.981236935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.981260061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.981281996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.981292009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.981296062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.981312990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.981340885 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.981380939 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983138084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983177900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983202934 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983222008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983232975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983241081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983244896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983263016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983287096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983294010 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983308077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983325958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983325958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983350039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983370066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983372927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983403921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983407021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983428955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983434916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983457088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983458996 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983483076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983484030 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983506918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983529091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983530045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983560085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983561993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983582973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983587980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983611107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983614922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983633041 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983638048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983659029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983661890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983681917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983685970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983720064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983725071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983743906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983756065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983766079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983767033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983788967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983812094 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983814955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983822107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983850002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983892918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983918905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983925104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983942032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.983968019 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983973980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.983995914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.984177113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.984230995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.984574080 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.984608889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.984627008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.984652996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.984657049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.984678984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.984699965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.984700918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.984719992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.984721899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.984741926 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.984745026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.984762907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.984764099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.984786987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.984791040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.984807968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.984816074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.984828949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.984838009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.984849930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.984862089 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.984879017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.984879971 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.984899044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.984905005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.984921932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.984925032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.984941959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.984952927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.984971046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.984992027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985131979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985166073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985183001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985193968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985208035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985219002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985227108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985240936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985263109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985264063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985285044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985291004 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985306978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985310078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985328913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985336065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985349894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985358000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985375881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985378027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985400915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985410929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985419989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985435009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985457897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985459089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985480070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985482931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985501051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985507011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985526085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985527992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985544920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985563040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985575914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985585928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985605955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985616922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985630989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985647917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985655069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985676050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985683918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985704899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985713959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985734940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985743046 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985757113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985776901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985778093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985799074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985801935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985825062 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985826015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985838890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985855103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985862970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985883951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985896111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985905886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985927105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985928059 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985949993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985970974 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985975981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.985975981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.985989094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.986011028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.986017942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.986033916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.986054897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.986054897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.986076117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.986078024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.986093044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.986100912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:07.986113071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:07.986146927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.349762917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.349817991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.349855900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.349860907 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.349879980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.349899054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.349910021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.349951982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.353527069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.353569031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.353600025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.353631020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.353662014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.353691101 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.353722095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.353750944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.353781939 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.353810072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.353841066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.353869915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.353902102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.353931904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.353961945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.353991032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.354021072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.354048967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.354079962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.354110003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.355133057 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.358294964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.358349085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.358354092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.358393908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.358427048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.358433008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.358448029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.358472109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.358506918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.358520031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.358556032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.358558893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.358565092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.358597040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.358607054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.358634949 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.358649969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.358671904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.358683109 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.358711004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.358714104 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.358750105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.358767033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.358792067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359244108 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359287024 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359299898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359323025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359333992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359361887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359364033 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359400034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359402895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359437943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359448910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359476089 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359482050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359515905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359529972 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359560966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359565973 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359607935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359621048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359646082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359661102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359688997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359694958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359726906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359733105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359774113 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359776020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359824896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359826088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359867096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359874964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359905958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359910011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359944105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359954119 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.359982014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.359989882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360019922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360029936 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360058069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360069036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360096931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360110044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360146046 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360158920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360191107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360196114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360229015 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360232115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360268116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360270977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360306025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360336065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360344887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360348940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360383034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360387087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360420942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360421896 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360466003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360467911 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360508919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360510111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360553980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360559940 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360593081 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360599041 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360630989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360631943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360668898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360687017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360712051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360718012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360749960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360760927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360793114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360799074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360842943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360856056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360894918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360901117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360932112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360934973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.360971928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.360977888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361010075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361037016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361054897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361057997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361100912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361105919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361138105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361150980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361177921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361190081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361217976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361233950 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361253977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361267090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361291885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361295938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361329079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361341000 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361377954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361377954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361422062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361426115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361459017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361462116 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361498117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361509085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361536980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361548901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361573935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361593962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361613035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361627102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361650944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361653090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361696005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361699104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361741066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361747026 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361778975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361804008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361818075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361834049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361856937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361881018 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361893892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361903906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361931086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361942053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.361968994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.361982107 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.362015009 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.362015963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.362071991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.362078905 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.362121105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.362126112 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.362159014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.362160921 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.362196922 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.362204075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.362235069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.362245083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.362271070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.362288952 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.362309933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.362329960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.362349987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.362371922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.362401009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.362404108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.362448931 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.722557068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.722589970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.722613096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.722635031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.722650051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.722677946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.722686052 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.728084087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728110075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728122950 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728135109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728147984 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728163958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728176117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728188038 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728199959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728212118 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728224039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728235960 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728238106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.728272915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.728277922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.728281975 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.728296995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.728364944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728394032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728405952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728419065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728430986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728442907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728446960 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.728455067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728461027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.728467941 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728481054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728493929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.728535891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.728584051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.728590012 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.731882095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.731915951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.732043028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.732069016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.732095957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.732109070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.732120037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.732144117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.732147932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.732167006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.732176065 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.732192039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.732208967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.732217073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.732239962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.732247114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.732275963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.732312918 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.732316017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.732336044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.732366085 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.732389927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.735335112 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.735362053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.735465050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.735879898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.735908031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.735949993 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.735975981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.735977888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736000061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736001968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736006021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736022949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736026049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736043930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736051083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736064911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736077070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736099005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736102104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736155987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736157894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736174107 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736188889 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736207962 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736207008 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736222029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736228943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736252069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736263037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736274004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736282110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736294985 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736311913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736315012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736323118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736334085 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736355066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736355066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736366987 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736375093 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736391068 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736394882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736406088 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736417055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736438990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736459970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736491919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736498117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736502886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736552954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736567020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736567974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736588001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736622095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736629963 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736645937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736645937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736654997 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736668110 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736690044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736704111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736712933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736722946 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736732006 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736737013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736757994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736762047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736782074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736795902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736804008 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736815929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736824989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736849070 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736860037 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736865997 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736884117 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736886978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736893892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736902952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736907005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736921072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736932993 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736938953 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736955881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736975908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.736975908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736989021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.736993074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737009048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737025023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737035036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737040043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737056017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737066031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737075090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737087965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737113953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737137079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737319946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737340927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737375975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737380981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737397909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737399101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737418890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737426043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737440109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737443924 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737458944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737467051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737481117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737484932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737500906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737508059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737520933 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737528086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737541914 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737549067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737566948 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737567902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737586975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737601042 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737607956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737617016 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737628937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737633944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737648964 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737662077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737664938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737679958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737682104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737699032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737708092 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737716913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737735033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737749100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737751961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737766027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737767935 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737788916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737807989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737823963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737839937 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737854958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:08.737873077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737901926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737943888 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737948895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:08.737953901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.093811035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.093869925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.093913078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.093957901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.099834919 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.099894047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.099946976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.099951029 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.099982977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.099992990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.099993944 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.100034952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.100059032 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.100071907 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.100094080 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.100116968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.100123882 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.100166082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.100181103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.100229979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.100234032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.100274086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.100310087 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.100327015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.100356102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.100364923 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.100416899 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.100428104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.100517035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.100565910 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.100579977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.100626945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.100667953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.100677013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.100749016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.100749969 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.100845098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.100883961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.100899935 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.100930929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.100949049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.101001978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.101053953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.101063967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.101105928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.101155043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.103517056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.103560925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.103588104 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.103615999 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.103622913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.103699923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.103713989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.103728056 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.103734016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.103765011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.103790045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.103807926 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.103837013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.103854895 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.103868961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.103874922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.103894949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.103897095 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.103923082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.103957891 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.103966951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.103970051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.103972912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.104001045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.104048014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.106306076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.106353045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.106367111 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.106436014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.107208014 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.107243061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.107270956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.107295036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.107302904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.107355118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.107359886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.107403040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.107788086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.107856035 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.107856989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.107932091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.107959986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.107980967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.107986927 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108006954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.108023882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108061075 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108088017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.108088970 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108108044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.108113050 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.108136892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108139992 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.108164072 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108196020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108217955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.108223915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108248949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.108262062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108275890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.108299017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108310938 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.108325005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108351946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108380079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108383894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.108406067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108437061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.108437061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108443022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.108474016 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108494043 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.108505964 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.108524084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.108921051 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108958006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.108983040 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.108985901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109025955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109049082 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109051943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109055996 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109077930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109092951 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109097958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109121084 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109139919 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109148026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109175920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109179020 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109203100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109204054 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109229088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109240055 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109261036 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109282017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109291077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109317064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109319925 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109343052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109354973 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109369040 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109379053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109395027 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109407902 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109421968 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109431028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109447956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109457970 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109479904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109481096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109508991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109508991 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109534979 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109536886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109560966 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109560966 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109587908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109586954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109606981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109622002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109630108 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109648943 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109673023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109673977 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109692097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109699965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109725952 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109749079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109757900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109795094 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109803915 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109821081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109846115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109854937 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109879017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109906912 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109932899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109944105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109958887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109965086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.109986067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.109997988 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.110030890 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.110030890 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.110058069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.110085011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.110086918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.110110998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.110116005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.110141039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.110153913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.110163927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.110187054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.110219955 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.110223055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.110246897 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.110270023 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.110289097 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.110318899 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.110346079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.110374928 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.110383034 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.110397100 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.110408068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.110429049 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.110449076 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.110470057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.110496044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.110507011 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.110533953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.110553026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.110569954 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.110660076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.466948986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.466994047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.467020988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.467042923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.467122078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.467175007 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.475003958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475038052 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475063086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475085974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475109100 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475151062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475174904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475204945 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475229025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475251913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475272894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475291967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.475295067 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475317001 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475320101 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.475326061 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.475330114 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.475333929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.475337982 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.475342989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475342989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.475366116 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475387096 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475408077 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475421906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.475430965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475438118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.475452900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475475073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475497961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475518942 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.475522995 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475541115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.475545883 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475547075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.475562096 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.475568056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.475651979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.475667953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.477688074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.477720022 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.477745056 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.477768898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.477791071 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.477813959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.477832079 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.477837086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.477850914 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.477860928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.477874994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.477884054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.477905989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.477915049 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.477927923 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.477952003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.477977037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.477979898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.477988958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.477998972 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.478035927 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.478090048 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.479984999 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.480005026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.480094910 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.480118036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.480452061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.480475903 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.480494976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.480520010 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.480556011 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.480588913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.480941057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.480967045 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481024027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.481290102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481314898 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481340885 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481363058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481379986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.481385946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481409073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481410980 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.481431961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481437922 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.481453896 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481476068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481481075 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.481498003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481523037 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481523991 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.481545925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481550932 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.481568098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481590033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481594086 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.481636047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.481805086 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481829882 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481852055 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481861115 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.481873989 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.481899977 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.481939077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.483381033 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483405113 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483441114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483464003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483493090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.483509064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483525038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.483530998 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.483530998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483555079 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483577013 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483577967 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.483599901 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483623981 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483645916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483671904 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483689070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.483705044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.483711004 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483733892 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.483737946 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483740091 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.483764887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483772039 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.483787060 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483808994 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.483808994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483834028 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483838081 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.483856916 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483875036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.483886957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483907938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483923912 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.483930111 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483954906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.483954906 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.483978987 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484000921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484008074 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484021902 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484040022 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484046936 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484069109 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484070063 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484091043 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484112978 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484132051 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484138012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484160900 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484173059 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484183073 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484193087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484205961 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484229088 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484236002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484251976 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484272957 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484282017 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484294891 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484306097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484319925 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484344006 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484350920 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484364986 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484386921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484395981 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484410048 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484417915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484431982 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484452963 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484463930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484473944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484499931 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484503031 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484523058 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484541893 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484544992 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484568119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484584093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484590054 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484606028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484612942 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484636068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484647036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484658003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484683990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484688044 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484707117 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.484714985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.484757900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.838835955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.838891029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.838928938 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.838962078 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.838988066 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.839006901 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.839063883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.849822998 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.849889994 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.849944115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.850007057 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.850048065 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.850056887 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.850097895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.850162029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.850197077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.850219965 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.850253105 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.850285053 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.850322962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.850326061 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.850372076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.850423098 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.850440025 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.850478888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.850538015 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.850544930 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.850591898 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.850632906 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.850670099 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.850719929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.850745916 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.850811958 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.850825071 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.850893974 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.850898027 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.850970984 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.850974083 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.851049900 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.851063967 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.851161003 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.851187944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.851267099 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.851281881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.851349115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.851378918 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.851453066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.851459980 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.851525068 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.851550102 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.851620913 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.852324009 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.852400064 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.852421045 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.852459908 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.852499962 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.852530956 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.852544069 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.852576017 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.852647066 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.852648020 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.852729082 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.852731943 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.852813959 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.852813959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.852895975 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.852900028 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.852974892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.852988958 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.853045940 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.853060961 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.853127003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.853151083 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.853197098 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.853261948 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.853288889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.853339911 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.853379965 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.853410959 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.853487968 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.853499889 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.853600979 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.854024887 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.854106903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.854119062 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.854199886 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.854213953 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.854254007 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.854285002 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.854340076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.854671955 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.854759932 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.854762077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.854856014 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.854865074 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.854948044 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.854952097 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.854991913 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.855032921 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.855063915 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.855072021 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.855113983 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.855153084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.855204105 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.855246067 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.855259895 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.855321884 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.855339050 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.855365038 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.855381012 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.855415106 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.855443954 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.855459929 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.855504990 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.855544090 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.855544090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.855580091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.855618000 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.855622053 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.855655909 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.855704069 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.855762005 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.855766058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.855811119 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.855830908 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.855885029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.855890989 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.855986118 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.857959032 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.857981920 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.857997894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858022928 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858055115 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858059883 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858078003 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858131886 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858138084 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858165026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858172894 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858198881 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858217001 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858230114 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858249903 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858268023 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858278036 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858292103 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858325005 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858329058 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858350039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858375072 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858376026 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858407021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858422995 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858444929 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858459949 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858467102 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858493090 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858508110 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858520031 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858556986 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858561039 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858596087 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858602047 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858628988 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858655930 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858659029 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858681917 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858681917 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858694077 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858701944 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858731985 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858733892 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858769894 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858776093 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858800888 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858813047 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858829021 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858839035 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858850002 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858869076 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858877897 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858900070 CEST	49741	80	192.168.2.4	220.189.197.2
Jun 14, 2021 06:23:09.858915091 CEST	80	49741	220.189.197.2	192.168.2.4
Jun 14, 2021 06:23:09.858936071 CEST	80	49741	220.189.197.2	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jun 14, 2021 06:22:25.616225958 CEST	192.168.2.4	8.8.8.8	0xd9fa	Standard query (0)	cdn-file-ssl-wan.ludashi.com	A (IP address)	IN (0x0001)
Jun 14, 2021 06:22:25.616941929 CEST	192.168.2.4	8.8.8.8	0x58cd	Standard query (0)	s.ludashi.com	A (IP address)	IN (0x0001)
Jun 14, 2021 06:22:28.886600018 CEST	192.168.2.4	8.8.8.8	0x89c4	Standard query (0)	cdn-file-ssl-pc.ludashi.com	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:09.979830027 CEST	192.168.2.4	8.8.8.8	0x9832	Standard query (0)	s.ludashi.com	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:09.986327887 CEST	192.168.2.4	8.8.8.8	0x409c	Standard query (0)	wan.ludashi.com	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:10.978832006 CEST	192.168.2.4	8.8.8.8	0x81fc	Standard query (0)	cdn-file.ludashi.com	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:15.455470085 CEST	192.168.2.4	8.8.8.8	0xa114	Standard query (0)	cdn-wan.ludashi.com	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:16.618495941 CEST	192.168.2.4	8.8.8.8	0x14b2	Standard query (0)	cdn-ssl-wan.ludashi.com	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:19.964750051 CEST	192.168.2.4	8.8.8.8	0xe343	Standard query (0)	i.ludashi.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jun 14, 2021 06:22:25.678467035 CEST	8.8.8.8	192.168.2.4	0x58cd	No error (0)	s.ludashi.com		47.117.76.6	A (IP address)	IN (0x0001)
Jun 14, 2021 06:22:25.681292057 CEST	8.8.8.8	192.168.2.4	0xd9fa	No error (0)	cdn-file-ssl-wan.ludashi.com	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		CNAME (Canonical name)	IN (0x0001)
Jun 14, 2021 06:22:25.681292057 CEST	8.8.8.8	192.168.2.4	0xd9fa	No error (0)	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		115.231.152.244	A (IP address)	IN (0x0001)
Jun 14, 2021 06:22:25.681292057 CEST	8.8.8.8	192.168.2.4	0xd9fa	No error (0)	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		115.231.152.239	A (IP address)	IN (0x0001)
Jun 14, 2021 06:22:25.681292057 CEST	8.8.8.8	192.168.2.4	0xd9fa	No error (0)	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		115.231.152.243	A (IP address)	IN (0x0001)
Jun 14, 2021 06:22:25.681292057 CEST	8.8.8.8	192.168.2.4	0xd9fa	No error (0)	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		115.231.152.241	A (IP address)	IN (0x0001)
Jun 14, 2021 06:22:25.681292057 CEST	8.8.8.8	192.168.2.4	0xd9fa	No error (0)	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		115.231.152.238	A (IP address)	IN (0x0001)
Jun 14, 2021 06:22:25.681292057 CEST	8.8.8.8	192.168.2.4	0xd9fa	No error (0)	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		115.231.152.242	A (IP address)	IN (0x0001)
Jun 14, 2021 06:22:25.681292057 CEST	8.8.8.8	192.168.2.4	0xd9fa	No error (0)	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		115.231.152.248	A (IP address)	IN (0x0001)
Jun 14, 2021 06:22:25.681292057 CEST	8.8.8.8	192.168.2.4	0xd9fa	No error (0)	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		115.231.152.240	A (IP address)	IN (0x0001)
Jun 14, 2021 06:22:28.947287083 CEST	8.8.8.8	192.168.2.4	0x89c4	No error (0)	cdn-file-ssl-pc.ludashi.com	cdn-file-ssl-pc.ludashi.com.m.alikunlun.com		CNAME (Canonical name)	IN (0x0001)
Jun 14, 2021 06:22:28.947287083 CEST	8.8.8.8	192.168.2.4	0x89c4	No error (0)	cdn-file-ssl-pc.ludashi.com.m.alikunlun.com		220.189.197.2	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:10.041359901 CEST	8.8.8.8	192.168.2.4	0x9832	No error (0)	s.ludashi.com		47.117.70.170	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:10.046730995 CEST	8.8.8.8	192.168.2.4	0x409c	No error (0)	wan.ludashi.com		139.129.105.182	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:11.339756966 CEST	8.8.8.8	192.168.2.4	0x81fc	No error (0)	cdn-file.ludashi.com	cdn-file.ludashi.com.m.alikunlun.net		CNAME (Canonical name)	IN (0x0001)
Jun 14, 2021 06:24:11.339756966 CEST	8.8.8.8	192.168.2.4	0x81fc	No error (0)	cdn-file.ludashi.com.m.alikunlun.net		101.227.25.228	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:11.339756966 CEST	8.8.8.8	192.168.2.4	0x81fc	No error (0)	cdn-file.ludashi.com.m.alikunlun.net		101.227.25.231	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:11.339756966 CEST	8.8.8.8	192.168.2.4	0x81fc	No error (0)	cdn-file.ludashi.com.m.alikunlun.net		101.227.25.212	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:11.339756966 CEST	8.8.8.8	192.168.2.4	0x81fc	No error (0)	cdn-file.ludashi.com.m.alikunlun.net		101.227.25.209	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:11.339756966 CEST	8.8.8.8	192.168.2.4	0x81fc	No error (0)	cdn-file.ludashi.com.m.alikunlun.net		101.227.25.210	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:11.339756966 CEST	8.8.8.8	192.168.2.4	0x81fc	No error (0)	cdn-file.ludashi.com.m.alikunlun.net		101.227.25.229	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:11.339756966 CEST	8.8.8.8	192.168.2.4	0x81fc	No error (0)	cdn-file.ludashi.com.m.alikunlun.net		101.227.25.230	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:11.339756966 CEST	8.8.8.8	192.168.2.4	0x81fc	No error (0)	cdn-file.ludashi.com.m.alikunlun.net		101.227.25.211	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:15.823621035 CEST	8.8.8.8	192.168.2.4	0xa114	No error (0)	cdn-wan.ludashi.com	cdn-wan.ludashi.com.w.kunlunle.com		CNAME (Canonical name)	IN (0x0001)
Jun 14, 2021 06:24:15.823621035 CEST	8.8.8.8	192.168.2.4	0xa114	No error (0)	cdn-wan.ludashi.com.w.kunlunle.com		122.225.67.180	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:15.823621035 CEST	8.8.8.8	192.168.2.4	0xa114	No error (0)	cdn-wan.ludashi.com.w.kunlunle.com		122.225.67.189	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:15.823621035 CEST	8.8.8.8	192.168.2.4	0xa114	No error (0)	cdn-wan.ludashi.com.w.kunlunle.com		122.225.67.190	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:15.823621035 CEST	8.8.8.8	192.168.2.4	0xa114	No error (0)	cdn-wan.ludashi.com.w.kunlunle.com		122.225.67.191	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:15.823621035 CEST	8.8.8.8	192.168.2.4	0xa114	No error (0)	cdn-wan.ludashi.com.w.kunlunle.com		122.225.67.192	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:15.823621035 CEST	8.8.8.8	192.168.2.4	0xa114	No error (0)	cdn-wan.ludashi.com.w.kunlunle.com		122.225.67.193	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:15.823621035 CEST	8.8.8.8	192.168.2.4	0xa114	No error (0)	cdn-wan.ludashi.com.w.kunlunle.com		122.225.67.170	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:15.823621035 CEST	8.8.8.8	192.168.2.4	0xa114	No error (0)	cdn-wan.ludashi.com.w.kunlunle.com		122.225.67.179	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:16.683994055 CEST	8.8.8.8	192.168.2.4	0x14b2	No error (0)	cdn-ssl-wan.ludashi.com	cdn-ssl-wan.ludashi.com.m.alikunlun.com		CNAME (Canonical name)	IN (0x0001)
Jun 14, 2021 06:24:16.683994055 CEST	8.8.8.8	192.168.2.4	0x14b2	No error (0)	cdn-ssl-wan.ludashi.com.m.alikunlun.com		115.238.192.239	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:16.683994055 CEST	8.8.8.8	192.168.2.4	0x14b2	No error (0)	cdn-ssl-wan.ludashi.com.m.alikunlun.com		115.238.192.244	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:16.683994055 CEST	8.8.8.8	192.168.2.4	0x14b2	No error (0)	cdn-ssl-wan.ludashi.com.m.alikunlun.com		115.238.192.242	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:16.683994055 CEST	8.8.8.8	192.168.2.4	0x14b2	No error (0)	cdn-ssl-wan.ludashi.com.m.alikunlun.com		115.238.192.243	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:16.683994055 CEST	8.8.8.8	192.168.2.4	0x14b2	No error (0)	cdn-ssl-wan.ludashi.com.m.alikunlun.com		115.238.192.248	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:16.683994055 CEST	8.8.8.8	192.168.2.4	0x14b2	No error (0)	cdn-ssl-wan.ludashi.com.m.alikunlun.com		115.238.192.240	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:16.683994055 CEST	8.8.8.8	192.168.2.4	0x14b2	No error (0)	cdn-ssl-wan.ludashi.com.m.alikunlun.com		115.238.192.241	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:16.683994055 CEST	8.8.8.8	192.168.2.4	0x14b2	No error (0)	cdn-ssl-wan.ludashi.com.m.alikunlun.com		115.238.192.238	A (IP address)	IN (0x0001)
Jun 14, 2021 06:24:20.028738976 CEST	8.8.8.8	192.168.2.4	0xe343	No error (0)	i.ludashi.com		120.27.82.56	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

s.ludashi.com

cdn-file-ssl-wan.ludashi.com

cdn-file-ssl-pc.ludashi.com

wan.ludashi.com

cdn-file.ludashi.com

cdn-wan.ludashi.com

i.ludashi.com

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: UM6rAJhKEq.exe PID: 6704 Parent PID: 5804

General

Start time:	06:22:23
Start date:	14/06/2021
Path:	C:\Users\user\Desktop\UM6rAJhKEq.exe
Wow64 process (32bit):	true
Commandline:	'C:\Users\user\Desktop\UM6rAJhKEq.exe'
Imagebase:	0xa40000
File size:	3826088 bytes
MD5 hash:	043662A4B5E44EB83CEC615F2A519906
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: smy.exe PID: 4484 Parent PID: 6704

General

Start time:	06:24:07
Start date:	14/06/2021
Path:	C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe
Wow64 process (32bit):	true
Commandline:	'C:\Users\user\AppData\Roaming\WdGame\smy\smy.exe'
Imagebase:	0x1f0000
File size:	3826088 bytes
MD5 hash:	043662A4B5E44EB83CEC615F2A519906
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low

Chronological Activities

Disassembly

Code Analysis

Reset < >

Analysis Process: UM6rAJhKEq.exe PID: 6704 Parent PID: 5804 UM6rAJhKEq.exeCOMMON

Executed Functions

Function 00A88E20, Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 164
encryptionCOMMON

Download Yara Rule

C-Code - Quality: 72%

			E00A88E20(void* __ebx, void* __edi, void* __esi, WCHAR* _a4) {
				long _v8;
				signed int _v12;
				char _v20;
				intOrPtr _v28;
				signed int _v32;
				char _v1056;
				intOrPtr _v1060;
				intOrPtr _v1064;
				intOrPtr _v1068;
				struct _EXCEPTION_POINTERS _v1072;
				struct _OSVERSIONINFOW _v1356;
				long _v1360;
				intOrPtr _v1364;
				long _v1368;
				long _v1372;
				intOrPtr _v1376;
				char* _v1380;
				intOrPtr _v1384;
				long _v1388;
				intOrPtr _v1392;
				long _v1396;
				long _v1400;
				void _v1404;
				long _v1408;
				long _v1412;
				WCHAR* _v1416;
				char _v1420;
				intOrPtr _v1424;
				signed int _t60;
				signed int _t61;
				int _t65;
				long _t75;
				intOrPtr _t82;
				intOrPtr _t83;
				intOrPtr _t84;
				intOrPtr* _t85;
				intOrPtr _t86;
				char* _t89;
				intOrPtr* _t100;
				long _t104;
				WCHAR* _t106;
				intOrPtr _t109;
				signed int _t110;
				void* _t111;
				intOrPtr _t112;
				void* _t113;

				_push(0xfffffffe);
				_push(0xb63258);
				_push( &M00AF5140);
				_push( *[fs:0x0]);
				_t112 = _t111 - 0x57c;
				_t60 =  *0xb6aa7c; // 0x5cc80e5b
				_v12 = _v12 ^ _t60;
				_t61 = _t60 ^ _t110;
				_v32 = _t61;
				_push(__edi);
				_push(_t61);
				 *[fs:0x0] =  &_v20;
				_v28 = _t112;
				_t106 = _a4;
				if(_t106 == 0) {
					L7:
					L8:
					 *[fs:0x0] = _v20;
					return E00AE4BF8(_v32 ^ _t110);
				}
				_t65 = PathFileExistsW(_t106); // executed
				if(_t65 == 0) {
					goto L7;
				}
				E00AF4C50(__edi,  &(_v1356.dwMajorVersion), 0, 0x118);
				_t113 = _t112 + 0xc;
				_v1356.dwOSVersionInfoSize = 0x11c;
				GetVersionExW( &_v1356);
				if(_v1356.dwMajorVersion >= 6) {
					_v1420 = 0x10;
					_v1416 = _t106;
					_v1412 = 0;
					_v1408 = 0;
					_v1072 = 0xaac56b;
					_v1068 = 0x11d0cd44;
					_v1064 = 0xc000c28c;
					_v1060 = 0xee95c24f;
					_v1404 = 0x30;
					_v1400 = 0;
					_v1396 = 0;
					_v1392 = 2;
					_v1388 = 0;
					_v1384 = 1;
					_v1376 = 1;
					_v1372 = 0;
					_v1368 = 0;
					_v1364 = 0x1080;
					_v1360 = 0;
					_v1380 =  &_v1420;
					_t104 = 0;
					_v8 = 0;
					_t75 = WinVerifyTrust(0,  &_v1072,  &_v1404); // executed
					if(_t75 == 0 || _t75 == 0x800b0101) {
						_push(_v1372);
						L00AF356F();
						if(_t75 != 0 &&  *((intOrPtr*)(_t75 + 0x40)) > 0) {
							_t82 =  *((intOrPtr*)(_t75 + 0x44));
							if(_t82 != 0) {
								_t83 =  *((intOrPtr*)(_t82 + 0x28));
								if(_t83 != 0) {
									_t100 =  *((intOrPtr*)(_t83 + 0x10));
									if(_t100 != 0 &&  *((intOrPtr*)(_t83 + 0xc)) > 0) {
										_t84 =  *_t100;
										if(_t84 != 0 &&  *((intOrPtr*)(_t84 + 0xc)) > 0) {
											_t85 =  *((intOrPtr*)(_t84 + 0x10));
											if(_t85 != 0) {
												_t86 =  *_t85;
												if(_t86 != 0) {
													_t109 =  *((intOrPtr*)(_t86 + 4));
													if(_t109 != 0) {
														E00AF4C50(_t104,  &_v1056, 0, 0x400);
														_t113 = _t113 + 0xc;
														_t89 =  &_v1056;
														__imp__CertGetNameStringW(_t109, 4, 0, 0, _t89, 0x200);
														if(_t89 - 1 <= 0x1fe) {
															E00A890E0( &_v1056);
															_t113 = _t113 + 4;
															_v1424 = _t104;
														}
													}
												}
											}
										}
									}
								}
							}
						}
						E00AF4C50(_t104,  &_v1404, 0, 0x30);
						_v1404 = 0x30;
						_v1376 = 2;
						WinVerifyTrust(0,  &_v1072,  &_v1404);
						_v8 = 0xfffffffe;
						goto L8;
					} else {
						_v8 = 0xfffffffe;
						goto L7;
					}
				} else {
					goto L8;
				}
			}

0x00a88e23
0x00a88e25
0x00a88e2a
0x00a88e35
0x00a88e36
0x00a88e3c
0x00a88e41
0x00a88e44
0x00a88e46
0x00a88e4b
0x00a88e4c
0x00a88e50
0x00a88e56
0x00a88e59
0x00a88e5e
0x00a88f93
0x00a88f95
0x00a88f98
0x00a88fb0
0x00a88fb0
0x00a88e65
0x00a88e6d
0x00000000
0x00000000
0x00a88e81
0x00a88e86
0x00a88e89
0x00a88e9a
0x00a88ea7
0x00a88eb3
0x00a88ebd
0x00a88ec3
0x00a88ecd
0x00a88ed7
0x00a88ee1
0x00a88eeb
0x00a88ef5
0x00a88f01
0x00a88f0b
0x00a88f11
0x00a88f17
0x00a88f21
0x00a88f27
0x00a88f31
0x00a88f3b
0x00a88f41
0x00a88f4c
0x00a88f52
0x00a88f62
0x00a88f68
0x00a88f6a
0x00a88f7c
0x00a88f83
0x00a88fb1
0x00a88fb7
0x00a88fbe
0x00a88fce
0x00a88fd3
0x00a88fd9
0x00a88fde
0x00a88fe4
0x00a88fe9
0x00a88ff1
0x00a88ff5
0x00a88ffd
0x00a89002
0x00a89004
0x00a89008
0x00a8900a
0x00a8900f
0x00a8901f
0x00a89024
0x00a8902c
0x00a8903a
0x00a89046
0x00a8904f
0x00a89054
0x00a89061
0x00a89061
0x00a89046
0x00a8900f
0x00a89008
0x00a89002
0x00a88ff5
0x00a88fe9
0x00a88fde
0x00a88fd3
0x00a89078
0x00a89080
0x00a89090
0x00a890aa
0x00a890af
0x00000000
0x00a88f8c
0x00a88f8c
0x00000000
0x00a88f8c
0x00a88ea9
0x00000000
0x00a88ea9

APIs

PathFileExistsW.SHLWAPI(-00000080,5CC80E5B,000000FF,00000001,00000000), ref: 00A88E65
GetVersionExW.KERNEL32(0000011C), ref: 00A88E9A
WinVerifyTrust.WINTRUST(00000000,00AAC56B,00000030), ref: 00A88F7C
WTHelperProvDataFromStateData.WINTRUST(?,00000000,00AAC56B,00000030), ref: 00A88FB7
CertGetNameStringW.CRYPT32(00000001,00000004,00000000,00000000,?,00000200), ref: 00A8903A
WinVerifyTrust.WINTRUST(00000000,00AAC56B,00000030,00000000,00AAC56B,00000030), ref: 00A890AA

Strings

0, xrefs: 00A89080

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: DataTrustVerify$CertExistsFileFromHelperNamePathProvStateStringVersion
String ID: 0
API String ID: 131157933-4108050209
Opcode ID: 2ddc7ca196f955bd964a0d8d851636a59320bc936ce62bf8c4d34741901b938d
Instruction ID: 479c38a6e704cb0d8e0e08268850effd9b9c5f535dd3f008fa112b9deac1554d
Opcode Fuzzy Hash: 2ddc7ca196f955bd964a0d8d851636a59320bc936ce62bf8c4d34741901b938d
Instruction Fuzzy Hash: FC615CB1E00B189FEB20DF65DC45BEBB7B8AB04705F4440E9E609EB281DB759A84CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00A72180, Relevance: 6.1, APIs: 4, Instructions: 72COMMON

Download Yara Rule

APIs

FindResourceW.KERNEL32(?,00000000,00A54760,?,00A4D581,?,?,00A54760,00000000,?,?), ref: 00A72192
SizeofResource.KERNEL32(?,00000000,?,00A4D581,?,?,00A54760,00000000,?,?), ref: 00A721A0
LoadResource.KERNEL32(?,00000000,?,00A4D581,?,?,00A54760,00000000,?,?), ref: 00A721AE
LockResource.KERNEL32(00000000,?,00A4D581,?,?,00A54760,00000000,?,?), ref: 00A721B9

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Resource$FindLoadLockSizeof
String ID:
API String ID: 3473537107-0
Opcode ID: 1ce24e0ab189917572847adbe7bae83761bd638d6f41df0ad0d789c85b8f6819
Instruction ID: 818888d47f2ff9c5300692babd70985f564846122811a388c6707465a3f5e0b6
Opcode Fuzzy Hash: 1ce24e0ab189917572847adbe7bae83761bd638d6f41df0ad0d789c85b8f6819
Instruction Fuzzy Hash: 1111A3723106556BEB245BADAC84FAB77ECEB88714B04452AF90DC3241DB70DC4187F5

Uniqueness

Uniqueness Score: -1.00%

Function 00B0CA70, Relevance: 4.5, APIs: 3, Instructions: 20COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(00000003,?,00B0CA46,00000003,00B66660,0000000C,00B0CB9D,00000003,00000002,00000000,?,00B0B8E8,00000003), ref: 00B0CA91
TerminateProcess.KERNEL32(00000000,?,00B0CA46,00000003,00B66660,0000000C,00B0CB9D,00000003,00000002,00000000,?,00B0B8E8,00000003), ref: 00B0CA98
ExitProcess.KERNEL32 ref: 00B0CAAA

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: c76b1468d2bfdc79239e923171a2c3ba0e1dd3a6a45c81a47c831a3be754ae05
Instruction ID: f0500172ab2fb30bde921ad2e80dcafbc4886fb74022f0df61a12c60fa1cc7f6
Opcode Fuzzy Hash: c76b1468d2bfdc79239e923171a2c3ba0e1dd3a6a45c81a47c831a3be754ae05
Instruction Fuzzy Hash: C6E0463110020CABCF21EF54CD0AA883FA9FF40381B100458F8048B1B2CF35DD83DA84

Uniqueness

Uniqueness Score: -1.00%

Function 00A7D5B0, Relevance: 14.3, APIs: 6, Strings: 2, Instructions: 323
COMMON

Download Yara Rule

C-Code - Quality: 30%

			E00A7D5B0(intOrPtr* __ecx) {
				char _v8;
				intOrPtr _v12;
				char _v16;
				signed int _v20;
				short _v540;
				char _v544;
				char _v548;
				intOrPtr _v552;
				intOrPtr* _v556;
				intOrPtr* _v560;
				intOrPtr* _v564;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t89;
				signed int _t90;
				signed int _t98;
				struct _CRITICAL_SECTION* _t105;
				intOrPtr _t134;
				intOrPtr _t135;
				intOrPtr* _t139;
				intOrPtr _t144;
				short _t146;
				intOrPtr _t149;
				signed int _t153;
				intOrPtr _t155;
				intOrPtr _t157;
				signed int _t160;
				signed int _t161;
				WCHAR* _t164;
				intOrPtr* _t167;
				intOrPtr* _t175;
				WCHAR* _t190;
				intOrPtr* _t197;
				intOrPtr* _t202;
				intOrPtr* _t204;
				intOrPtr* _t205;
				void* _t206;
				WCHAR* _t210;
				void* _t214;
				void* _t217;
				intOrPtr* _t219;
				intOrPtr* _t220;
				intOrPtr _t223;
				void* _t224;
				intOrPtr* _t225;
				intOrPtr* _t227;
				signed int _t228;
				unsigned int _t230;
				unsigned int _t231;
				short* _t232;
				signed int _t233;
				void* _t235;
				signed int _t236;
				intOrPtr _t250;

				_push(0xffffffff);
				_push(0xb2697e);
				_push( *[fs:0x0]);
				_t236 = _t235 - 0x224;
				_t89 =  *0xb6aa7c; // 0x5cc80e5b
				_t90 = _t89 ^ _t233;
				_v20 = _t90;
				_push(_t160);
				_push(_t224);
				_push(_t90);
				 *[fs:0x0] =  &_v16;
				_t219 = __ecx;
				_v560 = __ecx;
				_v556 = __ecx;
				_v564 = __ecx;
				 *__ecx = 0xb37314;
				 *((intOrPtr*)(__ecx + 4)) = 0xb33040;
				InitializeCriticalSection(__ecx + 8);
				_v8 = 0;
				 *((intOrPtr*)(_t219 + 0x20)) = 0;
				 *((intOrPtr*)(_t219 + 0x24)) = 0;
				 *((intOrPtr*)(_t219 + 0x28)) = 0;
				_v8 = 1;
				_t167 = E00A445F0();
				if(_t167 == 0) {
					_push(0x80004005);
					E00A43FD0(_t160, _t219, _t224);
					goto L30;
				} else {
					 *((intOrPtr*)(_t219 + 0x2c)) =  *((intOrPtr*)( *_t167 + 0xc))() + 0x10;
					_v8 = 2;
					 *((intOrPtr*)(_t219 + 0x30)) = 1;
					 *((intOrPtr*)(_t219 + 0x34)) = 0x7d000;
					_t167 = E00A445F0();
					if(_t167 == 0) {
						L30:
						_push(0x80004005);
						E00A43FD0(_t160, _t219, _t224);
						goto L31;
					} else {
						 *((intOrPtr*)(_t219 + 0x38)) =  *((intOrPtr*)( *_t167 + 0xc))() + 0x10;
						_v8 = 3;
						 *((intOrPtr*)(_t219 + 0x34)) = 0x7d000;
						E00AF4C50(_t219,  &_v540, 0, 0x208);
						_t236 = _t236 + 0xc;
						__imp__SHGetSpecialFolderPathW(0,  &_v540, 0x1a, 0); // executed
						PathAppendW( &_v540, L"LDSGameCenter");
						PathCombineW( &_v540,  &_v540, L"Log\\LDSGameCenter.log");
						_t167 = E00A445F0();
						if(_t167 == 0) {
							L31:
							_push(0x80004005);
							E00A43FD0(_t160, _t219, _t224);
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							_push(_t233);
							_push(0xffffffff);
							_push(0xb26550);
							_push( *[fs:0x0]);
							_push(_t160);
							_push(_t224);
							_push(_t219);
							_t98 =  *0xb6aa7c; // 0x5cc80e5b
							_push(_t98 ^ _t236);
							 *[fs:0x0] =  &_v548;
							_t220 = _t167;
							_t225 = _t220 + 4;
							 *_t220 = 0xb37314;
							__eflags = _t225;
							if(_t225 != 0) {
								 *((intOrPtr*)( *_t225))(_t225);
							}
							E00A7E2F0(_t220 + 0x20);
							_v12 = 0;
							__eflags = _t225;
							if(_t225 != 0) {
								 *((intOrPtr*)( *_t225 + 4))(_t225);
							}
							_t161 = _t160 | 0xffffffff;
							_v12 = 0xffffffff;
							_t202 =  *((intOrPtr*)(_t220 + 0x38)) - 0x10;
							asm("lock xadd [edx+0xc], eax");
							__eflags = _t161 - 1;
							if(_t161 - 1 <= 0) {
								 *((intOrPtr*)( *((intOrPtr*)( *_t202)) + 4))(_t202);
							}
							_t204 =  *((intOrPtr*)(_t220 + 0x2c)) - 0x10;
							asm("lock xadd [edx+0xc], ebx");
							_t162 = _t161 - 1;
							__eflags = _t161 - 1;
							if(_t161 - 1 <= 0) {
								 *((intOrPtr*)( *((intOrPtr*)( *_t204)) + 4))(_t204);
							}
							E00A49F40(_t162, _t220 + 0x20, _t220);
							_t86 = _t225 + 4; // 0x5
							_t105 = _t86;
							 *_t225 = 0xb33040;
							DeleteCriticalSection(_t105);
							 *[fs:0x0] = _v20;
							return _t105;
						} else {
							_v544 =  *((intOrPtr*)( *_t167 + 0xc))() + 0x10;
							_v8 = 4;
							if(E00A44130(_t160,  &_v544, _t219, _t224,  &_v540) == 0) {
								_t197 =  &_v540;
								_t217 = _t197 + 2;
								do {
									_t157 =  *_t197;
									_t197 = _t197 + 2;
								} while (_t157 != 0);
								_push(_t197 - _t217 >> 1);
								E00A44EA0( &_v544, _t219, _t224,  &_v540);
							}
							_t134 = _v544;
							_t175 =  *((intOrPtr*)(_t219 + 0x2c));
							_v8 = 5;
							_v552 = 0xffffffff;
							_t205 = _t134 - 0x10;
							_t227 = _t175 - 0x10;
							_v556 = _t205;
							if(_t205 != _t227) {
								if( *((intOrPtr*)(_t227 + 0xc)) < 0 ||  *_t205 !=  *_t227) {
									_push( *((intOrPtr*)(_t134 - 0xc)));
									E00A44EA0(_t219 + 0x2c, _t219, _t227, _t134);
									_t175 =  *((intOrPtr*)(_t219 + 0x2c));
								} else {
									_t155 = E00A44270(_t219, _t227, _t205);
									_t236 = _t236 + 4;
									_v548 = _t155;
									asm("lock xadd [edx], ecx");
									if(_v552 - 1 <= 0) {
										 *((intOrPtr*)( *((intOrPtr*)( *_t227)) + 4))(_t227);
										_t155 = _v548;
									}
									_t48 = _t155 + 0x10; // 0x10
									_t175 = _t48;
									 *((intOrPtr*)(_t219 + 0x2c)) = _t175;
								}
							}
							_t206 = _t175 + 2;
							do {
								_t135 =  *_t175;
								_t175 = _t175 + 2;
								_t250 = _t135;
							} while (_t250 != 0);
							_t228 = (_t175 - _t206 >> 1) + 1;
							_push( ~(_t250 > 0) | _t228 * 0x00000002);
							_t164 = E00AE4E66(_t160,  ~(_t250 > 0) | _t228 * 0x00000002, _t219, _t228, _t250);
							if(_t164 != 0) {
								_t230 = _t228 + _t228;
								E00AF4C50(_t219, _t164, 0, _t230);
								_t144 =  *((intOrPtr*)(_t219 + 0x2c));
								_t231 = _t230 >> 1;
								if(_t231 != 0) {
									_t190 = _t164;
									_t214 = 0x7ffffffe - _t231;
									_t149 = _t144 - _t164;
									_v548 = _t149;
									_t223 = _t149;
									while(_t214 + _t231 != 0) {
										_t153 =  *(_t223 + _t190) & 0x0000ffff;
										if(_t153 != 0) {
											 *_t190 = _t153;
											_t190 =  &(_t190[1]);
											_t231 = _t231 - 1;
											if(_t231 != 0) {
												continue;
											}
										}
										break;
									}
									_t219 = _v560;
									_t66 = _t190 - 2; // -4
									_t152 =  !=  ? _t190 : _t66;
									 *((short*)( !=  ? _t190 : _t66)) = 0;
								}
								PathRemoveFileSpecW(_t164);
								_t210 = _t164;
								_t67 =  &(_t210[1]); // 0x2
								_t232 = _t67;
								asm("o16 nop [eax+eax]");
								do {
									_t146 =  *_t210;
									_t210 =  &(_t210[1]);
								} while (_t146 != 0);
								_push(_t210 - _t232 >> 1);
								E00A44EA0(_t219 + 0x38, _t219, _t232, _t164);
								_push(2);
								E00AE4950(_t164);
							}
							_t139 = _v556;
							_v8 = 3;
							asm("lock xadd [eax+0xc], ecx");
							if(_v552 - 1 <= 0) {
								 *((intOrPtr*)( *((intOrPtr*)( *_t139)) + 4))(_t139);
							}
							 *[fs:0x0] = _v16;
							return E00AE4BF8(_v20 ^ _t233);
						}
					}
				}
			}

0x00a7d5b3
0x00a7d5b5
0x00a7d5c0
0x00a7d5c1
0x00a7d5c7
0x00a7d5cc
0x00a7d5ce
0x00a7d5d1
0x00a7d5d2
0x00a7d5d4
0x00a7d5d8
0x00a7d5de
0x00a7d5e0
0x00a7d5e6
0x00a7d5ec
0x00a7d5f5
0x00a7d5fc
0x00a7d603
0x00a7d609
0x00a7d610
0x00a7d617
0x00a7d61e
0x00a7d625
0x00a7d62e
0x00a7d632
0x00a7d8b4
0x00a7d8b9
0x00000000
0x00a7d638
0x00a7d640
0x00a7d643
0x00a7d647
0x00a7d64e
0x00a7d65a
0x00a7d65e
0x00a7d8be
0x00a7d8be
0x00a7d8c3
0x00000000
0x00a7d664
0x00a7d66c
0x00a7d67a
0x00a7d681
0x00a7d688
0x00a7d68d
0x00a7d69d
0x00a7d6af
0x00a7d6c2
0x00a7d6cd
0x00a7d6d1
0x00a7d8c8
0x00a7d8c8
0x00a7d8cd
0x00a7d8d2
0x00a7d8d3
0x00a7d8d4
0x00a7d8d5
0x00a7d8d6
0x00a7d8d7
0x00a7d8d8
0x00a7d8d9
0x00a7d8da
0x00a7d8db
0x00a7d8dc
0x00a7d8dd
0x00a7d8de
0x00a7d8df
0x00a7d8e0
0x00a7d8e3
0x00a7d8e5
0x00a7d8f0
0x00a7d8f1
0x00a7d8f2
0x00a7d8f3
0x00a7d8f4
0x00a7d8fb
0x00a7d8ff
0x00a7d905
0x00a7d907
0x00a7d90a
0x00a7d910
0x00a7d912
0x00a7d917
0x00a7d917
0x00a7d91c
0x00a7d921
0x00a7d928
0x00a7d92a
0x00a7d92f
0x00a7d92f
0x00a7d935
0x00a7d938
0x00a7d93f
0x00a7d944
0x00a7d94a
0x00a7d94c
0x00a7d953
0x00a7d953
0x00a7d959
0x00a7d95c
0x00a7d961
0x00a7d962
0x00a7d964
0x00a7d96b
0x00a7d96b
0x00a7d971
0x00a7d976
0x00a7d976
0x00a7d979
0x00a7d980
0x00a7d989
0x00a7d997
0x00a7d6d7
0x00a7d6df
0x00a7d6eb
0x00a7d6fd
0x00a7d6ff
0x00a7d705
0x00a7d710
0x00a7d710
0x00a7d713
0x00a7d716
0x00a7d725
0x00a7d72d
0x00a7d72d
0x00a7d732
0x00a7d738
0x00a7d73b
0x00a7d73f
0x00a7d749
0x00a7d74c
0x00a7d74f
0x00a7d757
0x00a7d75d
0x00a7d79c
0x00a7d7a3
0x00a7d7a8
0x00a7d765
0x00a7d766
0x00a7d774
0x00a7d777
0x00a7d77d
0x00a7d784
0x00a7d78b
0x00a7d78e
0x00a7d78e
0x00a7d794
0x00a7d794
0x00a7d797
0x00a7d797
0x00a7d75d
0x00a7d7ab
0x00a7d7b0
0x00a7d7b0
0x00a7d7b3
0x00a7d7b6
0x00a7d7b6
0x00a7d7c4
0x00a7d7d4
0x00a7d7da
0x00a7d7e1
0x00a7d7e7
0x00a7d7ed
0x00a7d7f2
0x00a7d7f8
0x00a7d7fa
0x00a7d801
0x00a7d803
0x00a7d805
0x00a7d807
0x00a7d80d
0x00a7d810
0x00a7d817
0x00a7d81e
0x00a7d820
0x00a7d823
0x00a7d826
0x00a7d829
0x00000000
0x00000000
0x00a7d829
0x00000000
0x00a7d81e
0x00a7d82b
0x00a7d831
0x00a7d836
0x00a7d83b
0x00a7d83b
0x00a7d83f
0x00a7d845
0x00a7d847
0x00a7d847
0x00a7d84a
0x00a7d850
0x00a7d850
0x00a7d853
0x00a7d856
0x00a7d862
0x00a7d864
0x00a7d869
0x00a7d86c
0x00a7d871
0x00a7d874
0x00a7d880
0x00a7d884
0x00a7d88c
0x00a7d893
0x00a7d893
0x00a7d89b
0x00a7d8b3
0x00a7d8b3
0x00a7d6d1
0x00a7d65e

APIs

InitializeCriticalSection.KERNEL32(?,5CC80E5B), ref: 00A7D603

Part of subcall function 00A445F0: GetProcessHeap.KERNEL32(00A75638,5CC80E5B), ref: 00A44601

SHGetSpecialFolderPathW.SHELL32(00000000,?,0000001A,00000000), ref: 00A7D69D
PathAppendW.SHLWAPI(?,LDSGameCenter), ref: 00A7D6AF
PathCombineW.SHLWAPI(?,?,Log\LDSGameCenter.log), ref: 00A7D6C2

Part of subcall function 00A44130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B2DAF8,?,?,?,?,00A436E1,00B2DAF8,?,?,?,00B2DAF8), ref: 00A44186
Part of subcall function 00A44130: FindResourceW.KERNEL32(00000000,00B2DAF8,00000006,?,00B2DAF8), ref: 00A441C4

PathRemoveFileSpecW.SHLWAPI(00000000,?,?,?,?), ref: 00A7D83F
DeleteCriticalSection.KERNEL32(00000005,5CC80E5B,?,?,?,00000000,00B26550,000000FF,?,80004005,80004005,80004005), ref: 00A7D980

Strings

Log\LDSGameCenter.log, xrefs: 00A7D6B5
LDSGameCenter, xrefs: 00A7D6A3

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Path$CriticalFindResourceSection$AppendCombineDeleteFileFolderHeapInitializeProcessRemoveSpecSpecial
String ID: LDSGameCenter$Log\LDSGameCenter.log
API String ID: 3624597452-4075356421
Opcode ID: 3271ab00e392f55692f5b0a982009301258cdd6fbf7f79855e25433175d7665c
Instruction ID: 237ddf752e47b1ce8739a08c124892da82319d526494dd0e17f6cd52fd6a5c56
Opcode Fuzzy Hash: 3271ab00e392f55692f5b0a982009301258cdd6fbf7f79855e25433175d7665c
Instruction Fuzzy Hash: 56C1C375900605AFDB14DF68DD49BAAB7F8FF48310F1482ADE8099B691DB34AD05CF90

Uniqueness

Uniqueness Score: -1.00%

Function 6B591A80, Relevance: 13.7, APIs: 9, Instructions: 192fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6B591720: __CxxThrowException@8.LIBVCRUNTIME ref: 6B591737

Part of subcall function 6B591430: GetProcessHeap.KERNEL32(?,6B591AE6,1C9652E6,?,?,?,00000000,6B5A2526,000000FF,?,6B591392,00000000), ref: 6B591459

Part of subcall function 6B591D80: GetTempPathW.KERNEL32(00000400,?,000000FF,?,6B591392,00000000), ref: 6B591DD8
Part of subcall function 6B591D80: CoCreateGuid.OLE32(?,?,?,?,?,?,6B591392,00000000), ref: 6B591E1C
Part of subcall function 6B591D80: PathCombineW.SHLWAPI(?,?,?), ref: 6B591EF0

DeleteFileW.KERNEL32(?), ref: 6B591B13
DeleteFileW.KERNEL32(?), ref: 6B591B1C
CreateFileW.KERNEL32(?,C0000000,00000001,00000000,00000001,00000080,00000000), ref: 6B591B31
WriteFile.KERNEL32(00000000,?,00001000,?,00000000), ref: 6B591BCB
WriteFile.KERNEL32(00000000,?,?,?,00000000), ref: 6B591C16
CloseHandle.KERNEL32(00000000), ref: 6B591C20
SHCreateDirectory.SHELL32(00000000,?), ref: 6B591C56
SetupIterateCabinetW.SETUPAPI(?,00000000,6B591740,?), ref: 6B591C79
DeleteFileW.KERNEL32(?,?), ref: 6B591C9B

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: File$CreateDelete$PathWrite$CabinetCloseCombineDirectoryException@8GuidHandleHeapIterateProcessSetupTempThrow
String ID:
API String ID: 1062425176-0
Opcode ID: a86b5b0daaa370535fda363d312fb4bda5f7854ca84687e7585171d8b0997243
Instruction ID: 5296003deec14c53bb346f3183a4fd499eed949dbfd96325c605f9069e06a4cf
Opcode Fuzzy Hash: a86b5b0daaa370535fda363d312fb4bda5f7854ca84687e7585171d8b0997243
Instruction Fuzzy Hash: B4619271A002A8BBEB20DB65DD44BD9B7B8EB48754F0041E5E559E7280D7B8DAC48FA0

Uniqueness

Uniqueness Score: -1.00%

Function 6B591A90, Relevance: 13.7, APIs: 9, Instructions: 181fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6B591430: GetProcessHeap.KERNEL32(?,6B591AE6,1C9652E6,?,?,?,00000000,6B5A2526,000000FF,?,6B591392,00000000), ref: 6B591459

Part of subcall function 6B591D80: GetTempPathW.KERNEL32(00000400,?,000000FF,?,6B591392,00000000), ref: 6B591DD8
Part of subcall function 6B591D80: CoCreateGuid.OLE32(?,?,?,?,?,?,6B591392,00000000), ref: 6B591E1C
Part of subcall function 6B591D80: PathCombineW.SHLWAPI(?,?,?), ref: 6B591EF0

DeleteFileW.KERNEL32(?), ref: 6B591B13
DeleteFileW.KERNEL32(?), ref: 6B591B1C
CreateFileW.KERNEL32(?,C0000000,00000001,00000000,00000001,00000080,00000000), ref: 6B591B31
WriteFile.KERNEL32(00000000,?,00001000,?,00000000), ref: 6B591BCB
WriteFile.KERNEL32(00000000,?,?,?,00000000), ref: 6B591C16
CloseHandle.KERNEL32(00000000), ref: 6B591C20
SHCreateDirectory.SHELL32(00000000,?), ref: 6B591C56
SetupIterateCabinetW.SETUPAPI(?,00000000,6B591740,?), ref: 6B591C79
DeleteFileW.KERNEL32(?,?), ref: 6B591C9B

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: File$CreateDelete$PathWrite$CabinetCloseCombineDirectoryGuidHandleHeapIterateProcessSetupTemp
String ID:
API String ID: 2236526306-0
Opcode ID: 996f38d9586746a76f12fa00f913a2e5ba14075c1ba9b7254692c3b08c1a2819
Instruction ID: e9a0aa81a52a97dc5005436f6786e2f571172321131b4a966e4cf81fc64c771d
Opcode Fuzzy Hash: 996f38d9586746a76f12fa00f913a2e5ba14075c1ba9b7254692c3b08c1a2819
Instruction Fuzzy Hash: DC61B171A002A8BBEB20DB65DD44BDAB7B8FF48354F0041E5E559E7280D7B8DAC48F60

Uniqueness

Uniqueness Score: -1.00%

Function 6B591240, Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 125fileCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNEL32(?), ref: 6B591270

Strings

CAB, xrefs: 6B59128C

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: DeleteFile
String ID: CAB
API String ID: 4033686569-4230853747
Opcode ID: 3169a2fd14e3e21b043c853f66ba53de0c60bb6ab641ffad2652aa003a45e60c
Instruction ID: a67229947343eda8928f181ef708237deca5355330c31e9c226f54605ff34e52
Opcode Fuzzy Hash: 3169a2fd14e3e21b043c853f66ba53de0c60bb6ab641ffad2652aa003a45e60c
Instruction Fuzzy Hash: E341A0B19002299BEB51EF74D849BDDBBF8FB56354F010299D815B7280EB38D986CF90

Uniqueness

Uniqueness Score: -1.00%

Function 6B591720, Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBVCRUNTIME ref: 6B591737

Part of subcall function 6B592E2D: RaiseException.KERNEL32(6B5920A3,80070057,?,?,?,00000000,76564830,6B5920A3,80070057,76568B40,00000000,?,?,6B591F47,?), ref: 6B592E8D

_wcsstr.LIBVCRUNTIME ref: 6B5917A9
PathCombineW.SHLWAPI(?,?,1C9652E6,?,00000000), ref: 6B5917C0
PathIsPrefixW.SHLWAPI(?,?), ref: 6B5917D2
PathRemoveFileSpecW.SHLWAPI(?), ref: 6B5917FB
SHCreateDirectory.SHELL32(00000000,?), ref: 6B59180A

Strings

@CVv, xrefs: 6B5917D2

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: Path$CombineCreateDirectoryExceptionException@8FilePrefixRaiseRemoveSpecThrow_wcsstr
String ID: @CVv
API String ID: 1553367680-2634783331
Opcode ID: 77cf5e68a34732d14249b2aef8b74a2802bac22e4a1469809862fa39361a4dbf
Instruction ID: b02b8b2cb3eee5e383839567adfbc424604a51621ac986428f5ef0f13ab7bb74
Opcode Fuzzy Hash: 77cf5e68a34732d14249b2aef8b74a2802bac22e4a1469809862fa39361a4dbf
Instruction Fuzzy Hash: F231D872A0015CABEB10FFB9EC45EEE77ACEF49210F00059AE906D7140DB35EA049B90

Uniqueness

Uniqueness Score: -1.00%

Function 00A71760, Relevance: 12.2, APIs: 8, Instructions: 243
COMMON

Download Yara Rule

C-Code - Quality: 28%

			E00A71760(void* __ebx, char _a4) {
				int _v8;
				char _v12;
				void* _v16;
				signed int _v20;
				signed int _v24;
				long _v536;
				intOrPtr* _v540;
				short _v544;
				char _v548;
				int _v552;
				int _v556;
				int _v560;
				signed int _v564;
				intOrPtr* _v1080;
				WCHAR* _v1084;
				WCHAR* _v1088;
				struct HINSTANCE__* _v1092;
				intOrPtr* _v1104;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t54;
				signed int _t55;
				signed int _t64;
				signed int _t65;
				void* _t75;
				void* _t77;
				struct HRSRC__* _t85;
				void* _t88;
				signed int _t103;
				intOrPtr _t109;
				struct HRSRC__* _t113;
				intOrPtr* _t116;
				intOrPtr* _t127;
				intOrPtr* _t136;
				void* _t141;
				char _t143;
				struct HINSTANCE__* _t144;
				void* _t148;
				intOrPtr* _t149;
				intOrPtr* _t151;
				intOrPtr* _t155;
				signed int _t157;
				signed int _t158;
				void* _t160;
				signed int _t162;

				_t112 = __ebx;
				_push(0xffffffff);
				_push(0xb25d66);
				_push( *[fs:0x0]);
				_t54 =  *0xb6aa7c; // 0x5cc80e5b
				_t55 = _t54 ^ _t157;
				_v20 = _t55;
				_push(_t148);
				_push(_t55);
				 *[fs:0x0] =  &_v16;
				_t143 = _a4;
				_v548 = _t143;
				E00AF4C50(_t143,  &_v544, 0, 0x20a);
				_t162 = _t160 - 0x214 + 0xc;
				GetModuleFileNameW(0xa40000,  &_v544, 0x104);
				_t116 = E00A445F0();
				if(_t116 == 0) {
					_push(0x80004005);
					E00A43FD0(__ebx, _t143, _t148);
					asm("int3");
					asm("int3");
					asm("int3");
					_push(_t157);
					_t158 = _t162;
					_push(0xffffffff);
					_push(0xb25eb6);
					_push( *[fs:0x0]);
					_t64 =  *0xb6aa7c; // 0x5cc80e5b
					_t65 = _t64 ^ _t158;
					_v564 = _t65;
					_push(_t148);
					_push(_t65);
					 *[fs:0x0] =  &_v560;
					_t149 = _v540;
					_v1104 = _t149;
					E00A43780( &_v1092, OpenProcess(0x410, 0, _v536));
					_v552 = 0;
					if(E00A5A690( &_v1092) != 0) {
						E00AF4C50(_t143,  &_v548, 0, 0x20a);
						_v556 = 0;
						_v560 = 0;
						_push( &_v560);
						_push(4);
						_push( &_v556);
						_t75 = E00A5A690( &_v552);
						_push(_t75);
						L00AEC480();
						if(_t75 != 0) {
							_push(0x104);
							_push( &_v548);
							_push(_v556);
							_t77 = E00A5A690( &_v552);
							_push(_t77);
							L00AEC486();
							if(_t77 == 0) {
								goto L14;
							} else {
								_push( &_v548);
							}
						} else {
							L14:
							_push(0xb2daf8);
						}
						E00A43690(_t112, _t149);
						goto L18;
					} else {
						_t127 = E00A445F0();
						if(_t127 == 0) {
							_push(0x80004005);
							E00A43FD0(__ebx, _t143, _t149);
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							_push(_t158);
							_push(_t127);
							_push(__ebx);
							_push(_t149);
							_t151 = _v1080;
							asm("xorps xmm0, xmm0");
							_push(_t143);
							_t144 = _v1092;
							asm("movq [esi], xmm0");
							_t85 = FindResourceW(_t144, _v1088, _v1084); // executed
							_t113 = _t85;
							if(_t113 == 0) {
								L23:
								return 0;
							} else {
								_v16 = SizeofResource(_t144, _t113);
								_t88 = LoadResource(_t144, _t113);
								if(_t88 == 0) {
									goto L23;
								} else {
									 *_t151 = LockResource(_t88);
									 *((intOrPtr*)(_t151 + 4)) = _v16;
									return 1;
								}
							}
						} else {
							 *_t149 =  *((intOrPtr*)( *_t127 + 0xc))() + 0x10;
							_v12 = 1;
							if(E00A44130(__ebx, _t149, _t143, _t149, 0xb2daf8) == 0) {
								_push(0);
								E00A44EA0(_t149, _t143, _t149, 0xb2daf8);
							}
							L18:
							E00A6FD40( &_v552);
							 *[fs:0x0] = _v20;
							return E00AE4BF8(_v24 ^ _t158);
						}
					}
				} else {
					_v548 =  *((intOrPtr*)( *_t116 + 0xc))() + 0x10;
					_v8 = 0;
					if(E00A44130(__ebx,  &_v548, _t143, _t148,  &_v544) == 0) {
						_t136 =  &_v544;
						_t141 = _t136 + 2;
						do {
							_t109 =  *_t136;
							_t136 = _t136 + 2;
						} while (_t109 != 0);
						_push(_t136 - _t141 >> 1);
						E00A44EA0( &_v548, _t143, _t148,  &_v544);
					}
					_v8 = 1;
					_t103 = E00A70FE0(_t112, _t143, _t148, _t143,  &_v548, 0); // executed
					_v8 = 0xffffffff;
					_t155 = _v548 + 0xfffffff0;
					asm("lock xadd [esi+0xc], eax");
					if((_t103 | 0xffffffff) - 1 <= 0) {
						 *((intOrPtr*)( *((intOrPtr*)( *_t155)) + 4))(_t155);
					}
					 *[fs:0x0] = _v16;
					return E00AE4BF8(_v20 ^ _t157);
				}
			}

0x00a71760
0x00a71763
0x00a71765
0x00a71770
0x00a71777
0x00a7177c
0x00a7177e
0x00a71781
0x00a71783
0x00a71787
0x00a7178d
0x00a7179e
0x00a717a4
0x00a717a9
0x00a717bd
0x00a717c8
0x00a717cc
0x00a71883
0x00a71888
0x00a7188d
0x00a7188e
0x00a7188f
0x00a71890
0x00a71891
0x00a71893
0x00a71895
0x00a718a0
0x00a718a7
0x00a718ac
0x00a718ae
0x00a718b1
0x00a718b2
0x00a718b6
0x00a718bf
0x00a718ca
0x00a718dd
0x00a718e8
0x00a718f6
0x00a7194a
0x00a71952
0x00a71962
0x00a71972
0x00a71973
0x00a7197b
0x00a7197c
0x00a71981
0x00a71982
0x00a71989
0x00a71992
0x00a7199d
0x00a7199e
0x00a719aa
0x00a719af
0x00a719b0
0x00a719b7
0x00000000
0x00a719b9
0x00a719bf
0x00a719bf
0x00a7198b
0x00a7198b
0x00a7198b
0x00a7198b
0x00a719c2
0x00000000
0x00a718f8
0x00a718fd
0x00a71901
0x00a719ee
0x00a719f3
0x00a719f8
0x00a719f9
0x00a719fa
0x00a719fb
0x00a719fc
0x00a719fd
0x00a719fe
0x00a719ff
0x00a71a00
0x00a71a03
0x00a71a04
0x00a71a05
0x00a71a06
0x00a71a09
0x00a71a0c
0x00a71a10
0x00a71a16
0x00a71a1b
0x00a71a21
0x00a71a25
0x00a71a59
0x00a71a61
0x00a71a27
0x00a71a31
0x00a71a34
0x00a71a3c
0x00000000
0x00a71a3e
0x00a71a45
0x00a71a4b
0x00a71a58
0x00a71a58
0x00a71a3c
0x00a71907
0x00a7190f
0x00a71918
0x00a71923
0x00a71929
0x00a71932
0x00a71932
0x00a719c7
0x00a719cd
0x00a719d7
0x00a719ed
0x00a719ed
0x00a71901
0x00a717d2
0x00a717da
0x00a717e6
0x00a717fb
0x00a717fd
0x00a71803
0x00a71806
0x00a71806
0x00a71809
0x00a7180c
0x00a7181b
0x00a71823
0x00a71823
0x00a71830
0x00a71839
0x00a71847
0x00a7184e
0x00a71854
0x00a7185c
0x00a71863
0x00a71863
0x00a7186b
0x00a71882
0x00a71882

APIs

GetModuleFileNameW.KERNEL32(00A40000,?,00000104,5CC80E5B), ref: 00A717BD

Part of subcall function 00A445F0: GetProcessHeap.KERNEL32(00A75638,5CC80E5B), ref: 00A44601

OpenProcess.KERNEL32(00000410,00000000,?,5CC80E5B), ref: 00A718D0

Part of subcall function 00A44130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B2DAF8,?,?,?,?,00A436E1,00B2DAF8,?,?,?,00B2DAF8), ref: 00A44186
Part of subcall function 00A44130: FindResourceW.KERNEL32(00000000,00B2DAF8,00000006,?,00B2DAF8), ref: 00A441C4

EnumProcessModules.PSAPI(00000000,00000000,00000004,00000000), ref: 00A71982
GetModuleFileNameExW.PSAPI(00000000,00000000,?,00000104,00000000,00000000,00000004,00000000), ref: 00A719B0
FindResourceW.KERNEL32(00000000,80004005,?,00A45483,?,?,?,?,80004005,00000000), ref: 00A71A1B
SizeofResource.KERNEL32(00000000,00000000,?,?,?,80004005,00000000), ref: 00A71A29
LoadResource.KERNEL32(00000000,00000000,?,?,?,80004005,00000000), ref: 00A71A34
LockResource.KERNEL32(00000000,?,?,?,80004005,00000000), ref: 00A71A3F

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Resource$FindProcess$FileModuleName$EnumHeapLoadLockModulesOpenSizeof
String ID:
API String ID: 3807074122-0
Opcode ID: 8f17355998a4f8b0f75cb5f24aa3ceff630bea2498a1984d2ac4a1093aa7a520
Instruction ID: 8f58e6399f026f7191cb9ac4944dec7ba97d8f3c83086e1b2a3392ff9ae3cfbd
Opcode Fuzzy Hash: 8f17355998a4f8b0f75cb5f24aa3ceff630bea2498a1984d2ac4a1093aa7a520
Instruction Fuzzy Hash: 1E81B775A00218ABDB10DFA8DD49FEEB7F8EF48710F108199F919E7281DB70AE458B51

Uniqueness

Uniqueness Score: -1.00%

Function 6B591D80, Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 136COMMON

Download Yara Rule

APIs

GetTempPathW.KERNEL32(00000400,?,000000FF,?,6B591392,00000000), ref: 6B591DD8
CoCreateGuid.OLE32(?,?,?,?,?,?,6B591392,00000000), ref: 6B591E1C
PathCombineW.SHLWAPI(?,?,?), ref: 6B591EF0
PathFileExistsW.SHLWAPI(?), ref: 6B591F12

Strings

.tmp, xrefs: 6B591EF2
{%08X-%04X-%04x-%02X%02X-%02X%02X%02X%02X%02X%02X}, xrefs: 6B591E91

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: Path$CombineCreateExistsFileGuidTemp
String ID: .tmp${%08X-%04X-%04x-%02X%02X-%02X%02X%02X%02X%02X%02X}
API String ID: 647278745-763569422
Opcode ID: bc681366c84c689b35e9f1f0992796b8ecc3ae2683bb8208e45542749846ac8e
Instruction ID: fe89ef58926e94a5d47bdf948b5334a988a3eb88dd0acd6108f365d458e0bb27
Opcode Fuzzy Hash: bc681366c84c689b35e9f1f0992796b8ecc3ae2683bb8208e45542749846ac8e
Instruction Fuzzy Hash: 0E4144B690026C6ADB21DBA4DD55FEAB7FCAB4D705F0000D6F648E6541E7389F848F60

Uniqueness

Uniqueness Score: -1.00%

Function 00A49430, Relevance: 7.7, APIs: 3, Strings: 1, Instructions: 744COMMON

Download Yara Rule

APIs

FindResourceW.KERNEL32(00000000,?,00000006), ref: 00A496D6
WideCharToMultiByte.KERNEL32(00000003,00000000,00000002,?,00000000,00000000,00000000,00000000), ref: 00A4970D
WideCharToMultiByte.KERNEL32(00000003,00000000,00000002,?,?,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000), ref: 00A4974B

Strings

%, xrefs: 00A49D5E

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide$FindResource
String ID: %
API String ID: 3073988107-2567322570
Opcode ID: 8b4e2864d88724a3e0d320fa609b8af3b0e30af690023a6915b49d50d6af2fac
Instruction ID: 24cd60e8d8e452fd48670f319fec7258dafd94b8e8c31f887f5150d5aad53a55
Opcode Fuzzy Hash: 8b4e2864d88724a3e0d320fa609b8af3b0e30af690023a6915b49d50d6af2fac
Instruction Fuzzy Hash: CB529B38A012418FDB14DF7CC959B6FBBE0AF85314F1885ADE44ADB652EB30DD148B92

Uniqueness

Uniqueness Score: -1.00%

Function 00A80BC0, Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 206COMMON

Download Yara Rule

APIs

Part of subcall function 00A809C0: SHGetValueW.SHLWAPI(80000002,Software\LDSGameCenter,Setup Path,00000001,?,?), ref: 00A80A4D

PathFileExistsW.SHLWAPI(007C4310,00000000), ref: 00A80D36

Part of subcall function 00A445F0: GetProcessHeap.KERNEL32(00A75638,5CC80E5B), ref: 00A44601

Part of subcall function 00A44130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B2DAF8,?,?,?,?,00A436E1,00B2DAF8,?,?,?,00B2DAF8), ref: 00A44186
Part of subcall function 00A44130: FindResourceW.KERNEL32(00000000,00B2DAF8,00000006,?,00B2DAF8), ref: 00A441C4

Strings

ludashi, xrefs: 00A80F99
\LDSGameCenter.exe, xrefs: 00A80CCB
\pgstation.exe, xrefs: 00A80CEF

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$ExistsFileHeapPathProcessValue
String ID: \LDSGameCenter.exe$\pgstation.exe$ludashi
API String ID: 3695862699-379576516
Opcode ID: 05c4c6623dc99738aa0d41f659e9836777f2e4ec51abf26d6e22473c4caf65b4
Instruction ID: a0e44c74f2139cd468c2d88198a6197081ae71954bff757424e09bd8346e47a6
Opcode Fuzzy Hash: 05c4c6623dc99738aa0d41f659e9836777f2e4ec51abf26d6e22473c4caf65b4
Instruction Fuzzy Hash: 3A610571A006059FDB00EFA8CD09B9EB7F4EF44324F148169E814DB292DB75AE08CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A809C0, Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 144COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(80000002,Software\LDSGameCenter,Setup Path,00000001,?,?), ref: 00A80A4D

Part of subcall function 00A43FD0: __CxxThrowException@8.LIBVCRUNTIME ref: 00A43FE7

Part of subcall function 00A720B0: SHGetValueW.SHLWAPI(?,5CC80E5B,?,00000001,?,?), ref: 00A7213F

Strings

Setup Path, xrefs: 00A80A3E
InstallDate, xrefs: 00A80B78
Software\LDSGameCenter, xrefs: 00A80A43, 00A80B7D

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Value$Exception@8Throw
String ID: InstallDate$Setup Path$Software\LDSGameCenter
API String ID: 977719429-3393887631
Opcode ID: 75f09f6a369a05e25261948fc6bf2496227ab8dffad0fc3fb78aa032cecc2e01
Instruction ID: b2e5f28ce1475654655cdbc152e6a6e1199e2e16d94ef1fba24c9cc1999f6f14
Opcode Fuzzy Hash: 75f09f6a369a05e25261948fc6bf2496227ab8dffad0fc3fb78aa032cecc2e01
Instruction Fuzzy Hash: 1151D57594021CABCB24DF54DC59FEEB7B8EB18704F1042DDE819A7290EBB56A48CF80

Uniqueness

Uniqueness Score: -1.00%

Function 00A710D0, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 125COMMON

Download Yara Rule

APIs

GetFileVersionInfoSizeW.VERSION(?,?,5CC80E5B,?,?), ref: 00A71138
GetFileVersionInfoW.VERSION(?,00000000,00000000,?,?,?,5CC80E5B,?,?), ref: 00A7115B
VerQueryValueW.VERSION(?,00B2FD18,?,?,?,00000000,00000000,?,?,?,5CC80E5B,?,?), ref: 00A71182

Strings

%d.%d.%d.%d, xrefs: 00A711EA

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: FileInfoVersion$QuerySizeValue
String ID: %d.%d.%d.%d
API String ID: 2179348866-3491811756
Opcode ID: 0347cf3c2df988ac2c3072f76d356fa7d1f478529f6849bd2310360ee7a78a98
Instruction ID: a7a3d6ba8a863b6ec377bb12c14b15d89dd8610307e4ac38fcf3d3fb4da6e05c
Opcode Fuzzy Hash: 0347cf3c2df988ac2c3072f76d356fa7d1f478529f6849bd2310360ee7a78a98
Instruction Fuzzy Hash: B7418071A002199BDB24CF59DD49FBAB3F8EF44710F4485AAE908D7292D734EE40DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00A71A70, Relevance: 6.2, APIs: 4, Instructions: 154COMMON

Download Yara Rule

APIs

GetTempPathW.KERNEL32(00000104,00000010,5CC80E5B,00000010,00000010), ref: 00A71ACB
SHCreateDirectoryExW.SHELL32(00000000,00000000,00000000,00000000,?,?), ref: 00A71BAB
PathFileExistsW.SHLWAPI(00000000), ref: 00A71BB2

Part of subcall function 00A445F0: GetProcessHeap.KERNEL32(00A75638,5CC80E5B), ref: 00A44601

GetLogicalDrives.KERNEL32 ref: 00A71C33

Part of subcall function 00A44130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B2DAF8,?,?,?,?,00A436E1,00B2DAF8,?,?,?,00B2DAF8), ref: 00A44186
Part of subcall function 00A44130: FindResourceW.KERNEL32(00000000,00B2DAF8,00000006,?,00B2DAF8), ref: 00A441C4

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: FindPathResource$CreateDirectoryDrivesExistsFileHeapLogicalProcessTemp
String ID:
API String ID: 2915796743-0
Opcode ID: 217079b42f66ceaab6e8da8bfb9e8e12670483099a4582dfc1b84a5706b4520b
Instruction ID: 7e7f07b12da7e1a677592db8116d9f94d1eeb62aff834128611c557e2f98df70
Opcode Fuzzy Hash: 217079b42f66ceaab6e8da8bfb9e8e12670483099a4582dfc1b84a5706b4520b
Instruction Fuzzy Hash: FD510775A402099BDB109F68DC49FEE73F4EF54310F148199F91AE7291EB709E048B90

Uniqueness

Uniqueness Score: -1.00%

Function 6B591950, Relevance: 6.1, APIs: 4, Instructions: 51COMMON

Download Yara Rule

APIs

FindResourceW.KERNEL32(?,?,?,?), ref: 6B59197A
SizeofResource.KERNEL32(?,00000000), ref: 6B59199F
LoadResource.KERNEL32(?,?), ref: 6B5919AB
LockResource.KERNEL32(00000000), ref: 6B5919B6

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: Resource$FindLoadLockSizeof
String ID:
API String ID: 3473537107-0
Opcode ID: a646446903489e77abe25d1792d65909d5cb557709342bfa871fc340c2efa8d7
Instruction ID: 466fc5c1435d18a47578fde41b82c81c845ab8de65ec128bb63a964da3837291
Opcode Fuzzy Hash: a646446903489e77abe25d1792d65909d5cb557709342bfa871fc340c2efa8d7
Instruction Fuzzy Hash: 270140B5A00319ABDB109F69D844A9AFBECFF5D311F104166F908E3200E731D460CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00A81060, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 142COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(80000002,Software\LDSGameCenter,SubPID,00000001,?,?), ref: 00A810FB

Strings

SubPID, xrefs: 00A810EC
Software\LDSGameCenter, xrefs: 00A810F1

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Value
String ID: Software\LDSGameCenter$SubPID
API String ID: 3702945584-867072385
Opcode ID: e14e3b8d3109f411c06d4ba92778afff29267b43f743893c66615dfc8a1bc469
Instruction ID: d9131ebfed3a48800d6c5a32813d5271b23e3ee41bfa4ffe4ea6b6a036858bd8
Opcode Fuzzy Hash: e14e3b8d3109f411c06d4ba92778afff29267b43f743893c66615dfc8a1bc469
Instruction Fuzzy Hash: 5641C471940218ABDB10DF98DD49BEEB7F8FB08714F10429AE919A7391DB74AA44CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00A819F0, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 123COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(80000002,Software\LDSGameMaster,Setup Path,00000001,?,?), ref: 00A81A7D

Part of subcall function 00A445F0: GetProcessHeap.KERNEL32(00A75638,5CC80E5B), ref: 00A44601

Part of subcall function 00A44130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B2DAF8,?,?,?,?,00A436E1,00B2DAF8,?,?,?,00B2DAF8), ref: 00A44186
Part of subcall function 00A44130: FindResourceW.KERNEL32(00000000,00B2DAF8,00000006,?,00B2DAF8), ref: 00A441C4

Strings

Setup Path, xrefs: 00A81A6E
Software\LDSGameMaster, xrefs: 00A81A73

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$HeapProcessValue
String ID: Setup Path$Software\LDSGameMaster
API String ID: 2870785007-3824280577
Opcode ID: f55aaf03429b37976feadaacf1ed57e2e5790e7c434738d40b1ef3e97e3bdd32
Instruction ID: 3e6782a74350ca6e956f7212b66d4266e06511ee528ebcc3b52b10a226d78f7c
Opcode Fuzzy Hash: f55aaf03429b37976feadaacf1ed57e2e5790e7c434738d40b1ef3e97e3bdd32
Instruction Fuzzy Hash: D241E574A402189BDF14EF54DD59BEE77F8EF18704F10419CE90AA7291EB706A45CF81

Uniqueness

Uniqueness Score: -1.00%

Function 00A7EC70, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 123COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(80000002,Software\Microsoft\Windows\CurrentVersion\App Paths\360wpapp.exe,Path,00000001,?,?), ref: 00A7ECFD

Part of subcall function 00A445F0: GetProcessHeap.KERNEL32(00A75638,5CC80E5B), ref: 00A44601

Part of subcall function 00A44130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B2DAF8,?,?,?,?,00A436E1,00B2DAF8,?,?,?,00B2DAF8), ref: 00A44186
Part of subcall function 00A44130: FindResourceW.KERNEL32(00000000,00B2DAF8,00000006,?,00B2DAF8), ref: 00A441C4

Strings

Software\Microsoft\Windows\CurrentVersion\App Paths\360wpapp.exe, xrefs: 00A7ECF3
Path, xrefs: 00A7ECEE

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$HeapProcessValue
String ID: Path$Software\Microsoft\Windows\CurrentVersion\App Paths\360wpapp.exe
API String ID: 2870785007-4115319160
Opcode ID: b34d008ec7a6e106111a8977664fdbeee226b5ab7f4fa31f34d8c6f99b19f394
Instruction ID: 01170d5fd993ecac04e41999db815ebf23aeb3a75a400f52fffbb6b8c66d3ee0
Opcode Fuzzy Hash: b34d008ec7a6e106111a8977664fdbeee226b5ab7f4fa31f34d8c6f99b19f394
Instruction Fuzzy Hash: 2C4105746402199BCB24DF54DD5ABEE77F4EF18704F1081DCE90AA7292EB70AA44CF81

Uniqueness

Uniqueness Score: -1.00%

Function 00A81680, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 123COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(80000002,Software\Ludashi,Setup Path,00000001,?,?), ref: 00A8170D

Part of subcall function 00A445F0: GetProcessHeap.KERNEL32(00A75638,5CC80E5B), ref: 00A44601

Part of subcall function 00A44130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B2DAF8,?,?,?,?,00A436E1,00B2DAF8,?,?,?,00B2DAF8), ref: 00A44186
Part of subcall function 00A44130: FindResourceW.KERNEL32(00000000,00B2DAF8,00000006,?,00B2DAF8), ref: 00A441C4

Strings

Setup Path, xrefs: 00A816FE
Software\Ludashi, xrefs: 00A81703

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$HeapProcessValue
String ID: Setup Path$Software\Ludashi
API String ID: 2870785007-1439348962
Opcode ID: 94cef2138043d01e8c33dab459060ad2af5ab71d64e7a0d08f3a3f30707a08e8
Instruction ID: 3ba25a8820c27ffde90b4c7c07c5c291092aea8a779f5f66c15b84344a039ee2
Opcode Fuzzy Hash: 94cef2138043d01e8c33dab459060ad2af5ab71d64e7a0d08f3a3f30707a08e8
Instruction Fuzzy Hash: FD41E474A402189BCB14EF54DD5ABEE77F8EF08704F10019CE90AA7291EB70AA458F81

Uniqueness

Uniqueness Score: -1.00%

Function 00B1376E, Relevance: 4.7, APIs: 3, Instructions: 186COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a78b31cad02962cfcf3f747b3dfc2ee36c92e4fc1b41180ba701cdae5aa088e8
Instruction ID: 630eba7a70134e7a80e1d6b907e4afa7e7c174719c02b27e9adcce518dd01cc6
Opcode Fuzzy Hash: a78b31cad02962cfcf3f747b3dfc2ee36c92e4fc1b41180ba701cdae5aa088e8
Instruction Fuzzy Hash: 1A51B0B1D04209ABDF109FA9C985FEE7BF8EF09B20F900099F405A7291E7759B81C761

Uniqueness

Uniqueness Score: -1.00%

Function 00B12F28, Relevance: 4.6, APIs: 3, Instructions: 61COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNEL32(00000000,00000000,?,?,00B12E46,?,00B66868,0000000C), ref: 00B12F7E
GetLastError.KERNEL32(?,00B12E46,?,00B66868,0000000C), ref: 00B12F88
__dosmaperr.LIBCMT ref: 00B12FB3

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ChangeCloseErrorFindLastNotification__dosmaperr
String ID:
API String ID: 490808831-0
Opcode ID: 8fc67d505fa34b4b74fd8cadb9a49975ccf4eaa2a659420903c6ad384ca132f8
Instruction ID: 4b2ac7d42d71ce76db6e8cf740ee3ff95622a68d43b4630c3f5d97ebd80a7f42
Opcode Fuzzy Hash: 8fc67d505fa34b4b74fd8cadb9a49975ccf4eaa2a659420903c6ad384ca132f8
Instruction Fuzzy Hash: B0018932A142501BC6242374E889BFE6BEAEF92B30F6401EDF819871C2DE20CDC391D1

Uniqueness

Uniqueness Score: -1.00%

Function 00AFDE50, Relevance: 4.6, APIs: 3, Instructions: 54threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(?,5CC80E5B,Function_000BDCFC,00000000,00A75011,?), ref: 00AFDE99
GetLastError.KERNEL32(?,?,?,?,?,00A74F47,00000000,00000000,00A75230,?,00000000,?), ref: 00AFDEA5
__dosmaperr.LIBCMT ref: 00AFDEAC

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: CreateErrorLastThread__dosmaperr
String ID:
API String ID: 2744730728-0
Opcode ID: 4cec374e99137a34301e8f6d6e9602a6e185534ef1174bbdb83be658c2e0426a
Instruction ID: d83ccf06ecb6644bb28bcf36ffdffc66d9a560ee0380c312ac3cfd320e9b32af
Opcode Fuzzy Hash: 4cec374e99137a34301e8f6d6e9602a6e185534ef1174bbdb83be658c2e0426a
Instruction Fuzzy Hash: 4B015E3750521EABCB16AFE1EC05DBF3B6AEF95765F100068FA059B110DB319852D7A0

Uniqueness

Uniqueness Score: -1.00%

Function 00AFDDB0, Relevance: 4.5, APIs: 3, Instructions: 31threadCOMMON

Download Yara Rule

APIs

Part of subcall function 00B100AB: GetLastError.KERNEL32(?,?,?,00AF7C6C,00B11228,?,00B10055,00000001,00000364,?,00AFDD21,00B66398,00000010), ref: 00B100B0
Part of subcall function 00B100AB: _free.LIBCMT ref: 00B100E5
Part of subcall function 00B100AB: SetLastError.KERNEL32(00000000), ref: 00B10119

ExitThread.KERNEL32 ref: 00AFDDC2
CloseHandle.KERNEL32(?,?,?,00AFDEE2,?,?,00AFDD59,00000000), ref: 00AFDDEA
FreeLibraryAndExitThread.KERNEL32(?,?,?,?,00AFDEE2,?,?,00AFDD59,00000000), ref: 00AFDE00

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorExitLastThread$CloseFreeHandleLibrary_free
String ID:
API String ID: 1198197534-0
Opcode ID: 28c486d31c80953c8963e9de8ec27e6d02e321832f74f36f461d49537f11bca5
Instruction ID: e653e80cc69414b2bdddf6a06abbd1f2bd455455c6fb583065fbdb17be5501a2
Opcode Fuzzy Hash: 28c486d31c80953c8963e9de8ec27e6d02e321832f74f36f461d49537f11bca5
Instruction Fuzzy Hash: 63F08230002709ABDB325BB5C80CBBA3B9AAF05364F184B10FA74D31E1DB31DD828651

Uniqueness

Uniqueness Score: -1.00%

Function 00A72B60, Relevance: 3.8, APIs: 1, Strings: 1, Instructions: 268COMMON

Download Yara Rule

APIs

_wcschr.LIBVCRUNTIME ref: 00A72BE7

Strings

w+b, xrefs: 00A72DFF

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: _wcschr
String ID: w+b
API String ID: 2691759472-2066963162
Opcode ID: a6b26a0676cdee06f60635ef7c5773a135eacdd6fbe5dac145f46cefadf93e4b
Instruction ID: bd08547b3dbc9823a58af8a975e992de8ed84da88f48d96d6b85d69681c7819e
Opcode Fuzzy Hash: a6b26a0676cdee06f60635ef7c5773a135eacdd6fbe5dac145f46cefadf93e4b
Instruction Fuzzy Hash: A091B571E006198FDB14DFA9CD84BAEB7B5FF48310B14C269E929AB291DB35DC01CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00A73830, Relevance: 3.1, APIs: 2, Instructions: 82COMMON

Download Yara Rule

APIs

_abort.LIBCMT ref: 00B00519
_free.LIBCMT ref: 00B0058B

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: _abort_free
String ID:
API String ID: 4174849134-0
Opcode ID: 8396cd94fbdf49c501fe505a55037a9f08c67ffecfba251856964d973252cbd7
Instruction ID: 19f77296c29b4b0a9ceea489ce60e6f20c4f4f36c58fa666a784f24a4a282ab0
Opcode Fuzzy Hash: 8396cd94fbdf49c501fe505a55037a9f08c67ffecfba251856964d973252cbd7
Instruction Fuzzy Hash: 68216832610308ABE321AF64DC86B9DBBE8FB54320F2445ADF959972C1DB70A900CB65

Uniqueness

Uniqueness Score: -1.00%

Function 00AE4920, Relevance: 3.0, APIs: 2, Instructions: 41COMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBVCRUNTIME ref: 00AE5895

Part of subcall function 00AF3827: RaiseException.KERNEL32(?,?,00A860BB,?,00B6A044,?,00000007,?,?,?,?,00A860BB,?,00B63034,?), ref: 00AF3887

__CxxThrowException@8.LIBVCRUNTIME ref: 00AE58B2

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Exception@8Throw$ExceptionRaise
String ID:
API String ID: 3476068407-0
Opcode ID: fb036c850356c5c4361c9b33a902901e6f73ca09d357840021f41488a627e899
Instruction ID: e12599e777e385f2f6e3c1db0dafb1807a7df3853fa5001efde3977cf0567ffb
Opcode Fuzzy Hash: fb036c850356c5c4361c9b33a902901e6f73ca09d357840021f41488a627e899
Instruction Fuzzy Hash: 02F09031C0464D76CF00BBF6ED468AE777C5E01350F508270BA64A10E2EB74DA15D5D0

Uniqueness

Uniqueness Score: -1.00%

Function 00AFDCFC, Relevance: 3.0, APIs: 2, Instructions: 38threadCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(00B66398,00000010), ref: 00AFDD0F
ExitThread.KERNEL32 ref: 00AFDD16

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorExitLastThread
String ID:
API String ID: 1611280651-0
Opcode ID: 7426e08542bfa088e81195f9273e4281528c186909610acdfdda858d52d4e63b
Instruction ID: b5dc180d8ce97530750632286229d87cc6a87d352b55c14e6f4be6f0ed4e1af7
Opcode Fuzzy Hash: 7426e08542bfa088e81195f9273e4281528c186909610acdfdda858d52d4e63b
Instruction Fuzzy Hash: ADF0F670941308AFDB12AFB4D80ABAD3BB1FF44710F200588F5055B2A2CF75AC41DBA5

Uniqueness

Uniqueness Score: -1.00%

Function 00B0D3F3, Relevance: 1.6, APIs: 1, Instructions: 116COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 00B0D4C9

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: _free
String ID:
API String ID: 269201875-0
Opcode ID: 49419ddcdce4dcf9e3d8a3349748121868d29cc8abeb3b7f7758438166b0f9d6
Instruction ID: e3375a119d2d67aa34b5e40553c5c01dda332f70af2a279b5b8ab642fd3d320f
Opcode Fuzzy Hash: 49419ddcdce4dcf9e3d8a3349748121868d29cc8abeb3b7f7758438166b0f9d6
Instruction Fuzzy Hash: 2D414176A007148FDB18CFA9D88456EBBF1EF8D320B15859AE515EB3E1DB70AC41CB41

Uniqueness

Uniqueness Score: -1.00%

Function 00A720B0, Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(?,5CC80E5B,?,00000001,?,?), ref: 00A7213F

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: b2170939e0c8175d24f3078466e86d5e579cf144fe2e4ea69c4094e217cba4fb
Instruction ID: 619a3e803f697fdc4b492ceba26116d6ff939585bb111fdee0d7b9d172525bfb
Opcode Fuzzy Hash: b2170939e0c8175d24f3078466e86d5e579cf144fe2e4ea69c4094e217cba4fb
Instruction Fuzzy Hash: 9511FEB5A0021C9BDF10DF55DD81BEAB7BCEB44304F4181EAAB19E3241DB70AE858F94

Uniqueness

Uniqueness Score: -1.00%

Function 00A4A0B0, Relevance: 1.6, APIs: 1, Instructions: 57COMMON

Download Yara Rule

APIs

Part of subcall function 00A88AC1: EnterCriticalSection.KERNEL32(00B7148C,00B2DAF8,?,?,00A44161,00000000,00B2DAF8,?,?,?,?,00A436E1,00B2DAF8,?,?,?), ref: 00A88ACC
Part of subcall function 00A88AC1: LeaveCriticalSection.KERNEL32(00B7148C,?,00A44161,00000000,00B2DAF8,?,?,?,?,00A436E1,00B2DAF8,?,?,?,00B2DAF8,00B21BE8), ref: 00A88AF8

FindResourceExW.KERNEL32(00000000,00000006,00000000,?,00000000,?,?,?,?,?,00A4B503,?,00000000,?,?,?), ref: 00A4A0E7

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalSection$EnterFindLeaveResource
String ID:
API String ID: 2190064429-0
Opcode ID: 014240056d574f68b8004b70adf5e4d7e5a0bfbadd596d1491e03ef7c2bb3224
Instruction ID: a15299f8ea75db0d6a1a5cd4649bd6808bf58b3452759778821dca75630e74c1
Opcode Fuzzy Hash: 014240056d574f68b8004b70adf5e4d7e5a0bfbadd596d1491e03ef7c2bb3224
Instruction Fuzzy Hash: 4301AD77B811146BEB20AA5DBC42B7BB79CDBD57A4F04026AFD4AD7341DA218D0046F2

Uniqueness

Uniqueness Score: -1.00%

Function 00AFE2A2, Relevance: 1.5, APIs: 1, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b72699ba776d6631641cac9c10a518a4f10016841a410272c12a622893731b13
Instruction ID: f9c764ea6c48ed80c8f426d8f203ffa3c82cd7480b72c3ccc088d415ee8e474e
Opcode Fuzzy Hash: b72699ba776d6631641cac9c10a518a4f10016841a410272c12a622893731b13
Instruction Fuzzy Hash: 6EF0CD3250461C66D631BBA9CC09AFB33D89F42334F140B55F765971E1DB74D8428696

Uniqueness

Uniqueness Score: -1.00%

Function 00B111D6, Relevance: 1.5, APIs: 1, Instructions: 39memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00B10055,00000001,00000364,?,00AFDD21,00B66398,00000010), ref: 00B11217

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: f08ddb9b40a67531f7222ff72d2c3af23d7b5420a0291112dc0ec8e35c08095c
Instruction ID: 6559adf2144717663999747ae80ed4a63d91c09a950ddda15188b7f74032e7dd
Opcode Fuzzy Hash: f08ddb9b40a67531f7222ff72d2c3af23d7b5420a0291112dc0ec8e35c08095c
Instruction Fuzzy Hash: FBF0E93260812467DB215F6EEC45ADF7BC8EF45761B584991FE18E7190CB30DD8086E1

Uniqueness

Uniqueness Score: -1.00%

Function 00A72F00, Relevance: 1.5, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

SHSetValueW.SHLWAPI(00000000,00000000,00000000,00000001,00B2DAF8,00B2DAFA,?,00A7E622,80000002,Software\LDSGameCenterExtra,LastRunVer), ref: 00A72F50

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: 076096be96b4119c7c29af7fd86319a5652c32e8ab83f42ff6e9d6953965dbdd
Instruction ID: 7dd1be50e972b3a4e02f01a06699e4ee175082a3c075bde5fe55a930c4c4ecdb
Opcode Fuzzy Hash: 076096be96b4119c7c29af7fd86319a5652c32e8ab83f42ff6e9d6953965dbdd
Instruction Fuzzy Hash: 9FF049351142099FDF249F68ED08BBA37F9EB45709F04C06AFC2E866A0D372D966CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00B101B0, Relevance: 1.5, APIs: 1, Instructions: 32memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,?,00000000,?,00B16929,00000000,?,?,00AFC193,?,00000008,?,00B0B90E,00000000,00000000), ref: 00B101E2

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 8a3a067bb138fb4e55e7782b97130d5b106490ee76e519373038581ae05c507e
Instruction ID: d58f90caf000fde42d56db2a7375c0f7f160659b9dda3cfb71de006ceaabaeab
Opcode Fuzzy Hash: 8a3a067bb138fb4e55e7782b97130d5b106490ee76e519373038581ae05c507e
Instruction Fuzzy Hash: 6FE06D311652647BE7223B669D44FDE3ADAEB417A0F9901A0FC15F71D0DBA8CDE082A1

Uniqueness

Uniqueness Score: -1.00%

Function 00A71CC0, Relevance: 1.5, APIs: 1, Instructions: 19COMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(-00000080,?,00A4CE91,00000001,00000001,00000001,-00000080,\Utils\7z.dll,?,?,?,00000001), ref: 00A71CC6

Part of subcall function 00A88E20: PathFileExistsW.SHLWAPI(-00000080,5CC80E5B,000000FF,00000001,00000000), ref: 00A88E65
Part of subcall function 00A88E20: GetVersionExW.KERNEL32(0000011C), ref: 00A88E9A

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ExistsFilePath$Version
String ID:
API String ID: 75566183-0
Opcode ID: 633faca9a1954b8df59450ba8a816b40b5417d4778bf7bf04b9e65ca8b2466d4
Instruction ID: 51b5b0d73faf53db54905486db8fb00de27b5a723b56837ddcfaaafac62faf39
Opcode Fuzzy Hash: 633faca9a1954b8df59450ba8a816b40b5417d4778bf7bf04b9e65ca8b2466d4
Instruction Fuzzy Hash: 01D09E3529420867EF222FE9ED05B553B9DAB00394F44C031BC0D851A1EB76D995DA95

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00A8C8E0, Relevance: 99.0, APIs: 49, Strings: 7, Instructions: 1045
COMMONCrypto

Download Yara Rule

C-Code - Quality: 83%

			E00A8C8E0(void* __ebx, void* __ecx, void* __edi, void* __esi, intOrPtr _a4, signed int _a8, unsigned int _a12, long _a16) {
				int _v8;
				char _v16;
				signed int _v20;
				short _v540;
				struct HDC__* _v542;
				struct HDC__* _v550;
				struct tagRECT _v556;
				int _v560;
				long _v564;
				long _v568;
				int _v572;
				struct tagRECT _v588;
				long _v596;
				long _v600;
				char _v604;
				void* _v608;
				signed int _v612;
				struct HDC__* _v614;
				RECT* _v616;
				unsigned int _v620;
				long _v624;
				struct HDC__* _v628;
				struct tagPAINTSTRUCT _v668;
				struct tagPAINTSTRUCT _v732;
				char _v864;
				struct tagRECT _v880;
				int _v924;
				int _v928;
				int _v932;
				struct tagPAINTSTRUCT _v944;
				signed int _v948;
				long _v952;
				struct tagPOINT _v960;
				struct tagPOINT _v968;
				struct tagPOINT _v976;
				char _v977;
				struct HDC__* _v984;
				long _v988;
				char _v992;
				void* _v996;
				char _v1000;
				unsigned int _v1004;
				long _v1008;
				signed int _t693;
				signed int _t694;
				long _t705;
				long _t712;
				intOrPtr* _t716;
				void* _t718;
				long _t719;
				long _t720;
				long _t721;
				long _t726;
				long _t729;
				void* _t730;
				struct HWND__* _t738;
				unsigned int _t748;
				unsigned int _t751;
				struct HDC__* _t753;
				long _t757;
				long _t758;
				long _t761;
				long _t765;
				struct HWND__* _t768;
				struct HWND__* _t769;
				struct HWND__* _t774;
				struct HWND__* _t778;
				struct HWND__* _t784;
				long _t788;
				long _t790;
				struct HWND__* _t801;
				void* _t805;
				long _t809;
				long _t827;
				unsigned int _t846;
				struct HWND__* _t848;
				long _t854;
				struct HWND__* _t855;
				void* _t866;
				struct HWND__* _t868;
				long _t872;
				long _t873;
				void* _t875;
				long _t881;
				struct HWND__* _t886;
				void* _t889;
				intOrPtr* _t901;
				void* _t903;
				void* _t904;
				intOrPtr* _t910;
				void* _t915;
				long _t926;
				long _t950;
				long _t951;
				struct HWND__* _t961;
				unsigned int _t962;
				struct HWND__* _t963;
				long _t964;
				long _t971;
				struct HWND__* _t983;
				long _t984;
				long _t985;
				long _t986;
				struct HWND__* _t991;
				unsigned int _t998;
				struct HWND__* _t1000;
				struct HWND__* _t1006;
				intOrPtr _t1022;
				long _t1026;
				long _t1027;
				long _t1028;
				int _t1031;
				signed int _t1036;
				struct HWND__** _t1052;
				int _t1054;
				int _t1055;
				void* _t1059;
				unsigned int _t1060;
				struct HINSTANCE__* _t1061;
				long _t1062;
				void* _t1064;
				int _t1065;
				long _t1066;
				long _t1067;
				long _t1069;
				long _t1073;
				int* _t1074;
				intOrPtr* _t1075;
				signed int _t1077;
				void* _t1078;
				void* _t1079;

				_t915 = __ebx;
				_push(0xffffffff);
				_push(0xb28446);
				_push( *[fs:0x0]);
				_t1079 = _t1078 - 0x3e0;
				_t693 =  *0xb6aa7c; // 0x5cc80e5b
				_t694 = _t693 ^ _t1077;
				_v20 = _t694;
				_push(__esi);
				_push(__edi);
				_push(_t694);
				 *[fs:0x0] =  &_v16;
				_t1052 = __ecx;
				_v996 = __ecx;
				_v948 = _a8;
				_v976.y = _a12;
				_v952 = _a16;
				if( *__ecx == 0) {
					L246:
					__eflags = 0;
					L247:
					 *[fs:0x0] = _v16;
					__eflags = _v20 ^ _t1077;
					return E00AE4BF8(_v20 ^ _t1077);
				} else {
					goto L1;
				}
				while(1) {
					L1:
					EnterCriticalSection( &(_t1052[0xc1]));
					_t1059 = E00A89F20( &(_t1052[0x6b]), 0);
					E00A8A420( &(_t1052[0x6b]), 0);
					LeaveCriticalSection( &(_t1052[0xc1]));
					if(_t1059 == 0) {
						break;
					}
					if( *((intOrPtr*)(_t1059 + 0x108)) == 0 || E00AA5B80() == 0 || E00AA5B90( *((intOrPtr*)(_t1059 + 0x108)) + 0x38, _t1059) == 0) {
						_v968.y = 0;
						_v960.y =  &(_t1052[0x59]);
						if(E00A89FD0( &(_t1052[0x59])) > 0) {
							_t1055 = _v968.y;
							while( *((intOrPtr*)(_t1059 + 0x108)) != 0) {
								_t910 = E00A897E0(_v960.y, _t1055);
								 *((intOrPtr*)( *_t910))(_t1059);
								_t1055 = _t1055 + 1;
								if(_t1055 < E00A89FD0(_v960.y)) {
									continue;
								}
								break;
							}
							_t1052 = _v996;
						}
						goto L10;
					} else {
						L10:
						_t24 = _t1059 + 0x84; // 0x84
						E00A754A0(_t24);
						E00A754A0(_t1059);
						_push(0x120);
						E00AE4950(_t1059);
						_t1079 = _t1079 + 8;
						continue;
					}
				}
				_v960.y = 0;
				_t705 = E00A89FD0( &(_t1052[0x62]));
				_t1060 = _v976.y;
				__eflags = _t705;
				if(_t705 <= 0) {
					L15:
					_t1022 = _a4;
					__eflags = _t1022 - 0x111;
					if(__eflags > 0) {
						__eflags = _t1022 - 0x200;
						if(__eflags > 0) {
							__eflags = _t1022 - 0x20a;
							if(__eflags > 0) {
								__eflags = _t1022 - 0x318;
								if(__eflags > 0) {
									__eflags = _t1022 - 0x31e;
									if(_t1022 == 0x31e) {
										_t1052[0xc0] = 0;
										_t1061 = LoadLibraryW(L"Dwmapi.dll");
										__eflags = _t1061;
										if(_t1061 != 0) {
											_t721 = GetProcAddress(_t1061, "DwmIsCompositionEnabled");
											__eflags = _t721;
											if(_t721 != 0) {
												 *_t721( &(_t1052[0xc0]));
											}
											FreeLibrary(_t1061);
										}
										while(1) {
											L236:
											EnterCriticalSection( &(_t1052[0xc1]));
											_t1062 = E00A89F20( &(_t1052[0x6b]), 0);
											E00A8A420( &(_t1052[0x6b]), 0);
											LeaveCriticalSection( &(_t1052[0xc1]));
											__eflags = _t1062;
											if(_t1062 == 0) {
												goto L246;
											}
											_t926 =  *(_t1062 + 0x108);
											__eflags = _t926;
											if(_t926 == 0) {
												L240:
												_v968.y = 0;
												_v960.y =  &(_t1052[0x59]);
												_t712 = E00A89FD0( &(_t1052[0x59]));
												__eflags = _t712;
												if(_t712 <= 0) {
													L245:
													_t689 = _t1062 + 0x84; // 0x84
													E00A754A0(_t689);
													E00A754A0(_t1062);
													_push(0x120);
													E00AE4950(_t1062);
													_t1079 = _t1079 + 8;
													continue;
												}
												_t1054 = _v968.y;
												while(1) {
													__eflags =  *(_t1062 + 0x108);
													if( *(_t1062 + 0x108) == 0) {
														break;
													}
													_t716 = E00A897E0(_v960.y, _t1054);
													 *((intOrPtr*)( *_t716))(_t1062);
													_t1054 = _t1054 + 1;
													_t718 = E00A89FD0(_v960.y);
													__eflags = _t1054 - _t718;
													if(_t1054 < _t718) {
														continue;
													}
													break;
												}
												_t1052 = _v996;
												goto L245;
											}
											_t719 = E00AA5B80();
											__eflags = _t719;
											if(_t719 == 0) {
												goto L240;
											}
											_t720 = E00AA5B90( *(_t1062 + 0x108) + 0x38, _t1062);
											__eflags = _t720;
											if(_t720 != 0) {
												goto L245;
											}
											goto L240;
										}
										goto L246;
									}
									__eflags = _t1022 - 0x8001;
									if(_t1022 != 0x8001) {
										goto L236;
									}
									E00A89420( &_v992,  &(_t1052[0x68]));
									_v8 = 0;
									E00A89BA0( &(_t1052[0x68]));
									_t1064 = 0;
									_t726 = E00A89FD0( &_v992);
									__eflags = _t726;
									if(_t726 <= 0) {
										L231:
										E00A89BA0( &_v992);
										_v8 = 0xffffffff;
										E00A89570( &_v992);
										goto L236;
									} else {
										goto L228;
									}
									do {
										L228:
										_t729 = E00A897E0( &_v992, _t1064);
										__eflags = _t729;
										if(_t729 != 0) {
											 *((intOrPtr*)( *_t729 + 4))();
										}
										_t1064 = _t1064 + 1;
										_t730 = E00A89FD0( &_v992);
										__eflags = _t1064 - _t730;
									} while (_t1064 < _t730);
									goto L231;
								}
								if(__eflags == 0) {
									GetClientRect( *_t1052,  &_v556);
									_t1065 = _v948;
									_v968.y = SaveDC(_t1065);
									 *((intOrPtr*)( *(_t1052[0x15]) + 0x160))(_t1065,  &_v556);
									__eflags = _v976.y & 0x00000010;
									if((_v976.y & 0x00000010) == 0) {
										L224:
										RestoreDC(_t1065, _v968.y);
										goto L236;
									}
									_t738 = GetWindow( *_t1052, 5);
									_v960.y = _t738;
									__eflags = _t738;
									if(_t738 == 0) {
										goto L224;
									}
									_t652 =  &(_v976.y);
									 *_t652 = _v976.y | 0x00000002;
									__eflags =  *_t652;
									do {
										asm("xorps xmm0, xmm0");
										asm("movups [ebp-0x248], xmm0");
										GetWindowRect(_t738,  &_v588);
										MapWindowPoints(0,  *_t1052,  &_v588, 2);
										SetWindowOrgEx(_t1065,  ~(_v588.left),  ~(_v588.top), 0);
										SendMessageW(_v960.y, 0x317, _t1065, _v976.y);
										_t738 = GetWindow(_v960.y, 2);
										_v960.y = _t738;
										__eflags = _t738;
									} while (_t738 != 0);
									goto L224;
								}
								_t1026 = _t1022 - 0x215;
								__eflags = _t1026;
								if(_t1026 == 0) {
									_t1027 = _t1052[0x19];
									__eflags = _t1027;
									if(_t1027 != 0) {
										_t748 = _v976.y;
										__eflags = _t748 -  *_t1052;
										if(_t748 !=  *_t1052) {
											asm("xorps xmm0, xmm0");
											_v556.right = _v948;
											asm("movlpd [ebp-0x230], xmm0");
											asm("movlpd [ebp-0x228], xmm0");
											_v572 = 0x1b;
											_v568 = _t1027;
											_v556.bottom = _t748;
											 *((intOrPtr*)( *_t1027 + 0x154))( &_v572);
										}
									}
									goto L236;
								}
								_t1028 = _t1026 - 0x8c;
								__eflags = _t1028;
								if(_t1028 == 0) {
									_t751 = _v976.y;
									_t950 = _t751;
									_v960.y = _t950;
									_t753 = _t751 >> 0x10;
									_v988 = _t950;
									_t951 = _t1052[0x15];
									_t1052[0x31] = 0;
									_v952 = _t753;
									_v984 = _t753;
									__eflags = _t951;
									if(_t951 == 0) {
										goto L236;
									}
									_t1066 =  *((intOrPtr*)( *((intOrPtr*)( *_t951 + 0x144))))( &M00A8FF00,  &_v988, 0xd);
									__eflags = _t1066;
									if(_t1066 == 0) {
										goto L236;
									}
									_t757 = IsWindowVisible( *_t1052);
									__eflags = _t757;
									if(_t757 != 0) {
										_t784 = GetFocus();
										_v968.y = _t784;
										__eflags = _t784 -  *_t1052;
										if(_t784 !=  *_t1052) {
											E00AF4C50(_t1052,  &_v540, 0, 0x208);
											_t788 = GetClassNameW(_v968.y,  &_v540, 0x104);
											__eflags = _t788;
											if(_t788 != 0) {
												_t790 = E00AFBA54(_t915, _t1052, _t1066,  &_v540, L"Internet Explorer_Server");
												__eflags = _t790;
												if(_t790 == 0) {
													SetFocus( *_t1052);
												}
											}
										}
									}
									_t758 = _t1052[0x18];
									__eflags = _t758;
									if(_t758 != 0) {
										asm("xorps xmm0, xmm0");
										_v560 = _v960.y;
										_v564 = 0;
										asm("movlpd [ebp-0x224], xmm0");
										_v556.bottom = 0;
										_v556.left = _v952;
										_v572 = 0xc;
										_v568 = _t758;
										_v564 = GetTickCount();
										 *((intOrPtr*)( *(_t1052[0x18]) + 0x150))( &_v572);
									}
									_t761 =  *((intOrPtr*)( *((intOrPtr*)( *_t1066 + 0xdc))))();
									__eflags = _t761;
									if(_t761 == 0) {
										goto L123;
									} else {
										 *((intOrPtr*)( *_t1066 + 0xd8))( &_v864);
										_v8 = 1;
										_t765 = E00A8A2F0( &_v864);
										_t956 =  &_v864;
										__eflags = _t765;
										if(_t765 == 0) {
											_t1052[0xc] = 0;
											_t1052[0xd] = 0;
											_t1052[0xe] = 0;
											_t1052[0xf] = 0;
											_t1052[0x10] = 0;
											_t1052[0x11] = 0;
											_t1052[0x12] = 0;
											_t1052[0x13] = 0;
											_t768 =  *_t1052;
											_t1052[8] = 0x30;
											_t1052[9] = 1;
											_t1052[0xa] = _t768;
											_t1052[0xb] = _t768;
											_t769 =  *0xb714b8; // 0x0
											_t1052[0x10] = _t769;
											_t1052[0x11] = E00A5A690( &_v864);
											 *((intOrPtr*)( *((intOrPtr*)( *_t1066 + 0x3c))))();
											asm("movups xmm0, [eax]");
											_t774 = _t1052[7];
											asm("movups [edi+0x30], xmm0");
											__eflags = _t774;
											if(_t774 != 0) {
												_t1067 =  &(_t1052[8]);
											} else {
												_t778 = CreateWindowExW(_t774, L"tooltips_class32", _t774, 0x80000003, 0x80000000, 0x80000000, 0x80000000, 0x80000000,  *_t1052, _t774,  *0xb714b8, _t774);
												_t1067 =  &(_t1052[8]);
												_t1052[7] = _t778;
												SendMessageW(_t778, 0x432, 0, _t1067);
												_t774 = _t1052[7];
											}
											SendMessageW(_t774, 0x436, 0, _t1067);
											SendMessageW(_t1052[7], 0x411, 1, _t1067);
											_t956 =  &_v864;
										}
										E00A754A0(_t956);
										goto L247;
									}
								}
								_t1031 = _t1028 - 2;
								__eflags = _t1031;
								if(_t1031 == 0) {
									_t961 = _t1052[7];
									__eflags = _t961;
									if(_t961 != 0) {
										SendMessageW(_t961, 0x411, _t1031,  &(_t1052[8]));
									}
									__eflags = _t1052[0x31];
									if(_t1052[0x31] != 0) {
										SendMessageW( *_t1052, 0x200, 0, 0xffffffff);
									}
									_t1052[0x31] = 0;
								}
								goto L236;
							}
							if(__eflags == 0) {
								_t962 = _v976.y;
								_v960.x = _t962;
								_v960.y = _t962 >> 0x10;
								ScreenToClient( *_t1052,  &_v960);
								_t963 = _v960.x;
								_t801 = _v960.y;
								_t1052[0x1b] = _t963;
								_v988 = _t963;
								_t964 = _t1052[0x15];
								_t1052[0x1c] = _t801;
								_v984 = _t801;
								__eflags = _t964;
								if(_t964 == 0) {
									goto L236;
								}
								_t1069 =  *((intOrPtr*)( *((intOrPtr*)( *_t964 + 0x144))))( &M00A8FF00,  &_v988, 0xd);
								_v968.y = _t1069;
								__eflags = _t1069;
								if(_t1069 == 0) {
									goto L236;
								}
								_t805 =  *((intOrPtr*)( *((intOrPtr*)( *_t1069 + 0x20))))();
								__eflags = _t805 - _t1052;
								if(_t805 != _t1052) {
									goto L236;
								}
								_t809 = E00AFBA54(_t915, _t1052, _t1069,  *((intOrPtr*)( *((intOrPtr*)( *_t1069 + 0x10))))(), L"WebBrowserUI");
								_t1079 = _t1079 + 8;
								__eflags = _t809;
								if(_t809 != 0) {
									L190:
									asm("xorps xmm0, xmm0");
									_v568 = _t1069;
									asm("movlpd [ebp-0x230], xmm0");
									asm("movlpd [ebp-0x228], xmm0");
									_v572 = 0x12;
									_v556.right = (_v948 >> 0x00000010 & 0x0000ffff) >> 0xf;
									_v556.bottom = _v976.y;
									_v550 = E00A8C890();
									_v564 = GetTickCount();
									 *((intOrPtr*)( *(_v968.y) + 0x150))( &_v572);
									SendMessageW( *_t1052, 0x200, 0, (_t1052[0x1c] & 0x0000ffff) << 0x00000010 | _t1052[0x1b] & 0x0000ffff);
									goto L236;
								}
								_t971 = _t1052[0x16];
								__eflags = _t971;
								if(__eflags == 0) {
									L189:
									asm("xorps xmm0, xmm0");
									_v604 = 0x15;
									asm("movlpd [ebp-0x250], xmm0");
									asm("movlpd [ebp-0x248], xmm0");
									asm("movlpd [ebp-0x240], xmm0");
									_v600 = _t1069;
									_v596 = GetTickCount();
									 *((intOrPtr*)( *_t1069 + 0x150))( &_v604);
									E00A8EFC0(_t915, _t1052, _t1052, _t1069, __eflags, _t1069, L"setfocus", 0, 0, 0);
									goto L190;
								}
								_t827 = E00AFBA54(_t915, _t1052, _t1069,  *((intOrPtr*)( *((intOrPtr*)( *_t971 + 0x10))))(), L"EditUI");
								_t1079 = _t1079 + 8;
								__eflags = _t827;
								if(__eflags == 0) {
									goto L190;
								}
								goto L189;
							}
							_t1036 = _t1022 + 0xfffffdff;
							__eflags = _t1036 - 3;
							if(_t1036 > 3) {
								goto L236;
							}
							switch( *((intOrPtr*)(_t1036 * 4 +  &M00A8E70C))) {
								case 0:
									_t828 = GetFocus();
									_t975 =  *_t1052;
									__eflags = _t828 - _t975;
									if(_t828 != _t975) {
										_t844 = IsChild(_t975, _t828);
										__eflags = _t844;
										if(_t844 == 0) {
											SetFocus( *_t1052);
										}
									}
									_t829 = _v976.y;
									_t976 = _t829;
									_t831 = _t829 >> 0x10;
									_v968.y = _t976;
									_t1052[0x1b] = _t976;
									_v988 = _t976;
									_t977 = _t1052[0x15];
									_v960.y = _t831;
									_t1052[0x1c] = _t831;
									_v984 = _t831;
									__eflags = _t977;
									if(_t977 != 0) {
										_push(0xd);
										_push( &_v988);
										_push( &M00A8FF00);
										_t1071 =  *((intOrPtr*)( *((intOrPtr*)( *_t977 + 0x144))))();
										_v952 = _t1071;
										__eflags = _t1071;
										if(_t1071 != 0) {
											_t835 =  *((intOrPtr*)( *((intOrPtr*)(_t1071->i + 0x20))))();
											__eflags = _t835 - _t1052;
											if(_t835 == _t1052) {
												_t1052[0x19] = _t1071;
												 *((intOrPtr*)( *_t1071 + 0x134))();
												SetCapture( *_t1052);
												_v556.top = 0;
												_t840 = _v948;
												_v568 = _t1071;
												_v560 = _v968.y;
												_t1052[0x31] = 1;
												_v564 = 0;
												_v572 = 0xd;
												_v556.right = _t840;
												_v556.bottom = _v976.y;
												_v556.left = _v960.y;
												_v550 = _t840;
												_v564 = GetTickCount();
												_push( &_v572);
												 *((intOrPtr*)( *_v952 + 0x150))();
											}
										}
									}
									goto L236;
								case 1:
									__eax = _v976.y;
									__ecx = __ax;
									__eax = _v976.y >> 0x10;
									__eflags = __edi[0x19];
									__ax = __eax;
									_v968.y = __ecx;
									_v960.y = __eax;
									__edi[0x1b] = __ecx;
									__edi[0x1c] = __eax;
									if(__edi[0x19] == 0) {
										goto L236;
									}
									__eax = ReleaseCapture();
									__ecx = _v968.y;
									__eax = 0;
									__eflags = 0;
									__esi = _v976.y;
									_v556.top = __ax;
									__eax = __edi[0x19];
									_v568 = __edi[0x19];
									__eax = _v948;
									_v560 = _v968.y;
									__ecx = _v960.y;
									_v572 = 0xe;
									_v556.right = _v948;
									_v556.bottom = _v976.y;
									_v556.left = _v960.y;
									L178:
									_v550 = __ax;
									_v564 = 0;
									__edi[0x31] = 0;
									__eax = GetTickCount();
									__ecx = __edi[0x19];
									__edx =  &_v572;
									_v564 = __eax;
									_push( &_v572);
									 *__ecx =  *((intOrPtr*)( *__ecx + 0x150))();
									__edi[0x19] = 0;
									goto L236;
								case 2:
									SetFocus( *__edi) = _v976.y;
									__ecx = __ax;
									__eax = _v976.y >> 0x10;
									__ax = __eax;
									_v968.y = __ecx;
									__edi[0x1b] = __ecx;
									_v988 = __ecx;
									__ecx = __edi[0x15];
									_v960.y = __eax;
									__edi[0x1c] = __eax;
									_v984 = __eax;
									__eflags = __ecx;
									if(__ecx == 0) {
										goto L236;
									}
									__eax =  *__ecx;
									__edx =  &_v988;
									_push(0xd);
									_push( &_v988);
									_push( &M00A8FF00);
									 *( *__ecx + 0x144) =  *( *( *__ecx + 0x144))();
									__esi =  *( *__ecx + 0x144);
									__eflags = __esi;
									if(__esi == 0) {
										goto L236;
									}
									__edx =  *__esi;
									__ecx = __esi;
									__edx =  *( *__esi + 0x20);
									__eax =  *( *( *__esi + 0x20))();
									__eflags = __eax - __edi;
									if(__eax != __edi) {
										goto L236;
									}
									SetCapture( *__edi) = 0;
									__eflags = 0;
									__edi[0x31] = 1;
									_v556.top = __ax;
									asm("xorps xmm0, xmm0");
									__eax = _v968.y;
									_v560 = _v968.y;
									__eax = _v960.y;
									_v556.left = _v960.y;
									__eax = _v948;
									_v564 = 0;
									asm("movlpd [ebp-0x220], xmm0");
									_v572 = 0x10;
									_v568 = __esi;
									_v550 = __ax;
									__eax = GetTickCount();
									goto L175;
								case 3:
									SetFocus( *__edi) = _v976.y;
									__ecx = __ax;
									__eax = _v976.y >> 0x10;
									__ax = __eax;
									_v968.y = __ecx;
									__edi[0x1b] = __ecx;
									_v988 = __ecx;
									__ecx = __edi[0x15];
									_v960.y = __eax;
									__edi[0x1c] = __eax;
									_v984 = __eax;
									__eflags = __ecx;
									if(__ecx == 0) {
										goto L236;
									}
									__eax =  *__ecx;
									__edx =  &_v988;
									_push(0xd);
									_push( &_v988);
									_push( &M00A8FF00);
									 *( *__ecx + 0x144) =  *( *( *__ecx + 0x144))();
									__esi =  *( *__ecx + 0x144);
									_v952 = __esi;
									__eflags = __esi;
									if(__esi == 0) {
										goto L236;
									}
									__edx =  *__esi;
									__ecx = __esi;
									__edx =  *( *__esi + 0x20);
									__eax =  *( *( *__esi + 0x20))();
									__eflags = __eax - __edi;
									if(__eax != __edi) {
										goto L236;
									}
									__eax =  *__esi;
									__ecx = __esi;
									 *((intOrPtr*)( *__esi + 0x134))() = SetCapture( *__edi);
									__ecx = _v968.y;
									__eax = 0;
									_v556.top = __ax;
									__eax = _v948;
									_v568 = __esi;
									__esi = _v976.y;
									_v560 = _v968.y;
									__ecx = _v960.y;
									__edi[0x31] = 1;
									_v564 = 0;
									_v572 = 0xf;
									_v556.right = _v948;
									_v556.bottom = _v976.y;
									_v556.left = _v960.y;
									_v550 = __ax;
									__eax = GetTickCount();
									__esi = _v952;
									L175:
									_v564 = __eax;
									__ecx =  &_v572;
									__eax =  *__esi;
									_push( &_v572);
									__ecx = __esi;
									__eax =  *((intOrPtr*)( *__esi + 0x150))();
									__edi[0x19] = __esi;
									goto L236;
							}
						}
						if(__eflags == 0) {
							__eflags = _t1052[0x31];
							if(_t1052[0x31] == 0) {
								_v588.right =  *_t1052;
								_t868 = _t1052[7];
								_v588.left = 0x10;
								_v588.top = 3;
								__eflags = _t868;
								if(_t868 != 0) {
									_v588.bottom = SendMessageW(_t868, 0x415, 3, 0);
								} else {
									_v588.bottom = 0x190;
								}
								__imp___TrackMouseEvent( &_v588);
								_t1052[0x31] = 1;
							}
							_t846 = _v976.y;
							_t983 = _t846;
							_t848 = _t846 >> 0x10;
							_v968.y = _t983;
							_t1052[0x1b] = _t983;
							_v988 = _t983;
							_t984 = _t1052[0x15];
							_v960.y = _t848;
							_t1052[0x1c] = _t848;
							_v984 = _t848;
							__eflags = _t984;
							if(_t984 != 0) {
								_t1073 =  *((intOrPtr*)( *((intOrPtr*)( *_t984 + 0x144))))( &M00A8FF00,  &_v988, 0xd);
								__eflags = _t1073;
								if(_t1073 == 0) {
									goto L149;
								}
								_t866 =  *((intOrPtr*)( *((intOrPtr*)( *_t1073 + 0x20))))();
								__eflags = _t866 - _t1052;
								if(_t866 != _t1052) {
									goto L236;
								}
								goto L149;
							} else {
								_t1073 = 0;
								L149:
								asm("xorps xmm0, xmm0");
								_v560 = _v968.y;
								asm("movlpd [ebp-0x238], xmm0");
								asm("movlpd [ebp-0x224], xmm0");
								_v556.bottom = 0;
								_v556.left = _v960.y;
								_t854 = GetTickCount();
								_t985 = _t1052[0x18];
								_v564 = _t854;
								_t855 = _t985;
								__eflags = _t1073 - _t985;
								if(_t1073 != _t985) {
									__eflags = _t985;
									if(_t985 != 0) {
										_v572 = 0xa;
										_v568 = _t985;
										 *((intOrPtr*)( *_t985 + 0x150))( &_v572);
										_t991 = _t1052[7];
										_t855 = 0;
										_t1052[0x18] = 0;
										__eflags = _t991;
										if(_t991 != 0) {
											SendMessageW(_t991, 0x411, 0,  &(_t1052[8]));
											_t855 = _t1052[0x18];
										}
									}
								}
								__eflags = _t1073 - _t855;
								if(_t1073 != _t855) {
									__eflags = _t1073;
									if(_t1073 != 0) {
										_v572 = 0xb;
										_v568 = _t1073;
										 *((intOrPtr*)( *_t1073 + 0x150))( &_v572);
										_t1052[0x18] = _t1073;
									}
								}
								_t986 = _t1052[0x19];
								__eflags = _t986;
								if(_t986 == 0) {
									__eflags = _t1073;
									if(_t1073 != 0) {
										_v572 = 9;
										_v568 = _t1073;
										 *((intOrPtr*)( *_t1073 + 0x150))( &_v572);
									}
								} else {
									_v572 = 9;
									_v568 = _t986;
									 *((intOrPtr*)( *_t986 + 0x150))( &_v572);
								}
								goto L236;
							}
						}
						_t872 = _t1022 - 0x113;
						__eflags = _t872;
						if(_t872 == 0) {
							_t1074 = 0;
							_v960.y = 0;
							_t873 = E00A89FD0( &(_t1052[0x5c]));
							__eflags = _t873;
							if(_t873 <= 0) {
								goto L236;
							} else {
								goto L134;
							}
							do {
								L134:
								_t1075 = E00A897E0( &(_t1052[0x5c]), _t1074);
								__eflags =  *((intOrPtr*)(_t1075 + 8)) -  *_t1052;
								if( *((intOrPtr*)(_t1075 + 8)) !=  *_t1052) {
									goto L137;
								}
								__eflags =  *((intOrPtr*)(_t1075 + 0xc)) - (_v948 & 0x0000ffff);
								if( *((intOrPtr*)(_t1075 + 0xc)) != (_v948 & 0x0000ffff)) {
									goto L137;
								}
								__eflags =  *((char*)(_t1075 + 0x10));
								if( *((char*)(_t1075 + 0x10)) == 0) {
									_t998 =  *_t1075;
									asm("xorps xmm0, xmm0");
									asm("movlpd [ebp-0x230], xmm0");
									asm("movlpd [ebp-0x228], xmm0");
									_v572 = 0x18;
									_v568 = _t998;
									_v556.right =  *((intOrPtr*)(_t1075 + 4));
									_v556.bottom = _t998;
									_v564 = GetTickCount();
									 *((intOrPtr*)( *((intOrPtr*)( *_t1075)) + 0x150))( &_v572);
									goto L236;
								}
								L137:
								_t1074 =  &(_v960.y->i);
								_v960.y = _t1074;
								_t875 = E00A89FD0( &(_t1052[0x5c]));
								__eflags = _t1074 - _t875;
							} while (_t1074 < _t875);
							goto L236;
						}
						_t881 = _t872 - 0x20;
						__eflags = _t881;
						if(_t881 == 0) {
							L131:
							_t1000 = _v976.y;
							__eflags = _t1000;
							if(_t1000 == 0) {
								goto L236;
							}
							 *_v952 = SendMessageW(_t1000, _t1022 + 0x2000, _v948, _t1000);
							goto L247;
						}
						__eflags = _t881 != 5;
						if(_t881 != 5) {
							goto L236;
						}
						goto L131;
					}
					if(__eflags == 0) {
						_t886 = _v976.y;
						__eflags = _t886;
						if(_t886 == 0) {
							goto L236;
						}
						 *_v952 = SendMessageW(_t886, 0x2111, _v948, _t886);
						goto L247;
					}
					_t889 = _t1022 - 5;
					__eflags = _t889 - 0xfd;
					if(_t889 > 0xfd) {
						goto L236;
					}
					switch( *((intOrPtr*)(( *(_t889 + 0xa8e60c) & 0x000000ff) * 4 +  &M00A8E5DC))) {
						case 0:
							__eax = __edi[0x16];
							__eflags = __eax;
							if(__eax != 0) {
								asm("xorps xmm0, xmm0");
								_v572 = 0x16;
								asm("movlpd [ebp-0x230], xmm0");
								asm("movlpd [ebp-0x228], xmm0");
								asm("movlpd [ebp-0x220], xmm0");
								_v568 = __eax;
								__eax = GetTickCount();
								__ecx = __edi[0x16];
								__edx =  &_v572;
								_v564 = __eax;
								_push( &_v572);
								 *(__edi[0x16]) =  *((intOrPtr*)( *(__edi[0x16]) + 0x150))();
							}
							__ecx = __edi[0x15];
							__eflags = __ecx;
							if(__ecx == 0) {
								goto L123;
							} else {
								__eax = L00A9A840(__ecx);
								__al = 1;
								goto L247;
							}
						case 1:
							__eax =  &_v588;
							asm("xorps xmm0, xmm0");
							asm("movups [ebp-0x248], xmm0");
							__eax = GetUpdateRect( *__edi,  &_v588, 0);
							__eflags = __eax;
							if(__eax == 0) {
								goto L123;
							}
							__eflags = __edi[0x15];
							if(__edi[0x15] != 0) {
								__eax = _v588.right;
								__edx = 1;
								__ecx = _v588.bottom;
								__eax = _v588.right - _v588.left;
								__ecx = _v588.bottom - _v588.top;
								_v960.y = 1;
								__eflags = __eax - __edi[0x23];
								if(__eax == __edi[0x23]) {
									__esi = 0;
									__eflags = __ecx - __edi[0x24];
									__edx =  ==  ? 0 : 1;
									_v960.y =  ==  ? 0 : 1;
								}
								__eflags = __edi[0x31];
								__edi[0x23] = __eax;
								__edi[0x24] = __ecx;
								if(__edi[0x31] == 0) {
									__eflags = __edi[0x30];
									__esi = GetClientRect;
									if(__edi[0x30] == 0) {
										L80:
										__eflags = __edi[0x30];
										if(__edi[0x30] != 0) {
											__ecx = __edi;
											__eax = E00A8F6A0(__edi, 1);
										}
										__eflags = __edi[0x30];
										if(__edi[0x30] != 0) {
											__eflags = __edi[5];
											if(__edi[5] == 0) {
												__eax =  &_v880;
												asm("xorps xmm0, xmm0");
												_push( &_v880);
												_push( *__edi);
												asm("movups [ebp-0x36c], xmm0");
												__eax =  *__esi();
												__edi[3] = CreateCompatibleDC(__edi[2]);
												_v880.bottom = _v880.bottom - _v880.top;
												__eax = _v880.right;
												__eax = _v880.right - _v880.left;
												__eflags = __eax;
												__edi[5] = __eax;
											}
										}
										 &_v944 = E00AF4C50(__edi,  &_v944, 0, 0x40);
										 &_v944 = BeginPaint( *__edi,  &_v944);
										__eflags = __edi[0x30];
										if(__edi[0x30] == 0) {
											__eax = SaveDC(_v944.hdc);
											__ecx = __edi[0x15];
											__esi = __eax;
											__eax =  &(_v944.rcPaint);
											_push( &(_v944.rcPaint));
											_push(_v944.hdc);
											__edx =  *__ecx;
											 *((intOrPtr*)( *__ecx + 0x160))() = RestoreDC(_v944.hdc, __esi);
											goto L92;
										} else {
											_v996 = SelectObject(__edi[3], __edi[5]);
											__eax = SaveDC(__edi[3]);
											__ecx = __edi[0x15];
											_v968.y = __eax;
											__eax =  &(_v944.rcPaint);
											_push( &(_v944.rcPaint));
											_push(__edi[3]);
											__edx =  *(__edi[0x15]);
											__eax =  *((intOrPtr*)( *(__edi[0x15]) + 0x160))();
											__ecx =  &(__edi[0x65]);
											__esi = 0;
											__eax = E00A89FD0( &(__edi[0x65]));
											__eflags = __eax;
											if(__eax <= 0) {
												L89:
												__eax = RestoreDC(__edi[3], _v968.y);
												__edx = _v932;
												__ecx = _v944.rcPaint;
												_v924 = _v924 - __edx;
												_v928 = _v928 - __ecx;
												__eax = BitBlt(_v944.hdc, __ecx, __edx, _v928 - __ecx, _v924 - __edx, __edi[3], __ecx, __edx, 0xcc0020);
												__esi = SelectObject;
												__eax = SelectObject(__edi[3], _v996);
												__eflags = __edi[0x14];
												if(__edi[0x14] != 0) {
													__esi = SelectObject(_v944.hdc,  *0xb714cc);
													GetStockObject(5) = SelectObject(_v944.hdc, __eax);
													Rectangle(_v944.hdc, _v588, _v588.top, _v588.right, _v588.bottom) = SelectObject(_v944, __esi);
												}
												L92:
												 &_v944 = EndPaint( *__edi,  &_v944);
												__eflags = __edi[0x30];
												if(__edi[0x30] == 0) {
													goto L123;
												}
												__eax = InvalidateRect( *__edi, 0, 0);
												__al = 1;
												goto L247;
											}
											do {
												__ecx =  &(__edi[0x65]);
												__eax = E00A897E0( &(__edi[0x65]), __esi);
												__ecx =  &(_v944.rcPaint);
												_push( &(_v944.rcPaint));
												_push(__edi[3]);
												__edx = __eax->i;
												__ecx = __eax;
												__eax =  *((intOrPtr*)(__eax->i + 0x178))();
												__ecx =  &(__edi[0x65]);
												__esi = __esi + 1;
												__eax = E00A89FD0( &(__edi[0x65]));
												__eflags = __esi - __eax;
											} while (__esi < __eax);
											goto L89;
										}
									}
									__eax =  &_v556;
									__edi[0x30] = 0;
									asm("xorps xmm0, xmm0");
									asm("movups [ebp-0x228], xmm0");
									GetClientRect( *__edi,  &_v556) =  &_v556;
									__eax = IsRectEmpty( &_v556);
									__eflags = __eax;
									if(__eax != 0) {
										goto L80;
									}
									__ecx = __edi[0x15];
									__eax = L00A9A6E0(__edi[0x15]);
									__ecx = __edi[0x15];
									__eflags = __al;
									if(__al == 0) {
										__eax =  *__ecx;
										_push(0x80000001);
										_push(0);
										_push( &M00A8FFF0);
										__eax =  *( *__ecx + 0x144);
										__eax =  *( *( *__ecx + 0x144))();
										_v952 = __eax;
										__eflags = __eax;
										if(__eax == 0) {
											L76:
											__eflags = __edi[0x30];
											if(__eflags != 0) {
												__ecx = __edi;
												__edi[0x30] = 0;
												__eax = E00A8EFC0(__ebx, __edi, __edi, __esi, __eflags, __edi[0x15], L"windowinit", 0, 0, 0);
											}
											__ecx = __edi;
											__eax = E00A8EFC0(__ebx, __edi, __edi, __esi, __eflags, __edi[0x15], L"windowresized", 0, 0, 0);
											__eflags = _v960.y;
											if(__eflags != 0) {
												__ecx = __edi;
												__eax = E00A8EFC0(__ebx, __edi, __edi, __esi, __eflags, __edi[0x15], L"window_size_changed", 0, 0, 0);
											}
											goto L80;
										} else {
											goto L74;
										}
										do {
											L74:
											__esi = __eax->i;
											__ecx = __eax;
											__edx =  *(__esi + 0x3c);
											__eax =  *( *(__esi + 0x3c))();
											__esp = __esp - 0x10;
											__ecx = __esp;
											asm("movups xmm0, [eax]");
											asm("movups [ecx], xmm0");
											__ecx = _v952;
											__eax =  *((intOrPtr*)(__esi + 0x40))();
											__ecx = __edi[0x15];
											_push(0x80000001);
											_push(0);
											_push( &M00A8FFF0);
											 *(__edi[0x15]) =  *( *(__edi[0x15]) + 0x144);
											__eax =  *( *( *(__edi[0x15]) + 0x144))();
											_v952 = __eax;
											__eflags = __eax;
										} while (__eax != 0);
										L75:
										__esi = GetClientRect;
										goto L76;
									}
									asm("movups xmm0, [ebp-0x228]");
									__edx =  *__ecx;
									__esp = __esp - 0x10;
									__eax = __esp;
									asm("movups [eax], xmm0");
									__eax =  *((intOrPtr*)( *__ecx + 0x40))();
									__eax = __edi[3];
									__eflags = __eax;
									if(__eax != 0) {
										__eax = DeleteDC(__eax);
									}
									__eax = __edi[5];
									__esi = DeleteObject;
									__eflags = __eax;
									if(__eax != 0) {
										__eax = DeleteObject(__eax);
									}
									__eflags = __edi[0x31];
									__edi[3] = 0;
									__edi[5] = 0;
									if(__edi[0x31] == 0) {
										__eax = __edi[4];
										__eflags = __eax;
										if(__eax != 0) {
											__eax = DeleteDC(__eax);
										}
										__eax = __edi[6];
										__eflags = __eax;
										if(__eax != 0) {
											_push(__eax);
											__eax =  *__esi();
										}
										__edi[4] = 0;
										__edi[6] = 0;
									}
									goto L75;
								} else {
									__eax = GetWindowLongW( *__edi, 0xffffffec);
									__eflags = __eax & 0x00080000;
									if((__eax & 0x00080000) == 0) {
										__eax = __eax ^ 0x00080000;
										__eflags = __eax;
										__eax = SetWindowLongW( *__edi, 0xffffffec, __eax);
									}
									__eax =  &_v880;
									asm("xorps xmm0, xmm0");
									asm("movups [ebp-0x36c], xmm0");
									GetClientRect( *__edi,  &_v880) =  &_v732;
									E00AF4C50(__edi,  &_v732, 0, 0x40) =  &_v732;
									__eax = BeginPaint( *__edi,  &_v732);
									__eax = __edi[4];
									__eflags = __eax;
									if(__eax != 0) {
										__eax = DeleteDC(__eax);
									}
									__eax = __edi[6];
									__esi = DeleteObject;
									__eflags = __eax;
									if(__eax != 0) {
										__eax = DeleteObject(__eax);
									}
									__eflags = __edi[0x30];
									__edi[4] = 0;
									__edi[6] = 0;
									if(__edi[0x30] == 0) {
										L54:
										__eflags = __edi[0x30];
										if(__edi[0x30] != 0) {
											__ecx = __edi;
											__eax = E00A8F6A0(__edi, 1);
										}
										__eflags = __edi[0x30];
										if(__edi[0x30] != 0) {
											__eflags = __edi[6];
											if(__edi[6] == 0) {
												__edi[4] = CreateCompatibleDC(__edi[2]);
												_v880.bottom = _v880.bottom - _v880.top;
												__eax = _v880.right;
												__eax = _v880.right - _v880.left;
												__eflags = __eax;
												__edi[6] = __eax;
											}
										}
										__eax = SelectObject(__edi[4], __edi[6]);
										__ecx = __edi[0x15];
										__edx =  &_v880;
										_push( &_v880);
										_push(__edi[4]);
										 *__ecx =  *((intOrPtr*)( *__ecx + 0x160))();
										__eax =  &_v556;
										asm("xorps xmm0, xmm0");
										asm("movups [ebp-0x228], xmm0");
										GetWindowRect( *__edi,  &_v556) = _v556.left;
										_v988 = _v556.left;
										__eax = _v556.top;
										_v984 = _v556.top;
										_v880.right = _v880.right - _v880.left;
										_v1000 = _v880.right - _v880.left;
										_v880.bottom = _v880.bottom - _v880.top;
										_push(2);
										_v996 = _v880.bottom - _v880.top;
										__eax =  &_v952;
										_push( &_v952);
										_push(0);
										__eax =  &_v968;
										_v968.x = 0;
										_push( &_v968);
										_push(__edi[4]);
										__eax =  &_v1000;
										_v968.y = 0;
										_push( &_v1000);
										__eax =  &_v988;
										_v952 = 0x1ff0000;
										_push( &_v988);
										_push(0);
										_push( *__edi);
										__imp__UpdateLayeredWindow();
										 &_v732 = EndPaint( *__edi,  &_v732);
										__al = 1;
										goto L247;
									}
									__eax =  &_v880;
									__edi[0x30] = 0;
									__eax = IsRectEmpty( &_v880);
									__eflags = __eax;
									if(__eax != 0) {
										goto L54;
									}
									__ecx = __edi[0x15];
									__eax = L00A9A6E0(__edi[0x15]);
									__eflags = __al;
									if(__al == 0) {
										__ecx = __edi[0x15];
										_push(0x80000001);
										_push(0);
										_push( &M00A8FFF0);
										 *(__edi[0x15]) =  *( *(__edi[0x15]) + 0x144);
										__eax =  *( *( *(__edi[0x15]) + 0x144))();
										_v948 = __eax;
										__eflags = __eax;
										if(__eax == 0) {
											goto L50;
										} else {
											goto L49;
										}
										do {
											L49:
											__esi = __eax->i;
											__ecx = __eax;
											__edx =  *(__esi + 0x3c);
											__eax =  *( *(__esi + 0x3c))();
											__esp = __esp - 0x10;
											__ecx = __esp;
											asm("movups xmm0, [eax]");
											asm("movups [ecx], xmm0");
											__ecx = _v948;
											__eax =  *((intOrPtr*)(__esi + 0x40))();
											__ecx = __edi[0x15];
											_push(0x80000001);
											_push(0);
											_push( &M00A8FFF0);
											 *(__edi[0x15]) =  *( *(__edi[0x15]) + 0x144);
											__eax =  *( *( *(__edi[0x15]) + 0x144))();
											_v948 = __eax;
											__eflags = __eax;
										} while (__eax != 0);
										goto L50;
									} else {
										__eax = __edi[4];
										__eflags = __eax;
										if(__eax != 0) {
											__eax = DeleteDC(__eax);
										}
										__eax = __edi[6];
										__eflags = __eax;
										if(__eax != 0) {
											_push(__eax);
											__eax =  *__esi();
										}
										__ecx = __edi[0x15];
										__esp = __esp - 0x10;
										asm("movups xmm0, [ebp-0x36c]");
										__edi[4] = 0;
										__eax = __esp;
										__edi[6] = 0;
										__edx =  *(__edi[0x15]);
										asm("movups [eax], xmm0");
										__eax =  *((intOrPtr*)( *(__edi[0x15]) + 0x40))();
										L50:
										__eflags = __edi[0x30];
										if(__eflags != 0) {
											__ecx = __edi;
											__edi[0x30] = 0;
											__eax = E00A8EFC0(__ebx, __edi, __edi, __esi, __eflags, __edi[0x15], L"windowinit", 0, 0, 0);
										}
										__ecx = __edi;
										__eax = E00A8EFC0(__ebx, __edi, __edi, __esi, __eflags, __edi[0x15], L"windowresized", 0, 0, 0);
										__eflags = _v960.y;
										if(__eflags != 0) {
											__ecx = __edi;
											__eax = E00A8EFC0(__ebx, __edi, __edi, __esi, __eflags, __edi[0x15], L"window_size_changed", 0, 0, 0);
										}
										goto L54;
									}
								}
							} else {
								 &_v668 = E00AF4C50(__edi,  &_v668, 0, 0x40);
								 &_v668 = BeginPaint( *__edi,  &_v668);
								 &_v668 = EndPaint( *__edi,  &_v668);
								__al = 1;
								goto L247;
							}
						case 2:
							asm("xorps xmm0, xmm0");
							_v560 = _t1052[0x1b];
							asm("movlpd [ebp-0x238], xmm0");
							asm("movlpd [ebp-0x224], xmm0");
							_v556.bottom = 0;
							_v556.left = _t1052[0x1c];
							_t893 = GetTickCount();
							_t1003 = _t1052[0x18];
							_v564 = _t893;
							__eflags = _t1003;
							if(_t1003 != 0) {
								_v572 = 0xa;
								_v568 = _t1003;
								_push( &_v572);
								 *((intOrPtr*)( *_t1003 + 0x150))();
							}
							_t1004 = _t1052[0x19];
							__eflags = _t1004;
							if(_t1004 != 0) {
								_v572 = 0xe;
								_v568 = _t1004;
								_push( &_v572);
								 *((intOrPtr*)( *_t1004 + 0x150))();
							}
							E00A8F3F0(_t1052, 0);
							_t895 = GetWindow( *_t1052, 4);
							__eflags = _t895;
							if(_t895 != 0) {
								SetFocus(_t895);
							}
							goto L236;
						case 3:
							__eflags = __edi[0xc0];
							if(__edi[0xc0] == 0) {
								__edi[0x30] = 1;
								__eax = InvalidateRect( *__edi, 0, 0);
							}
							__ecx = _v952;
							__al = 1;
							 *__ecx = 1;
							goto L247;
						case 4:
							__eflags = __si - 1;
							if(__si != 1) {
								goto L236;
							}
							__eflags = __edi[0x31];
							if(__edi[0x31] != 0) {
								goto L123;
							}
							__eax =  &_v976;
							asm("xorps xmm0, xmm0");
							asm("movlpd [ebp-0x3cc], xmm0");
							GetCursorPos( &_v976) =  &_v976;
							ScreenToClient( *__edi,  &_v976) = _v976.x;
							__ecx = __edi[0x15];
							_v1008 = _v976.x;
							__eax = _v976.y;
							_v1004 = _v976.y;
							__eflags = __ecx;
							if(__ecx == 0) {
								goto L236;
							}
							__eax =  *__ecx;
							__edx =  &_v1008;
							_push(0xd);
							_push( &_v1008);
							_push( &M00A8FF00);
							__eax =  *( *__ecx + 0x144);
							__eax =  *( *( *__ecx + 0x144))();
							_v968.y = __eax;
							__eflags = __eax;
							if(__eax == 0) {
								goto L236;
							}
							__edx = __eax->i;
							__ecx = __eax;
							__edx =  *(__eax->i + 0x18);
							__eax =  *( *(__eax->i + 0x18))();
							__eflags = __al & 0x00000002;
							if((__al & 0x00000002) == 0) {
								goto L236;
							}
							__eax = _v948;
							asm("xorps xmm0, xmm0");
							_v612 = _v948;
							__eax = _v976.x;
							_v624 = _v976.x;
							__eax = _v976.y;
							asm("movlpd [ebp-0x274], xmm0");
							_v616 = 0;
							_v668.rgbReserved = 0x17;
							_v608 = __esi;
							_v620 = _v976.y;
							__eax = E00A8C890();
							_v614 = __ax;
							__eax = GetTickCount();
							__ecx = _v968.y;
							__edx =  &(_v668.rgbReserved);
							_v628 = __eax;
							_push( &(_v668.rgbReserved));
							 *__ecx =  *((intOrPtr*)( *__ecx + 0x150))();
							__al = 1;
							goto L247;
						case 5:
							__ecx = __edi[0x1d];
							__eax = _v976.y;
							__eflags = __ecx;
							if(__ecx > 0) {
								 *(__eax + 0x18) = __ecx;
							}
							__ecx = __edi[0x1e];
							__eflags = __ecx;
							if(__ecx > 0) {
								 *(__eax + 0x1c) = __ecx;
							}
							__ecx = __edi[0x1f];
							__eflags = __ecx;
							if(__ecx > 0) {
								 *(__eax + 0x20) = __ecx;
							}
							__ecx = __edi[0x20];
							__eflags = __ecx;
							if(__ecx > 0) {
								 *(__eax + 0x24) = __ecx;
							}
							goto L236;
						case 6:
							__ecx = _v976.y;
							__eflags = __ecx;
							if(__ecx == 0) {
								goto L123;
							}
							__edx + 0x2000 = SendMessageW( *__ecx, __edx + 0x2000, _v948, __ecx);
							goto L122;
						case 7:
							__ecx = _v976.y;
							__eax = __cx;
							_v968.x = __cx;
							__ecx = _v976.y >> 0x10;
							__eax = __cx;
							_v968.y = __cx;
							 &_v968 = ScreenToClient( *__edi,  &_v968);
							__eflags = __edi[0x19];
							__eax = _v968.x;
							__edi[0x1b] = _v968.x;
							__eax = _v968.y;
							__edi[0x1c] = _v968.y;
							if(__edi[0x19] == 0) {
								goto L236;
							}
							__eax = ReleaseCapture();
							__ecx = __edi[0x19];
							__eax = 0;
							_v556.top = __ax;
							_v556.right = 0;
							__eax = _v968.x;
							_v560 = _v968.x;
							__eax = _v968.y;
							_v556.left = _v968.y;
							__eax = _v948;
							_v572 = 0x11;
							_v568 = __ecx;
							_v556.bottom = __ecx;
							goto L178;
						case 8:
							__eflags = __edi[0x16];
							if(__edi[0x16] != 0) {
								__eax = 0;
								_v572 = 3;
								_v542 = __ax;
								asm("xorps xmm0, xmm0");
								__eax = _v948;
								_v556.top = __ax;
								__eax = __edi[0x1b];
								_v560 = __edi[0x1b];
								__eax = __edi[0x1c];
								asm("movlpd [ebp-0x234], xmm0");
								asm("movlpd [ebp-0x222], xmm0");
								_v556.left = __edi[0x1c];
								__eax = E00A8C890();
								_v550 = __ax;
								__eax = GetTickCount();
								__ecx = __edi[0x16];
								__edx =  &_v572;
								_v564 = __eax;
								_push( &_v572);
								 *__ecx =  *((intOrPtr*)( *__ecx + 0x150))();
								__eax = __edi[0x16];
								__edi[0x1a] = __edi[0x16];
							}
							goto L236;
						case 9:
							__eflags = __edi[0x1a];
							if(__edi[0x1a] != 0) {
								__eax = 0;
								_v572 = 4;
								_v542 = __ax;
								asm("xorps xmm0, xmm0");
								__eax = _v948;
								_v556.top = __ax;
								__eax = __edi[0x1b];
								_v560 = __edi[0x1b];
								__eax = __edi[0x1c];
								asm("movlpd [ebp-0x234], xmm0");
								asm("movlpd [ebp-0x222], xmm0");
								_v556.left = __edi[0x1c];
								__eax = E00A8C890();
								_v550 = __ax;
								__eax = GetTickCount();
								__ecx = __edi[0x1a];
								__edx =  &_v572;
								_v564 = __eax;
								_push( &_v572);
								 *__ecx =  *((intOrPtr*)( *__ecx + 0x150))();
								__edi[0x1a] = 0;
							}
							goto L236;
						case 0xa:
							__eflags = __edi[0x16];
							if(__edi[0x16] != 0) {
								__eax = 0;
								_v572 = 5;
								_v542 = __ax;
								asm("xorps xmm0, xmm0");
								__eax = _v948;
								_v556.top = __ax;
								__eax = __edi[0x1b];
								_v560 = __edi[0x1b];
								__eax = __edi[0x1c];
								asm("movlpd [ebp-0x234], xmm0");
								asm("movlpd [ebp-0x222], xmm0");
								_v556.left = __edi[0x1c];
								__eax = E00A8C890();
								_v550 = __ax;
								__eax = GetTickCount();
								__ecx = __edi[0x16];
								__edx =  &_v572;
								_v564 = __eax;
								_push( &_v572);
								 *__ecx =  *((intOrPtr*)( *__ecx + 0x150))();
							}
							goto L236;
						case 0xb:
							goto L236;
					}
				} else {
					_t1006 = 0;
					__eflags = 0;
					while(1) {
						_v977 = 0;
						_t901 = E00A897E0( &(_t1052[0x62]), _t1006);
						_t903 =  *((intOrPtr*)( *((intOrPtr*)( *_t901))))(_a4, _v948, _t1060,  &_v977);
						__eflags = _v977;
						if(_v977 != 0) {
							break;
						}
						_v960.y =  &(_v960.y->i);
						_t904 = E00A89FD0( &(_t1052[0x62]));
						_t1006 = _v960.y;
						__eflags = _t1006 - _t904;
						if(_t1006 < _t904) {
							continue;
						}
						goto L15;
					}
					L122:
					 *_v952 = _t903;
					L123:
					goto L247;
				}
			}

0x00a8c8e0
0x00a8c8e3
0x00a8c8e5
0x00a8c8f0
0x00a8c8f1
0x00a8c8f7
0x00a8c8fc
0x00a8c8fe
0x00a8c901
0x00a8c902
0x00a8c903
0x00a8c907
0x00a8c90d
0x00a8c90f
0x00a8c91b
0x00a8c924
0x00a8c92d
0x00a8c933
0x00a8e5bb
0x00a8e5bb
0x00a8e5bd
0x00a8e5c0
0x00a8e5cd
0x00a8e5d7
0x00000000
0x00000000
0x00000000
0x00a8c939
0x00a8c939
0x00a8c946
0x00a8c95d
0x00a8c95f
0x00a8c96b
0x00a8c973
0x00000000
0x00000000
0x00a8c981
0x00a8c9a8
0x00a8c9b4
0x00a8c9c1
0x00a8c9c3
0x00a8c9d0
0x00a8c9e0
0x00a8c9ea
0x00a8c9f2
0x00a8c9fa
0x00000000
0x00000000
0x00000000
0x00a8c9fa
0x00a8c9fc
0x00a8c9fc
0x00000000
0x00a8ca02
0x00a8ca02
0x00a8ca02
0x00a8ca08
0x00a8ca0f
0x00a8ca14
0x00a8ca1a
0x00a8ca1f
0x00000000
0x00a8ca1f
0x00a8c981
0x00a8ca2d
0x00a8ca37
0x00a8ca3c
0x00a8ca42
0x00a8ca44
0x00a8caa4
0x00a8caa4
0x00a8caa7
0x00a8caad
0x00a8d72d
0x00a8d733
0x00a8da21
0x00a8da27
0x00a8dfdd
0x00a8dfe3
0x00a8e408
0x00a8e40e
0x00a8e49c
0x00a8e4ac
0x00a8e4ae
0x00a8e4b0
0x00a8e4b8
0x00a8e4be
0x00a8e4c0
0x00a8e4c9
0x00a8e4c9
0x00a8e4cc
0x00a8e4cc
0x00a8e4d2
0x00a8e4d2
0x00a8e4d9
0x00a8e4f4
0x00a8e4f6
0x00a8e502
0x00a8e508
0x00a8e50a
0x00000000
0x00000000
0x00a8e510
0x00a8e516
0x00a8e518
0x00a8e53d
0x00a8e543
0x00a8e54f
0x00a8e555
0x00a8e55a
0x00a8e55c
0x00a8e596
0x00a8e596
0x00a8e59c
0x00a8e5a3
0x00a8e5a8
0x00a8e5ae
0x00a8e5b3
0x00000000
0x00a8e5b3
0x00a8e55e
0x00a8e564
0x00a8e564
0x00a8e56b
0x00000000
0x00000000
0x00a8e574
0x00a8e57e
0x00a8e586
0x00a8e587
0x00a8e58c
0x00a8e58e
0x00000000
0x00000000
0x00000000
0x00a8e58e
0x00a8e590
0x00000000
0x00a8e590
0x00a8e51d
0x00a8e522
0x00a8e524
0x00000000
0x00000000
0x00a8e530
0x00a8e535
0x00a8e537
0x00000000
0x00000000
0x00000000
0x00a8e537
0x00000000
0x00a8e4d2
0x00a8e414
0x00a8e41a
0x00000000
0x00000000
0x00a8e42d
0x00a8e434
0x00a8e43b
0x00a8e446
0x00a8e448
0x00a8e44d
0x00a8e44f
0x00a8e478
0x00a8e47e
0x00a8e489
0x00a8e490
0x00000000
0x00000000
0x00000000
0x00000000
0x00a8e451
0x00a8e451
0x00a8e458
0x00a8e45d
0x00a8e45f
0x00a8e465
0x00a8e465
0x00a8e46e
0x00a8e46f
0x00a8e474
0x00a8e474
0x00000000
0x00a8e451
0x00a8dfe9
0x00a8e323
0x00a8e329
0x00a8e339
0x00a8e349
0x00a8e34f
0x00a8e356
0x00a8e3f6
0x00a8e3fd
0x00000000
0x00a8e3fd
0x00a8e360
0x00a8e366
0x00a8e36c
0x00a8e36e
0x00000000
0x00000000
0x00a8e374
0x00a8e374
0x00a8e374
0x00a8e380
0x00a8e386
0x00a8e38b
0x00a8e392
0x00a8e3a5
0x00a8e3c0
0x00a8e3d8
0x00a8e3e6
0x00a8e3ec
0x00a8e3f2
0x00a8e3f2
0x00000000
0x00a8e380
0x00a8dfef
0x00a8dfef
0x00a8dff5
0x00a8e2b6
0x00a8e2b9
0x00a8e2bb
0x00a8e2c1
0x00a8e2c7
0x00a8e2c9
0x00a8e2d5
0x00a8e2d8
0x00a8e2e4
0x00a8e2ec
0x00a8e2f4
0x00a8e2fe
0x00a8e304
0x00a8e30f
0x00a8e30f
0x00a8e2c9
0x00000000
0x00a8e2bb
0x00a8dffb
0x00a8dffb
0x00a8e001
0x00a8e048
0x00a8e04e
0x00a8e054
0x00a8e05a
0x00a8e05b
0x00a8e061
0x00a8e064
0x00a8e06b
0x00a8e071
0x00a8e077
0x00a8e079
0x00000000
0x00000000
0x00a8e097
0x00a8e099
0x00a8e09b
0x00000000
0x00000000
0x00a8e0a3
0x00a8e0a9
0x00a8e0ab
0x00a8e0ad
0x00a8e0b3
0x00a8e0b9
0x00a8e0bb
0x00a8e0cb
0x00a8e0e5
0x00a8e0eb
0x00a8e0ed
0x00a8e0fb
0x00a8e103
0x00a8e105
0x00a8e109
0x00a8e109
0x00a8e105
0x00a8e0ed
0x00a8e0bb
0x00a8e10f
0x00a8e112
0x00a8e114
0x00a8e11c
0x00a8e11f
0x00a8e12b
0x00a8e135
0x00a8e13d
0x00a8e147
0x00a8e14d
0x00a8e157
0x00a8e16c
0x00a8e175
0x00a8e175
0x00a8e185
0x00a8e187
0x00a8e189
0x00000000
0x00a8e18f
0x00a8e19a
0x00a8e1a6
0x00a8e1ad
0x00a8e1b2
0x00a8e1b8
0x00a8e1ba
0x00a8e1c0
0x00a8e1c7
0x00a8e1ce
0x00a8e1d5
0x00a8e1dc
0x00a8e1e3
0x00a8e1ea
0x00a8e1f1
0x00a8e1f8
0x00a8e1fa
0x00a8e201
0x00a8e208
0x00a8e20b
0x00a8e20e
0x00a8e213
0x00a8e21b
0x00a8e225
0x00a8e227
0x00a8e22a
0x00a8e22d
0x00a8e231
0x00a8e233
0x00a8e280
0x00a8e235
0x00a8e25f
0x00a8e265
0x00a8e268
0x00a8e279
0x00a8e27b
0x00a8e27b
0x00a8e28c
0x00a8e2a2
0x00a8e2a4
0x00a8e2a4
0x00a8e2aa
0x00000000
0x00a8e2af
0x00a8e189
0x00a8e003
0x00a8e003
0x00a8e006
0x00a8e00c
0x00a8e015
0x00a8e017
0x00a8e024
0x00a8e024
0x00a8e026
0x00a8e02d
0x00a8e03a
0x00a8e03a
0x00a8e03c
0x00a8e03c
0x00000000
0x00a8e006
0x00a8da2d
0x00a8de24
0x00a8de2d
0x00a8de39
0x00a8de48
0x00a8de4e
0x00a8de54
0x00a8de5a
0x00a8de5d
0x00a8de63
0x00a8de66
0x00a8de69
0x00a8de6f
0x00a8de71
0x00000000
0x00000000
0x00a8de8f
0x00a8de91
0x00a8de97
0x00a8de99
0x00000000
0x00000000
0x00a8dea6
0x00a8dea8
0x00a8deaa
0x00000000
0x00000000
0x00a8debf
0x00a8dec4
0x00a8dec7
0x00a8dec9
0x00a8df4a
0x00a8df50
0x00a8df59
0x00a8df68
0x00a8df70
0x00a8df78
0x00a8df82
0x00a8df88
0x00a8df93
0x00a8dfac
0x00a8dfb5
0x00a8dfd2
0x00000000
0x00a8dfd2
0x00a8decf
0x00a8ded2
0x00a8ded4
0x00a8deef
0x00a8deef
0x00a8def2
0x00a8defc
0x00a8df04
0x00a8df0c
0x00a8df14
0x00a8df20
0x00a8df31
0x00a8df45
0x00000000
0x00a8df45
0x00a8dee3
0x00a8dee8
0x00a8deeb
0x00a8deed
0x00000000
0x00000000
0x00000000
0x00a8deed
0x00a8da33
0x00a8da39
0x00a8da3c
0x00000000
0x00000000
0x00a8da42
0x00000000
0x00a8da49
0x00a8da4f
0x00a8da51
0x00a8da53
0x00a8da57
0x00a8da5d
0x00a8da5f
0x00a8da63
0x00a8da63
0x00a8da5f
0x00a8da69
0x00a8da6f
0x00a8da75
0x00a8da76
0x00a8da7c
0x00a8da7f
0x00a8da85
0x00a8da88
0x00a8da8e
0x00a8da91
0x00a8da97
0x00a8da99
0x00a8daa7
0x00a8daa9
0x00a8daaa
0x00a8dab7
0x00a8dab9
0x00a8dabf
0x00a8dac1
0x00a8dace
0x00a8dad0
0x00a8dad2
0x00a8dad8
0x00a8dadf
0x00a8dae7
0x00a8daf5
0x00a8dafc
0x00a8db02
0x00a8db0e
0x00a8db1a
0x00a8db21
0x00a8db2b
0x00a8db35
0x00a8db3b
0x00a8db41
0x00a8db47
0x00a8db60
0x00a8db66
0x00a8db69
0x00a8db69
0x00a8dad2
0x00a8dac1
0x00000000
0x00000000
0x00a8dc6c
0x00a8dc72
0x00a8dc75
0x00a8dc78
0x00a8dc7c
0x00a8dc7d
0x00a8dc83
0x00a8dc89
0x00a8dc8c
0x00a8dc8f
0x00000000
0x00000000
0x00a8dc95
0x00a8dc9b
0x00a8dca1
0x00a8dca1
0x00a8dca3
0x00a8dca9
0x00a8dcb0
0x00a8dcb3
0x00a8dcb9
0x00a8dcbf
0x00a8dcc5
0x00a8dccb
0x00a8dcd5
0x00a8dcdb
0x00a8dce1
0x00a8dce7
0x00a8dce7
0x00a8dcee
0x00a8dcf8
0x00a8dcff
0x00a8dd05
0x00a8dd08
0x00a8dd0e
0x00a8dd14
0x00a8dd17
0x00a8dd1d
0x00000000
0x00000000
0x00a8db7c
0x00a8db82
0x00a8db85
0x00a8db88
0x00a8db89
0x00a8db8f
0x00a8db92
0x00a8db98
0x00a8db9b
0x00a8dba1
0x00a8dba4
0x00a8dbaa
0x00a8dbac
0x00000000
0x00000000
0x00a8dbb2
0x00a8dbb4
0x00a8dbba
0x00a8dbbc
0x00a8dbbd
0x00a8dbc8
0x00a8dbca
0x00a8dbcc
0x00a8dbce
0x00000000
0x00000000
0x00a8dbd4
0x00a8dbd6
0x00a8dbd8
0x00a8dbdb
0x00a8dbdd
0x00a8dbdf
0x00000000
0x00000000
0x00a8dbed
0x00a8dbed
0x00a8dbef
0x00a8dbf6
0x00a8dbfd
0x00a8dc00
0x00a8dc06
0x00a8dc0c
0x00a8dc12
0x00a8dc18
0x00a8dc1e
0x00a8dc28
0x00a8dc30
0x00a8dc3a
0x00a8dc40
0x00a8dc47
0x00000000
0x00000000
0x00a8dd31
0x00a8dd37
0x00a8dd3a
0x00a8dd3d
0x00a8dd3e
0x00a8dd44
0x00a8dd47
0x00a8dd4d
0x00a8dd50
0x00a8dd56
0x00a8dd59
0x00a8dd5f
0x00a8dd61
0x00000000
0x00000000
0x00a8dd67
0x00a8dd69
0x00a8dd6f
0x00a8dd71
0x00a8dd72
0x00a8dd7d
0x00a8dd7f
0x00a8dd81
0x00a8dd87
0x00a8dd89
0x00000000
0x00000000
0x00a8dd8f
0x00a8dd91
0x00a8dd93
0x00a8dd96
0x00a8dd98
0x00a8dd9a
0x00000000
0x00000000
0x00a8dda0
0x00a8dda2
0x00a8ddac
0x00a8ddb2
0x00a8ddb8
0x00a8ddba
0x00a8ddc1
0x00a8ddc7
0x00a8ddcd
0x00a8ddd3
0x00a8ddd9
0x00a8dddf
0x00a8dde6
0x00a8ddf0
0x00a8ddfa
0x00a8de00
0x00a8de06
0x00a8de0c
0x00a8de13
0x00a8de19
0x00a8dc4d
0x00a8dc4d
0x00a8dc53
0x00a8dc59
0x00a8dc5b
0x00a8dc5c
0x00a8dc5e
0x00a8dc64
0x00000000
0x00000000
0x00a8da42
0x00a8d739
0x00a8d843
0x00a8d84a
0x00a8d84e
0x00a8d854
0x00a8d857
0x00a8d861
0x00a8d86b
0x00a8d86d
0x00a8d88b
0x00a8d86f
0x00a8d86f
0x00a8d86f
0x00a8d898
0x00a8d89e
0x00a8d89e
0x00a8d8a5
0x00a8d8ab
0x00a8d8b1
0x00a8d8b2
0x00a8d8b8
0x00a8d8bb
0x00a8d8c1
0x00a8d8c4
0x00a8d8ca
0x00a8d8cd
0x00a8d8d3
0x00a8d8d5
0x00a8d8f3
0x00a8d8f5
0x00a8d8f7
0x00000000
0x00000000
0x00a8d900
0x00a8d902
0x00a8d904
0x00000000
0x00000000
0x00000000
0x00a8d8d7
0x00a8d8d7
0x00a8d90a
0x00a8d910
0x00a8d913
0x00a8d91f
0x00a8d927
0x00a8d92f
0x00a8d939
0x00a8d93f
0x00a8d945
0x00a8d948
0x00a8d94e
0x00a8d950
0x00a8d952
0x00a8d954
0x00a8d956
0x00a8d958
0x00a8d968
0x00a8d971
0x00a8d977
0x00a8d97a
0x00a8d97c
0x00a8d983
0x00a8d985
0x00a8d993
0x00a8d999
0x00a8d999
0x00a8d985
0x00a8d956
0x00a8d99c
0x00a8d99e
0x00a8d9a0
0x00a8d9a2
0x00a8d9a4
0x00a8d9b4
0x00a8d9bf
0x00a8d9c5
0x00a8d9c5
0x00a8d9a2
0x00a8d9c8
0x00a8d9cb
0x00a8d9cd
0x00a8d9f3
0x00a8d9f5
0x00a8d9fb
0x00a8da0b
0x00a8da16
0x00a8da16
0x00a8d9cf
0x00a8d9cf
0x00a8d9df
0x00a8d9e8
0x00a8d9e8
0x00000000
0x00a8d9cd
0x00a8d8d5
0x00a8d741
0x00a8d741
0x00a8d746
0x00a8d788
0x00a8d790
0x00a8d796
0x00a8d79b
0x00a8d79d
0x00000000
0x00000000
0x00000000
0x00000000
0x00a8d7a3
0x00a8d7a3
0x00a8d7af
0x00a8d7b4
0x00a8d7b6
0x00000000
0x00000000
0x00a8d7c1
0x00a8d7c4
0x00000000
0x00000000
0x00a8d7c6
0x00a8d7ca
0x00a8d7ed
0x00a8d7ef
0x00a8d7f5
0x00a8d7fd
0x00a8d805
0x00a8d80f
0x00a8d815
0x00a8d81b
0x00a8d82f
0x00a8d838
0x00000000
0x00a8d838
0x00a8d7cc
0x00a8d7d8
0x00a8d7d9
0x00a8d7df
0x00a8d7e4
0x00a8d7e4
0x00000000
0x00a8d7e8
0x00a8d748
0x00a8d748
0x00a8d74b
0x00a8d756
0x00a8d756
0x00a8d75c
0x00a8d75e
0x00000000
0x00000000
0x00a8d77f
0x00000000
0x00a8d781
0x00a8d74d
0x00a8d750
0x00000000
0x00000000
0x00000000
0x00a8d750
0x00a8cab3
0x00a8d6fd
0x00a8d703
0x00a8d705
0x00000000
0x00000000
0x00a8d724
0x00000000
0x00a8d726
0x00a8cab9
0x00a8cabc
0x00a8cac1
0x00000000
0x00000000
0x00a8cace
0x00000000
0x00a8d334
0x00a8d337
0x00a8d339
0x00a8d33b
0x00a8d33e
0x00a8d348
0x00a8d350
0x00a8d358
0x00a8d360
0x00a8d366
0x00a8d36c
0x00a8d36f
0x00a8d375
0x00a8d37b
0x00a8d37e
0x00a8d37e
0x00a8d384
0x00a8d387
0x00a8d389
0x00000000
0x00a8d38f
0x00a8d38f
0x00a8d394
0x00000000
0x00a8d394
0x00000000
0x00a8cbb4
0x00a8cbba
0x00a8cbc0
0x00a8cbc7
0x00a8cbcd
0x00a8cbcf
0x00000000
0x00000000
0x00a8cbd5
0x00a8cbd9
0x00a8cc13
0x00a8cc19
0x00a8cc1e
0x00a8cc24
0x00a8cc2a
0x00a8cc30
0x00a8cc36
0x00a8cc3c
0x00a8cc3e
0x00a8cc40
0x00a8cc46
0x00a8cc49
0x00a8cc49
0x00a8cc4f
0x00a8cc56
0x00a8cc5c
0x00a8cc62
0x00a8cf49
0x00a8cf50
0x00a8cf56
0x00a8d0cf
0x00a8d0cf
0x00a8d0d6
0x00a8d0da
0x00a8d0dc
0x00a8d0dc
0x00a8d0e1
0x00a8d0e8
0x00a8d0ea
0x00a8d0ee
0x00a8d0f0
0x00a8d0f6
0x00a8d0f9
0x00a8d0fa
0x00a8d0fc
0x00a8d103
0x00a8d10e
0x00a8d117
0x00a8d11e
0x00a8d124
0x00a8d124
0x00a8d134
0x00a8d134
0x00a8d0ee
0x00a8d142
0x00a8d153
0x00a8d159
0x00a8d160
0x00a8d29e
0x00a8d2a4
0x00a8d2a7
0x00a8d2a9
0x00a8d2af
0x00a8d2b0
0x00a8d2b6
0x00a8d2c5
0x00000000
0x00a8d166
0x00a8d175
0x00a8d17b
0x00a8d181
0x00a8d184
0x00a8d18a
0x00a8d190
0x00a8d191
0x00a8d194
0x00a8d196
0x00a8d19c
0x00a8d1a2
0x00a8d1a4
0x00a8d1a9
0x00a8d1ab
0x00a8d1e0
0x00a8d1e9
0x00a8d1ef
0x00a8d1f5
0x00a8d20b
0x00a8d214
0x00a8d21f
0x00a8d22b
0x00a8d234
0x00a8d236
0x00a8d23a
0x00a8d250
0x00a8d25f
0x00a8d290
0x00a8d290
0x00a8d2cb
0x00a8d2d4
0x00a8d2da
0x00a8d2e1
0x00000000
0x00000000
0x00a8d2ed
0x00a8d2f3
0x00000000
0x00a8d2f3
0x00a8d1b0
0x00a8d1b1
0x00a8d1b7
0x00a8d1bc
0x00a8d1c2
0x00a8d1c3
0x00a8d1c6
0x00a8d1c8
0x00a8d1ca
0x00a8d1d0
0x00a8d1d6
0x00a8d1d7
0x00a8d1dc
0x00a8d1dc
0x00000000
0x00a8d1b0
0x00a8d160
0x00a8cf5c
0x00a8cf62
0x00a8cf6c
0x00a8cf6f
0x00a8cf78
0x00a8cf7f
0x00a8cf85
0x00a8cf87
0x00000000
0x00000000
0x00a8cf8d
0x00a8cf90
0x00a8cf95
0x00a8cf98
0x00a8cf9a
0x00a8d011
0x00a8d013
0x00a8d018
0x00a8d01a
0x00a8d01f
0x00a8d025
0x00a8d027
0x00a8d02d
0x00a8d02f
0x00a8d077
0x00a8d077
0x00a8d07e
0x00a8d08e
0x00a8d090
0x00a8d097
0x00a8d097
0x00a8d0aa
0x00a8d0ac
0x00a8d0b1
0x00a8d0b8
0x00a8d0c8
0x00a8d0ca
0x00a8d0ca
0x00000000
0x00000000
0x00000000
0x00000000
0x00a8d031
0x00a8d031
0x00a8d031
0x00a8d033
0x00a8d035
0x00a8d038
0x00a8d03a
0x00a8d03d
0x00a8d03f
0x00a8d042
0x00a8d045
0x00a8d04b
0x00a8d04e
0x00a8d051
0x00a8d056
0x00a8d058
0x00a8d05f
0x00a8d065
0x00a8d067
0x00a8d06d
0x00a8d06d
0x00a8d071
0x00a8d071
0x00000000
0x00a8d071
0x00a8cf9c
0x00a8cfa3
0x00a8cfa5
0x00a8cfa8
0x00a8cfaa
0x00a8cfad
0x00a8cfb0
0x00a8cfb3
0x00a8cfb5
0x00a8cfb8
0x00a8cfb8
0x00a8cfbe
0x00a8cfc1
0x00a8cfc7
0x00a8cfc9
0x00a8cfcc
0x00a8cfcc
0x00a8cfce
0x00a8cfd5
0x00a8cfdc
0x00a8cfe3
0x00a8cfe9
0x00a8cfec
0x00a8cfee
0x00a8cff1
0x00a8cff1
0x00a8cff7
0x00a8cffa
0x00a8cffc
0x00a8cffe
0x00a8cfff
0x00a8cfff
0x00a8d001
0x00a8d008
0x00a8d008
0x00000000
0x00a8cc68
0x00a8cc6c
0x00a8cc72
0x00a8cc77
0x00a8cc79
0x00a8cc79
0x00a8cc83
0x00a8cc83
0x00a8cc89
0x00a8cc8f
0x00a8cc95
0x00a8cca4
0x00a8ccb5
0x00a8ccbe
0x00a8ccc4
0x00a8ccc7
0x00a8ccc9
0x00a8cccc
0x00a8cccc
0x00a8ccd2
0x00a8ccd5
0x00a8ccdb
0x00a8ccdd
0x00a8cce0
0x00a8cce0
0x00a8cce2
0x00a8cce9
0x00a8ccf0
0x00a8ccf7
0x00a8ce1f
0x00a8ce1f
0x00a8ce26
0x00a8ce2a
0x00a8ce2c
0x00a8ce2c
0x00a8ce31
0x00a8ce38
0x00a8ce3a
0x00a8ce3e
0x00a8ce49
0x00a8ce52
0x00a8ce59
0x00a8ce5f
0x00a8ce5f
0x00a8ce6f
0x00a8ce6f
0x00a8ce3e
0x00a8ce78
0x00a8ce7e
0x00a8ce81
0x00a8ce87
0x00a8ce88
0x00a8ce8d
0x00a8ce93
0x00a8ce99
0x00a8ce9f
0x00a8ceac
0x00a8ceb2
0x00a8ceb8
0x00a8cebe
0x00a8ceca
0x00a8ced0
0x00a8cedc
0x00a8cee2
0x00a8cee4
0x00a8ceea
0x00a8cef0
0x00a8cef1
0x00a8cef3
0x00a8cef9
0x00a8cf03
0x00a8cf04
0x00a8cf07
0x00a8cf0d
0x00a8cf17
0x00a8cf18
0x00a8cf1e
0x00a8cf28
0x00a8cf29
0x00a8cf2b
0x00a8cf2d
0x00a8cf3c
0x00a8cf42
0x00000000
0x00a8cf42
0x00a8ccfd
0x00a8cd03
0x00a8cd0b
0x00a8cd11
0x00a8cd13
0x00000000
0x00000000
0x00a8cd19
0x00a8cd1c
0x00a8cd21
0x00a8cd23
0x00a8cd64
0x00a8cd67
0x00a8cd6c
0x00a8cd6e
0x00a8cd75
0x00a8cd7b
0x00a8cd7d
0x00a8cd83
0x00a8cd85
0x00000000
0x00000000
0x00000000
0x00000000
0x00a8cd87
0x00a8cd87
0x00a8cd87
0x00a8cd89
0x00a8cd8b
0x00a8cd8e
0x00a8cd90
0x00a8cd93
0x00a8cd95
0x00a8cd98
0x00a8cd9b
0x00a8cda1
0x00a8cda4
0x00a8cda7
0x00a8cdac
0x00a8cdae
0x00a8cdb5
0x00a8cdbb
0x00a8cdbd
0x00a8cdc3
0x00a8cdc3
0x00000000
0x00a8cd25
0x00a8cd25
0x00a8cd28
0x00a8cd2a
0x00a8cd2d
0x00a8cd2d
0x00a8cd33
0x00a8cd36
0x00a8cd38
0x00a8cd3a
0x00a8cd3b
0x00a8cd3b
0x00a8cd3d
0x00a8cd40
0x00a8cd43
0x00a8cd4a
0x00a8cd51
0x00a8cd53
0x00a8cd5a
0x00a8cd5c
0x00a8cd5f
0x00a8cdc7
0x00a8cdc7
0x00a8cdce
0x00a8cdde
0x00a8cde0
0x00a8cde7
0x00a8cde7
0x00a8cdfa
0x00a8cdfc
0x00a8ce01
0x00a8ce08
0x00a8ce18
0x00a8ce1a
0x00a8ce1a
0x00000000
0x00a8ce08
0x00a8cd23
0x00a8cbdb
0x00a8cbe6
0x00a8cbf7
0x00a8cc06
0x00a8cc0c
0x00000000
0x00a8cc0c
0x00000000
0x00a8cad8
0x00a8cadb
0x00a8cae4
0x00a8caec
0x00a8caf4
0x00a8cafe
0x00a8cb04
0x00a8cb0a
0x00a8cb0d
0x00a8cb13
0x00a8cb15
0x00a8cb17
0x00a8cb27
0x00a8cb2f
0x00a8cb30
0x00a8cb30
0x00a8cb36
0x00a8cb39
0x00a8cb3b
0x00a8cb3d
0x00a8cb4d
0x00a8cb55
0x00a8cb56
0x00a8cb56
0x00a8cb60
0x00a8cb69
0x00a8cb6f
0x00a8cb71
0x00a8cb78
0x00a8cb78
0x00000000
0x00000000
0x00a8cb83
0x00a8cb8a
0x00a8cb92
0x00a8cb99
0x00a8cb99
0x00a8cb9f
0x00a8cba5
0x00a8cba7
0x00000000
0x00000000
0x00a8d5b9
0x00a8d5bd
0x00000000
0x00000000
0x00a8d5c3
0x00a8d5ca
0x00000000
0x00000000
0x00a8d5d0
0x00a8d5d6
0x00a8d5da
0x00a8d5e8
0x00a8d5f7
0x00a8d5fd
0x00a8d600
0x00a8d606
0x00a8d60c
0x00a8d612
0x00a8d614
0x00000000
0x00000000
0x00a8d61a
0x00a8d61c
0x00a8d622
0x00a8d624
0x00a8d625
0x00a8d62a
0x00a8d630
0x00a8d632
0x00a8d638
0x00a8d63a
0x00000000
0x00000000
0x00a8d640
0x00a8d642
0x00a8d644
0x00a8d647
0x00a8d649
0x00a8d64b
0x00000000
0x00000000
0x00a8d651
0x00a8d657
0x00a8d65a
0x00a8d660
0x00a8d666
0x00a8d66c
0x00a8d672
0x00a8d67a
0x00a8d684
0x00a8d68e
0x00a8d694
0x00a8d69a
0x00a8d69f
0x00a8d6a6
0x00a8d6ac
0x00a8d6b2
0x00a8d6b8
0x00a8d6be
0x00a8d6c1
0x00a8d6c7
0x00000000
0x00000000
0x00a8d2fa
0x00a8d2fd
0x00a8d303
0x00a8d305
0x00a8d307
0x00a8d307
0x00a8d30a
0x00a8d30d
0x00a8d30f
0x00a8d311
0x00a8d311
0x00a8d314
0x00a8d317
0x00a8d319
0x00a8d31b
0x00a8d31b
0x00a8d31e
0x00a8d324
0x00a8d326
0x00a8d32c
0x00a8d32c
0x00000000
0x00000000
0x00a8d6ce
0x00a8d6d4
0x00a8d6d6
0x00000000
0x00000000
0x00a8d6e8
0x00000000
0x00000000
0x00a8d39b
0x00a8d3a1
0x00a8d3a4
0x00a8d3aa
0x00a8d3ad
0x00a8d3b0
0x00a8d3bf
0x00a8d3c5
0x00a8d3c9
0x00a8d3cf
0x00a8d3d2
0x00a8d3d8
0x00a8d3db
0x00000000
0x00000000
0x00a8d3e1
0x00a8d3e7
0x00a8d3ea
0x00a8d3ec
0x00a8d3f3
0x00a8d3f9
0x00a8d3ff
0x00a8d405
0x00a8d40b
0x00a8d411
0x00a8d417
0x00a8d421
0x00a8d427
0x00000000
0x00000000
0x00a8d4b0
0x00a8d4b4
0x00a8d4ba
0x00a8d4bc
0x00a8d4c6
0x00a8d4cd
0x00a8d4d0
0x00a8d4d6
0x00a8d4dd
0x00a8d4e0
0x00a8d4e6
0x00a8d4e9
0x00a8d4f1
0x00a8d4f9
0x00a8d4ff
0x00a8d504
0x00a8d50b
0x00a8d511
0x00a8d514
0x00a8d51a
0x00a8d520
0x00a8d523
0x00a8d529
0x00a8d52c
0x00a8d52c
0x00000000
0x00000000
0x00a8d534
0x00a8d538
0x00a8d53e
0x00a8d540
0x00a8d54a
0x00a8d551
0x00a8d554
0x00a8d55a
0x00a8d561
0x00a8d564
0x00a8d56a
0x00a8d56d
0x00a8d575
0x00a8d57d
0x00a8d583
0x00a8d588
0x00a8d58f
0x00a8d595
0x00a8d598
0x00a8d59e
0x00a8d5a4
0x00a8d5a7
0x00a8d5ad
0x00a8d5ad
0x00000000
0x00000000
0x00a8d432
0x00a8d436
0x00a8d43c
0x00a8d43e
0x00a8d448
0x00a8d44f
0x00a8d452
0x00a8d458
0x00a8d45f
0x00a8d462
0x00a8d468
0x00a8d46b
0x00a8d473
0x00a8d47b
0x00a8d481
0x00a8d486
0x00a8d48d
0x00a8d493
0x00a8d496
0x00a8d49c
0x00a8d4a2
0x00a8d4a5
0x00a8d4a5
0x00000000
0x00000000
0x00000000
0x00000000
0x00a8ca46
0x00a8ca46
0x00a8ca46
0x00a8ca50
0x00a8ca57
0x00a8ca5e
0x00a8ca7a
0x00a8ca7c
0x00a8ca83
0x00000000
0x00000000
0x00a8ca89
0x00a8ca95
0x00a8ca9a
0x00a8caa0
0x00a8caa2
0x00000000
0x00000000
0x00000000
0x00a8caa2
0x00a8d6ee
0x00a8d6f4
0x00a8d6f6
0x00000000
0x00a8d6f6

APIs

EnterCriticalSection.KERNEL32(?,5CC80E5B,?), ref: 00A8C946
LeaveCriticalSection.KERNEL32(?,00000000,00000000), ref: 00A8C96B

Strings

EditUI, xrefs: 00A8DED8
DwmIsCompositionEnabled, xrefs: 00A8E4B2
Dwmapi.dll, xrefs: 00A8E497
setfocus, xrefs: 00A8DF3D
tooltips_class32, xrefs: 00A8E259
Internet Explorer_Server, xrefs: 00A8E0F5
WebBrowserUI, xrefs: 00A8DEB4

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalSection$EnterLeave
String ID: DwmIsCompositionEnabled$Dwmapi.dll$EditUI$Internet Explorer_Server$WebBrowserUI$setfocus$tooltips_class32
API String ID: 3168844106-1968607855
Opcode ID: b5ffbf2268bc74fb2f26a31c6c48f9ad232fd3dc69cbbec745400ca14b3b89de
Instruction ID: 3f6d394da237cf2720b6a705bbdb984b228c73afd7d1ba6d22d869a241e27584
Opcode Fuzzy Hash: b5ffbf2268bc74fb2f26a31c6c48f9ad232fd3dc69cbbec745400ca14b3b89de
Instruction Fuzzy Hash: 90A23B70A01629DFDB65DF64CC98BA9B7B4BF48704F1042E9E509E7290DB74AE80CF94

Uniqueness

Uniqueness Score: -1.00%

Function 00A74A00, Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 108
synchronizationthreadtimeCOMMON

Download Yara Rule

C-Code - Quality: 87%

			E00A74A00() {
				void* _v16;
				long _v20;
				signed int _t27;
				void* _t29;
				long _t34;
				void* _t35;
				long* _t49;
				long _t50;
				long _t51;
				long* _t57;
				long* _t61;
				long* _t62;
				signed int _t64;

				_push(0xffffffff);
				_push(0xb26120);
				_push( *[fs:0x0]);
				_push(_t49);
				_t27 =  *0xb6aa7c; // 0x5cc80e5b
				_push(_t27 ^ _t64);
				_t29 =  &_v16;
				 *[fs:0x0] = _t29;
				_t61 = _t49;
				if(_t61[1] == 0) {
					L17:
					_t50 = _t61[0x17];
					_t57 =  &(_t61[0xe]);
					if(_t50 != 0) {
						_t29 =  *((intOrPtr*)( *_t50 + 0x10))((_t29 & 0xffffff00 | _t50 != _t57) & 0x000000ff);
						_t57[9] = 0;
					}
					_t51 = _t61[0xd];
					_t62 =  &(_t61[4]);
					if(_t51 != 0) {
						_t29 =  *((intOrPtr*)( *_t51 + 0x10))((_t29 & 0xffffff00 | _t51 != _t62) & 0x000000ff);
						_t62[9] = 0;
					}
					 *[fs:0x0] = _v16;
					return _t29;
				}
				_t34 = GetCurrentThreadId();
				_t29 = _t61[1];
				if(_t34 ==  *_t61) {
					L15:
					if(_t29 != 0) {
						_t29 = CloseHandle(_t29);
						 *_t61 = 0;
						_t61[1] = 0;
					}
					goto L17;
				}
				_t61[2] = 1;
				if(_t29 == 0 || WaitForSingleObject(_t29, 0) != 0x102 || PostThreadMessageW( *_t61, 0x12, 0, 0) == 0) {
					L10:
					_t35 = _t61[1];
					if(_t35 != 0 && WaitForSingleObject(_t35, 0) == 0x102 && _t61[2] != 0) {
						WaitForSingleObject(_t61[1], 0xffffffff);
						E00A758A0("CWorkThread::Stop, wait thread stop timeout, %d", 0x1388);
					}
					_t29 = _t61[1];
					goto L15;
				} else {
					_v20 = timeGetTime();
					if(_t61[2] == 0) {
						L9:
						goto L10;
					}
					while(timeGetTime() - _v20 < 0x1388) {
						Sleep(0xa);
						if(_t61[2] != 0) {
							continue;
						}
						goto L9;
					}
					goto L9;
				}
			}

0x00a74a03
0x00a74a05
0x00a74a10
0x00a74a11
0x00a74a15
0x00a74a1c
0x00a74a1d
0x00a74a20
0x00a74a26
0x00a74a2c
0x00a74aef
0x00a74aef
0x00a74af2
0x00a74af7
0x00a74b04
0x00a74b07
0x00a74b07
0x00a74b0e
0x00a74b11
0x00a74b16
0x00a74b23
0x00a74b26
0x00a74b26
0x00a74b30
0x00a74b3e
0x00a74b3e
0x00a74a32
0x00a74a3a
0x00a74a3d
0x00a74ad7
0x00a74ad9
0x00a74adc
0x00a74ae2
0x00a74ae8
0x00a74ae8
0x00000000
0x00a74ad9
0x00a74a49
0x00a74a4f
0x00a74aa2
0x00a74aa2
0x00a74aa7
0x00a74ac0
0x00a74acc
0x00a74ad1
0x00a74ad4
0x00000000
0x00a74a6f
0x00a74a7b
0x00a74a7e
0x00a74a9c
0x00000000
0x00a74a9c
0x00a74a86
0x00a74a94
0x00a74a9a
0x00000000
0x00000000
0x00000000
0x00a74a9a
0x00000000
0x00a74a86

APIs

GetCurrentThreadId.KERNEL32 ref: 00A74A32
WaitForSingleObject.KERNEL32(00000000,00000000), ref: 00A74A54
PostThreadMessageW.USER32 ref: 00A74A65
timeGetTime.WINMM ref: 00A74A75
timeGetTime.WINMM ref: 00A74A86
Sleep.KERNEL32(0000000A), ref: 00A74A94
WaitForSingleObject.KERNEL32(00000000,00000000), ref: 00A74AAC
WaitForSingleObject.KERNEL32(00000000,000000FF), ref: 00A74AC0
CloseHandle.KERNEL32(00000000), ref: 00A74ADC

Strings

CWorkThread::Stop, wait thread stop timeout, %d, xrefs: 00A74AC7

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ObjectSingleWait$ThreadTimetime$CloseCurrentHandleMessagePostSleep
String ID: CWorkThread::Stop, wait thread stop timeout, %d
API String ID: 1309449773-1075796771
Opcode ID: df0356a8e048a9738c7d6410e4a221d2e63475e74d39a114390227a86e84f577
Instruction ID: 03722072e7a210fcb39f3f4c5bc0691af572adfd74dd8f8e825be2fa47d45819
Opcode Fuzzy Hash: df0356a8e048a9738c7d6410e4a221d2e63475e74d39a114390227a86e84f577
Instruction Fuzzy Hash: 9D31AD70740701AFEB20CF25DD85B2AB7E8EB08754F50C958E46A97AD1DB78EC40CB58

Uniqueness

Uniqueness Score: -1.00%

Function 00A75040, Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 81
threadCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00A75040(long* __ecx, long _a4) {
				void* _t15;
				void* _t16;
				void* _t17;
				long _t31;
				long* _t39;

				_t39 = __ecx;
				if( *((intOrPtr*)(__ecx + 4)) != 0) {
					if(GetCurrentThreadId() !=  *_t39) {
						_t15 = _t39[1];
						_t39[2] = 1;
						_t31 = _a4;
						if(_t15 != 0 && WaitForSingleObject(_t15, 0) == 0x102 && PostThreadMessageW( *_t39, 0x12, 0, 0) != 0) {
							_a4 = timeGetTime();
							if(_t39[2] != 0) {
								while(timeGetTime() - _a4 < _t31) {
									Sleep(0xa);
									if(_t39[2] != 0) {
										continue;
									}
									break;
								}
							}
						}
						_t16 = _t39[1];
						if(_t16 != 0 && WaitForSingleObject(_t16, 0) == 0x102 && _t39[2] != 0) {
							WaitForSingleObject(_t39[1], 0xffffffff);
							E00A758A0("CWorkThread::Stop, wait thread stop timeout, %d", _t31);
						}
						_t17 = _t39[1];
						if(_t17 != 0) {
							CloseHandle(_t17);
							_t39[1] = 0;
							 *_t39 = 0;
						}
						return 0;
					} else {
						return 0x80070005;
					}
				} else {
					return 1;
				}
			}

0x00a75044
0x00a7504a
0x00a7505e
0x00a7506a
0x00a7506d
0x00a75072
0x00a7507e
0x00a750a8
0x00a750ab
0x00a750b3
0x00a750c2
0x00a750c8
0x00000000
0x00000000
0x00000000
0x00a750c8
0x00a750ca
0x00a750ab
0x00a750d0
0x00a750d5
0x00a750ee
0x00a750f6
0x00a750fb
0x00a750fe
0x00a75105
0x00a75108
0x00a7510e
0x00a75115
0x00a75115
0x00a7511f
0x00a75060
0x00a75067
0x00a75067
0x00a7504c
0x00a75053
0x00a75053

APIs

GetCurrentThreadId.KERNEL32 ref: 00A75056

Strings

CWorkThread::Stop, wait thread stop timeout, %d, xrefs: 00A750F1

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: CurrentThread
String ID: CWorkThread::Stop, wait thread stop timeout, %d
API String ID: 2882836952-1075796771
Opcode ID: e9671b6a58e3153e1547be6a4eb0057744dae53058f0210ba30f4fa293a1e291
Instruction ID: e0bcaa1cef2c72e9c8ed221c0a9919f7539dd59ee87c64c1d6d252fb23db3f6d
Opcode Fuzzy Hash: e9671b6a58e3153e1547be6a4eb0057744dae53058f0210ba30f4fa293a1e291
Instruction Fuzzy Hash: 7221D071A00B05AFE7309B74DC48B56BBD8AB10720F20C829E05CD75D0DBF5E882CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00A74EE0, Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 82
timesleepsynchronizationCOMMON

Download Yara Rule

C-Code - Quality: 96%

			E00A74EE0(long* __ecx, void* __edi, long _a4, intOrPtr _a8) {
				void* __esi;
				void* _t15;
				void* _t16;
				long _t18;
				long _t19;
				void* _t36;
				intOrPtr _t37;
				long* _t40;

				_t36 = __edi;
				_t40 = __ecx;
				_t15 =  *(__ecx + 4);
				if(_t15 == 0 || WaitForSingleObject(_t15, 0) != 0x102) {
					_t16 = _t40[1];
					if(_t16 != 0) {
						CloseHandle(_t16);
						_t40[1] = 0;
						 *_t40 = 0;
					}
					_t40[2] = 0;
					_t40[2] = 0;
					E00A43B50( &(_t40[4]), _t36, _t40, _a4);
					_t18 = E00AFDE50( &(_t40[4]), 0, 0, 0xa75230, _t40, 0, _t40);
					_t40[1] = _t18;
					if(_t18 != 0) {
						_push(_t36);
						_t19 = timeGetTime();
						_t37 = _a8;
						_a4 = _t19;
						if(_t40[2] != 0) {
							L13:
							return 0;
						} else {
							while(timeGetTime() - _a4 < _t37) {
								Sleep(0xa);
								if(_t40[2] == 0) {
									continue;
								}
								break;
							}
							if(_t40[2] != 0) {
								goto L13;
							} else {
								E00A758A0("CWorkThread::Start, wait thread running timeout, %d", _t37);
								return 1;
							}
						}
					} else {
						E00A758A0("CWorkThread::Start, CreateThread failed, errno=%d", GetLastError());
						return 0x80070006;
					}
				} else {
					return 1;
				}
			}

0x00a74ee0
0x00a74ee4
0x00a74ee6
0x00a74eeb
0x00a74f07
0x00a74f0c
0x00a74f0f
0x00a74f15
0x00a74f1c
0x00a74f1c
0x00a74f25
0x00a74f2c
0x00a74f30
0x00a74f42
0x00a74f4a
0x00a74f4f
0x00a74f6f
0x00a74f70
0x00a74f7a
0x00a74f7d
0x00a74f80
0x00a74fc7
0x00a74fcc
0x00a74f82
0x00a74f90
0x00a74f9f
0x00a74fa5
0x00000000
0x00000000
0x00000000
0x00a74fa5
0x00a74fac
0x00000000
0x00a74fae
0x00a74fb4
0x00a74fc4
0x00a74fc4
0x00a74fac
0x00a74f51
0x00a74f5d
0x00a74f6c
0x00a74f6c
0x00a74efd
0x00a74f04
0x00a74f04

APIs

WaitForSingleObject.KERNEL32(?,00000000,745FD300,?,00A75011,5CC80E5B,00000001,5CC80E5B,?,745FD300,?,?,00000000,00B261C8,000000FF), ref: 00A74EF0
CloseHandle.KERNEL32(?,745FD300,?,00A75011,5CC80E5B,00000001,5CC80E5B,?,745FD300,?,?,00000000,00B261C8,000000FF), ref: 00A74F0F
GetLastError.KERNEL32(00A75011,5CC80E5B,00000001,5CC80E5B,?,745FD300,?,?,00000000,00B261C8,000000FF), ref: 00A74F51
timeGetTime.WINMM ref: 00A74F70
timeGetTime.WINMM ref: 00A74F90
Sleep.KERNEL32(0000000A), ref: 00A74F9F

Strings

CWorkThread::Start, wait thread running timeout, %d, xrefs: 00A74FAF
CWorkThread::Start, CreateThread failed, errno=%d, xrefs: 00A74F58

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Timetime$CloseErrorHandleLastObjectSingleSleepWait
String ID: CWorkThread::Start, CreateThread failed, errno=%d$CWorkThread::Start, wait thread running timeout, %d
API String ID: 172980972-363858984
Opcode ID: f02bb81a36d1459793edf1047a8f6264c96d64fd0babf64da112f5ab4b349596
Instruction ID: 5a8436ec223ef221c09e866cfd6a4374ddc4164081727486bef39cc12fde3aa8
Opcode Fuzzy Hash: f02bb81a36d1459793edf1047a8f6264c96d64fd0babf64da112f5ab4b349596
Instruction Fuzzy Hash: 8921F232604701ABE330AB74EC49B6B7FD8AB19B21F50C419F48DDB191D770E880C7A5

Uniqueness

Uniqueness Score: -1.00%

Function 00AE8BE0, Relevance: 13.7, APIs: 9, Instructions: 244
fileCOMMONCrypto

Download Yara Rule

C-Code - Quality: 89%

			E00AE8BE0(void* __ebx, void* __ecx, void* __edi, void* __esi) {
				signed int _v8;
				long _v12;
				short _v16;
				signed short _v18;
				struct _OVERLAPPED* _v20;
				intOrPtr _v22;
				long _v26;
				intOrPtr _v30;
				short _v32;
				short _v34;
				short _v36;
				short _v38;
				short _v40;
				void _v44;
				short _v48;
				struct _OVERLAPPED* _v52;
				struct _OVERLAPPED* _v56;
				signed int _v58;
				signed int _v60;
				intOrPtr _v64;
				void _v68;
				long _v72;
				struct _OVERLAPPED* _v76;
				signed int _t119;
				signed short _t135;
				signed int _t136;
				struct _OVERLAPPED* _t137;
				signed int _t156;
				int _t171;
				void* _t189;
				intOrPtr _t192;
				void* _t194;
				struct _OVERLAPPED* _t196;
				signed int _t209;
				intOrPtr _t210;
				short _t211;
				long _t214;
				void* _t223;
				struct _OVERLAPPED* _t228;
				void* _t229;
				void* _t230;
				void* _t232;
				signed int _t233;
				void* _t234;

				_t119 =  *0xb6aa7c; // 0x5cc80e5b
				_v8 = _t119 ^ _t233;
				_t232 = __ecx;
				if( *((intOrPtr*)(__ecx + 0x10)) == 0) {
					L20:
					return E00AE4BF8(_v8 ^ _t233);
				} else {
					SetFilePointer( *(__ecx + 4), 0, 0, 0);
					SetEndOfFile( *(_t232 + 4));
					_t192 =  *((intOrPtr*)(_t232 + 0x1c));
					_t228 = 0;
					_v12 = 0;
					_v72 = 0;
					if((0x532ae21d * ( *((intOrPtr*)(_t232 + 0x20)) - _t192) >> 0x20 >> 8 >> 0x1f) + (0x532ae21d * ( *((intOrPtr*)(_t232 + 0x20)) - _t192) >> 0x20 >> 8) == 0) {
						L12:
						asm("xorps xmm0, xmm0");
						_v52 = 0;
						asm("movups [ebp-0x40], xmm0");
						_v64 = 0;
						_v48 = 0;
						_v68 = 0x6054b50;
						_v52 = _t228;
						_t135 = (0x532ae21d * ( *((intOrPtr*)(_t232 + 0x20)) - _t192) >> 0x20 >> 8 >> 0x1f) + (0x532ae21d * ( *((intOrPtr*)(_t232 + 0x20)) - _t192) >> 0x20 >> 8);
						_t136 = _t135 & 0x0000ffff;
						_v60 = _t136;
						_v58 = _t136;
						_t137 = 0;
						_v48 = 0;
						_v76 = 0;
						_v72 = 0;
						if(_t135 == 0) {
							L18:
							_v56 = _t137;
							if(WriteFile( *(_t232 + 4),  &_v68, 0x16,  &_v12, 0) != 0) {
								goto L20;
							} else {
								goto L19;
							}
						} else {
							_t229 = 0;
							while(WriteFile( *(_t232 + 4),  *(_t229 + _t192), 0x2e,  &_v12, 0) != 0) {
								_t194 = _v76 + _v12;
								if(WriteFile( *(_t232 + 4),  *((intOrPtr*)(_t232 + 0x1c)) + 0x20c + _t229,  *( *((intOrPtr*)( *((intOrPtr*)(_t232 + 0x1c)) + _t229)) + 0x1c) & 0x0000ffff,  &_v12, 0) == 0) {
									goto L19;
								} else {
									_t229 = _t229 + 0x314;
									_v72 = _v72 + 1;
									_v76 = _t194 + _v12;
									_t192 =  *((intOrPtr*)(_t232 + 0x1c));
									if(_v72 < (0x532ae21d * ( *((intOrPtr*)(_t232 + 0x20)) - _t192) >> 0x20 >> 8 >> 0x1f) + (0x532ae21d * ( *((intOrPtr*)(_t232 + 0x20)) - _t192) >> 0x20 >> 8)) {
										continue;
									} else {
										_t137 = _v76;
										goto L18;
									}
								}
								goto L21;
							}
							goto L19;
						}
					} else {
						_t209 = 0;
						while(1) {
							_t156 = _t209 * 0x314;
							asm("xorps xmm0, xmm0");
							asm("movups [ebp-0x28], xmm0");
							_v20 = 0;
							asm("movq [ebp-0x18], xmm0");
							_v16 = 0;
							_v44 = 0x4034b50;
							_t210 =  *((intOrPtr*)(_t156 + _t192));
							_v76 = _t156;
							_t223 = _t156 + _t192;
							if(_t210 == 0) {
								break;
							}
							_v40 =  *(_t210 + 6) & 0x0000ffff;
							_v38 =  *(_t210 + 8) & 0x0000ffff;
							_v36 =  *(_t210 + 0xa) & 0x0000ffff;
							_v34 =  *(_t210 + 0xc) & 0x0000ffff;
							_v32 =  *(_t210 + 0xe) & 0x0000ffff;
							_v30 =  *((intOrPtr*)(_t210 + 0x10));
							_v26 =  *((intOrPtr*)(_t210 + 0x14));
							_v22 =  *((intOrPtr*)(_t210 + 0x18));
							E00AF4C50(_t228, _t223 + 0x20c, 0, 0x104);
							_t196 = _v76;
							_t234 = _t234 + 0xc;
							_t171 = WideCharToMultiByte(0, 0,  &(_t196->InternalHigh) +  *((intOrPtr*)(_t232 + 0x1c)), 0xffffffff, _t196 + 0x20c +  *((intOrPtr*)(_t232 + 0x1c)), 0x104, 0, 0);
							if(_t171 == 0) {
								break;
							} else {
								_t41 = _t171 - 1; // -1
								_t211 = _t41;
								_v18 = _t211;
								 *((short*)( *((intOrPtr*)( *((intOrPtr*)(_t232 + 0x1c)) + _t196)) + 0x1c)) = _t211;
								 *( *((intOrPtr*)( *((intOrPtr*)(_t232 + 0x1c)) + _t196)) + 0x2a) = _t228;
								if(WriteFile( *(_t232 + 4),  &_v44, 0x1e,  &_v12, 0) == 0) {
									break;
								} else {
									_t230 = _t228 + _v12;
									if(WriteFile( *(_t232 + 4),  *((intOrPtr*)(_t232 + 0x1c)) + 0x20c + _t196, _v18 & 0x0000ffff,  &_v12, 0) == 0) {
										break;
									} else {
										_t228 = _t230 + _v12;
										_t214 = _v26;
										if(_t214 == 0) {
											L11:
											_t192 =  *((intOrPtr*)(_t232 + 0x1c));
											_v72 = _v72 + 1;
											_t209 = _v72;
											if(_t209 < (0x532ae21d * ( *((intOrPtr*)(_t232 + 0x20)) - _t192) >> 0x20 >> 8 >> 0x1f) + (0x532ae21d * ( *((intOrPtr*)(_t232 + 0x20)) - _t192) >> 0x20 >> 8)) {
												continue;
											} else {
												goto L12;
											}
										} else {
											_t189 =  *( *((intOrPtr*)(_t232 + 0x1c)) + _t196 + 0x310);
											if(_t189 == 0) {
												goto L11;
											} else {
												if(WriteFile( *(_t232 + 4), _t189, _t214,  &_v12, 0) == 0) {
													break;
												} else {
													_t228 = _t228 + _v12;
													goto L11;
												}
											}
										}
									}
								}
							}
							goto L21;
						}
						L19:
						return E00AE4BF8(_v8 ^ _t233);
					}
				}
				L21:
			}

0x00ae8be6
0x00ae8bed
0x00ae8bf2
0x00ae8bf9
0x00ae8eb4
0x00ae8ec9
0x00ae8bff
0x00ae8c08
0x00ae8c11
0x00ae8c1f
0x00ae8c22
0x00ae8c26
0x00ae8c2b
0x00ae8c38
0x00ae8db6
0x00ae8dbb
0x00ae8dbe
0x00ae8dc5
0x00ae8dc9
0x00ae8dd3
0x00ae8ddb
0x00ae8de7
0x00ae8ded
0x00ae8def
0x00ae8df2
0x00ae8df6
0x00ae8dfa
0x00ae8dff
0x00ae8e03
0x00ae8e06
0x00ae8e09
0x00ae8e85
0x00ae8e87
0x00ae8e9f
0x00000000
0x00000000
0x00000000
0x00000000
0x00ae8e0b
0x00ae8e0b
0x00ae8e10
0x00ae8e31
0x00ae8e53
0x00000000
0x00ae8e55
0x00ae8e60
0x00ae8e66
0x00ae8e69
0x00ae8e6c
0x00ae8e80
0x00000000
0x00ae8e82
0x00ae8e82
0x00000000
0x00ae8e82
0x00ae8e80
0x00000000
0x00ae8e53
0x00000000
0x00ae8e10
0x00ae8c3e
0x00ae8c3e
0x00ae8c40
0x00ae8c40
0x00ae8c46
0x00ae8c49
0x00ae8c4d
0x00ae8c54
0x00ae8c59
0x00ae8c5f
0x00ae8c66
0x00ae8c69
0x00ae8c6c
0x00ae8c71
0x00000000
0x00000000
0x00ae8c7b
0x00ae8c83
0x00ae8c8b
0x00ae8c93
0x00ae8c9b
0x00ae8ca2
0x00ae8ca8
0x00ae8cb3
0x00ae8cbf
0x00ae8cc4
0x00ae8cc7
0x00ae8cea
0x00ae8cf2
0x00000000
0x00ae8cf8
0x00ae8cf8
0x00ae8cf8
0x00ae8cfe
0x00ae8d07
0x00ae8d11
0x00ae8d29
0x00000000
0x00ae8d2f
0x00ae8d35
0x00ae8d55
0x00000000
0x00ae8d5b
0x00ae8d5b
0x00ae8d5e
0x00ae8d63
0x00ae8d8f
0x00ae8d97
0x00ae8d9c
0x00ae8da1
0x00ae8db0
0x00000000
0x00000000
0x00000000
0x00000000
0x00ae8d65
0x00ae8d68
0x00ae8d71
0x00000000
0x00ae8d73
0x00ae8d86
0x00000000
0x00ae8d8c
0x00ae8d8c
0x00000000
0x00ae8d8c
0x00ae8d86
0x00ae8d71
0x00ae8d63
0x00ae8d55
0x00ae8d29
0x00000000
0x00ae8cf2
0x00ae8ea3
0x00ae8eb3
0x00ae8eb3
0x00ae8c38
0x00000000

APIs

SetFilePointer.KERNEL32(?,00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00AE9598), ref: 00AE8C08
SetEndOfFile.KERNEL32(?,?,?,?,?,?,?,?,?,00AE9598,?,?,?,00A8F882,00000000,?), ref: 00AE8C11
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,?,00000104,00000000,00000000), ref: 00AE8CEA
WriteFile.KERNEL32(?,04034B50,0000001E,?,00000000), ref: 00AE8D21
WriteFile.KERNEL32(?,?,?,?,00000000), ref: 00AE8D4D
WriteFile.KERNEL32(?,?,?,?,00000000), ref: 00AE8D7E
WriteFile.KERNEL32(?,00000000,0000002E,?,00000000), ref: 00AE8E1E
WriteFile.KERNEL32(?,?,?,?,00000000), ref: 00AE8E4B
WriteFile.KERNEL32(?,06054B50,00000016,?,00000000), ref: 00AE8E97

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: File$Write$ByteCharMultiPointerWide
String ID:
API String ID: 3755117302-0
Opcode ID: ed127f6719ca0574332281669d12bae62884eeabb223c8f0656275cd4f2d3ca7
Instruction ID: e81a46ece8fa057cf218831c35861c96c21d78e29018570882bbad8f9a3be27e
Opcode Fuzzy Hash: ed127f6719ca0574332281669d12bae62884eeabb223c8f0656275cd4f2d3ca7
Instruction Fuzzy Hash: 4DA15D71A002089FDB24CFA5CD85BAEB7B5FF48700F14416DE905EB291EB74E946CB54

Uniqueness

Uniqueness Score: -1.00%

Function 6B59CB9E, Relevance: 13.7, APIs: 3, Strings: 4, Instructions: 1427COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 6B59CCE4
DeleteCriticalSection.KERNEL32(?,6B5A9410,00000010,00000000), ref: 6B59DF9C
_free.LIBCMT ref: 6B59DFAA

Strings

1#INF, xrefs: 6B59DEF1
1#SNAN, xrefs: 6B59DEE3
1#QNAN, xrefs: 6B59DEEA
1#IND, xrefs: 6B59DEDC

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalDeleteSection__floor_pentium4_free
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 3598519632-2761157908
Opcode ID: ab6d801e02b0ee11cc3585fe2910aa862d2708c0c93f3ad7cc043ddf3d6e84bf
Instruction ID: d26648c0ec8e8e8f40996aa7324a7e97d9e0972333222f9e05c6b19b78537ddf
Opcode Fuzzy Hash: ab6d801e02b0ee11cc3585fe2910aa862d2708c0c93f3ad7cc043ddf3d6e84bf
Instruction Fuzzy Hash: 81C29171E486688FEB25DF28ED407D9B7B5EB89304F1041EAD41DE7280E779AE818F40

Uniqueness

Uniqueness Score: -1.00%

Function 00A70E20, Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143
COMMON

Download Yara Rule

C-Code - Quality: 43%

			E00A70E20(void* __ebx, void* __edi, void* __esi, char _a4) {
				int _v8;
				signed int _v12;
				char _v16;
				signed int _v20;
				struct _TOKEN_PRIVILEGES _v28;
				void* _v32;
				short _v544;
				char _v548;
				signed int _v552;
				void* _v572;
				void* __ebp;
				signed int _t34;
				signed int _t35;
				signed int _t43;
				signed int _t63;
				intOrPtr _t69;
				intOrPtr* _t73;
				intOrPtr* _t84;
				void* _t89;
				intOrPtr* _t97;
				signed int _t99;
				void* _t101;
				signed int _t103;

				_t93 = __esi;
				_t72 = __ebx;
				_push(0xffffffff);
				_push(0xb25d66);
				_push( *[fs:0x0]);
				_t34 =  *0xb6aa7c; // 0x5cc80e5b
				_t35 = _t34 ^ _t99;
				_v20 = _t35;
				_push(__esi);
				_push(__edi);
				_push(_t35);
				 *[fs:0x0] =  &_v16;
				_t91 = _a4;
				_v548 = _a4;
				E00AF4C50(_a4,  &_v544, 0, 0x20a);
				_t103 = _t101 - 0x214 + 0xc;
				GetModuleFileNameW(0,  &_v544, 0x104);
				_t73 = E00A445F0();
				if(_t73 == 0) {
					_push(0x80004005);
					E00A43FD0(__ebx, _t91, __esi);
					asm("int3");
					asm("int3");
					asm("int3");
					asm("int3");
					asm("int3");
					asm("int3");
					_push(_t99);
					_t100 = _t103;
					_t43 =  *0xb6aa7c; // 0x5cc80e5b
					_v552 = _t43 ^ _t103;
					if(OpenProcessToken(GetCurrentProcess(), 0x28,  &_v572) == 0) {
						return E00AE4BF8(_v12 ^ _t100);
					} else {
						_v28.PrivilegeCount = 1;
						LookupPrivilegeValueW(0, L"SeDebugPrivilege",  &(_v28.Privileges));
						_v16 = 2;
						AdjustTokenPrivileges(_v32, 0,  &_v28, 0x10, 0, 0);
						CloseHandle(_v32);
						return E00AE4BF8(_v12 ^ _t100, __esi);
					}
				} else {
					_v548 =  *((intOrPtr*)( *_t73 + 0xc))() + 0x10;
					_v8 = 0;
					if(E00A44130(__ebx,  &_v548, _t91, __esi,  &_v544) == 0) {
						_t84 =  &_v544;
						_t89 = _t84 + 2;
						do {
							_t69 =  *_t84;
							_t84 = _t84 + 2;
						} while (_t69 != 0);
						_push(_t84 - _t89 >> 1);
						E00A44EA0( &_v548, _t91, __esi,  &_v544);
					}
					_v8 = 1;
					_t63 = E00A70FE0(_t72, _t91, _t93, _t91,  &_v548, 0);
					_v8 = 0xffffffff;
					_t97 = _v548 + 0xfffffff0;
					asm("lock xadd [esi+0xc], eax");
					if((_t63 | 0xffffffff) - 1 <= 0) {
						 *((intOrPtr*)( *((intOrPtr*)( *_t97)) + 4))(_t97);
					}
					 *[fs:0x0] = _v16;
					return E00AE4BF8(_v20 ^ _t99);
				}
			}

0x00a70e20
0x00a70e20
0x00a70e23
0x00a70e25
0x00a70e30
0x00a70e37
0x00a70e3c
0x00a70e3e
0x00a70e41
0x00a70e42
0x00a70e43
0x00a70e47
0x00a70e4d
0x00a70e5e
0x00a70e64
0x00a70e69
0x00a70e7a
0x00a70e85
0x00a70e89
0x00a70f40
0x00a70f45
0x00a70f4a
0x00a70f4b
0x00a70f4c
0x00a70f4d
0x00a70f4e
0x00a70f4f
0x00a70f50
0x00a70f51
0x00a70f56
0x00a70f5d
0x00a70f75
0x00a70fd7
0x00a70f77
0x00a70f7b
0x00a70f8a
0x00a70f99
0x00a70fa6
0x00a70fb1
0x00a70fc7
0x00a70fc7
0x00a70e8f
0x00a70e97
0x00a70ea3
0x00a70eb8
0x00a70eba
0x00a70ec0
0x00a70ec3
0x00a70ec3
0x00a70ec6
0x00a70ec9
0x00a70ed8
0x00a70ee0
0x00a70ee0
0x00a70eed
0x00a70ef6
0x00a70f04
0x00a70f0b
0x00a70f11
0x00a70f19
0x00a70f20
0x00a70f20
0x00a70f28
0x00a70f3f
0x00a70f3f

APIs

GetModuleFileNameW.KERNEL32(00000000,?,00000104,5CC80E5B,?,?), ref: 00A70E7A

Part of subcall function 00A445F0: GetProcessHeap.KERNEL32(00A75638,5CC80E5B), ref: 00A44601

GetCurrentProcess.KERNEL32(00000028,?), ref: 00A70F66
OpenProcessToken.ADVAPI32(00000000), ref: 00A70F6D
LookupPrivilegeValueW.ADVAPI32(00000000,SeDebugPrivilege,?), ref: 00A70F8A
AdjustTokenPrivileges.ADVAPI32(?,00000000,00000001,00000010,00000000,00000000), ref: 00A70FA6
CloseHandle.KERNEL32(?), ref: 00A70FB1

Part of subcall function 00A44130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B2DAF8,?,?,?,?,00A436E1,00B2DAF8,?,?,?,00B2DAF8), ref: 00A44186
Part of subcall function 00A44130: FindResourceW.KERNEL32(00000000,00B2DAF8,00000006,?,00B2DAF8), ref: 00A441C4

Strings

SeDebugPrivilege, xrefs: 00A70F83

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Process$FindResourceToken$AdjustCloseCurrentFileHandleHeapLookupModuleNameOpenPrivilegePrivilegesValue
String ID: SeDebugPrivilege
API String ID: 375295171-2896544425
Opcode ID: 0e75b62ddc4c560537c83b320db91ff2bcddf14028484c47824a6686b7ae7873
Instruction ID: 95fff693b0a5f1eb3577037bc8844c0edd3734cbeb3bc96b922da8748b7952a2
Opcode Fuzzy Hash: 0e75b62ddc4c560537c83b320db91ff2bcddf14028484c47824a6686b7ae7873
Instruction Fuzzy Hash: 05418575940208ABDB20DFA4DD49FEEB7B8EF48710F108199F919E72D1DB70AA05CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00A8C890, Relevance: 7.5, APIs: 5, Instructions: 33keyboardCOMMON

Download Yara Rule

APIs

GetKeyState.USER32(00000011), ref: 00A8C89C
GetKeyState.USER32(00000002), ref: 00A8C8AB
GetKeyState.USER32(00000001), ref: 00A8C8B7
GetKeyState.USER32(00000010), ref: 00A8C8C3
GetKeyState.USER32(00000012), ref: 00A8C8CF

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: State
String ID:
API String ID: 1649606143-0
Opcode ID: dc6174f382ed80b36059e0f7fb976c71cdb66bc3c61f01314d6c00b02b999cb1
Instruction ID: cd6ce435fd6a32775c5dec4a39ec5205a56293b1b10b0f9acdab4f722ccdeb19
Opcode Fuzzy Hash: dc6174f382ed80b36059e0f7fb976c71cdb66bc3c61f01314d6c00b02b999cb1
Instruction Fuzzy Hash: 72E0E56BB8027A10ED6532EC9C02FE58A145FA4BE4F430162EA49F70855DE269431AF0

Uniqueness

Uniqueness Score: -1.00%

Function 00AE5D30, Relevance: 6.7, APIs: 4, Instructions: 708COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32(00AE6367,00000000,?,0000FDE9,?,?,00000000,00000000,?,00AE6367,?,0000FDE9), ref: 00AE5D93
GetLastError.KERNEL32(?,00AE6367,?,0000FDE9), ref: 00AE5DA4
WideCharToMultiByte.KERNEL32(00AE6367,00000000,?,0000FDE9,00000000,00000000,00000000,00000000,?,00AE6367,?,0000FDE9), ref: 00AE5DC1
WideCharToMultiByte.KERNEL32(00AE6367,00000000,?,0000FDE9,?,00000000,00000000,00000000,?,?,?,?,?,00AE6367,?,0000FDE9), ref: 00AE5DEC

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide$ErrorLast
String ID:
API String ID: 1717984340-0
Opcode ID: 74b35b3e7455a0c3cb7ff5eee4d53e7c1911be408c46c6fe884a6c131ead4966
Instruction ID: c3faa7122d4df6385378bd7d427059a4bb725afe7320820999c1d0551cce8321
Opcode Fuzzy Hash: 74b35b3e7455a0c3cb7ff5eee4d53e7c1911be408c46c6fe884a6c131ead4966
Instruction Fuzzy Hash: 80324471E002899BDF14DFA5CD85BEEBBB5EF48304F144568F805BB281DB35AA45CB60

Uniqueness

Uniqueness Score: -1.00%

Function 00AF79BF, Relevance: 4.6, APIs: 3, Instructions: 78COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,00000000), ref: 00AF7AB7
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,00000000), ref: 00AF7AC1
UnhandledExceptionFilter.KERNEL32(?,?,?,?,?,?,00000000), ref: 00AF7ACE

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 0275ef7502055728e45d70a85c6f8ac552939d1cfbe6332d50b9b6cd5730afb8
Instruction ID: ee615855c1a1f382c5d6000dc6f6a92808c7e4fd6da4dd1ba59a3104ac0e28a9
Opcode Fuzzy Hash: 0275ef7502055728e45d70a85c6f8ac552939d1cfbe6332d50b9b6cd5730afb8
Instruction Fuzzy Hash: 5A31C47590121C9BCB21DF65DD89B9DBBB8AF08310F5041EAF51CA7251EB709F818F45

Uniqueness

Uniqueness Score: -1.00%

Function 6B595B0F, Relevance: 4.6, APIs: 3, Instructions: 78COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6B595C07
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 6B595C11
UnhandledExceptionFilter.KERNEL32(?), ref: 6B595C1E

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 4830988da67302750e4bdc963da3942e4a4f201bda1a530bd365f637cc68fff9
Instruction ID: ceab28b3a71dca99fefd81ac69caddb583387bb2bac77d5e554627d18fa58567
Opcode Fuzzy Hash: 4830988da67302750e4bdc963da3942e4a4f201bda1a530bd365f637cc68fff9
Instruction Fuzzy Hash: 2F31B27490122C9BDB21DF64E889BDDBBB8BF48314F5041EAE91CA7250EB349F858F44

Uniqueness

Uniqueness Score: -1.00%

Function 6B5976A5, Relevance: 4.5, APIs: 3, Instructions: 20COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(00000003,?,6B59767B,00000003,6B5A9208,0000000C,6B5977C3,00000003,00000002,00000000,?,6B598399,00000003), ref: 6B5976C6
TerminateProcess.KERNEL32(00000000,?,6B59767B,00000003,6B5A9208,0000000C,6B5977C3,00000003,00000002,00000000,?,6B598399,00000003), ref: 6B5976CD
ExitProcess.KERNEL32 ref: 6B5976DF

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: 54d9b241d10fd1eba386094c0ab77bf60297d6f31e15a829147a312d0bf3d799
Instruction ID: 1e5982c966dd358f15ca8a50c8e5c2076c94e4790013d8ae50b1fb7f9417154b
Opcode Fuzzy Hash: 54d9b241d10fd1eba386094c0ab77bf60297d6f31e15a829147a312d0bf3d799
Instruction Fuzzy Hash: EFE08631400148EFDF127F24ED09ACD3F2AFF41289F010014F905AA121DB39DE42CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00B1176C, Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 37COMMON

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,?,00000000,?,?,?,?,?,?,?), ref: 00B117BF

Strings

GetLocaleInfoEx, xrefs: 00B1177D, 00B11787

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: InfoLocale
String ID: GetLocaleInfoEx
API String ID: 2299586839-2904428671
Opcode ID: 3f0235caecf80e5da42d56d84e0d9c0c1aaec6b3b613bebb6154913911415c38
Instruction ID: b5737b8efd0cf33e1bff60981a5a22af32faff16793f31597e4f1dbe9bc725bc
Opcode Fuzzy Hash: 3f0235caecf80e5da42d56d84e0d9c0c1aaec6b3b613bebb6154913911415c38
Instruction Fuzzy Hash: 30F09631741208BBCB12AF64DD06EAE7B95EF04B10F408895FD05673A0DA71AE11AA95

Uniqueness

Uniqueness Score: -1.00%

Function 6B59C6F0, Relevance: 3.5, APIs: 2, Instructions: 464COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f5291e9c0ef73f2a0daafde43cddfa27bf2dcebdb736927a26b56a65fddd2fe
Instruction ID: 07a8d3f7cceddb1e90aaefa2ee6c8585043404d61857e9a0fc103a9c191b8bb3
Opcode Fuzzy Hash: 1f5291e9c0ef73f2a0daafde43cddfa27bf2dcebdb736927a26b56a65fddd2fe
Instruction Fuzzy Hash: EA026D71E002599FEB14DFA9D8906DDB7F2FF88314F1582AAD919E7344D734AA41CB80

Uniqueness

Uniqueness Score: -1.00%

Function 6B5A17B8, Relevance: 1.8, APIs: 1, Instructions: 269COMMON

Download Yara Rule

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,00000008,?,?,6B5A17B3,?,?,00000008,?,?,6B5A1453,00000000), ref: 6B5A19E5

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: 68efde97c03d03a4c5b0f2c142387f50e4a84b957b5803df5a57573281530aba
Instruction ID: 39af895584ab5e1b232cfe1f5a764a7ea3dd148641551595147b8d5bae7dc3de
Opcode Fuzzy Hash: 68efde97c03d03a4c5b0f2c142387f50e4a84b957b5803df5a57573281530aba
Instruction Fuzzy Hash: C2B15E31610619DFE705CF28C486B997BE0FF46364F258698E9E9DF2A1C339E981CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00A84B40, Relevance: 1.3, APIs: 1, Instructions: 50memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(5CC80E5B,00000000,00B27F9C,000000FF,?,00A959A3), ref: 00A84B7A

Part of subcall function 00AE4BE3: __onexit.LIBCMT ref: 00AE4BE9

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: HeapProcess__onexit
String ID:
API String ID: 2210869276-0
Opcode ID: 873274ae7a84afb0a168c900ff33c1701b231a51bfcc349607f4ffcbabc622d1
Instruction ID: 54b4ffd620f32803ea80a383f0fbfaec9dd1ef3ee39c0ea3abd1cfbcb6629605
Opcode Fuzzy Hash: 873274ae7a84afb0a168c900ff33c1701b231a51bfcc349607f4ffcbabc622d1
Instruction Fuzzy Hash: A51144F1928344DFD750EF54E905B467BF4F308718F1142AAE46C8B2A0DBB594849B08

Uniqueness

Uniqueness Score: -1.00%

Function 00A7CDE0, Relevance: .7, Instructions: 691COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4332dbf59349823f1b63b0f3af659b73376171e4f5456d745070db79ab88f61a
Instruction ID: 2a9917ab4e175824facb72b851aa434ee1850aa5179f2d5f307e7bc5dfd421e7
Opcode Fuzzy Hash: 4332dbf59349823f1b63b0f3af659b73376171e4f5456d745070db79ab88f61a
Instruction Fuzzy Hash: 232261B7F515144BDB0CCA9DCCA27ECB2E3AFD4218B0E813DA40AE3745EA7DD9158644

Uniqueness

Uniqueness Score: -1.00%

Function 00AE6D20, Relevance: .3, Instructions: 284COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b40ca831aba2f0c5502d6289d648277c2ced2bc8cda33127ebd29af1ea874f9
Instruction ID: 38c34a97c0cdae996592df85653ac782607f7c0a0ba9f9860d8563cbdc056844
Opcode Fuzzy Hash: 2b40ca831aba2f0c5502d6289d648277c2ced2bc8cda33127ebd29af1ea874f9
Instruction Fuzzy Hash: 95C11A716101209BD719CF5ED884679B3E1FF88309FD7469AE941EB246C638F826DBD0

Uniqueness

Uniqueness Score: -1.00%

Function 00AE70E0, Relevance: .3, Instructions: 283COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 65365e123b8bcaf013587e567035989ac176c1e388cd298d1ce727c8ac273fc7
Instruction ID: 56534c67c95b8ed87722403bec06b746e155a5245a3e0096eca662feaca4c430
Opcode Fuzzy Hash: 65365e123b8bcaf013587e567035989ac176c1e388cd298d1ce727c8ac273fc7
Instruction Fuzzy Hash: B0C11B716101209BD715CF5ED884679B3E1FF88309FD7469AE981EB246C638F826DBD0

Uniqueness

Uniqueness Score: -1.00%

Function 6B5969A8, Relevance: .2, Instructions: 237COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 71fc629c5816354c124a35dab506fe7f90b30059052781035579adbc9bb545ce
Instruction ID: 0124d96654c9e9819a353dfc8adac0e9b34076be0682248aad156ecda941d306
Opcode Fuzzy Hash: 71fc629c5816354c124a35dab506fe7f90b30059052781035579adbc9bb545ce
Instruction Fuzzy Hash: B1619C71A407C5D6FB18BBB8B951BEE3395EB42744F00889AD642DB180E71DDD4E83C5

Uniqueness

Uniqueness Score: -1.00%

Function 00AE7C30, Relevance: .2, Instructions: 157COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80d48fc219084a0c4ef5e906199bf577a77abc92111e55136efe91a6c956e9b8
Instruction ID: 9ad0f048b12a6db2c25d2634acb15d4010b2b21b994dc6b9081a3e25b990aa76
Opcode Fuzzy Hash: 80d48fc219084a0c4ef5e906199bf577a77abc92111e55136efe91a6c956e9b8
Instruction Fuzzy Hash: A04126362185998BD718CF1EECD15BD7395FF93320728466EE48AC73A1CA35E922C790

Uniqueness

Uniqueness Score: -1.00%

Function 00AE7610, Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ad4ebe023d12d3c8c966afef70c020743c65f9719402a4f27e0c0475edd316b5
Instruction ID: e567b66ae4c5fa85fcc23103883f0d44b23039e6233bca45a3fe2c00b185e3bf
Opcode Fuzzy Hash: ad4ebe023d12d3c8c966afef70c020743c65f9719402a4f27e0c0475edd316b5
Instruction Fuzzy Hash: 5F41B231A05299DFCB14CF2CD8808AEFBE5EFA5200714869EE896DB346D7309D45CBE1

Uniqueness

Uniqueness Score: -1.00%

Function 00AE74A0, Relevance: .1, Instructions: 134COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 653302d36058305ebf0341dafa0eaba91ef65415c17caf869006447e9b784578
Instruction ID: 34dfa62e3bf1020779493cd2335abadc434120ccfe15a823662ef5715980b37c
Opcode Fuzzy Hash: 653302d36058305ebf0341dafa0eaba91ef65415c17caf869006447e9b784578
Instruction Fuzzy Hash: F4518331A05289DFCB14CF6DD8805AEFBF1EF9A200B54859EE845DB302C3319945CBE0

Uniqueness

Uniqueness Score: -1.00%

Function 00A43310, Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73088cfab4c1fecb61eb6e3863de8759ce3bf596a95906baeedf969187f748a8
Instruction ID: 625a68f750fcdc3444d27c9d332ccb063f793b9572e0206a0a20e55e0f57c51d
Opcode Fuzzy Hash: 73088cfab4c1fecb61eb6e3863de8759ce3bf596a95906baeedf969187f748a8
Instruction Fuzzy Hash: E84150612193C29FC70E8E6D48806AAFF646F66101B4886DEECC4EF387C514D6A9C7F1

Uniqueness

Uniqueness Score: -1.00%

Function 00A986F0, Relevance: 30.0, APIs: 13, Strings: 4, Instructions: 288
windowCOMMON

Download Yara Rule

C-Code - Quality: 87%

			E00A986F0(void* __ebx, signed int __ecx, void* __edi, void* __esi, void* __eflags, void* __fp0) {
				struct HWND__* _v8;
				char _v16;
				signed int _v20;
				struct tagRECT _v36;
				char _v52;
				char _v184;
				char _v512;
				void* _v516;
				void* __ebp;
				signed int _t59;
				signed int _t60;
				signed int _t63;
				void* _t83;
				void* _t85;
				void* _t90;
				void* _t91;
				void* _t92;
				struct HWND__* _t94;
				struct HWND__* _t100;
				struct HWND__* _t106;
				struct HWND__* _t107;
				struct HWND__* _t111;
				WCHAR* _t112;
				void* _t119;
				signed short _t121;
				WCHAR* _t127;
				void* _t131;
				struct HWND__* _t134;
				struct HWND__* _t143;
				signed int _t197;
				signed int _t203;
				struct HWND__* _t206;
				void* _t210;
				signed int _t211;
				void* _t212;
				intOrPtr* _t213;
				void* _t215;
				void* _t216;
				void* _t222;

				_t222 = __fp0;
				_t216 = __eflags;
				_t213 = _t212 - 0x1f4;
				_t59 =  *0xb6aa7c; // 0x5cc80e5b
				_t60 = _t59 ^ _t211;
				_v20 = _t60;
				 *[fs:0x0] =  &_v16;
				_t203 = __ecx;
				_t63 = GetWindowLongW(E00A89FD0(__ecx), 0xfffffff0);
				SetWindowLongW(E00A89FD0(_t203), 0xfffffff0, _t63 & 0xff3fffff | 0x06000000);
				GetClientRect(E00A89FD0(_t203),  &_v36);
				SetWindowPos(E00A89FD0(_t203), 0, _v36.left, _v36.top, _v36.right - _v36.left, _v36.bottom - _v36.top, 0x20);
				_t141 = _t203 + 0x30;
				E00A8C700(_t203 + 0x30, _t216,  *(_t203 + 4));
				asm("sbb ecx, ecx");
				E00A8BD80(_t203 + 0x30,  ~_t203 & _t203 + 0x00000028);
				E00A9F870( &_v512);
				_v8 = 0;
				_t83 =  *((intOrPtr*)( *_t203 + 0x3c))(_t60, __edi, __esi, __ebx,  *[fs:0x0], 0xb28dfc, 0xffffffff) - 2;
				if(_t83 == 0) {
					_t85 =  *((intOrPtr*)( *_t203 + 0x40))( &_v184);
					_v8 = 1;
					E00A8F820(_t141, _t203, __esi, __eflags, E00A5A690(_t85), 1);
					_t213 = _t213 + 8;
					_v8 = 0;
					E00A754A0( &_v184);
					L10:
					_t90 =  *((intOrPtr*)( *_t203 + 0x3c))();
					__eflags = _t90 - 3;
					_t91 =  *_t203;
					_push( &_v184);
					if(_t90 != 3) {
						_t92 =  *((intOrPtr*)(_t91 + 0x34))();
						_v8 = 3;
						asm("sbb edx, edx");
						__eflags =  ~_t203 & _t203 + 0x0000002c;
						 *_t213 = E00A5A690(_t92);
						_t94 = L00AA11E0( &_v512, _t222, _t92, 0,  ~_t203 & _t203 + 0x0000002c, _t141, 0);
						_v8 = 0;
						_t206 = _t94;
						E00A754A0( &_v184);
					} else {
						_t119 =  *((intOrPtr*)(_t91 + 0x34))();
						_v8 = 2;
						_t121 = E00AFD36B(_t119, E00A5A690(_t119));
						_t213 = _t213 + 4;
						_v8 = 0;
						E00A754A0( &_v184);
						asm("sbb ecx, ecx");
						_t206 = L00AA11E0( &_v512, _t222, _t121 & 0x0000ffff, L"xml",  ~_t203 & _t203 + 0x0000002c, _t141, 0);
					}
					__eflags = _t206;
					if(_t206 != 0) {
						E00A8BE90(_t141, _t141, _t206);
						asm("sbb ecx, ecx");
						E00A8BC70(_t141,  ~_t203 & _t203 + 0x00000024);
						_t100 =  *((intOrPtr*)( *_t203 + 0x24))();
						__eflags = _t100;
						if(_t100 != 0) {
							__eflags =  *(_t203 + 0x358);
							if(__eflags == 0) {
								_push(0x3ec);
								_t106 = E00AE4920(_t206, __eflags);
								_v516 = _t106;
								_v8 = 4;
								__eflags = _t106;
								if(_t106 == 0) {
									_t107 = 0;
									__eflags = 0;
								} else {
									_t107 = E00AB44B0(_t141, _t203, _t141);
								}
								_v8 = 0;
								 *(_t203 + 0x358) = _t107;
								__eflags = _t107;
								if(_t107 != 0) {
									 *((intOrPtr*)( *_t203 + 0x28))( &_v52);
									_t208 = E00A8C680(_t141);
									_t111 = E00A8A2F0(_t110);
									__eflags = _t111;
									if(_t111 != 0) {
										_t112 = L"file=\'share/shadow.png\' corner=\'4,2,4,6\' hole=\'true\'";
									} else {
										_t112 = E00A5A690(_t208);
									}
									E00A893C0( &_v184, _t112, 0xffffffff);
									_v8 = 5;
									E00AB45A0(_t141,  *(_t203 + 0x358), _t203, _t208, GetParent( *(_t203 + 4)),  *(_t203 + 4),  &_v184,  &_v52);
									_v8 = 0;
									E00A754A0( &_v184);
								}
							}
						}
						 *((intOrPtr*)( *_t203 + 0x1c))();
						L26:
						E00A9E2D0( &_v512);
						 *[fs:0x0] = _v16;
						return E00AE4BF8(_v20 ^ _t211);
					} else {
						MessageBoxW(_t206, 0xb34160, L"Duilib", 0x10);
						ExitProcess(1);
					}
				}
				if(_t83 != 2) {
					goto L10;
				}
				_t197 = _t203;
				_t127 =  *((intOrPtr*)( *_t203 + 0x44))();
				_t210 = FindResourceW(E00A8C5F0(), _t127, L"ZIPRES");
				if(_t210 == 0) {
					goto L26;
				}
				_t131 = LoadResource(E00A8C5F0(), _t210);
				_v516 = _t131;
				_push(_t210);
				if(_t131 != 0) {
					_t143 = SizeofResource(E00A8C5F0(), ??);
					__eflags = _t143;
					if(__eflags == 0) {
						goto L26;
					}
					_push(_t143);
					_t134 = E00AE4E66(_t143, _t197, _t203, _t210, __eflags);
					_t215 = _t213 + 4;
					 *0xb718d4 = _t134;
					__eflags = _t134;
					if(__eflags != 0) {
						E00AF4150( *0xb718d4, LockResource(_v516), _t143);
						_t215 = _t215 + 0xc;
					}
					FreeResource(_t210);
					E00A8F7B0(_t143, _t203, _t210, __eflags,  *0xb718d4, _t143);
					_t213 = _t215 + 8;
					_t141 = _t203 + 0x30;
					goto L10;
				} else {
					FreeResource();
					goto L26;
				}
			}

0x00a986f0
0x00a986f0
0x00a98701
0x00a98707
0x00a9870c
0x00a9870e
0x00a98718
0x00a9871e
0x00a98728
0x00a98743
0x00a98755
0x00a9877b
0x00a98784
0x00a98789
0x00a98795
0x00a9879c
0x00a987a7
0x00a987b0
0x00a987ba
0x00a987bd
0x00a9887c
0x00a98883
0x00a9888d
0x00a98892
0x00a98895
0x00a9889f
0x00a988a4
0x00a988a8
0x00a988b1
0x00a988b4
0x00a988b6
0x00a988b9
0x00a98908
0x00a9890d
0x00a98918
0x00a9891b
0x00a9892a
0x00a98932
0x00a9893d
0x00a98941
0x00a98943
0x00a988bb
0x00a988bb
0x00a988c0
0x00a988ca
0x00a988cf
0x00a988db
0x00a988df
0x00a988ed
0x00a98904
0x00a98904
0x00a98948
0x00a9894a
0x00a9896a
0x00a98976
0x00a9897d
0x00a98986
0x00a98989
0x00a9898b
0x00a98991
0x00a98998
0x00a9899e
0x00a989a3
0x00a989ab
0x00a989b1
0x00a989b5
0x00a989b7
0x00a989c3
0x00a989c3
0x00a989b9
0x00a989bc
0x00a989bc
0x00a989c5
0x00a989c9
0x00a989cf
0x00a989d1
0x00a989db
0x00a989e5
0x00a989e9
0x00a989ee
0x00a989f0
0x00a989fb
0x00a989f2
0x00a989f4
0x00a989f4
0x00a98a09
0x00a98a1b
0x00a98a2f
0x00a98a3a
0x00a98a3e
0x00a98a3e
0x00a989d1
0x00a98998
0x00a98a47
0x00a98a4a
0x00a98a50
0x00a98a5a
0x00a98a72
0x00a9894c
0x00a98959
0x00a98961
0x00a98961
0x00a9894a
0x00a987c6
0x00000000
0x00000000
0x00a987ce
0x00a987d5
0x00a987e5
0x00a987e9
0x00000000
0x00000000
0x00a987f6
0x00a987fc
0x00a98802
0x00a98805
0x00a9881e
0x00a98820
0x00a98822
0x00000000
0x00000000
0x00a98828
0x00a98829
0x00a9882e
0x00a98831
0x00a98836
0x00a98838
0x00a9884e
0x00a98853
0x00a98853
0x00a98857
0x00a98864
0x00a98869
0x00a9886c
0x00000000
0x00a98807
0x00a98807
0x00000000
0x00a98807

APIs

GetWindowLongW.USER32(00000000,000000F0), ref: 00A98728
SetWindowLongW.USER32 ref: 00A98743
GetClientRect.USER32 ref: 00A98755
SetWindowPos.USER32(00000000,00000000,00A4828E,?,?,?,00000020), ref: 00A9877B

Part of subcall function 00A8C700: GetDC.USER32(?), ref: 00A8C70D
Part of subcall function 00A8C700: LoadLibraryW.KERNEL32(Dwmapi.dll,?,?,00000000,?,00A97C82,?,?,?,?), ref: 00A8C732
Part of subcall function 00A8C700: GetProcAddress.KERNEL32(00000000,DwmIsCompositionEnabled), ref: 00A8C744
Part of subcall function 00A8C700: FreeLibrary.KERNEL32(00000000,?,00000000,?,00A97C82,?,?,?,?), ref: 00A8C752

FindResourceW.KERNEL32(00000000,00000000,?,?), ref: 00A987DF
LoadResource.KERNEL32(00000000,00000000,?,?), ref: 00A987F6
FreeResource.KERNEL32(00000000,?,?), ref: 00A98807
SizeofResource.KERNEL32(00000000,00000000,?,?), ref: 00A98818
LockResource.KERNEL32(?,00000000), ref: 00A98841
FreeResource.KERNEL32(00000000), ref: 00A98857
MessageBoxW.USER32(00000000,00B34160,Duilib,00000010), ref: 00A98959
ExitProcess.KERNEL32 ref: 00A98961
GetParent.USER32(?), ref: 00A98A22

Strings

ZIPRES, xrefs: 00A987D0
file='share/shadow.png' corner='4,2,4,6' hole='true', xrefs: 00A989FB, 00A98A02
Duilib, xrefs: 00A9894E
xml, xrefs: 00A988F3

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Resource$FreeWindow$LibraryLoadLong$AddressClientExitFindLockMessageParentProcProcessRectSizeof
String ID: Duilib$ZIPRES$file='share/shadow.png' corner='4,2,4,6' hole='true'$xml
API String ID: 4224122098-4050673474
Opcode ID: 820d7e6285473eda05b837e8cd4ba54c31ce5969500d7667731b2490728fb4da
Instruction ID: 86d8fae8d9ab9f604c115c70cf28e5dcce2c3a8120ccf30d058110de61f56261
Opcode Fuzzy Hash: 820d7e6285473eda05b837e8cd4ba54c31ce5969500d7667731b2490728fb4da
Instruction Fuzzy Hash: 2FA18071B00205AFDF18EB78DE59FBE77A9AF55300F144268F50693292DF74AA04CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00AB45A0, Relevance: 28.1, APIs: 10, Strings: 6, Instructions: 137
stringCOMMON

Download Yara Rule

C-Code - Quality: 51%

			E00AB45A0(void* __ebx, void* __ecx, void* __edi, void* __esi, struct HWND__* _a8, intOrPtr _a12, RECT* _a16) {
				signed int _v8;
				struct tagRECT _v24;
				RECT* _v28;
				void* __ebp;
				signed int _t48;
				signed int _t77;
				struct HWND__* _t88;
				intOrPtr* _t95;
				void* _t110;
				intOrPtr _t112;
				struct tagRECT* _t113;
				void* _t114;
				signed int _t115;
				void* _t122;

				_t48 =  *0xb6aa7c; // 0x5cc80e5b
				_v8 = _t48 ^ _t115;
				_t88 = _a8;
				_v28 = _a16;
				_t112 = _a12;
				_t110 = __ecx;
				if(_t88 == 0 || IsWindow(_t88) == 0) {
					L6:
					__eflags = _v8 ^ _t115;
					return E00AE4BF8(_v8 ^ _t115);
				} else {
					_t122 = E00A8A2F0(_t112);
					if(_t122 != 0) {
						goto L6;
					} else {
						 *(_t110 + 0x14) = _t88;
						E00A89600(_t110 + 0x18, _t112);
						_t113 = _t110 + 0x9c;
						CopyRect(_t113, _v28);
						GetWindowRect( *(_t110 + 0x14),  &_v24);
						_t95 = _v28;
						_push(0);
						_v24.left = _v24.left -  *_t95;
						_v24.top = _v24.top -  *((intOrPtr*)(_t95 + 4));
						_v24.right = _v24.right +  *((intOrPtr*)(_t95 + 8));
						_v24.bottom = _v24.bottom +  *((intOrPtr*)(_t95 + 0xc));
						asm("movups xmm0, [ebp-0x14]");
						_push(0x8080080);
						_push(0x84000000);
						_push(L"ShadowWindow");
						_push(_t88);
						asm("movups [eax], xmm0");
						E00A90370();
						SetPropW( *(_t110 + 0x14), L"{9A3F714D-4222-434a-B135-B2193DF9E5F7}", SetWindowLongW( *(_t110 + 0x14), 0xfffffffc,  &M00AB4B90));
						SetPropW( *(_t110 + 0x14), L"{B429CC21-67FB-4b0b-A990-0E6207AACDD7}",  *(_t110 + 4));
						SetPropW( *(_t110 + 0x14), L"{4FB0E392-291F-4b72-85F3-76A46E203D87}", ((_t113->left << 0x00000008 |  *(_t110 + 0xa0)) << 0x00000008 |  *(_t110 + 0xa4)) << 0x00000008 |  *(_t110 + 0xa8));
						_t77 = E00A89FB0(_t110 + 0x18) + 1;
						_v28 = _t77;
						_push( ~(_t122 > 0) | _t77 * 0x00000002);
						_t114 = E00AE4E66(SetPropW,  ~(_t122 > 0) | _t77 * 0x00000002, _t110, _t113, _t122);
						if(_t114 != 0) {
							E00AF4C50(_t110, _t114, 0, _v28 + _v28);
							lstrcpynW(_t114, E00A5A690(_t110 + 0x18), _v28);
							SetPropW( *(_t110 + 0x14), L"{A46357D6-233E-4a16-A174-C1BA5DEF1894}", _t114);
						}
						SetPropW( *(_t110 + 4), L"{B6171802-2F45-49d2-B98F-EAC800C3CD37}",  *(_t110 + 0xc0));
						return E00AE4BF8(_v8 ^ _t115);
					}
				}
			}

0x00ab45a6
0x00ab45ad
0x00ab45b4
0x00ab45b7
0x00ab45bb
0x00ab45bf
0x00ab45c3
0x00ab4727
0x00ab472e
0x00ab4739
0x00ab45d8
0x00ab45df
0x00ab45e1
0x00000000
0x00ab45e7
0x00ab45ea
0x00ab45ee
0x00ab45f6
0x00ab45fd
0x00ab460a
0x00ab4610
0x00ab4613
0x00ab461a
0x00ab4620
0x00ab4626
0x00ab462e
0x00ab4633
0x00ab4637
0x00ab463c
0x00ab4641
0x00ab4646
0x00ab4647
0x00ab464a
0x00ab466e
0x00ab467b
0x00ab46a3
0x00ab46ad
0x00ab46b0
0x00ab46c1
0x00ab46c7
0x00ab46ce
0x00ab46d9
0x00ab46ee
0x00ab46fd
0x00ab46fd
0x00ab470d
0x00ab4724
0x00ab4724
0x00ab45e1

APIs

IsWindow.USER32(?), ref: 00AB45CA
CopyRect.USER32 ref: 00AB45FD
GetWindowRect.USER32 ref: 00AB460A
SetWindowLongW.USER32 ref: 00AB4659
SetPropW.USER32 ref: 00AB466E
SetPropW.USER32 ref: 00AB467B
SetPropW.USER32 ref: 00AB46A3
lstrcpynW.KERNEL32(00000000,00000000,?), ref: 00AB46EE
SetPropW.USER32 ref: 00AB46FD
SetPropW.USER32 ref: 00AB470D

Strings

{A46357D6-233E-4a16-A174-C1BA5DEF1894}, xrefs: 00AB46F5
{B429CC21-67FB-4b0b-A990-0E6207AACDD7}, xrefs: 00AB4673
{B6171802-2F45-49d2-B98F-EAC800C3CD37}, xrefs: 00AB4705
ShadowWindow, xrefs: 00AB4641
{9A3F714D-4222-434a-B135-B2193DF9E5F7}, xrefs: 00AB4666
{4FB0E392-291F-4b72-85F3-76A46E203D87}, xrefs: 00AB469B

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Prop$Window$Rect$CopyLonglstrcpyn
String ID: ShadowWindow${4FB0E392-291F-4b72-85F3-76A46E203D87}${9A3F714D-4222-434a-B135-B2193DF9E5F7}${A46357D6-233E-4a16-A174-C1BA5DEF1894}${B429CC21-67FB-4b0b-A990-0E6207AACDD7}${B6171802-2F45-49d2-B98F-EAC800C3CD37}
API String ID: 1725082330-1964474075
Opcode ID: ab64c38231c20173ec9b1c4bf7b7bd9284774993d89846028c79293362e25280
Instruction ID: 945348e6a2cfbf0978389bc55acba8589817b8cde160b20abe212256ad0f35e0
Opcode Fuzzy Hash: ab64c38231c20173ec9b1c4bf7b7bd9284774993d89846028c79293362e25280
Instruction Fuzzy Hash: 39417F31A00205AFDB00DF68DD82FAEB7B4FF49301F104259F905A7191DB71B961CB95

Uniqueness

Uniqueness Score: -1.00%

Function 00A459F0, Relevance: 21.4, APIs: 4, Strings: 8, Instructions: 384
COMMON

Download Yara Rule

C-Code - Quality: 72%

			E00A459F0(void* __ebx, intOrPtr __ecx, struct HWND__** __edi, void* __esi, signed int _a4, intOrPtr _a8) {
				int _v0;
				int _v8;
				signed int _v12;
				struct tagRECT _v28;
				struct tagRECT _v44;
				int _v48;
				int _v52;
				void* __ebp;
				signed int _t113;
				signed int _t119;
				struct HWND__* _t125;
				struct HWND__* _t127;
				struct HWND__* _t129;
				struct HWND__* _t143;
				struct HWND__* _t147;
				struct HWND__* _t151;
				struct HWND__* _t158;
				signed int _t160;
				signed int _t166;
				signed int _t167;
				signed int _t168;
				signed int _t169;
				signed int _t170;
				struct HWND__* _t171;
				signed int _t172;
				struct HWND__* _t173;
				signed int _t174;
				struct HWND__* _t175;
				signed int _t176;
				struct HWND__* _t177;
				signed int _t178;
				struct HWND__* _t179;
				struct HWND__** _t180;
				struct HWND__* _t181;
				intOrPtr _t190;
				struct HWND__* _t194;
				int _t198;
				struct HWND__* _t203;
				signed int _t205;
				struct HWND__* _t206;
				void* _t207;
				struct HWND__* _t210;
				struct HWND__* _t211;
				struct HWND__* _t215;
				void* _t217;
				struct HWND__* _t218;
				intOrPtr* _t235;
				intOrPtr* _t237;
				intOrPtr* _t238;
				intOrPtr* _t239;
				intOrPtr* _t240;
				intOrPtr* _t241;
				intOrPtr* _t242;
				intOrPtr _t243;
				struct HWND__* _t249;
				struct HWND__* _t254;
				long _t255;
				struct HWND__* _t263;
				struct HWND__* _t264;
				struct HWND__* _t265;
				struct HWND__* _t266;
				struct HWND__* _t267;
				struct HWND__* _t268;
				struct HWND__* _t269;
				struct HWND__* _t270;
				struct HWND__* _t271;
				struct HWND__* _t272;
				struct HWND__* _t273;
				struct HWND__* _t274;
				struct HWND__* _t276;
				intOrPtr* _t279;
				void* _t281;
				struct HWND__* _t286;
				signed int _t289;
				struct HWND__* _t291;
				int _t293;
				struct HWND__* _t295;
				struct HWND__* _t296;
				struct HWND__* _t297;
				int _t298;
				struct HWND__** _t300;
				struct HWND__** _t301;
				signed int _t304;
				void* _t305;
				signed int _t306;

				_t275 = __edi;
				_push(0xffffffff);
				_push(0xb21f70);
				_push( *[fs:0x0]);
				_t306 = _t305 - 0x1c;
				_push(__edi);
				_t113 =  *0xb6aa7c; // 0x5cc80e5b
				_push(_t113 ^ _t303);
				 *[fs:0x0] =  &(_v28.bottom);
				_t190 = __ecx;
				_v44.bottom = __ecx;
				_t289 = _a4;
				if( *((intOrPtr*)(_t289 + 8)) > 0) {
					_t210 = E00A445F0();
					__eflags = _t210;
					if(_t210 == 0) {
						_push(0x80004005);
						E00A43FD0(__ecx, __edi, _t289);
						goto L94;
					} else {
						_a4 =  *((intOrPtr*)(_t210->i + 0xc))() + 0x10;
						_v8 = 0;
						_t158 = E00A74760(__edi, 0, _t289, 0,  &_a4);
						_t306 = _t306 + 0x10;
						__eflags = _t158;
						if(_t158 == 0) {
							_v28.left = 1;
							_t160 = E00A74580(0, _t289, 0,  &_v28);
							__eflags = _t160;
							if(_t160 == 0) {
								_t298 = 0;
								__eflags = 0;
							} else {
								__eflags = _v28.left;
								_t62 = _v28.left != 0;
								__eflags = _v28.left != 0;
								_t160 = E00A90AF0(_t190, _t160 & 0xffffff00 | _t62, _t160 & 0xffffff00 | _t62);
								goto L88;
							}
							goto L90;
						} else {
							_t166 = _a4;
							_t235 = L"show";
							asm("o16 nop [eax+eax]");
							while(1) {
								_t263 =  *_t166;
								__eflags = _t263 -  *_t235;
								if(_t263 !=  *_t235) {
									break;
								}
								__eflags = _t263;
								if(_t263 == 0) {
									L9:
									_t167 = 0;
								} else {
									_t274 =  *((intOrPtr*)(_t166 + 2));
									__eflags = _t274 -  *((intOrPtr*)(_t235 + 2));
									if(_t274 !=  *((intOrPtr*)(_t235 + 2))) {
										break;
									} else {
										_t166 = _t166 + 4;
										_t235 = _t235 + 4;
										__eflags = _t274;
										if(_t274 != 0) {
											continue;
										} else {
											goto L9;
										}
									}
								}
								L11:
								__eflags = _t167;
								if(_t167 == 0) {
									L85:
									_t160 = E00A90AF0(_t190, 1, 1);
									_t298 = 1;
									goto L90;
								} else {
									_t168 = _a4;
									__eflags =  *(_t168 - 0xc);
									if( *(_t168 - 0xc) == 0) {
										goto L85;
									} else {
										_t237 = L"hide";
										while(1) {
											_t264 =  *_t168;
											__eflags = _t264 -  *_t237;
											if(_t264 !=  *_t237) {
												break;
											}
											__eflags = _t264;
											if(_t264 == 0) {
												L18:
												_t169 = 0;
											} else {
												_t273 =  *((intOrPtr*)(_t168 + 2));
												__eflags = _t273 -  *((intOrPtr*)(_t237 + 2));
												if(_t273 !=  *((intOrPtr*)(_t237 + 2))) {
													break;
												} else {
													_t168 = _t168 + 4;
													_t237 = _t237 + 4;
													__eflags = _t273;
													if(_t273 != 0) {
														continue;
													} else {
														goto L18;
													}
												}
											}
											L20:
											__eflags = _t169;
											if(_t169 != 0) {
												_t170 = _a4;
												_t238 = L"modal";
												while(1) {
													_t254 =  *_t170;
													__eflags = _t254 -  *_t238;
													if(_t254 !=  *_t238) {
														break;
													}
													__eflags = _t254;
													if(_t254 == 0) {
														L27:
														_t171 = 0;
													} else {
														_t254 =  *((intOrPtr*)(_t170 + 2));
														__eflags = _t254 -  *((intOrPtr*)(_t238 + 2));
														if(_t254 !=  *((intOrPtr*)(_t238 + 2))) {
															break;
														} else {
															_t170 = _t170 + 4;
															_t238 = _t238 + 4;
															__eflags = _t254;
															if(_t254 != 0) {
																continue;
															} else {
																goto L27;
															}
														}
													}
													L29:
													__eflags = _t171;
													if(_t171 != 0) {
														_t172 = _a4;
														_t239 = L"max";
														while(1) {
															_t265 =  *_t172;
															__eflags = _t265 -  *_t239;
															if(_t265 !=  *_t239) {
																break;
															}
															__eflags = _t265;
															if(_t265 == 0) {
																L52:
																_t173 = 0;
															} else {
																_t272 =  *((intOrPtr*)(_t172 + 2));
																__eflags = _t272 -  *((intOrPtr*)(_t239 + 2));
																if(_t272 !=  *((intOrPtr*)(_t239 + 2))) {
																	break;
																} else {
																	_t172 = _t172 + 4;
																	_t239 = _t239 + 4;
																	__eflags = _t272;
																	if(_t272 != 0) {
																		continue;
																	} else {
																		goto L52;
																	}
																}
															}
															L54:
															__eflags = _t173;
															if(_t173 != 0) {
																_t174 = _a4;
																_t240 = L"min";
																while(1) {
																	_t266 =  *_t174;
																	__eflags = _t266 -  *_t240;
																	if(_t266 !=  *_t240) {
																		break;
																	}
																	__eflags = _t266;
																	if(_t266 == 0) {
																		L61:
																		_t175 = 0;
																	} else {
																		_t271 =  *((intOrPtr*)(_t174 + 2));
																		__eflags = _t271 -  *((intOrPtr*)(_t240 + 2));
																		if(_t271 !=  *((intOrPtr*)(_t240 + 2))) {
																			break;
																		} else {
																			_t174 = _t174 + 4;
																			_t240 = _t240 + 4;
																			__eflags = _t271;
																			if(_t271 != 0) {
																				continue;
																			} else {
																				goto L61;
																			}
																		}
																	}
																	L63:
																	__eflags = _t175;
																	if(_t175 != 0) {
																		_t176 = _a4;
																		_t241 = L"restore";
																		while(1) {
																			_t267 =  *_t176;
																			__eflags = _t267 -  *_t241;
																			if(_t267 !=  *_t241) {
																				break;
																			}
																			__eflags = _t267;
																			if(_t267 == 0) {
																				L70:
																				_t177 = 0;
																			} else {
																				_t270 =  *((intOrPtr*)(_t176 + 2));
																				__eflags = _t270 -  *((intOrPtr*)(_t241 + 2));
																				if(_t270 !=  *((intOrPtr*)(_t241 + 2))) {
																					break;
																				} else {
																					_t176 = _t176 + 4;
																					_t241 = _t241 + 4;
																					__eflags = _t270;
																					if(_t270 != 0) {
																						continue;
																					} else {
																						goto L70;
																					}
																				}
																			}
																			L72:
																			__eflags = _t177;
																			if(_t177 != 0) {
																				_t178 = _a4;
																				_t242 = L"?max";
																				while(1) {
																					_t268 =  *_t178;
																					__eflags = _t268 -  *_t242;
																					if(_t268 !=  *_t242) {
																						break;
																					}
																					__eflags = _t268;
																					if(_t268 == 0) {
																						L79:
																						_t160 = 0;
																					} else {
																						_t269 =  *((intOrPtr*)(_t178 + 2));
																						__eflags = _t269 -  *((intOrPtr*)(_t242 + 2));
																						if(_t269 !=  *((intOrPtr*)(_t242 + 2))) {
																							break;
																						} else {
																							_t178 = _t178 + 4;
																							_t242 = _t242 + 4;
																							__eflags = _t269;
																							if(_t269 != 0) {
																								continue;
																							} else {
																								goto L79;
																							}
																						}
																					}
																					L81:
																					__eflags = _t160;
																					if(_t160 != 0) {
																						goto L88;
																					} else {
																						_t179 = IsZoomed( *(_t190 + 4));
																						_t243 = _t190;
																						_push(0);
																						__eflags = _t179;
																						if(_t179 == 0) {
																							_push(0xf030);
																							_push(0x112);
																							_t160 = E00A90850(_t243);
																							_t298 = 1;
																						} else {
																							_push(0xf120);
																							_push(0x112);
																							_t160 = E00A90850(_t243);
																							_t298 = 1;
																						}
																					}
																					goto L90;
																				}
																				asm("sbb eax, eax");
																				_t160 = _t178 | 0x00000001;
																				__eflags = _t160;
																				goto L81;
																			} else {
																				_t160 = E00A90850(_t190, 0x112, 0xf120, _t177);
																				_t298 = 1;
																			}
																			goto L90;
																		}
																		asm("sbb eax, eax");
																		_t177 = _t176 | 0x00000001;
																		__eflags = _t177;
																		goto L72;
																	} else {
																		_t160 = E00A90850(_t190, 0x112, 0xf020, _t175);
																		_t298 = 1;
																	}
																	goto L90;
																}
																asm("sbb eax, eax");
																_t175 = _t174 | 0x00000001;
																__eflags = _t175;
																goto L63;
															} else {
																_t160 = E00A90850(_t190, 0x112, 0xf030, _t173);
																_t298 = 1;
															}
															goto L90;
														}
														asm("sbb eax, eax");
														_t173 = _t172 | 0x00000001;
														__eflags = _t173;
														goto L54;
													} else {
														_t300 = 0;
														_v44.left = _t171;
														_t203 = 0;
														_v44.top = 0;
														_v44.right = 0;
														_t281 = FindWindowExW;
														_v8 = 1;
														asm("o16 nop [eax+eax]");
														L31:
														_t171 = FindWindowExW(0, _t171, L"LITE_GAME_BOX_MAIN_WINDOW", 0);
														__eflags = _t171;
														if(_t171 != 0) {
															_v28.right = _t171;
															__eflags = _t203 - _t300;
															if(_t203 == _t300) {
																_push( &(_v28.right));
																E00A43500(_t203,  &_v44, _t281, _t300);
																_t203 = _v44.right;
																_t300 = _v44.top;
																_t171 = _v28.right;
															} else {
																 *_t300 = _t171;
																_t300 =  &(_t300[1]);
																_v44.top = _t300;
															}
															goto L31;
														}
														_t180 = _v44.left;
														_v28.right = _t203;
														__eflags = _t180 - _t300;
														_t301 = _t180;
														_t286 =  >  ? 0 : _t300 - _t180 + 3 >> 2;
														_v28.top = _t286;
														__eflags = _t286;
														if(_t286 != 0) {
															_t207 = 0;
															__eflags = 0;
															do {
																EnableWindow( *_t301, 0);
																_t207 = _t207 + 1;
																_t301 =  &(_t301[1]);
																__eflags = _t207 - _t286;
															} while (_t207 != _t286);
															_t203 = _v28.right;
														}
														_t160 = E00A909F0(_v44.bottom);
														_t249 = _v44.left;
														_t289 = 0;
														_t275 = _t249;
														__eflags = _v28.top;
														if(_v28.top != 0) {
															_t206 = _v28.top;
															do {
																_t160 = EnableWindow( *_t275, 1);
																_t289 = _t289 + 1;
																_t275 =  &(_t275[1]);
																__eflags = _t289 - _t206;
															} while (_t289 != _t206);
															_t203 = _v28.right;
															_t249 = _v44.left;
														}
														_v8 = 0;
														__eflags = _t249;
														if(_t249 == 0) {
															L88:
															_t298 = 1;
															goto L90;
														} else {
															_t181 = _t249;
															_t205 = _t203 - _t249 & 0xfffffffc;
															__eflags = _t205 - 0x1000;
															if(_t205 < 0x1000) {
																L46:
																_push(_t205);
																_t160 = E00AE4950(_t249);
																_t298 = 1;
																goto L90;
															} else {
																_t210 =  *(_t249 - 4);
																_t190 = _t205 + 0x23;
																__eflags = _t181 - _t210 + 0xfffffffc - 0x1f;
																if(__eflags > 0) {
																	L94:
																	E00AF7B99(_t190, _t210, _t254, _t275, __eflags);
																	asm("int3");
																	asm("int3");
																	asm("int3");
																	_t304 = _t306;
																	_t119 =  *0xb6aa7c; // 0x5cc80e5b
																	_v52 = _t119 ^ _t304;
																	_push(_t275);
																	_t276 = _t210;
																	_t211 =  *(_t276 + 0x410);
																	__eflags = _t211;
																	if(_t211 != 0) {
																		 *((intOrPtr*)(_t211->i + 0x3c))(_t289, _t190);
																		asm("movups xmm0, [eax]");
																		asm("movups [ebp-0x14], xmm0");
																		_t125 = IsRectEmpty( &_v28);
																		__eflags = _t125;
																		if(_t125 != 0) {
																			_t297 = E00A8BFC0(_t276 + 0xa0, L"browser_page");
																			__eflags = _t297;
																			if(_t297 != 0) {
																				_t151 =  *((intOrPtr*)( *((intOrPtr*)(_t297->i + 0x108))))();
																				__eflags = _t151;
																				if(_t151 != 0) {
																					 *((intOrPtr*)(_t297->i + 0x3c))();
																					asm("movups xmm0, [eax]");
																					asm("movups [ebp-0x14], xmm0");
																				}
																			}
																		}
																		_t127 = IsRectEmpty( &_v28);
																		__eflags = _t127;
																		if(_t127 != 0) {
																			_t296 = E00A8BFC0(_t276 + 0xa0, L"loading_page");
																			__eflags = _t296;
																			if(_t296 != 0) {
																				_t147 =  *((intOrPtr*)( *((intOrPtr*)(_t296->i + 0x108))))();
																				__eflags = _t147;
																				if(_t147 != 0) {
																					 *((intOrPtr*)(_t296->i + 0x3c))();
																					asm("movups xmm0, [eax]");
																					asm("movups [ebp-0x14], xmm0");
																				}
																			}
																		}
																		_t129 = IsRectEmpty( &_v28);
																		__eflags = _t129;
																		if(_t129 != 0) {
																			_t295 = E00A8BFC0(_t276 + 0xa0, L"failed_page");
																			__eflags = _t295;
																			if(_t295 != 0) {
																				_t143 =  *((intOrPtr*)( *((intOrPtr*)(_t295->i + 0x108))))();
																				__eflags = _t143;
																				if(_t143 != 0) {
																					 *((intOrPtr*)(_t295->i + 0x3c))();
																					asm("movups xmm0, [eax]");
																					asm("movups [ebp-0x14], xmm0");
																				}
																			}
																		}
																		_v48 = 0;
																		_t215 = E00A8BFC0(_t276 + 0xa0, L"browser_titlebar");
																		__eflags = _t215;
																		if(_t215 != 0) {
																			__eflags =  *((intOrPtr*)( *((intOrPtr*)(_t215->i + 0x108))))();
																			_t201 =  !=  ? 1 : 0;
																			_v48 =  !=  ? 1 : 0;
																		}
																		_t194 = _v28.right - _v28.left;
																		asm("xorps xmm0, xmm0");
																		_t291 = _v28.bottom - _v28.top;
																		_v52 = _t194;
																		asm("movups [ebp-0x24], xmm0");
																		GetWindowRect( *(_t276 + 4),  &_v44);
																		_t217 = _v44.bottom - _v44.top;
																		_t255 = _v44.left;
																		__eflags = _t194;
																		if(_t194 != 0) {
																			_t198 = _v44.right - _t255 - _v52 + _v0;
																			__eflags = _t198;
																		} else {
																			_t198 = _v0;
																		}
																		__eflags = _t291;
																		if(_t291 != 0) {
																			_t218 = _t217 - _t291;
																			__eflags = _t218;
																		} else {
																			__eflags = _v48;
																			_t218 =  !=  ? 0x24 : 0;
																		}
																		_v48 = _v44.top;
																		_t293 = _t218 + _a4;
																		__eflags = _t293;
																		_v52 = _t255;
																		E00A45810(_t198, _t276, _t276, _t293, _a8, _t198, _t293,  &_v52,  &_v48);
																		MoveWindow( *(_t276 + 4), _v52, _v48, _t198, _t293, 1);
																	}
																	__eflags = _v12 ^ _t304;
																	return E00AE4BF8(_v12 ^ _t304);
																} else {
																	goto L46;
																}
															}
														}
													}
													goto L118;
												}
												asm("sbb eax, eax");
												_t171 = _t170 | 0x00000001;
												__eflags = _t171;
												goto L29;
											} else {
												_t160 = E00A90AF0(_t190, _t169, _t169);
												_t298 = 1;
												L90:
												_v8 = 0xffffffff;
												_t279 = _a4 + 0xfffffff0;
												asm("lock xadd [edi+0xc], eax");
												__eflags = (_t160 | 0xffffffff) - 1;
												if((_t160 | 0xffffffff) - 1 <= 0) {
													 *((intOrPtr*)( *((intOrPtr*)( *_t279)) + 4))(_t279);
												}
												 *[fs:0x0] = _v28.bottom;
												return _t298;
											}
											goto L118;
										}
										asm("sbb eax, eax");
										_t169 = _t168 | 0x00000001;
										__eflags = _t169;
										goto L20;
									}
								}
								goto L118;
							}
							asm("sbb eax, eax");
							_t167 = _t166 | 0x00000001;
							__eflags = _t167;
							goto L11;
						}
					}
				} else {
					E00A90AF0(__ecx, 1, 1);
					 *[fs:0x0] = _v28.bottom;
					return 1;
				}
				L118:
			}

0x00a459f0
0x00a459f3
0x00a459f5
0x00a45a00
0x00a45a01
0x00a45a06
0x00a45a07
0x00a45a0e
0x00a45a12
0x00a45a18
0x00a45a1a
0x00a45a1d
0x00a45a24
0x00a45a4d
0x00a45a4f
0x00a45a51
0x00a45e4e
0x00a45e53
0x00000000
0x00a45a57
0x00a45a5f
0x00a45a65
0x00a45a72
0x00a45a77
0x00a45a7a
0x00a45a7c
0x00a45de4
0x00a45df1
0x00a45df9
0x00a45dfb
0x00a45e14
0x00a45e14
0x00a45dfd
0x00a45dfd
0x00a45e03
0x00a45e03
0x00a45e08
0x00000000
0x00a45e08
0x00000000
0x00a45a82
0x00a45a82
0x00a45a85
0x00a45a8a
0x00a45a90
0x00a45a90
0x00a45a93
0x00a45a96
0x00000000
0x00000000
0x00a45a98
0x00a45a9b
0x00a45ab2
0x00a45ab2
0x00a45a9d
0x00a45a9d
0x00a45aa1
0x00a45aa5
0x00000000
0x00a45aa7
0x00a45aa7
0x00a45aaa
0x00a45aad
0x00a45ab0
0x00000000
0x00000000
0x00000000
0x00000000
0x00a45ab0
0x00a45aa5
0x00a45abb
0x00a45abb
0x00a45abd
0x00a45dcf
0x00a45dd5
0x00a45dda
0x00000000
0x00a45ac3
0x00a45ac3
0x00a45ac6
0x00a45aca
0x00000000
0x00a45ad0
0x00a45ad0
0x00a45ad5
0x00a45ad5
0x00a45ad8
0x00a45adb
0x00000000
0x00000000
0x00a45add
0x00a45ae0
0x00a45af7
0x00a45af7
0x00a45ae2
0x00a45ae2
0x00a45ae6
0x00a45aea
0x00000000
0x00a45aec
0x00a45aec
0x00a45aef
0x00a45af2
0x00a45af5
0x00000000
0x00000000
0x00000000
0x00000000
0x00a45af5
0x00a45aea
0x00a45b00
0x00a45b00
0x00a45b02
0x00a45b17
0x00a45b1a
0x00a45b20
0x00a45b20
0x00a45b23
0x00a45b26
0x00000000
0x00000000
0x00a45b28
0x00a45b2b
0x00a45b42
0x00a45b42
0x00a45b2d
0x00a45b2d
0x00a45b31
0x00a45b35
0x00000000
0x00a45b37
0x00a45b37
0x00a45b3a
0x00a45b3d
0x00a45b40
0x00000000
0x00000000
0x00000000
0x00000000
0x00a45b40
0x00a45b35
0x00a45b4b
0x00a45b4b
0x00a45b4d
0x00a45c5b
0x00a45c5e
0x00a45c63
0x00a45c63
0x00a45c66
0x00a45c69
0x00000000
0x00000000
0x00a45c6b
0x00a45c6e
0x00a45c85
0x00a45c85
0x00a45c70
0x00a45c70
0x00a45c74
0x00a45c78
0x00000000
0x00a45c7a
0x00a45c7a
0x00a45c7d
0x00a45c80
0x00a45c83
0x00000000
0x00000000
0x00000000
0x00000000
0x00a45c83
0x00a45c78
0x00a45c8e
0x00a45c8e
0x00a45c90
0x00a45cae
0x00a45cb1
0x00a45cb6
0x00a45cb6
0x00a45cb9
0x00a45cbc
0x00000000
0x00000000
0x00a45cbe
0x00a45cc1
0x00a45cd8
0x00a45cd8
0x00a45cc3
0x00a45cc3
0x00a45cc7
0x00a45ccb
0x00000000
0x00a45ccd
0x00a45ccd
0x00a45cd0
0x00a45cd3
0x00a45cd6
0x00000000
0x00000000
0x00000000
0x00000000
0x00a45cd6
0x00a45ccb
0x00a45ce1
0x00a45ce1
0x00a45ce3
0x00a45d01
0x00a45d04
0x00a45d10
0x00a45d10
0x00a45d13
0x00a45d16
0x00000000
0x00000000
0x00a45d18
0x00a45d1b
0x00a45d32
0x00a45d32
0x00a45d1d
0x00a45d1d
0x00a45d21
0x00a45d25
0x00000000
0x00a45d27
0x00a45d27
0x00a45d2a
0x00a45d2d
0x00a45d30
0x00000000
0x00000000
0x00000000
0x00000000
0x00a45d30
0x00a45d25
0x00a45d3b
0x00a45d3b
0x00a45d3d
0x00a45d5b
0x00a45d5e
0x00a45d63
0x00a45d63
0x00a45d66
0x00a45d69
0x00000000
0x00000000
0x00a45d6b
0x00a45d6e
0x00a45d85
0x00a45d85
0x00a45d70
0x00a45d70
0x00a45d74
0x00a45d78
0x00000000
0x00a45d7a
0x00a45d7a
0x00a45d7d
0x00a45d80
0x00a45d83
0x00000000
0x00000000
0x00000000
0x00000000
0x00a45d83
0x00a45d78
0x00a45d8e
0x00a45d8e
0x00a45d90
0x00000000
0x00a45d92
0x00a45d95
0x00a45d9b
0x00a45d9d
0x00a45d9f
0x00a45da1
0x00a45db9
0x00a45dbe
0x00a45dc3
0x00a45dc8
0x00a45da3
0x00a45da3
0x00a45da8
0x00a45dad
0x00a45db2
0x00a45db2
0x00a45da1
0x00000000
0x00a45d90
0x00a45d89
0x00a45d8b
0x00a45d8b
0x00000000
0x00a45d3f
0x00a45d4c
0x00a45d51
0x00a45d51
0x00000000
0x00a45d3d
0x00a45d36
0x00a45d38
0x00a45d38
0x00000000
0x00a45ce5
0x00a45cf2
0x00a45cf7
0x00a45cf7
0x00000000
0x00a45ce3
0x00a45cdc
0x00a45cde
0x00a45cde
0x00000000
0x00a45c92
0x00a45c9f
0x00a45ca4
0x00a45ca4
0x00000000
0x00a45c90
0x00a45c89
0x00a45c8b
0x00a45c8b
0x00000000
0x00a45b53
0x00a45b53
0x00a45b55
0x00a45b58
0x00a45b5a
0x00a45b5d
0x00a45b60
0x00a45b66
0x00a45b6a
0x00a45b70
0x00a45b7a
0x00a45b7c
0x00a45b7e
0x00a45b80
0x00a45b83
0x00a45b85
0x00a45b94
0x00a45b99
0x00a45b9e
0x00a45ba1
0x00a45ba4
0x00a45b87
0x00a45b87
0x00a45b89
0x00a45b8c
0x00a45b8c
0x00000000
0x00a45b85
0x00a45ba9
0x00a45bb0
0x00a45bbb
0x00a45bbd
0x00a45bbf
0x00a45bc2
0x00a45bc5
0x00a45bc7
0x00a45bc9
0x00a45bc9
0x00a45bd0
0x00a45bd4
0x00a45bda
0x00a45bdb
0x00a45bde
0x00a45bde
0x00a45be2
0x00a45be2
0x00a45be8
0x00a45bed
0x00a45bf0
0x00a45bf2
0x00a45bf4
0x00a45bf7
0x00a45bf9
0x00a45c00
0x00a45c04
0x00a45c0a
0x00a45c0b
0x00a45c0e
0x00a45c0e
0x00a45c12
0x00a45c15
0x00a45c15
0x00a45c18
0x00a45c1c
0x00a45c1e
0x00a45e0d
0x00a45e0d
0x00000000
0x00a45c24
0x00a45c26
0x00a45c28
0x00a45c2b
0x00a45c31
0x00a45c47
0x00a45c47
0x00a45c49
0x00a45c51
0x00000000
0x00a45c33
0x00a45c33
0x00a45c36
0x00a45c3e
0x00a45c41
0x00a45e58
0x00a45e58
0x00a45e5d
0x00a45e5e
0x00a45e5f
0x00a45e61
0x00a45e66
0x00a45e6d
0x00a45e70
0x00a45e71
0x00a45e73
0x00a45e79
0x00a45e7b
0x00a45e85
0x00a45e8e
0x00a45e95
0x00a45e99
0x00a45e9b
0x00a45e9d
0x00a45eaf
0x00a45eb1
0x00a45eb3
0x00a45ebf
0x00a45ec1
0x00a45ec3
0x00a45ec9
0x00a45ecc
0x00a45ecf
0x00a45ecf
0x00a45ec3
0x00a45eb3
0x00a45ed7
0x00a45ed9
0x00a45edb
0x00a45eed
0x00a45eef
0x00a45ef1
0x00a45efd
0x00a45eff
0x00a45f01
0x00a45f07
0x00a45f0a
0x00a45f0d
0x00a45f0d
0x00a45f01
0x00a45ef1
0x00a45f15
0x00a45f17
0x00a45f19
0x00a45f2b
0x00a45f2d
0x00a45f2f
0x00a45f3b
0x00a45f3d
0x00a45f3f
0x00a45f45
0x00a45f48
0x00a45f4b
0x00a45f4b
0x00a45f3f
0x00a45f2f
0x00a45f5c
0x00a45f64
0x00a45f66
0x00a45f68
0x00a45f74
0x00a45f7e
0x00a45f81
0x00a45f81
0x00a45f8a
0x00a45f8d
0x00a45f93
0x00a45f9a
0x00a45f9d
0x00a45fa1
0x00a45faa
0x00a45fad
0x00a45fb0
0x00a45fb2
0x00a45fc1
0x00a45fc1
0x00a45fb4
0x00a45fb4
0x00a45fb4
0x00a45fc4
0x00a45fc6
0x00a45fd7
0x00a45fd7
0x00a45fc8
0x00a45fcf
0x00a45fd2
0x00a45fd2
0x00a45fdf
0x00a45fe2
0x00a45fe2
0x00a45fe7
0x00a45ff6
0x00a46008
0x00a4600f
0x00a46013
0x00a4601e
0x00000000
0x00000000
0x00000000
0x00a45c41
0x00a45c31
0x00a45c1e
0x00000000
0x00a45b4d
0x00a45b46
0x00a45b48
0x00a45b48
0x00000000
0x00a45b04
0x00a45b08
0x00a45b0d
0x00a45e16
0x00a45e1c
0x00a45e23
0x00a45e26
0x00a45e2c
0x00a45e2e
0x00a45e35
0x00a45e35
0x00a45e3d
0x00a45e4b
0x00a45e4b
0x00000000
0x00a45b02
0x00a45afb
0x00a45afd
0x00a45afd
0x00000000
0x00a45afd
0x00a45aca
0x00000000
0x00a45abd
0x00a45ab6
0x00a45ab8
0x00a45ab8
0x00000000
0x00a45ab8
0x00a45a7c
0x00a45a26
0x00a45a2a
0x00a45a37
0x00a45a45
0x00a45a45
0x00000000

Strings

LITE_GAME_BOX_MAIN_WINDOW, xrefs: 00A45B72
min, xrefs: 00A45CB1
hide, xrefs: 00A45AD0
restore, xrefs: 00A45D04
modal, xrefs: 00A45B1A
show, xrefs: 00A45A85
max, xrefs: 00A45C5E
?max, xrefs: 00A45D5E

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Show
String ID: ?max$LITE_GAME_BOX_MAIN_WINDOW$hide$max$min$modal$restore$show
API String ID: 990937876-3165377647
Opcode ID: 79e01da8055b8fed8a14bb0916e91d5a46b988d55d6a2f89a8c587bab14b28e5
Instruction ID: b664a55537c6393593a9de9a8eda53d0a63bbfba39c3b512cfe0437ba649c367
Opcode Fuzzy Hash: 79e01da8055b8fed8a14bb0916e91d5a46b988d55d6a2f89a8c587bab14b28e5
Instruction Fuzzy Hash: 33D1173AE006059BEB14AF74CD46BBA73B2EFA4754F544178E905AB282E772DD40C790

Uniqueness

Uniqueness Score: -1.00%

Function 00A7DD90, Relevance: 21.3, APIs: 10, Strings: 2, Instructions: 276
timethreadCOMMON

Download Yara Rule

C-Code - Quality: 68%

			E00A7DD90(void* __ebx, signed int __ecx, void* __edx, void* __edi, void* __esi) {
				signed int _v8;
				char _v208;
				struct _SYSTEMTIME _v224;
				char _v225;
				signed int _v232;
				intOrPtr _v236;
				char _v240;
				void* __ebp;
				signed int _t70;
				int _t72;
				void* _t78;
				signed int _t81;
				signed int _t83;
				intOrPtr _t85;
				signed int _t86;
				intOrPtr _t109;
				void* _t116;
				intOrPtr _t137;
				void* _t142;
				void* _t143;
				signed int _t145;
				signed int _t156;
				intOrPtr* _t157;
				intOrPtr* _t160;
				void* _t162;
				signed int _t164;
				void* _t165;
				signed int _t167;
				signed int _t170;
				unsigned int _t171;
				unsigned int _t172;
				void* _t173;
				void* _t174;
				signed int _t176;
				void* _t177;
				void* _t178;
				void* _t179;
				void* _t180;
				void* _t181;
				void* _t182;
				void* _t183;
				void* _t187;
				void* _t188;
				void* _t190;
				void* _t202;

				_t162 = __edx;
				_t148 = __ecx;
				_t142 = __ebx;
				_t70 =  *0xb6aa7c; // 0x5cc80e5b
				_v8 = _t70 ^ _t176;
				_t167 = __ecx;
				_v240 = 0;
				_t72 = PathFileExistsW( *(__ecx + 0x38));
				if(_t72 == 0) {
					__imp__SHCreateDirectoryExW(_t72,  *(_t167 + 0x38), _t72);
				}
				if(PathFileExistsW( *(_t167 + 0x38)) != 0) {
					_push(_t142);
					_t143 = E00AFE24A( *((intOrPtr*)(_t167 + 0x2c)), L"ab");
					_t178 = _t177 + 8;
					if(_t143 != 0) {
						_v240 = 1;
						_t78 = E00AFF78D(_t143, _t162, _t167, _t143);
						_t179 = _t178 + 4;
						if(_t78 == 0) {
							E00AFF9D0(_t148, 0xb373bc, 2, 1, _t143);
							_t179 = _t179 + 0x10;
						}
						if( *((intOrPtr*)(_t167 + 0x30)) != 0) {
							 *((intOrPtr*)(_t167 + 0x30)) = 0;
							asm("xorps xmm0, xmm0");
							asm("movups [ebp-0xdc], xmm0");
							GetLocalTime( &_v224);
							E00AF4C50(_t167,  &_v208, 0, 0xc8);
							_push(_v224.wSecond & 0x0000ffff);
							_push(_v224.wMinute & 0x0000ffff);
							_push(_v224.wHour & 0x0000ffff);
							_push(_v224.wDay & 0x0000ffff);
							_push(_v224.wMonth & 0x0000ffff);
							_push(_v224.wYear & 0x0000ffff);
							_push(GetCurrentThreadId());
							E00A7E270( &_v208, 0x400, L"\r\n================== Start Log [%06x:%06x]: %04d-%02d-%02d %02d:%02d:%02d ==================\n ", GetCurrentProcessId());
							_t160 =  &_v208;
							_t190 = _t179 + 0x38;
							_t162 = _t160 + 2;
							asm("o16 nop [eax+eax]");
							do {
								_t137 =  *_t160;
								_t160 = _t160 + 2;
							} while (_t137 != 0);
							_t148 = _t160 - _t162 >> 1;
							E00AFF9D0(_t160 - _t162 >> 1,  &_v208, (_t160 - _t162 >> 1) + (_t160 - _t162 >> 1), 1, _t143);
							_t179 = _t190 + 0x10;
						}
						_t170 = 0;
						_t81 =  *((intOrPtr*)(_t167 + 0x24)) -  *((intOrPtr*)(_t167 + 0x20)) >> 2;
						_v232 = _t81;
						if(_t81 > 0) {
							asm("o16 nop [eax+eax]");
							do {
								_t148 =  *( *((intOrPtr*)(_t167 + 0x20)) + _t170 * 4);
								E00AFF9D0( *( *((intOrPtr*)(_t167 + 0x20)) + _t170 * 4),  *( *((intOrPtr*)(_t167 + 0x20)) + _t170 * 4),  *((intOrPtr*)( *( *((intOrPtr*)(_t167 + 0x20)) + _t170 * 4) - 0xc)) +  *((intOrPtr*)( *( *((intOrPtr*)(_t167 + 0x20)) + _t170 * 4) - 0xc)), 1, _t143);
								_t170 = _t170 + 1;
								_t179 = _t179 + 0x10;
							} while (_t170 < _v232);
						}
						_push(_t143);
						E00AFE85D(_t143, _t167);
						_t83 = E00AFF78D(_t143, _t162, _t167, _t143);
						_push(_t143);
						_v232 = _t83;
						E00AFE318(_t143, _t148, _t167);
						_t85 =  *((intOrPtr*)(_t167 + 0x34));
						_t180 = _t179 + 0xc;
						if(_t85 > 0) {
							_t145 = _v232;
							if(_t145 >= _t85) {
								_t202 = _t145 - 0x32000;
								if(_t202 >= 0) {
									_t171 = 0x19000;
								} else {
									asm("cdq");
									_t171 = _t145 - _t162 >> 1;
								}
								_t172 = _t171 >> 1;
								_t34 = _t172 + 1; // 0x19001
								_t86 = _t34;
								_t164 = _t86 * 2 >> 0x20;
								_push( ~(_t202 > 0) | _t86 * 0x00000002);
								_t156 = E00AE4E66(_t145,  ~(_t202 > 0) | _t86 * 0x00000002, _t167, _t172, _t202);
								_t181 = _t180 + 4;
								_v232 = _t156;
								if(_t156 != 0) {
									_v236 = _t172 + _t172;
									E00AF4C50(_t167, _t156, 0, _t172 + _t172 + 2);
									_v225 = 0;
									_t173 = E00AFE24A( *((intOrPtr*)(_t167 + 0x2c)), L"rb");
									_t182 = _t181 + 0x14;
									if(_t173 == 0) {
										_t146 = _v232;
									} else {
										E00AFF194(_t164, _t173, _t145 - _v236, 0);
										_t146 = _v232;
										_t116 = E00AFED53(_v232, _v236, 1, _t173);
										_push(_t173);
										_v225 = _t116 == 1;
										E00AFE318(_v232, _t156, _t167);
										_t182 = _t182 + 0x20;
									}
									_t174 = E00AFE24A( *((intOrPtr*)(_t167 + 0x2c)), L"wb");
									_t183 = _t182 + 8;
									if(_t174 != 0) {
										E00AFF9D0(_t156, 0xb373bc, 2, 1, _t174);
										asm("xorps xmm0, xmm0");
										asm("movups [ebp-0xdc], xmm0");
										GetLocalTime( &_v224);
										E00AF4C50(_t167,  &_v208, 0, 0xc8);
										_push(_v224.wSecond & 0x0000ffff);
										_push(_v224.wMinute & 0x0000ffff);
										_push(_v224.wHour & 0x0000ffff);
										_push(_v224.wDay & 0x0000ffff);
										_push(_v224.wMonth & 0x0000ffff);
										_push(_v224.wYear & 0x0000ffff);
										_push(GetCurrentThreadId());
										E00A7E270( &_v208, 0x400, L"\r\n================== Truncate Log [%06x:%06x]: %04d-%02d-%02d %02d:%02d:%02d ==================\n ", GetCurrentProcessId());
										_t157 =  &_v208;
										_t187 = _t183 + 0x48;
										_t165 = _t157 + 2;
										do {
											_t109 =  *_t157;
											_t157 = _t157 + 2;
										} while (_t109 != 0);
										_t159 = _t157 - _t165 >> 1;
										E00AFF9D0(_t157 - _t165 >> 1,  &_v208, (_t157 - _t165 >> 1) + (_t157 - _t165 >> 1), 1, _t174);
										_t188 = _t187 + 0x10;
										if(_v225 != 0) {
											E00AFF9D0(_t159, _t146, _v236, 1, _t174);
											_t188 = _t188 + 0x10;
										}
										_push(_t174);
										E00AFE318(_t146, _t159, _t167);
										_t183 = _t188 + 4;
									}
									L00AE4C5D(_t146);
								}
							}
						}
					}
				}
				E00A7E2F0(_t167 + 0x20);
				return E00AE4BF8(_v8 ^ _t176);
			}

0x00a7dd90
0x00a7dd90
0x00a7dd90
0x00a7dd99
0x00a7dda0
0x00a7ddab
0x00a7ddad
0x00a7ddba
0x00a7ddbe
0x00a7ddc5
0x00a7ddc5
0x00a7ddd2
0x00a7ddd8
0x00a7dde6
0x00a7dde8
0x00a7dded
0x00a7ddf4
0x00a7ddfe
0x00a7de03
0x00a7de08
0x00a7de14
0x00a7de19
0x00a7de19
0x00a7de20
0x00a7de2c
0x00a7de33
0x00a7de37
0x00a7de3e
0x00a7de52
0x00a7de61
0x00a7de69
0x00a7de71
0x00a7de79
0x00a7de81
0x00a7de89
0x00a7de90
0x00a7dea9
0x00a7deae
0x00a7deb4
0x00a7deb7
0x00a7deba
0x00a7dec0
0x00a7dec0
0x00a7dec3
0x00a7dec6
0x00a7decd
0x00a7dedd
0x00a7dee2
0x00a7dee2
0x00a7dee8
0x00a7deed
0x00a7def0
0x00a7def8
0x00a7defa
0x00a7df00
0x00a7df06
0x00a7df10
0x00a7df15
0x00a7df16
0x00a7df19
0x00a7df00
0x00a7df21
0x00a7df22
0x00a7df28
0x00a7df2d
0x00a7df2e
0x00a7df34
0x00a7df39
0x00a7df3c
0x00a7df41
0x00a7df47
0x00a7df4f
0x00a7df55
0x00a7df5b
0x00a7df68
0x00a7df5d
0x00a7df5f
0x00a7df64
0x00a7df64
0x00a7df6d
0x00a7df76
0x00a7df76
0x00a7df79
0x00a7df82
0x00a7df88
0x00a7df8a
0x00a7df8d
0x00a7df95
0x00a7df9e
0x00a7dfab
0x00a7dfb8
0x00a7dfc4
0x00a7dfc6
0x00a7dfcb
0x00a7e006
0x00a7dfcd
0x00a7dfd7
0x00a7dfdc
0x00a7dfec
0x00a7dff4
0x00a7dff5
0x00a7dffc
0x00a7e001
0x00a7e001
0x00a7e019
0x00a7e01b
0x00a7e020
0x00a7e030
0x00a7e03e
0x00a7e041
0x00a7e049
0x00a7e05d
0x00a7e06c
0x00a7e074
0x00a7e07c
0x00a7e084
0x00a7e08c
0x00a7e094
0x00a7e09b
0x00a7e0b4
0x00a7e0b9
0x00a7e0bf
0x00a7e0c2
0x00a7e0c5
0x00a7e0c5
0x00a7e0c8
0x00a7e0cb
0x00a7e0d2
0x00a7e0e2
0x00a7e0e7
0x00a7e0f1
0x00a7e0fd
0x00a7e102
0x00a7e102
0x00a7e105
0x00a7e106
0x00a7e10b
0x00a7e10b
0x00a7e10f
0x00a7e114
0x00a7df95
0x00a7df4f
0x00a7df41
0x00a7e117
0x00a7e11b
0x00a7e135

APIs

PathFileExistsW.SHLWAPI(?,?,00000000), ref: 00A7DDBA
SHCreateDirectoryExW.SHELL32(00000000,?,00000000,?,00000000), ref: 00A7DDC5
PathFileExistsW.SHLWAPI(?,?,00000000), ref: 00A7DDCE
GetLocalTime.KERNEL32(?,?,?,00000000), ref: 00A7DE3E
GetCurrentThreadId.KERNEL32 ref: 00A7DE8A
GetCurrentProcessId.KERNEL32(00000000,?,?,?,?,?,00000000), ref: 00A7DE91
__fread_nolock.LIBCMT ref: 00A7DFEC
GetLocalTime.KERNEL32(?), ref: 00A7E049
GetCurrentThreadId.KERNEL32 ref: 00A7E095
GetCurrentProcessId.KERNEL32(00000000), ref: 00A7E09C

Strings

================== Start Log [%06x:%06x]: %04d-%02d-%02d %02d:%02d:%02d ================== , xrefs: 00A7DE98
================== Truncate Log [%06x:%06x]: %04d-%02d-%02d %02d:%02d:%02d ================== , xrefs: 00A7E0A3

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Current$ExistsFileLocalPathProcessThreadTime$CreateDirectory__fread_nolock
String ID: ================== Start Log [%06x:%06x]: %04d-%02d-%02d %02d:%02d:%02d ================== $================== Truncate Log [%06x:%06x]: %04d-%02d-%02d %02d:%02d:%02d ==================
API String ID: 2136142971-1958427658
Opcode ID: 4d8189d510f24eb05844138713a4cf804a57788674606d0a3adb8454e7883bf9
Instruction ID: 68d157feab6d360bb1b8260d0f621d45f3bfc2ade603e439cfbe48d8b85fe96e
Opcode Fuzzy Hash: 4d8189d510f24eb05844138713a4cf804a57788674606d0a3adb8454e7883bf9
Instruction Fuzzy Hash: 14A1A6B1900219AAEB20DBA4CD46FBE76BCAF08300F4485D5FA0DB7152E7759D95CB70

Uniqueness

Uniqueness Score: -1.00%

Function 00A4E300, Relevance: 21.2, APIs: 6, Strings: 6, Instructions: 218
COMMON

Download Yara Rule

C-Code - Quality: 42%

			E00A4E300(char __ebx, signed int __edi, intOrPtr* __esi, char _a4, intOrPtr _a8, char _a12, intOrPtr _a16) {
				intOrPtr* _v0;
				char _v8;
				char _v12;
				char _v16;
				char _v20;
				char _v24;
				char _v28;
				char _v32;
				char _v36;
				signed int _v40;
				intOrPtr* _v44;
				void* __ebp;
				signed int _t208;
				signed int _t224;
				signed int _t230;
				intOrPtr _t233;
				intOrPtr _t234;
				intOrPtr _t236;
				char _t238;
				intOrPtr _t239;
				void* _t241;
				intOrPtr* _t244;
				intOrPtr _t247;
				intOrPtr* _t250;
				intOrPtr _t253;
				intOrPtr* _t255;
				intOrPtr _t258;
				intOrPtr* _t262;
				char _t266;
				char _t273;
				char _t280;
				char _t287;
				intOrPtr _t293;
				void* _t312;
				intOrPtr* _t314;
				intOrPtr* _t315;
				intOrPtr* _t316;
				intOrPtr* _t325;
				void* _t332;
				void* _t333;
				void* _t341;
				void* _t342;
				void* _t355;
				void* _t356;
				void* _t362;
				void* _t377;
				void* _t378;
				void* _t389;
				void* _t390;
				intOrPtr* _t405;
				intOrPtr* _t408;
				intOrPtr* _t410;
				intOrPtr* _t412;
				char _t413;
				intOrPtr* _t415;
				intOrPtr* _t416;
				intOrPtr _t422;
				intOrPtr _t425;
				intOrPtr _t426;
				intOrPtr _t427;
				intOrPtr* _t448;
				intOrPtr* _t450;
				intOrPtr* _t451;
				intOrPtr* _t468;
				intOrPtr* _t472;
				intOrPtr* _t474;
				intOrPtr* _t475;
				intOrPtr* _t480;
				intOrPtr* _t484;
				intOrPtr* _t486;
				intOrPtr* _t490;
				intOrPtr* _t492;
				intOrPtr* _t493;
				intOrPtr* _t495;
				intOrPtr* _t496;
				intOrPtr* _t498;
				intOrPtr* _t499;
				intOrPtr* _t512;
				intOrPtr* _t514;
				char _t518;
				intOrPtr* _t519;
				intOrPtr* _t524;
				char _t527;
				intOrPtr* _t528;
				signed int _t531;
				signed int _t532;
				intOrPtr* _t537;
				intOrPtr* _t538;
				signed int _t541;
				signed int _t542;
				void* _t544;
				signed int _t546;
				signed int _t547;
				void* _t550;
				void* _t551;
				void* _t552;
				void* _t555;
				void* _t556;
				void* _t557;
				signed int _t558;

				_t537 = __esi;
				_t531 = __edi;
				_t403 = __ebx;
				_push(0xffffffff);
				_push(0xb23001);
				_push( *[fs:0x0]);
				_push(__ebx);
				_push(__esi);
				_push(__edi);
				_t208 =  *0xb6aa7c; // 0x5cc80e5b
				 *[fs:0x0] =  &_v16;
				_v36 = 0;
				E00A75DB0(L"CInstallHelper::_GetConfigInfoFromServer", _t208 ^ _t541);
				_t546 = _t544 - 0x1c + 4;
				_t415 = E00A445F0();
				if(_t415 == 0) {
					_push(0x80004005);
					E00A43FD0(__ebx, __edi, __esi);
					goto L44;
				} else {
					_v28 =  *((intOrPtr*)( *_t415 + 0xc))() + 0x10;
					_t293 = _a8;
					_v8 = 0;
					_push( *((intOrPtr*)(_t293 + 0x14)));
					_push( *((intOrPtr*)(_t293 + 0x10)));
					_push( *((intOrPtr*)(_t293 + 0x74)));
					L00A47D90(__ebx, _t415, __edi, __esi,  &_v28, L"http://wan.ludashi.com/cms/newbuy/microend.php?game_id=%s&channel=%s&pid=%s&subpid=%s",  *((intOrPtr*)(_t293 + 8)));
					_t546 = _t546 + 0x18;
					_t448 = E00A445F0();
					if(_t448 == 0) {
						L44:
						_push(0x80004005);
						E00A43FD0(_t403, _t531, _t537);
						goto L45;
					} else {
						_v24 =  *((intOrPtr*)( *_t448 + 0xc))() + 0x10;
						_v8 = 1;
						if(E00A44130(__ebx,  &_v24, __edi, __esi, 0xb32084) == 0) {
							_push(6);
							E00A44EA0( &_v24, __edi, __esi, 0xb32084);
						}
						_t403 = _a4;
						_v8 = 2;
						_v32 = _a12;
						_t450 =  *((intOrPtr*)(_t403 + 0x24));
						if(_t450 == 0) {
							L45:
							E00A8607F(__eflags);
							goto L46;
						} else {
							 *((intOrPtr*)( *_t450 + 8))( &_v32,  &_v24);
							_t531 = _t531 | 0xffffffff;
							_v8 = 0;
							_t512 = _v24 + 0xfffffff0;
							asm("lock xadd [edx+0xc], eax");
							if(_t531 - 1 <= 0) {
								 *((intOrPtr*)( *((intOrPtr*)( *_t512)) + 4))(_t512);
							}
							_t451 = E00A445F0();
							_t565 = _t451;
							if(_t451 == 0) {
								L46:
								_push(0x80004005);
								E00A43FD0(_t403, _t531, _t537);
								goto L47;
							} else {
								_v20 =  *((intOrPtr*)( *_t451 + 0xc))() + 0x10;
								_v8 = 3;
								_t312 = L00A858B0(_t451, _t565,  &_v28,  &_v20, 0x1388, 0, 0);
								_t555 = _t546 + 0x14;
								if(_t312 != 0) {
									_t537 = L00A76140(_t403, _t531, _v20);
									_t556 = _t555 + 4;
									_v44 = _t537;
									_v8 = 7;
									__eflags = _t537;
									if(_t537 != 0) {
										_t314 = L00A775A0(_t537, 0xb321d4, 0xffffffff);
										_t557 = _t556 + 0xc;
										_v32 = _t314;
										__eflags = _t314;
										if(_t314 == 0) {
											_t315 = E00A76080(_t451, _t537, 0xb32260);
											_t558 = _t557 + 8;
											__eflags = _t315;
											if(_t315 != 0) {
												_push(_t315);
												_t316 = L00A4A1D0(_t403, _a8, _t531, _t537);
												__eflags = _t316;
												if(_t316 != 0) {
													E00A43690(_t403,  &_v32, 0xb2daf8);
													_v8 = 0x11;
													E00A439C0(L00A4C810(_t403, _t403, _t531, _t537, _a16,  &_v32),  &_v32);
													_t413 = 1;
												} else {
													E00A75DD0(L"CInstallHelper::_GetConfigInfoFromServer, parse config failed, \'%s\'", _v20);
													_t558 = _t558 - 0x20;
													_v40 = _t558;
													 *((intOrPtr*)(_t558 + 0x24)) = 0;
													_v8 = 0xf;
													_t332 = E00A5A450( *0xb70870);
													_push(1);
													_push(0);
													_push(L"get_info_fail");
													_push( *((intOrPtr*)(_t332 + 0x9c)));
													_t333 = L00A4ECA0(_t403, _t537);
													_v8 = 7;
													L00A84050(_t403, _t333, _t512);
													E00A43690(_t403,  &_v32, 0xb32368);
													_v8 = 0x10;
													E00A439C0(L00A4C810(_t403, _t403, _t531, _t537, 0xffffff9c,  &_v32),  &_v32);
													goto L35;
												}
												goto L37;
											} else {
												_push(L"CInstallHelper::_GetConfigInfoFromServer, no data");
												E00A75DD0();
												_t546 = _t558 - 0x24;
												_v40 = _t546;
												 *((intOrPtr*)(_t546 + 0x24)) = 0;
												_v8 = 0xd;
												_t341 = E00A5A450( *0xb70870);
												_push(1);
												_push(0);
												_push(L"get_info_fail");
												_push( *((intOrPtr*)(_t341 + 0x9c)));
												_t342 = L00A4ECA0(_t403, _t537);
												_v8 = 7;
												L00A84050(_t403, _t342, _t512);
												E00A43690(_t403,  &_v32, 0xb322cc);
												_t468 =  *((intOrPtr*)(_t403 + 0x24));
												_v8 = 0xe;
												_v40 = 0xffffff9c;
												__eflags = _t468;
												if(__eflags == 0) {
													goto L52;
												} else {
													 *((intOrPtr*)( *_t468 + 8))( &_v40,  &_v32);
													_t518 = _v32;
													goto L31;
												}
											}
										} else {
											L00A773A0( &_v24, _t537, 0xb321dc, 0xb2daf8);
											_push(_v24);
											_v8 = 0xa;
											E00A75DD0(L"CInstallHelper::_GetConfigInfoFromServer, error=%s, msg=%s", _v32);
											_t546 = _t557 - 0xc;
											_v40 = _t546;
											 *((intOrPtr*)(_t546 + 0x24)) = 0;
											_v8 = 0xb;
											_t355 = E00A5A450( *0xb70870);
											_push(1);
											_push(0);
											_push(L"get_info_fail");
											_push( *((intOrPtr*)(_t355 + 0x9c)));
											_t356 = L00A4ECA0(_t403, _t537);
											_v8 = 0xa;
											L00A84050(_t403, _t356, _t512);
											_v8 = 0xc;
											_t472 =  *((intOrPtr*)(_v24 - 0x10));
											__eflags = _t472;
											if(_t472 == 0) {
												L23:
												_t474 =  *((intOrPtr*)( *((intOrPtr*)(E00A445F0())) + 0x10))();
												__eflags = _t474;
												if(_t474 == 0) {
													goto L50;
												} else {
													goto L24;
												}
											} else {
												_t474 =  *((intOrPtr*)( *_t472 + 0x10))();
												__eflags = _t474;
												if(_t474 != 0) {
													L24:
													_t362 =  *((intOrPtr*)( *_t474 + 0xc))();
													_v36 = 1;
													_v32 = _t362 + 0x10;
													_push( *((intOrPtr*)(_v24 - 0xc)));
													L00A4CD80(_t403,  &_v32, 0xb32258, 3, _v24);
													_t475 =  *((intOrPtr*)(_t403 + 0x24));
													_t546 = _t546 + 0x14;
													_v40 = 0xffffff9c;
													__eflags = _t475;
													if(__eflags == 0) {
														goto L51;
													} else {
														 *((intOrPtr*)( *_t475 + 8))( &_v40,  &_v32);
														_v8 = 0xa;
														_t524 = _v32 + 0xfffffff0;
														asm("lock xadd [edx+0xc], eax");
														__eflags = _t531 - 1;
														if(_t531 - 1 <= 0) {
															 *((intOrPtr*)( *((intOrPtr*)( *_t524)) + 4))(_t524);
														}
														_t518 = _v24;
														L31:
														_v8 = 7;
														_t519 = _t518 + 0xfffffff0;
														asm("lock xadd [edx+0xc], eax");
														__eflags = _t531 - 1;
														if(_t531 - 1 > 0) {
															L35:
															_t413 = 0;
														} else {
															 *((intOrPtr*)( *((intOrPtr*)( *_t519)) + 4))(_t519);
															_t413 = 0;
														}
														L37:
														E00A76010(_t537);
														goto L38;
													}
												} else {
													goto L23;
												}
											}
										}
									} else {
										E00A75DD0(L"CInstallHelper::_GetConfigInfoFromServer, parse json failed, \'%s\'", _v20);
										_t546 = _t556 - 0x20;
										_v40 = _t546;
										 *((intOrPtr*)(_t546 + 0x24)) = _t537;
										_v8 = 8;
										_t377 = E00A5A450( *0xb70870);
										_push(1);
										_push(_t537);
										_push(L"get_info_fail");
										_push( *((intOrPtr*)(_t377 + 0x9c)));
										_t378 = L00A4ECA0(_t403, _t537);
										_v8 = 7;
										L00A84050(_t403, _t378, _t512);
										E00A43690(_t403,  &_v32, 0xb321c4);
										_t480 =  *((intOrPtr*)(_t403 + 0x24));
										_v8 = 9;
										_v24 = 0xffffff9c;
										__eflags = _t480;
										if(__eflags == 0) {
											goto L49;
										} else {
											 *((intOrPtr*)( *_t480 + 8))( &_v24,  &_v32);
											_t527 = _v32;
											_v8 = 7;
											goto L14;
										}
									}
								} else {
									E00A75DD0(L"CInstallHelper::_GetConfigInfoFromServer, get \'%s\' failed", _v28);
									_t546 = _t555 - 0x20;
									_v40 = _t546;
									 *((intOrPtr*)(_t546 + 0x24)) = 0;
									_v8 = 4;
									_t389 = E00A5A450( *0xb70870);
									_push(1);
									_push(0);
									_push(L"get_info_fail");
									_push( *((intOrPtr*)(_t389 + 0x9c)));
									_t390 = L00A4ECA0(_t403, _t537);
									_v8 = 3;
									L00A84050(_t403, _t390, _t512);
									_t484 = E00A445F0();
									if(_t484 == 0) {
										L47:
										_push(0x80004005);
										E00A43FD0(_t403, _t531, _t537);
										goto L48;
									} else {
										_v24 =  *((intOrPtr*)( *_t484 + 0xc))() + 0x10;
										_v8 = 5;
										if(E00A44130(_t403,  &_v24, _t531, _t537, 0xb32128) == 0) {
											_push(8);
											E00A44EA0( &_v24, _t531, _t537, 0xb32128);
										}
										_t486 =  *((intOrPtr*)(_t403 + 0x24));
										_v8 = 6;
										_v32 = 0xffffff9c;
										if(_t486 == 0) {
											L48:
											E00A8607F(__eflags);
											L49:
											E00A8607F(__eflags);
											L50:
											_push(0x80004005);
											E00A43FD0(_t403, _t531, _t537);
											L51:
											E00A8607F(__eflags);
											L52:
											E00A8607F(__eflags);
											asm("int3");
											asm("int3");
											asm("int3");
											asm("int3");
											asm("int3");
											asm("int3");
											asm("int3");
											asm("int3");
											asm("int3");
											asm("int3");
											asm("int3");
											_push(_t541);
											_t542 = _t546;
											_push(0xffffffff);
											_push(0xb23059);
											_push( *[fs:0x0]);
											_t547 = _t546 - 0xc;
											_push(_t403);
											_push(_t537);
											_push(_t531);
											_t224 =  *0xb6aa7c; // 0x5cc80e5b
											_push(_t224 ^ _t542);
											 *[fs:0x0] =  &_a4;
											_a12 = 0;
											_v0 = 0;
											_t416 = E00A445F0();
											__eflags = _t416;
											if(_t416 == 0) {
												_push(0x80004005);
												E00A43FD0(_t403, _t531, _t537);
												asm("int3");
												asm("int3");
												asm("int3");
												asm("int3");
												asm("int3");
												_push(_t542);
												_push(0xffffffff);
												_push(0xb23097);
												_push( *[fs:0x0]);
												_t230 =  *0xb6aa7c; // 0x5cc80e5b
												_push(_t230 ^ _t547);
												 *[fs:0x0] =  &_v24;
												_t233 =  *0xb703ec; // 0x7d0350
												__eflags = _t233;
												if(_t233 == 0) {
													_t234 =  *0xb6a164; // 0xb2f0b8
													_v28 = 0xb6a164;
													 *((intOrPtr*)(_t234 + 4))();
													__eflags =  *0xb703ec;
													_v16 = 0;
													if( *0xb703ec == 0) {
														__eflags =  *0xb6a160;
														if(__eflags != 0) {
															_push(0x20);
															_t238 = E00AE4920(_t537, __eflags);
															_v32 = _t238;
															_v16 = 1;
															__eflags = _t238;
															if(_t238 == 0) {
																_t239 = 0;
																__eflags = 0;
															} else {
																_t239 = E00A85C40(_t238);
															}
															 *0xb703ec = _t239;
															 *0xb6a160 = 0;
														}
													}
													_t236 =  *0xb6a164; // 0xb2f0b8
													_v16 = 2;
													 *((intOrPtr*)(_t236 + 8))();
													_t233 =  *0xb703ec; // 0x7d0350
												}
												 *[fs:0x0] = _v24;
												return _t233;
											} else {
												_t241 =  *((intOrPtr*)( *_t416 + 0xc))();
												_t538 = _v0;
												 *_t538 = _t241 + 0x10;
												_v12 = 0;
												_v24 = 1;
												_t244 = E00A720B0(_t403, _t531, _t538,  &_v32, 0x80000002, L"SOFTWARE\\Ludashi", L"Setup Path", 0xb2daf8);
												_t550 = _t547 + 0x14;
												_t422 =  *_t244;
												_t532 = _t531 | 0xffffffff;
												_t405 =  *_t538 - 0x10;
												_v12 = 1;
												_t490 = _t422 - 0x10;
												__eflags = _t490 - _t405;
												if(_t490 != _t405) {
													__eflags =  *((intOrPtr*)(_t405 + 0xc));
													if( *((intOrPtr*)(_t405 + 0xc)) < 0) {
														L60:
														_push( *((intOrPtr*)(_t422 - 0xc)));
														E00A44EA0(_t538, _t532, _t538, _t422);
													} else {
														__eflags =  *_t490 -  *_t405;
														if( *_t490 !=  *_t405) {
															goto L60;
														} else {
															_t287 = E00A44270(_t532, _t538, _t490);
															_t550 = _t550 + 4;
															_v28 = _t287;
															asm("lock xadd [edx], ecx");
															__eflags = _t532 - 1;
															if(_t532 - 1 <= 0) {
																 *((intOrPtr*)( *((intOrPtr*)( *_t405)) + 4))(_t405);
																_t287 = _v28;
															}
															 *_t538 = _t287 + 0x10;
														}
													}
												}
												_v12 = 0;
												_t492 = _v32 + 0xfffffff0;
												asm("lock xadd [edx+0xc], eax");
												__eflags = _t532 - 1;
												if(_t532 - 1 <= 0) {
													 *((intOrPtr*)( *((intOrPtr*)( *_t492)) + 4))(_t492);
												}
												_t247 =  *_t538;
												__eflags =  *((intOrPtr*)(_t247 - 0xc));
												if( *((intOrPtr*)(_t247 - 0xc)) == 0) {
													_t250 = E00A720B0(_t405, _t532, _t538,  &_v28, 0x80000002, L"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\360wpapp.exe", L"Path", 0xb2daf8);
													_t551 = _t550 + 0x14;
													_t425 =  *_t250;
													_t408 =  *_t538 - 0x10;
													_v12 = 2;
													_t493 = _t425 - 0x10;
													__eflags = _t493 - _t408;
													if(_t493 != _t408) {
														__eflags =  *((intOrPtr*)(_t408 + 0xc));
														if( *((intOrPtr*)(_t408 + 0xc)) < 0) {
															L70:
															_push( *((intOrPtr*)(_t425 - 0xc)));
															E00A44EA0(_t538, _t532, _t538, _t425);
														} else {
															__eflags =  *_t493 -  *_t408;
															if( *_t493 !=  *_t408) {
																goto L70;
															} else {
																_t280 = E00A44270(_t532, _t538, _t493);
																_t551 = _t551 + 4;
																_v32 = _t280;
																asm("lock xadd [edx], ecx");
																__eflags = _t532 - 1;
																if(_t532 - 1 <= 0) {
																	 *((intOrPtr*)( *((intOrPtr*)( *_t408)) + 4))(_t408);
																	_t280 = _v32;
																}
																 *_t538 = _t280 + 0x10;
															}
														}
													}
													_v12 = 0;
													_t495 = _v28 + 0xfffffff0;
													asm("lock xadd [edx+0xc], eax");
													__eflags = _t532 - 1;
													if(_t532 - 1 <= 0) {
														 *((intOrPtr*)( *((intOrPtr*)( *_t495)) + 4))(_t495);
													}
													_t253 =  *_t538;
													__eflags =  *((intOrPtr*)(_t253 - 0xc));
													if( *((intOrPtr*)(_t253 - 0xc)) == 0) {
														_t255 = E00A720B0(_t408, _t532, _t538,  &_v28, 0x80000002, L"Software\\LDSGameMaster", L"Setup Path", 0xb2daf8);
														_t552 = _t551 + 0x14;
														_t426 =  *_t255;
														_t410 =  *_t538 - 0x10;
														_v12 = 3;
														_t496 = _t426 - 0x10;
														__eflags = _t496 - _t410;
														if(_t496 != _t410) {
															__eflags =  *((intOrPtr*)(_t410 + 0xc));
															if( *((intOrPtr*)(_t410 + 0xc)) < 0) {
																L80:
																_push( *((intOrPtr*)(_t426 - 0xc)));
																E00A44EA0(_t538, _t532, _t538, _t426);
															} else {
																__eflags =  *_t496 -  *_t410;
																if( *_t496 !=  *_t410) {
																	goto L80;
																} else {
																	_t273 = E00A44270(_t532, _t538, _t496);
																	_t552 = _t552 + 4;
																	_v32 = _t273;
																	asm("lock xadd [edx], ecx");
																	__eflags = _t532 - 1;
																	if(_t532 - 1 <= 0) {
																		 *((intOrPtr*)( *((intOrPtr*)( *_t410)) + 4))(_t410);
																		_t273 = _v32;
																	}
																	 *_t538 = _t273 + 0x10;
																}
															}
														}
														_v12 = 0;
														_t498 = _v28 + 0xfffffff0;
														asm("lock xadd [edx+0xc], eax");
														__eflags = _t532 - 1;
														if(_t532 - 1 <= 0) {
															 *((intOrPtr*)( *((intOrPtr*)( *_t498)) + 4))(_t498);
														}
														_t258 =  *_t538;
														__eflags =  *((intOrPtr*)(_t258 - 0xc));
														if( *((intOrPtr*)(_t258 - 0xc)) == 0) {
															_t427 =  *((intOrPtr*)(E00A720B0(_t410, _t532, _t538,  &_v28, 0x80000002, L"Software\\LdsLite", L"Setup Path", 0xb2daf8)));
															_t412 =  *_t538 - 0x10;
															_v12 = 4;
															_t499 = _t427 - 0x10;
															__eflags = _t499 - _t412;
															if(_t499 != _t412) {
																__eflags =  *((intOrPtr*)(_t412 + 0xc));
																if( *((intOrPtr*)(_t412 + 0xc)) < 0) {
																	L90:
																	_push( *((intOrPtr*)(_t427 - 0xc)));
																	E00A44EA0(_t538, _t532, _t538, _t427);
																} else {
																	__eflags =  *_t499 -  *_t412;
																	if( *_t499 !=  *_t412) {
																		goto L90;
																	} else {
																		_t266 = E00A44270(_t532, _t538, _t499);
																		_v32 = _t266;
																		asm("lock xadd [edx], ecx");
																		__eflags = _t532 - 1;
																		if(_t532 - 1 <= 0) {
																			 *((intOrPtr*)( *((intOrPtr*)( *_t412)) + 4))(_t412);
																			_t266 = _v32;
																		}
																		 *_t538 = _t266 + 0x10;
																	}
																}
															}
															_v12 = 0;
															_t262 = _v28 + 0xfffffff0;
															asm("lock xadd [eax+0xc], edi");
															__eflags = _t532 - 1;
															if(_t532 - 1 <= 0) {
																 *((intOrPtr*)( *((intOrPtr*)( *_t262)) + 4))(_t262);
															}
														}
													}
												}
												 *[fs:0x0] = _v20;
												return _t538;
											}
										} else {
											 *((intOrPtr*)( *_t486 + 8))( &_v32,  &_v24);
											_t527 = _v24;
											_v8 = 3;
											L14:
											_t528 = _t527 + 0xfffffff0;
											asm("lock xadd [edx+0xc], eax");
											if(_t531 - 1 <= 0) {
												 *((intOrPtr*)( *((intOrPtr*)( *_t528)) + 4))(_t528);
											}
											_t413 = 0;
											L38:
											_v8 = 0;
											_t514 = _v20 + 0xfffffff0;
											asm("lock xadd [edx+0xc], eax");
											if(_t531 - 1 <= 0) {
												 *((intOrPtr*)( *((intOrPtr*)( *_t514)) + 4))(_t514);
											}
											_v8 = 0xffffffff;
											_t325 = _v28 + 0xfffffff0;
											asm("lock xadd [eax+0xc], edi");
											if(_t531 - 1 <= 0) {
												 *((intOrPtr*)( *((intOrPtr*)( *_t325)) + 4))(_t325);
											}
											 *[fs:0x0] = _v16;
											return _t413;
										}
									}
								}
							}
						}
					}
				}
			}

0x00a4e300
0x00a4e300
0x00a4e300
0x00a4e303
0x00a4e305
0x00a4e310
0x00a4e314
0x00a4e315
0x00a4e316
0x00a4e317
0x00a4e322
0x00a4e32d
0x00a4e334
0x00a4e339
0x00a4e341
0x00a4e345
0x00a4e88a
0x00a4e88f
0x00000000
0x00a4e34b
0x00a4e353
0x00a4e356
0x00a4e359
0x00a4e360
0x00a4e363
0x00a4e366
0x00a4e375
0x00a4e37a
0x00a4e382
0x00a4e386
0x00a4e894
0x00a4e894
0x00a4e899
0x00000000
0x00a4e38c
0x00a4e394
0x00a4e39f
0x00a4e3aa
0x00a4e3ac
0x00a4e3b6
0x00a4e3b6
0x00a4e3bb
0x00a4e3c1
0x00a4e3c5
0x00a4e3c8
0x00a4e3cd
0x00a4e89e
0x00a4e89e
0x00000000
0x00a4e3d3
0x00a4e3dd
0x00a4e3e3
0x00a4e3e6
0x00a4e3ea
0x00a4e3ef
0x00a4e3f7
0x00a4e3fe
0x00a4e3fe
0x00a4e406
0x00a4e408
0x00a4e40a
0x00a4e8a3
0x00a4e8a3
0x00a4e8a8
0x00000000
0x00a4e410
0x00a4e418
0x00a4e427
0x00a4e430
0x00a4e435
0x00a4e43a
0x00a4e518
0x00a4e51a
0x00a4e51d
0x00a4e520
0x00a4e524
0x00a4e526
0x00a4e5b5
0x00a4e5ba
0x00a4e5bd
0x00a4e5c0
0x00a4e5c2
0x00a4e6d3
0x00a4e6d8
0x00a4e6db
0x00a4e6dd
0x00a4e786
0x00a4e787
0x00a4e78c
0x00a4e78e
0x00a4e80c
0x00a4e814
0x00a4e826
0x00a4e82b
0x00a4e790
0x00a4e798
0x00a4e79d
0x00a4e7a2
0x00a4e7a5
0x00a4e7b2
0x00a4e7b6
0x00a4e7bb
0x00a4e7bd
0x00a4e7bf
0x00a4e7c4
0x00a4e7ca
0x00a4e7d1
0x00a4e7d5
0x00a4e7e2
0x00a4e7ea
0x00a4e7fb
0x00000000
0x00a4e7fb
0x00000000
0x00a4e6e3
0x00a4e6e3
0x00a4e6e8
0x00a4e6ed
0x00a4e6f2
0x00a4e6f5
0x00a4e702
0x00a4e706
0x00a4e70b
0x00a4e70d
0x00a4e70f
0x00a4e714
0x00a4e71a
0x00a4e721
0x00a4e725
0x00a4e732
0x00a4e737
0x00a4e73a
0x00a4e73e
0x00a4e745
0x00a4e747
0x00000000
0x00a4e74d
0x00a4e757
0x00a4e75a
0x00000000
0x00a4e75a
0x00a4e747
0x00a4e5c8
0x00a4e5d7
0x00a4e5dc
0x00a4e5df
0x00a4e5eb
0x00a4e5f0
0x00a4e5f5
0x00a4e5f8
0x00a4e605
0x00a4e609
0x00a4e60e
0x00a4e610
0x00a4e612
0x00a4e617
0x00a4e61d
0x00a4e624
0x00a4e628
0x00a4e630
0x00a4e634
0x00a4e637
0x00a4e639
0x00a4e646
0x00a4e652
0x00a4e654
0x00a4e656
0x00000000
0x00000000
0x00000000
0x00000000
0x00a4e63b
0x00a4e640
0x00a4e642
0x00a4e644
0x00a4e65c
0x00a4e65e
0x00a4e664
0x00a4e66b
0x00a4e671
0x00a4e680
0x00a4e685
0x00a4e688
0x00a4e68b
0x00a4e692
0x00a4e694
0x00000000
0x00a4e69a
0x00a4e6a4
0x00a4e6ac
0x00a4e6b0
0x00a4e6b3
0x00a4e6b9
0x00a4e6bb
0x00a4e6c2
0x00a4e6c2
0x00a4e6c5
0x00a4e75d
0x00a4e75d
0x00a4e761
0x00a4e766
0x00a4e76c
0x00a4e76e
0x00a4e800
0x00a4e800
0x00a4e774
0x00a4e779
0x00a4e77c
0x00a4e77c
0x00a4e830
0x00a4e831
0x00000000
0x00a4e836
0x00000000
0x00000000
0x00000000
0x00a4e644
0x00a4e639
0x00a4e52c
0x00a4e534
0x00a4e539
0x00a4e53e
0x00a4e541
0x00a4e54a
0x00a4e54e
0x00a4e553
0x00a4e555
0x00a4e556
0x00a4e55b
0x00a4e561
0x00a4e568
0x00a4e56c
0x00a4e579
0x00a4e57e
0x00a4e581
0x00a4e585
0x00a4e58c
0x00a4e58e
0x00000000
0x00a4e594
0x00a4e59e
0x00a4e5a1
0x00a4e5a4
0x00000000
0x00a4e5a4
0x00a4e58e
0x00a4e440
0x00a4e448
0x00a4e44d
0x00a4e452
0x00a4e455
0x00a4e462
0x00a4e466
0x00a4e46b
0x00a4e46d
0x00a4e46f
0x00a4e474
0x00a4e47a
0x00a4e481
0x00a4e485
0x00a4e48f
0x00a4e493
0x00a4e8ad
0x00a4e8ad
0x00a4e8b2
0x00000000
0x00a4e499
0x00a4e4a1
0x00a4e4ac
0x00a4e4b7
0x00a4e4b9
0x00a4e4c3
0x00a4e4c3
0x00a4e4c8
0x00a4e4cb
0x00a4e4cf
0x00a4e4d8
0x00a4e8b7
0x00a4e8b7
0x00a4e8bc
0x00a4e8bc
0x00a4e8c1
0x00a4e8c1
0x00a4e8c6
0x00a4e8cb
0x00a4e8cb
0x00a4e8d0
0x00a4e8d0
0x00a4e8d5
0x00a4e8d6
0x00a4e8d7
0x00a4e8d8
0x00a4e8d9
0x00a4e8da
0x00a4e8db
0x00a4e8dc
0x00a4e8dd
0x00a4e8de
0x00a4e8df
0x00a4e8e0
0x00a4e8e1
0x00a4e8e3
0x00a4e8e5
0x00a4e8f0
0x00a4e8f1
0x00a4e8f4
0x00a4e8f5
0x00a4e8f6
0x00a4e8f7
0x00a4e8fe
0x00a4e902
0x00a4e908
0x00a4e90f
0x00a4e91b
0x00a4e91d
0x00a4e91f
0x00a4ebd1
0x00a4ebd6
0x00a4ebdb
0x00a4ebdc
0x00a4ebdd
0x00a4ebde
0x00a4ebdf
0x00a4ebe0
0x00a4ebe3
0x00a4ebe5
0x00a4ebf0
0x00a4ebf4
0x00a4ebfb
0x00a4ebff
0x00a4ec05
0x00a4ec0a
0x00a4ec0c
0x00a4ec0e
0x00a4ec18
0x00a4ec1f
0x00a4ec22
0x00a4ec29
0x00a4ec30
0x00a4ec32
0x00a4ec39
0x00a4ec3b
0x00a4ec3d
0x00a4ec45
0x00a4ec48
0x00a4ec4c
0x00a4ec4e
0x00a4ec59
0x00a4ec59
0x00a4ec50
0x00a4ec52
0x00a4ec52
0x00a4ec5b
0x00a4ec60
0x00a4ec60
0x00a4ec39
0x00a4ec6a
0x00a4ec74
0x00a4ec7b
0x00a4ec7e
0x00a4ec7e
0x00a4ec86
0x00a4ec91
0x00a4e925
0x00a4e927
0x00a4e92a
0x00a4e930
0x00a4e944
0x00a4e951
0x00a4e958
0x00a4e95d
0x00a4e960
0x00a4e962
0x00a4e967
0x00a4e96a
0x00a4e971
0x00a4e974
0x00a4e976
0x00a4e978
0x00a4e97c
0x00a4e9b0
0x00a4e9b0
0x00a4e9b6
0x00a4e97e
0x00a4e980
0x00a4e982
0x00000000
0x00a4e984
0x00a4e985
0x00a4e98a
0x00a4e98d
0x00a4e995
0x00a4e99a
0x00a4e99c
0x00a4e9a3
0x00a4e9a6
0x00a4e9a6
0x00a4e9ac
0x00a4e9ac
0x00a4e982
0x00a4e97c
0x00a4e9c0
0x00a4e9c4
0x00a4e9c7
0x00a4e9cd
0x00a4e9cf
0x00a4e9d6
0x00a4e9d6
0x00a4e9d9
0x00a4e9db
0x00a4e9df
0x00a4e9fd
0x00a4ea02
0x00a4ea05
0x00a4ea09
0x00a4ea0c
0x00a4ea13
0x00a4ea16
0x00a4ea18
0x00a4ea1a
0x00a4ea1e
0x00a4ea52
0x00a4ea52
0x00a4ea58
0x00a4ea20
0x00a4ea22
0x00a4ea24
0x00000000
0x00a4ea26
0x00a4ea27
0x00a4ea2c
0x00a4ea2f
0x00a4ea37
0x00a4ea3c
0x00a4ea3e
0x00a4ea45
0x00a4ea48
0x00a4ea48
0x00a4ea4e
0x00a4ea4e
0x00a4ea24
0x00a4ea1e
0x00a4ea62
0x00a4ea66
0x00a4ea69
0x00a4ea6f
0x00a4ea71
0x00a4ea78
0x00a4ea78
0x00a4ea7b
0x00a4ea7d
0x00a4ea81
0x00a4ea9f
0x00a4eaa4
0x00a4eaa7
0x00a4eaab
0x00a4eaae
0x00a4eab5
0x00a4eab8
0x00a4eaba
0x00a4eabc
0x00a4eac0
0x00a4eaf4
0x00a4eaf4
0x00a4eafa
0x00a4eac2
0x00a4eac4
0x00a4eac6
0x00000000
0x00a4eac8
0x00a4eac9
0x00a4eace
0x00a4ead1
0x00a4ead9
0x00a4eade
0x00a4eae0
0x00a4eae7
0x00a4eaea
0x00a4eaea
0x00a4eaf0
0x00a4eaf0
0x00a4eac6
0x00a4eac0
0x00a4eb04
0x00a4eb08
0x00a4eb0b
0x00a4eb11
0x00a4eb13
0x00a4eb1a
0x00a4eb1a
0x00a4eb1d
0x00a4eb1f
0x00a4eb23
0x00a4eb49
0x00a4eb4d
0x00a4eb50
0x00a4eb57
0x00a4eb5a
0x00a4eb5c
0x00a4eb5e
0x00a4eb62
0x00a4eb96
0x00a4eb96
0x00a4eb9c
0x00a4eb64
0x00a4eb66
0x00a4eb68
0x00000000
0x00a4eb6a
0x00a4eb6b
0x00a4eb73
0x00a4eb7b
0x00a4eb80
0x00a4eb82
0x00a4eb89
0x00a4eb8c
0x00a4eb8c
0x00a4eb92
0x00a4eb92
0x00a4eb68
0x00a4eb62
0x00a4eba4
0x00a4eba8
0x00a4ebab
0x00a4ebb1
0x00a4ebb3
0x00a4ebba
0x00a4ebba
0x00a4ebb3
0x00a4eb23
0x00a4ea81
0x00a4ebc2
0x00a4ebd0
0x00a4ebd0
0x00a4e4de
0x00a4e4e8
0x00a4e4eb
0x00a4e4ee
0x00a4e4f2
0x00a4e4f2
0x00a4e4f7
0x00a4e4ff
0x00a4e506
0x00a4e506
0x00a4e509
0x00a4e839
0x00a4e83e
0x00a4e842
0x00a4e845
0x00a4e84d
0x00a4e854
0x00a4e854
0x00a4e85a
0x00a4e861
0x00a4e864
0x00a4e86c
0x00a4e873
0x00a4e873
0x00a4e87b
0x00a4e889
0x00a4e889
0x00a4e4d8
0x00a4e493
0x00a4e43a
0x00a4e40a
0x00a4e3cd
0x00a4e386

APIs

Part of subcall function 00A445F0: GetProcessHeap.KERNEL32(00A75638,5CC80E5B), ref: 00A44601

Concurrency::cancel_current_task.LIBCPMT ref: 00A4E89E
Concurrency::cancel_current_task.LIBCPMT ref: 00A4E8B7
Concurrency::cancel_current_task.LIBCPMT ref: 00A4E8BC
Concurrency::cancel_current_task.LIBCPMT ref: 00A4E8CB
Concurrency::cancel_current_task.LIBCPMT ref: 00A4E8D0

Strings

Setup Path, xrefs: 00A4E937, 00A4EA8C
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\360wpapp.exe, xrefs: 00A4E9EF
CInstallHelper::_GetConfigInfoFromServer, xrefs: 00A4E328
SOFTWARE\Ludashi, xrefs: 00A4E93C
Path, xrefs: 00A4E9EA
Software\LDSGameMaster, xrefs: 00A4EA91

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Concurrency::cancel_current_task$HeapProcess
String ID: CInstallHelper::_GetConfigInfoFromServer$Path$SOFTWARE\Ludashi$SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\360wpapp.exe$Setup Path$Software\LDSGameMaster
API String ID: 570625627-3542375673
Opcode ID: f2d502187c7af0fe130ad1948d71e1b6e9031648a09c4e474c123860b6bab73e
Instruction ID: ed9d40b9c3ea2df6e17ec620e882eb2ca6f18be966b3a3d716892d81d0ba8079
Opcode Fuzzy Hash: f2d502187c7af0fe130ad1948d71e1b6e9031648a09c4e474c123860b6bab73e
Instruction Fuzzy Hash: 53710375A00249EFEB00EFA8DD49B5EB7F4FB44710F108269E915A7292DBB49900CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A96CC0, Relevance: 21.2, APIs: 8, Strings: 4, Instructions: 183
memoryCOMMON

Download Yara Rule

C-Code - Quality: 39%

			E00A96CC0(void* __ecx, void* __edi, signed int _a4) {
				char _v0;
				struct HWND__* _v12;
				char _v16;
				struct HWND__* _v20;
				struct HWND__* _v24;
				void* _v28;
				void* _v32;
				struct HWND__* _v36;
				void* __esi;
				signed int _t52;
				signed int _t56;
				struct HWND__* _t58;
				intOrPtr* _t62;
				intOrPtr _t70;
				struct HWND__* _t72;
				void* _t78;
				intOrPtr* _t80;
				struct HWND__* _t86;
				intOrPtr* _t88;
				signed int _t89;
				intOrPtr _t97;
				intOrPtr* _t100;
				intOrPtr* _t101;
				struct HWND__* _t104;
				void* _t105;
				void* _t107;
				signed int _t110;

				_t89 = _a4;
				_t52 = 0 | _t89 != 0x00000000;
				 *(__ecx + 0xec4) = _t52;
				_a4 = (_t52 & 0xffffff00 | _t89 != 0x00000000) & 0x000000ff;
				_t107 = _t105;
				_push(_t107);
				_push(0xffffffff);
				_push(0xb28bf8);
				_push( *[fs:0x0]);
				_t56 =  *0xb6aa7c; // 0x5cc80e5b
				_push(_t56 ^ _t110);
				_t58 =  &_v16;
				 *[fs:0x0] = _t58;
				_t80 =  *((intOrPtr*)(__ecx + 0x618));
				if(_t80 == 0) {
					L20:
					 *[fs:0x0] = _v20;
					return _t58;
				} else {
					_v36 = 0;
					_v12 = 0;
					 *((intOrPtr*)( *_t80 + 0x48))(_t80,  &_v36);
					_t58 = _v36;
					if(_t58 == 0) {
						L18:
						_v12 = 0xffffffff;
						if(_t58 != 0) {
							_t58 =  *((intOrPtr*)(_t58->i + 8))(_t58);
						}
						goto L20;
					} else {
						_v24 = 0;
						 *(_t58->i)(_t58, 0xb3a9fc,  &_v24);
						_t86 =  <  ? 0 : _v24;
						_v24 = _t86;
						_t62 = 0;
						_v28 = 0;
						_t100 = 0;
						_v32 = 0;
						_v12 = 3;
						if(_t86 == 0) {
							L11:
							_v12 = 2;
							if(_t100 != 0) {
								 *((intOrPtr*)( *_t100 + 8))(_t100);
								_t86 = _v24;
								_t62 = _v28;
							}
							_v12 = 1;
							if(_t62 != 0) {
								 *((intOrPtr*)( *_t62 + 8))(_t62);
								_t86 = _v24;
							}
							_v12 = 0;
							if(_t86 != 0) {
								 *((intOrPtr*)(_t86->i + 8))(_t86);
							}
							_t58 = _v36;
							goto L18;
						} else {
							 *((intOrPtr*)(_t86->i + 0x24))(_t86,  &_v28);
							_t62 = _v28;
							if(_t62 == 0) {
								L9:
								_t100 = _v32;
								goto L10;
							} else {
								_t88 =  *_t62;
								_t70 =  *_t88(_t62, 0xb3a9ec,  &_v32);
								_t100 = _v32;
								if(_t100 == 0) {
									_t62 = _v28;
									L10:
									_t86 = _v24;
									goto L11;
								} else {
									if(_v0 == 0) {
										__imp__#2(0xb2d980);
										_t97 = _t70;
										_v0 = _t97;
										if(_t97 == 0) {
											_push(0x8007000e);
											E00A43FD0(_t78, _t97, _t100);
											asm("int3");
											asm("int3");
											asm("int3");
											_push(_t100);
											_t101 = _t88;
											_t72 =  *(_t101 + 0x5fc);
											if(_t72 != 0) {
												_t72 = IsWindow(_t72);
												if(_t72 != 0) {
													_t72 = FindWindowExW( *(_t101 + 0x5fc), 0, L"Shell Embedding", 0);
													if(_t72 != 0) {
														_t72 = FindWindowExW(_t72, 0, L"Shell DocObject View", 0);
														if(_t72 != 0) {
															_t72 = FindWindowExW(_t72, 0, L"Internet Explorer_Server", 0);
															_t104 = _t72;
															if(_t104 != 0) {
																_t72 = SetWindowLongW(_t104, 0xffffffec, GetWindowLongW(_t104, 0xffffffec));
															}
														}
													}
												}
											}
											return _t72;
										} else {
											_v12 = 4;
											 *((intOrPtr*)( *_t100 + 0x8c))(_t100, _t97);
											__imp__#6(_t97);
											goto L8;
										}
									} else {
										 *((intOrPtr*)( *_t100 + 0x8c))(_t100, L"auto");
										L8:
										_t62 = _v28;
										goto L9;
									}
								}
							}
						}
					}
				}
			}

0x00a96cc3
0x00a96cca
0x00a96ccf
0x00a96cdb
0x00a96cde
0x00a971b0
0x00a971b3
0x00a971b5
0x00a971c0
0x00a971c6
0x00a971cd
0x00a971ce
0x00a971d1
0x00a971d7
0x00a971df
0x00a972ca
0x00a972cd
0x00a972da
0x00a971e5
0x00a971e5
0x00a971f3
0x00a971fa
0x00a971fd
0x00a97202
0x00a972b9
0x00a972b9
0x00a972c2
0x00a972c7
0x00a972c7
0x00000000
0x00a97208
0x00a9720b
0x00a9721b
0x00a97224
0x00a97227
0x00a9722a
0x00a9722c
0x00a9722f
0x00a97231
0x00a97234
0x00a9723a
0x00a97283
0x00a97283
0x00a97289
0x00a9728e
0x00a97291
0x00a97294
0x00a97294
0x00a97297
0x00a9729d
0x00a972a2
0x00a972a5
0x00a972a5
0x00a972a8
0x00a972ae
0x00a972b3
0x00a972b3
0x00a972b6
0x00000000
0x00a9723c
0x00a97243
0x00a97246
0x00a9724b
0x00a9727d
0x00a9727d
0x00000000
0x00a9724d
0x00a9724d
0x00a97259
0x00a9725b
0x00a97260
0x00a9730b
0x00a97280
0x00a97280
0x00000000
0x00a97266
0x00a9726a
0x00a972e2
0x00a972e8
0x00a972ea
0x00a972ef
0x00a97313
0x00a97318
0x00a9731d
0x00a9731e
0x00a9731f
0x00a97320
0x00a97321
0x00a97323
0x00a9732b
0x00a9732e
0x00a97336
0x00a9734d
0x00a97351
0x00a9735d
0x00a97361
0x00a9736d
0x00a9736f
0x00a97373
0x00a97382
0x00a97382
0x00a97373
0x00a97361
0x00a97351
0x00a97336
0x00a97389
0x00a972f1
0x00a972f5
0x00a972f9
0x00a97300
0x00000000
0x00a97300
0x00a9726c
0x00a97274
0x00a9727a
0x00a9727a
0x00000000
0x00a9727a
0x00a9726a
0x00a97260
0x00a9724b
0x00a9723a
0x00a97202

APIs

SysAllocString.OLEAUT32(00B2D980), ref: 00A972E2
SysFreeString.OLEAUT32(00000000), ref: 00A97300
IsWindow.USER32(?), ref: 00A9732E
FindWindowExW.USER32 ref: 00A9734D
FindWindowExW.USER32 ref: 00A9735D
FindWindowExW.USER32 ref: 00A9736D
GetWindowLongW.USER32(00000000,000000EC), ref: 00A97378
SetWindowLongW.USER32 ref: 00A97382

Strings

auto, xrefs: 00A9726E
Shell Embedding, xrefs: 00A9733A
Shell DocObject View, xrefs: 00A97355
Internet Explorer_Server, xrefs: 00A97365

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Find$LongString$AllocFree
String ID: Internet Explorer_Server$Shell DocObject View$Shell Embedding$auto
API String ID: 3549157430-2163142597
Opcode ID: 3865f5da0a43804cc4ca88fc12c87e12f999ef4fdeca6d85e993f621eca905d3
Instruction ID: 748fc28d948471a082e1ca34462395f6b736d74edb14a8425f2d1eabb2dc6198
Opcode Fuzzy Hash: 3865f5da0a43804cc4ca88fc12c87e12f999ef4fdeca6d85e993f621eca905d3
Instruction Fuzzy Hash: C8517070A14216AFDB14CFA4C948FAFBBF8AF48710F244559F805EB290DB74A901CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00B1A954, Relevance: 19.6, APIs: 13, Instructions: 114
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00B1A954(intOrPtr _a4) {
				intOrPtr _v8;
				intOrPtr _t25;
				intOrPtr* _t26;
				intOrPtr _t28;
				intOrPtr* _t29;
				intOrPtr* _t31;
				intOrPtr* _t45;
				intOrPtr* _t46;
				intOrPtr* _t47;
				intOrPtr* _t55;
				intOrPtr* _t70;
				intOrPtr _t74;

				_t74 = _a4;
				_t25 =  *((intOrPtr*)(_t74 + 0x88));
				if(_t25 != 0 && _t25 != 0xb6bc38) {
					_t45 =  *((intOrPtr*)(_t74 + 0x7c));
					if(_t45 != 0 &&  *_t45 == 0) {
						_t46 =  *((intOrPtr*)(_t74 + 0x84));
						if(_t46 != 0 &&  *_t46 == 0) {
							E00B10176(_t46);
							E00B19D7C( *((intOrPtr*)(_t74 + 0x88)));
						}
						_t47 =  *((intOrPtr*)(_t74 + 0x80));
						if(_t47 != 0 &&  *_t47 == 0) {
							E00B10176(_t47);
							E00B1A236( *((intOrPtr*)(_t74 + 0x88)));
						}
						E00B10176( *((intOrPtr*)(_t74 + 0x7c)));
						E00B10176( *((intOrPtr*)(_t74 + 0x88)));
					}
				}
				_t26 =  *((intOrPtr*)(_t74 + 0x8c));
				if(_t26 != 0 &&  *_t26 == 0) {
					E00B10176( *((intOrPtr*)(_t74 + 0x90)) - 0xfe);
					E00B10176( *((intOrPtr*)(_t74 + 0x94)) - 0x80);
					E00B10176( *((intOrPtr*)(_t74 + 0x98)) - 0x80);
					E00B10176( *((intOrPtr*)(_t74 + 0x8c)));
				}
				E00B1AAC7( *((intOrPtr*)(_t74 + 0x9c)));
				_t28 = 6;
				_t55 = _t74 + 0xa0;
				_v8 = _t28;
				_t70 = _t74 + 0x28;
				do {
					if( *((intOrPtr*)(_t70 - 8)) != 0xb6bd78) {
						_t31 =  *_t70;
						if(_t31 != 0 &&  *_t31 == 0) {
							E00B10176(_t31);
							E00B10176( *_t55);
						}
						_t28 = _v8;
					}
					if( *((intOrPtr*)(_t70 - 0xc)) != 0) {
						_t29 =  *((intOrPtr*)(_t70 - 4));
						if(_t29 != 0 &&  *_t29 == 0) {
							E00B10176(_t29);
						}
						_t28 = _v8;
					}
					_t55 = _t55 + 4;
					_t70 = _t70 + 0x10;
					_t28 = _t28 - 1;
					_v8 = _t28;
				} while (_t28 != 0);
				return E00B10176(_t74);
			}

0x00b1a95c
0x00b1a960
0x00b1a968
0x00b1a971
0x00b1a976
0x00b1a97d
0x00b1a985
0x00b1a98d
0x00b1a998
0x00b1a99e
0x00b1a99f
0x00b1a9a7
0x00b1a9af
0x00b1a9ba
0x00b1a9c0
0x00b1a9c4
0x00b1a9cf
0x00b1a9d5
0x00b1a976
0x00b1a9d6
0x00b1a9de
0x00b1a9f1
0x00b1aa04
0x00b1aa12
0x00b1aa1d
0x00b1aa22
0x00b1aa2b
0x00b1aa33
0x00b1aa34
0x00b1aa3a
0x00b1aa3d
0x00b1aa40
0x00b1aa47
0x00b1aa49
0x00b1aa4d
0x00b1aa55
0x00b1aa5c
0x00b1aa62
0x00b1aa63
0x00b1aa63
0x00b1aa6a
0x00b1aa6c
0x00b1aa71
0x00b1aa79
0x00b1aa7e
0x00b1aa7f
0x00b1aa7f
0x00b1aa82
0x00b1aa85
0x00b1aa88
0x00b1aa8b
0x00b1aa8b
0x00b1aa9d

APIs

___free_lconv_mon.LIBCMT ref: 00B1A998

Part of subcall function 00B19D7C: _free.LIBCMT ref: 00B19D99
Part of subcall function 00B19D7C: _free.LIBCMT ref: 00B19DAB
Part of subcall function 00B19D7C: _free.LIBCMT ref: 00B19DBD
Part of subcall function 00B19D7C: _free.LIBCMT ref: 00B19DCF
Part of subcall function 00B19D7C: _free.LIBCMT ref: 00B19DE1
Part of subcall function 00B19D7C: _free.LIBCMT ref: 00B19DF3
Part of subcall function 00B19D7C: _free.LIBCMT ref: 00B19E05
Part of subcall function 00B19D7C: _free.LIBCMT ref: 00B19E17
Part of subcall function 00B19D7C: _free.LIBCMT ref: 00B19E29
Part of subcall function 00B19D7C: _free.LIBCMT ref: 00B19E3B
Part of subcall function 00B19D7C: _free.LIBCMT ref: 00B19E4D
Part of subcall function 00B19D7C: _free.LIBCMT ref: 00B19E5F
Part of subcall function 00B19D7C: _free.LIBCMT ref: 00B19E71

_free.LIBCMT ref: 00B1A98D

Part of subcall function 00B10176: RtlFreeHeap.NTDLL(00000000,00000000,?,00B1A4E9,?,00000000,?,00000000,?,00B1A78D,?,00000007,?,?,00B1AAEC,?), ref: 00B1018C
Part of subcall function 00B10176: GetLastError.KERNEL32(?,?,00B1A4E9,?,00000000,?,00000000,?,00B1A78D,?,00000007,?,?,00B1AAEC,?,?), ref: 00B1019E

_free.LIBCMT ref: 00B1A9AF
_free.LIBCMT ref: 00B1A9C4
_free.LIBCMT ref: 00B1A9CF
_free.LIBCMT ref: 00B1A9F1
_free.LIBCMT ref: 00B1AA04
_free.LIBCMT ref: 00B1AA12
_free.LIBCMT ref: 00B1AA1D
_free.LIBCMT ref: 00B1AA55
_free.LIBCMT ref: 00B1AA5C
_free.LIBCMT ref: 00B1AA79
_free.LIBCMT ref: 00B1AA91

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID:
API String ID: 161543041-0
Opcode ID: 5af7992bcf85f298cd6a308fc46255df8505c65fa29fbd9a1259d713c88abe11
Instruction ID: f4cbd4ab0f5e51d4011740a576a3e39cb458722b77fe2900fa7c738bd9b90074
Opcode Fuzzy Hash: 5af7992bcf85f298cd6a308fc46255df8505c65fa29fbd9a1259d713c88abe11
Instruction Fuzzy Hash: D9315C32611600AFEB31AA38D945BDBB3E8EF04350F9088AAF159D6161EF75BDD0CB11

Uniqueness

Uniqueness Score: -1.00%

Function 6B59C026, Relevance: 19.6, APIs: 13, Instructions: 114COMMON

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 6B59C06A

Part of subcall function 6B59E1FC: _free.LIBCMT ref: 6B59E219
Part of subcall function 6B59E1FC: _free.LIBCMT ref: 6B59E22B
Part of subcall function 6B59E1FC: _free.LIBCMT ref: 6B59E23D
Part of subcall function 6B59E1FC: _free.LIBCMT ref: 6B59E24F
Part of subcall function 6B59E1FC: _free.LIBCMT ref: 6B59E261
Part of subcall function 6B59E1FC: _free.LIBCMT ref: 6B59E273
Part of subcall function 6B59E1FC: _free.LIBCMT ref: 6B59E285
Part of subcall function 6B59E1FC: _free.LIBCMT ref: 6B59E297
Part of subcall function 6B59E1FC: _free.LIBCMT ref: 6B59E2A9
Part of subcall function 6B59E1FC: _free.LIBCMT ref: 6B59E2BB
Part of subcall function 6B59E1FC: _free.LIBCMT ref: 6B59E2CD
Part of subcall function 6B59E1FC: _free.LIBCMT ref: 6B59E2DF
Part of subcall function 6B59E1FC: _free.LIBCMT ref: 6B59E2F1

_free.LIBCMT ref: 6B59C05F

Part of subcall function 6B5990E5: HeapFree.KERNEL32(00000000,00000000,?,6B59E391,?,00000000,?,00000000,?,6B59E3B8,?,00000007,?,?,6B59C1BE,?), ref: 6B5990FB
Part of subcall function 6B5990E5: GetLastError.KERNEL32(?,?,6B59E391,?,00000000,?,00000000,?,6B59E3B8,?,00000007,?,?,6B59C1BE,?,?), ref: 6B59910D

_free.LIBCMT ref: 6B59C081
_free.LIBCMT ref: 6B59C096
_free.LIBCMT ref: 6B59C0A1
_free.LIBCMT ref: 6B59C0C3
_free.LIBCMT ref: 6B59C0D6
_free.LIBCMT ref: 6B59C0E4
_free.LIBCMT ref: 6B59C0EF
_free.LIBCMT ref: 6B59C127
_free.LIBCMT ref: 6B59C12E
_free.LIBCMT ref: 6B59C14B
_free.LIBCMT ref: 6B59C163

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID:
API String ID: 161543041-0
Opcode ID: f21cb716f497a08530401712361971a80136dd7ff71a573ca26d08e990794874
Instruction ID: ff34265116f39c2d7bbb4aca88456ef7cac016ffec3e67a4db4687a34b33cee9
Opcode Fuzzy Hash: f21cb716f497a08530401712361971a80136dd7ff71a573ca26d08e990794874
Instruction Fuzzy Hash: 22313D31A042819FFB22AB78FC49BDA73E8AF80354F108859E068D7151DF39A880DB14

Uniqueness

Uniqueness Score: -1.00%

Function 00A909F0, Relevance: 19.6, APIs: 13, Instructions: 87
windowCOMMON

Download Yara Rule

C-Code - Quality: 87%

			E00A909F0(intOrPtr __ecx) {
				int _v8;
				intOrPtr _v12;
				struct HWND__* _v16;
				struct tagMSG _v40;
				int _t42;
				intOrPtr _t47;
				struct HWND__* _t48;
				struct HWND__* _t51;

				_t47 = __ecx;
				_v8 = 0;
				_v12 = __ecx;
				_t51 = GetWindow( *(__ecx + 4), 4);
				ShowWindow( *(_t47 + 4), 1);
				EnableWindow(_t51, 0);
				_t48 =  *(_t47 + 4);
				asm("xorps xmm0, xmm0");
				asm("movups [ebp-0x24], xmm0");
				_t42 = 0;
				_v16 = 0;
				asm("movq [ebp-0x14], xmm0");
				if(IsWindow(_t48) != 0) {
					while(GetMessageW( &_v40, 0, 0, 0) != 0) {
						if(_v40.message == 0x10 && _v40.hwnd == _t48) {
							_v8 = _v40.wParam;
							EnableWindow(_t51, 1);
							SetFocus(_t51);
							_t42 = 1;
						}
						if(E00A8FC00( *((intOrPtr*)(_v12 + 0x10)),  &_v40) == 0) {
							TranslateMessage( &_v40);
							DispatchMessageW( &_v40);
						}
						if(_v40.message != 0x12 && _t42 == 0 && IsWindow(_t48) != 0) {
							continue;
						}
						goto L11;
					}
				}
				L11:
				EnableWindow(_t51, 1);
				SetFocus(_t51);
				if(_v40.message == 0x12) {
					PostQuitMessage(_v40.wParam);
				}
				return _v8;
			}

0x00a909f9
0x00a909fb
0x00a90a04
0x00a90a15
0x00a90a17
0x00a90a20
0x00a90a26
0x00a90a29
0x00a90a2d
0x00a90a31
0x00a90a33
0x00a90a3a
0x00a90a47
0x00a90a50
0x00a90a68
0x00a90a75
0x00a90a78
0x00a90a7f
0x00a90a85
0x00a90a85
0x00a90a9b
0x00a90aa1
0x00a90aab
0x00a90aab
0x00a90ab5
0x00000000
0x00000000
0x00000000
0x00a90ab5
0x00a90a50
0x00a90ac6
0x00a90ac9
0x00a90ad0
0x00a90add
0x00a90ae2
0x00a90ae2
0x00a90aee

APIs

GetWindow.USER32(?,00000004), ref: 00A90A0A
ShowWindow.USER32(?,00000001,?,?,?,?,?,00A4504D), ref: 00A90A17
EnableWindow.USER32(00000000,00000000), ref: 00A90A20
IsWindow.USER32(?), ref: 00A90A3F
GetMessageW.USER32(?,00000000,00000000,00000000), ref: 00A90A5A
EnableWindow.USER32(00000000,00000001), ref: 00A90A78
SetFocus.USER32(00000000), ref: 00A90A7F
TranslateMessage.USER32(?), ref: 00A90AA1
DispatchMessageW.USER32 ref: 00A90AAB
IsWindow.USER32(?), ref: 00A90ABC
EnableWindow.USER32(00000000,00000001), ref: 00A90AC9
SetFocus.USER32(00000000,?,?,?,?,?,00A4504D), ref: 00A90AD0
PostQuitMessage.USER32(?), ref: 00A90AE2

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Message$Enable$Focus$DispatchPostQuitShowTranslate
String ID:
API String ID: 200552106-0
Opcode ID: 19012fcf8904b30e47fa7bd44ff40cdd495882090706203b4b431bcfbb9e446b
Instruction ID: 09a5076a3bb5d2a290ac703b13f70bfc7b54dad962a234caa5133f762e8f92ea
Opcode Fuzzy Hash: 19012fcf8904b30e47fa7bd44ff40cdd495882090706203b4b431bcfbb9e446b
Instruction Fuzzy Hash: 1C313871A00308AFDF20DBA49D48BAEBBB8BF29785F200165F501A3150DBB5A941CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00A9EF00, Relevance: 16.1, APIs: 3, Strings: 6, Instructions: 365
COMMON

Download Yara Rule

C-Code - Quality: 88%

			E00A9EF00(intOrPtr* __ecx, signed int _a4, signed int _a8) {
				intOrPtr* _v8;
				signed int _v12;
				signed int _v16;
				WCHAR* _v20;
				signed int _t61;
				signed short _t63;
				void* _t67;
				signed int _t73;
				signed int _t74;
				signed int _t75;
				signed int _t77;
				WCHAR* _t78;
				signed int _t86;
				WCHAR* _t89;
				signed short* _t95;
				signed int _t99;
				signed short* _t100;
				WCHAR* _t102;
				signed int _t109;
				signed short* _t113;
				signed int _t116;
				signed short _t123;
				signed int _t124;
				signed int _t125;
				signed short* _t126;
				intOrPtr* _t127;
				signed short _t129;
				signed int _t130;
				signed short _t132;
				signed int _t133;
				signed int _t135;
				signed int _t136;
				signed int* _t141;
				signed int _t142;
				signed int _t144;
				WCHAR* _t147;
				signed int _t152;
				WCHAR* _t158;
				signed int _t167;
				signed int _t169;
				intOrPtr* _t170;
				WCHAR* _t171;
				signed int _t173;
				signed int _t174;
				signed int _t175;
				signed int _t176;
				signed int _t179;
				signed short* _t182;
				signed int _t183;
				WCHAR* _t184;
				signed int _t187;
				signed int _t190;
				WCHAR** _t192;
				void* _t193;

				_t170 = CharNextW;
				_t192 = _a4;
				_t127 = __ecx;
				_v8 = __ecx;
				_t182 =  *_t192;
				_t61 =  *_t182 & 0x0000ffff;
				if(_t61 != 0) {
					while(_t61 <= 0x20) {
						_t126 =  *_t170(_t182);
						_t170 = CharNextW;
						_t182 = _t126;
						 *_t192 = _t182;
						_t169 =  *_t182 & 0x0000ffff;
						_t61 = _t169;
						if(_t169 != 0) {
							continue;
						}
						goto L3;
					}
				}
				L3:
				_v16 = 0;
				while(1) {
					_t183 =  *_t192;
					_t63 =  *_t183 & 0x0000ffff;
					_t132 = _t63;
					_a4 = _t132;
					if(_t63 == 0 && _a8 <= 1) {
						break;
					}
					_t133 = _t132 & 0x0000ffff;
					if(_t63 != 0) {
						_t130 = _t183;
						_t123 = _a4 & 0x0000ffff;
						while(1) {
							_t124 = _t123 & 0x0000ffff;
							_t183 = _t130;
							_t133 = _t124;
							if(_t124 > 0x20) {
								break;
							}
							_t125 =  *_t170(_t130);
							_t183 = _t125;
							_t130 = _t125;
							 *_t192 = _t183;
							_t174 =  *_t183 & 0x0000ffff;
							_t133 = _t174;
							_t170 = CharNextW;
							_t123 = _t133;
							if(_t174 != 0) {
								continue;
							}
							break;
						}
						_t127 = _v8;
					}
					if(_t133 != 0x3c) {
						E00AFBA11(_t127 + 0x10, L"Expected start tag", 0x63);
						__eflags = _t183;
						_t67 =  !=  ? _t183 : 0xb2daf8;
						goto L60;
					} else {
						if( *((short*)(_t183 + 2)) == 0x2f) {
							break;
						} else {
							 *_t183 = 0;
							 *_t192 =  &(( *_t192)[1]);
							_t171 =  *_t192;
							_t73 =  *_t171 & 0x0000ffff;
							if(_t73 != 0) {
								while(_t73 <= 0x20) {
									_t171 = CharNextW(_t171);
									 *_t192 = _t171;
									_t167 =  *_t171 & 0x0000ffff;
									_t73 = _t167;
									if(_t167 != 0) {
										continue;
									}
									goto L18;
								}
							}
							L18:
							_t184 =  *_t192;
							_t74 =  *_t184 & 0x0000ffff;
							_t135 = _t74;
							if(_t74 == 0x21 || _t74 == 0x3f) {
								__eflags = _t74 - 0x21;
								_t173 =  ==  ? 0x2d : _t74;
								_t129 = _t135;
								_a4 = _t173;
								__eflags = _t74;
								if(_t74 != 0) {
									_t78 = _t184;
									do {
										_t135 = _t129 & 0x0000ffff;
										__eflags = _t135 - _t173;
										if(_t135 != _t173) {
											goto L44;
										} else {
											__eflags = _t78[1] - 0x3e;
											_t184 = _t78;
											if(_t78[1] != 0x3e) {
												goto L44;
											}
										}
										goto L45;
										L44:
										_t78 = CharNextW(_t78);
										_t184 = _t78;
										 *_t192 = _t184;
										_t175 =  *_t184 & 0x0000ffff;
										_t135 = _t175;
										__eflags = _t175;
										_t173 = _a4;
										_t129 = _t135;
									} while (_t175 != 0);
								}
								L45:
								__eflags = _t135;
								if(_t135 != 0) {
									_t184 =  &(_t184[2]);
									__eflags = _t184;
									 *_t192 = _t184;
								}
								_t75 =  *_t184 & 0x0000ffff;
								_t127 = _v8;
								_t136 = _t75;
								__eflags = _t75;
								if(_t75 != 0) {
									asm("o16 nop [eax+eax]");
									while(1) {
										_t127 = _v8;
										__eflags = _t136 - 0x20;
										if(_t136 > 0x20) {
											goto L4;
										}
										_t184 = CharNextW(_t184);
										 *_t192 = _t184;
										_t77 =  *_t184 & 0x0000ffff;
										_t136 = _t77;
										__eflags = _t77;
										if(_t77 != 0) {
											continue;
										} else {
											goto L4;
										}
										goto L62;
									}
								}
								goto L4;
							} else {
								E00A9F830(_t192);
								_t176 = E00A9F790(_t127);
								_a4 = _t176;
								_t141 = _a4;
								_t178 = 0x66666667 * (_t176 -  *((intOrPtr*)(_t127 + 4))) >> 0x20 >> 3;
								 *_t141 =  *_t192 -  *_t127 >> 1;
								_t187 = (0x66666667 * (_t176 -  *((intOrPtr*)(_t127 + 4))) >> 0x20 >> 3 >> 0x1f) + (0x66666667 * (_t176 -  *((intOrPtr*)(_t127 + 4))) >> 0x20 >> 3);
								_t86 = _a8;
								_t141[3] = _t86;
								_t141[1] = 0;
								_t141[2] = 0;
								_t142 = _v16;
								if(_t142 == 0) {
									__eflags = _t86;
									if(_t86 != 0) {
										 *( *((intOrPtr*)(_t127 + 4)) + 4 + (_t86 + _t86 * 4) * 4) = _t187;
									}
								} else {
									 *( *((intOrPtr*)(_t127 + 4)) + 8 + (_t142 + _t142 * 4) * 4) = _t187;
								}
								_v16 = _t187;
								_v20 =  *_t192;
								E00A9F7E0(_t192);
								_t89 =  *_t192;
								_v12 = _t89;
								if( *_t89 == 0) {
									_t57 = _t127 + 0x10; // 0x10
									E00AFBA11(_t57, L"Error parsing element name", 0x63);
									_t144 = _v12;
									__eflags = _t144;
									_t67 =  !=  ? _t144 : 0xb2daf8;
									L60:
									_t60 = _t127 + 0xd8; // 0xd8
									E00AFBA11(_t60, _t67, 0x31);
									goto L61;
								} else {
									if(E00A9F390(_t127, _t178, _t192) == 0) {
										L61:
										__eflags = 0;
										return 0;
									} else {
										E00A9F830(_t192);
										_t95 =  *_t192;
										_t179 =  *_t95 & 0x0000ffff;
										_t36 =  &(_t95[1]); // 0x2
										_t147 = _t36;
										if(_t179 != 0x2f ||  *_t147 != 0x3e) {
											__eflags = _t179 - 0x3e;
											if(__eflags != 0) {
												return E00A9ED90(_t127, __eflags, L"Expected start-tag closing", _t95);
											} else {
												 *_t192 = _t147;
												 *((intOrPtr*)(_a4 + 0x10)) = _t147 -  *_t127 >> 1;
												_a4 =  *_t192;
												_t99 = L00A9F580(_t127, _t192,  &_a4, 0x3c);
												__eflags = _t99;
												if(_t99 == 0) {
													goto L61;
												} else {
													_t100 =  *_t192;
													_t152 =  *_t100 & 0x0000ffff;
													__eflags = _t152;
													if(_t152 == 0) {
														__eflags = _a8 - 1;
														if(__eflags <= 0) {
															break;
														} else {
															goto L55;
														}
													} else {
														__eflags = _t152 - 0x3c;
														if(__eflags != 0) {
															L55:
															return E00A9ED90(_t127, __eflags, L"Expected end-tag start", _t100);
														} else {
															__eflags = _t100[1] - 0x2f;
															if(_t100[1] == 0x2f) {
																L35:
																_t102 =  *_t192;
																__eflags =  *_t102 - 0x3c;
																if( *_t102 != 0x3c) {
																	goto L39;
																} else {
																	__eflags = _t102[1] - 0x2f;
																	if(_t102[1] != 0x2f) {
																		goto L39;
																	} else {
																		 *_a4 = 0;
																		 *( *_t192) = 0;
																		 *_t192 =  &(( *_t192)[2]);
																		E00A9F830(_t192);
																		_t190 = _v12 - _v20 >> 1;
																		_t109 = E00AFBC38( *_t192, _v20, _t190);
																		_t158 =  *_t192;
																		_t193 = _t193 + 0xc;
																		__eflags = _t109;
																		if(__eflags != 0) {
																			return E00A9ED90(_t127, __eflags, L"Unmatched closing tag", _t158);
																		} else {
																			 *_t192 =  &(_t158[_t190]);
																			E00A9F830(_t192);
																			_t113 =  *_t192;
																			_t114 =  &(_t113[1]);
																			 *_t192 =  &(_t113[1]);
																			__eflags = ( *_t113 & 0x0000ffff) - 0x3e;
																			if(__eflags != 0) {
																				return E00A9ED90(_t127, __eflags, L"Unmatched closing tag", _t114);
																			} else {
																				goto L39;
																			}
																		}
																	}
																}
															} else {
																_t116 = E00A9EF00(_t127, _t192, _t187);
																__eflags = _t116;
																if(_t116 == 0) {
																	goto L61;
																} else {
																	goto L35;
																}
															}
														}
													}
												}
											}
										} else {
											 *(_a4 + 0x10) = _t95 -  *_t127 >> 1;
											 *( *_t192) = 0;
											 *_t192 =  &(( *_t192)[2]);
											L39:
											 *_v12 = 0;
											E00A9F830(_t192);
											L4:
											_t170 = CharNextW;
											continue;
										}
									}
								}
							}
						}
					}
					L62:
				}
				return 1;
				goto L62;
			}

0x00a9ef06
0x00a9ef0e
0x00a9ef11
0x00a9ef14
0x00a9ef17
0x00a9ef19
0x00a9ef1f
0x00a9ef21
0x00a9ef28
0x00a9ef2a
0x00a9ef30
0x00a9ef32
0x00a9ef34
0x00a9ef37
0x00a9ef3c
0x00000000
0x00000000
0x00000000
0x00a9ef3c
0x00a9ef21
0x00a9ef3e
0x00a9ef40
0x00a9ef50
0x00a9ef50
0x00a9ef52
0x00a9ef55
0x00a9ef57
0x00a9ef5d
0x00000000
0x00000000
0x00a9ef69
0x00a9ef6f
0x00a9ef74
0x00a9ef76
0x00a9ef80
0x00a9ef80
0x00a9ef83
0x00a9ef85
0x00a9ef8a
0x00000000
0x00000000
0x00a9ef8d
0x00a9ef8f
0x00a9ef91
0x00a9ef93
0x00a9ef95
0x00a9ef98
0x00a9ef9d
0x00a9efa3
0x00a9efa5
0x00000000
0x00000000
0x00000000
0x00a9efa5
0x00a9efa7
0x00a9efa7
0x00a9efae
0x00a9f2da
0x00a9f2df
0x00a9f2e6
0x00000000
0x00a9efb4
0x00a9efb9
0x00000000
0x00a9efbf
0x00a9efc1
0x00a9efc4
0x00a9efc7
0x00a9efc9
0x00a9efd1
0x00a9efe0
0x00a9efe9
0x00a9efeb
0x00a9efed
0x00a9eff0
0x00a9eff5
0x00000000
0x00000000
0x00000000
0x00a9eff5
0x00a9efe0
0x00a9eff7
0x00a9eff7
0x00a9eff9
0x00a9effc
0x00a9f001
0x00a9f1b8
0x00a9f1c2
0x00a9f1c5
0x00a9f1c7
0x00a9f1ca
0x00a9f1cd
0x00a9f1cf
0x00a9f1d1
0x00a9f1d1
0x00a9f1d4
0x00a9f1d7
0x00000000
0x00a9f1d9
0x00a9f1d9
0x00a9f1de
0x00a9f1e0
0x00000000
0x00000000
0x00a9f1e0
0x00000000
0x00a9f1e2
0x00a9f1e3
0x00a9f1e9
0x00a9f1eb
0x00a9f1ed
0x00a9f1f0
0x00a9f1f2
0x00a9f1f5
0x00a9f1f8
0x00a9f1f8
0x00a9f1d1
0x00a9f1fc
0x00a9f1fc
0x00a9f1ff
0x00a9f201
0x00a9f201
0x00a9f204
0x00a9f204
0x00a9f206
0x00a9f209
0x00a9f20c
0x00a9f20e
0x00a9f211
0x00a9f217
0x00a9f220
0x00a9f220
0x00a9f223
0x00a9f227
0x00000000
0x00000000
0x00a9f234
0x00a9f236
0x00a9f238
0x00a9f23b
0x00a9f23d
0x00a9f240
0x00000000
0x00a9f242
0x00000000
0x00a9f242
0x00000000
0x00a9f240
0x00a9f220
0x00000000
0x00a9f010
0x00a9f013
0x00a9f01f
0x00a9f028
0x00a9f034
0x00a9f037
0x00a9f041
0x00a9f043
0x00a9f045
0x00a9f048
0x00a9f04b
0x00a9f052
0x00a9f059
0x00a9f05e
0x00a9f06c
0x00a9f06e
0x00a9f076
0x00a9f076
0x00a9f060
0x00a9f066
0x00a9f066
0x00a9f07f
0x00a9f082
0x00a9f085
0x00a9f08a
0x00a9f08c
0x00a9f093
0x00a9f2a7
0x00a9f2b0
0x00a9f2b5
0x00a9f2bd
0x00a9f2bf
0x00a9f2e9
0x00a9f2ec
0x00a9f2f3
0x00000000
0x00a9f099
0x00a9f0a3
0x00a9f2fd
0x00a9f2fd
0x00a9f303
0x00a9f0a9
0x00a9f0ac
0x00a9f0b1
0x00a9f0b3
0x00a9f0b6
0x00a9f0b6
0x00a9f0bc
0x00a9f0dd
0x00a9f0e0
0x00a9f2a2
0x00a9f0e6
0x00a9f0e9
0x00a9f0ef
0x00a9f0f6
0x00a9f100
0x00a9f105
0x00a9f107
0x00000000
0x00a9f10d
0x00a9f10d
0x00a9f10f
0x00a9f112
0x00a9f115
0x00a9f273
0x00a9f277
0x00000000
0x00000000
0x00000000
0x00000000
0x00a9f11b
0x00a9f11b
0x00a9f11e
0x00a9f279
0x00a9f28c
0x00a9f124
0x00a9f124
0x00a9f129
0x00a9f13c
0x00a9f13c
0x00a9f13e
0x00a9f142
0x00000000
0x00a9f144
0x00a9f144
0x00a9f149
0x00000000
0x00a9f14b
0x00a9f151
0x00a9f156
0x00a9f15b
0x00a9f15e
0x00a9f16b
0x00a9f171
0x00a9f176
0x00a9f178
0x00a9f17b
0x00a9f17d
0x00a9f270
0x00a9f183
0x00a9f189
0x00a9f18b
0x00a9f190
0x00a9f195
0x00a9f198
0x00a9f19a
0x00a9f19d
0x00a9f25a
0x00000000
0x00000000
0x00000000
0x00a9f19d
0x00a9f17d
0x00a9f149
0x00a9f12b
0x00a9f12f
0x00a9f134
0x00a9f136
0x00000000
0x00000000
0x00000000
0x00000000
0x00a9f136
0x00a9f129
0x00a9f11e
0x00a9f115
0x00a9f107
0x00a9f0c4
0x00a9f0cd
0x00a9f0d2
0x00a9f0d5
0x00a9f1a3
0x00a9f1a9
0x00a9f1ae
0x00a9ef45
0x00a9ef45
0x00000000
0x00a9ef45
0x00a9f0bc
0x00a9f0a3
0x00a9f093
0x00a9f001
0x00a9efb9
0x00000000
0x00a9efae
0x00a9f2cc
0x00000000

APIs

CharNextW.USER32(745EEEF0,?,?,?), ref: 00A9EFE7
CharNextW.USER32(?,?,?,?,?,00A9F37C,00A9E290,00000000,?,?,00A9E290,?,?,?,?), ref: 00A9F1E3
CharNextW.USER32(?,?,?,?,?,00A9F37C,00A9E290,00000000,?,?,00A9E290,?,?,?,?), ref: 00A9F22E

Strings

Unmatched closing tag, xrefs: 00A9F248, 00A9F25E
Expected start tag, xrefs: 00A9F2D4
Expected end-tag start, xrefs: 00A9F27A
Error parsing element name, xrefs: 00A9F2AA
gfff, xrefs: 00A9F021
Expected start-tag closing, xrefs: 00A9F290

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: CharNext
String ID: Error parsing element name$Expected end-tag start$Expected start tag$Expected start-tag closing$Unmatched closing tag$gfff
API String ID: 3213498283-2742108210
Opcode ID: 6899d266bd7970622adbf6874232926c9839d0067093bbd96c5db8753a09b7a6
Instruction ID: c564fc73fe7eb839783ea2c92c73fde09389e2fb4b7043701ad76e153fdf8245
Opcode Fuzzy Hash: 6899d266bd7970622adbf6874232926c9839d0067093bbd96c5db8753a09b7a6
Instruction Fuzzy Hash: E0C18E357002059FCF24EF29C894ABAB7E5EF99350B24846EE985CB391EB71DD41CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00A45E60, Relevance: 15.9, APIs: 5, Strings: 4, Instructions: 160
COMMON

Download Yara Rule

C-Code - Quality: 72%

			E00A45E60(void* __ebx, void* __ecx, void* __edi, void* __esi, int _a4, intOrPtr _a8, intOrPtr _a12) {
				signed int _v8;
				struct tagRECT _v24;
				struct tagRECT _v40;
				int _v44;
				int _v48;
				signed int _t46;
				int _t85;
				int _t89;
				intOrPtr* _t94;
				intOrPtr* _t98;
				void* _t100;
				void* _t101;
				long _t114;
				void* _t122;
				void* _t125;
				int _t127;
				intOrPtr* _t129;
				intOrPtr* _t130;
				intOrPtr* _t131;
				signed int _t132;

				_t46 =  *0xb6aa7c; // 0x5cc80e5b
				_v8 = _t46 ^ _t132;
				_t122 = __ecx;
				_t94 =  *((intOrPtr*)(__ecx + 0x410));
				if(_t94 == 0) {
					L22:
					return E00AE4BF8(_v8 ^ _t132);
				} else {
					 *((intOrPtr*)( *_t94 + 0x3c))(__esi, __ebx);
					asm("movups xmm0, [eax]");
					asm("movups [ebp-0x14], xmm0");
					if(IsRectEmpty( &_v24) != 0) {
						_t131 = E00A8BFC0(_t122 + 0xa0, L"browser_page");
						if(_t131 != 0 &&  *((intOrPtr*)( *((intOrPtr*)( *_t131 + 0x108))))() != 0) {
							 *((intOrPtr*)( *_t131 + 0x3c))();
							asm("movups xmm0, [eax]");
							asm("movups [ebp-0x14], xmm0");
						}
					}
					if(IsRectEmpty( &_v24) != 0) {
						_t130 = E00A8BFC0(_t122 + 0xa0, L"loading_page");
						if(_t130 != 0 &&  *((intOrPtr*)( *((intOrPtr*)( *_t130 + 0x108))))() != 0) {
							 *((intOrPtr*)( *_t130 + 0x3c))();
							asm("movups xmm0, [eax]");
							asm("movups [ebp-0x14], xmm0");
						}
					}
					if(IsRectEmpty( &_v24) != 0) {
						_t129 = E00A8BFC0(_t122 + 0xa0, L"failed_page");
						if(_t129 != 0 &&  *((intOrPtr*)( *((intOrPtr*)( *_t129 + 0x108))))() != 0) {
							 *((intOrPtr*)( *_t129 + 0x3c))();
							asm("movups xmm0, [eax]");
							asm("movups [ebp-0x14], xmm0");
						}
					}
					_v44 = 0;
					_t98 = E00A8BFC0(_t122 + 0xa0, L"browser_titlebar");
					if(_t98 != 0) {
						 *((intOrPtr*)( *((intOrPtr*)( *_t98 + 0x108))))();
						_t92 =  !=  ? 1 : 0;
						_v44 =  !=  ? 1 : 0;
					}
					_t85 = _v24.right - _v24.left;
					asm("xorps xmm0, xmm0");
					_t125 = _v24.bottom - _v24.top;
					_v48 = _t85;
					asm("movups [ebp-0x24], xmm0");
					GetWindowRect( *(_t122 + 4),  &_v40);
					_t100 = _v40.bottom - _v40.top;
					_t114 = _v40.left;
					if(_t85 != 0) {
						_t89 = _v40.right - _t114 - _v48 + _a4;
					} else {
						_t89 = _a4;
					}
					if(_t125 != 0) {
						_t101 = _t100 - _t125;
					} else {
						_t101 =  !=  ? 0x24 : 0;
					}
					_v44 = _v40.top;
					_t127 = _a8 + _t101;
					_v48 = _t114;
					E00A45810(_t89, _t122, _t122, _t127, _a12, _t89, _t127,  &_v48,  &_v44);
					MoveWindow( *(_t122 + 4), _v48, _v44, _t89, _t127, 1);
					goto L22;
				}
			}

0x00a45e66
0x00a45e6d
0x00a45e71
0x00a45e73
0x00a45e7b
0x00a46010
0x00a4601e
0x00a45e81
0x00a45e85
0x00a45e8e
0x00a45e95
0x00a45e9d
0x00a45eaf
0x00a45eb3
0x00a45ec9
0x00a45ecc
0x00a45ecf
0x00a45ecf
0x00a45eb3
0x00a45edb
0x00a45eed
0x00a45ef1
0x00a45f07
0x00a45f0a
0x00a45f0d
0x00a45f0d
0x00a45ef1
0x00a45f19
0x00a45f2b
0x00a45f2f
0x00a45f45
0x00a45f48
0x00a45f4b
0x00a45f4b
0x00a45f2f
0x00a45f5c
0x00a45f64
0x00a45f68
0x00a45f72
0x00a45f7e
0x00a45f81
0x00a45f81
0x00a45f8a
0x00a45f8d
0x00a45f93
0x00a45f9a
0x00a45f9d
0x00a45fa1
0x00a45faa
0x00a45fad
0x00a45fb2
0x00a45fc1
0x00a45fb4
0x00a45fb4
0x00a45fb4
0x00a45fc6
0x00a45fd7
0x00a45fc8
0x00a45fd2
0x00a45fd2
0x00a45fdf
0x00a45fe2
0x00a45fe7
0x00a45ff6
0x00a46008
0x00000000
0x00a4600f

APIs

IsRectEmpty.USER32 ref: 00A45E99
IsRectEmpty.USER32 ref: 00A45ED7
IsRectEmpty.USER32 ref: 00A45F15
GetWindowRect.USER32 ref: 00A45FA1
MoveWindow.USER32(00000000,?,?,?,?,00000001,?,?,?,?,?), ref: 00A46008

Strings

browser_titlebar, xrefs: 00A45F57
loading_page, xrefs: 00A45EDD
failed_page, xrefs: 00A45F1B
browser_page, xrefs: 00A45E9F

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Rect$Empty$Window$Move
String ID: browser_page$browser_titlebar$failed_page$loading_page
API String ID: 2342677217-2817872075
Opcode ID: 3207760a5c3c3d7edb1a48e7b96f9db21020583a8a64e3d88100701f379be125
Instruction ID: 2edc546e0cfd63142a16bd0d9d30c74ddff90ee87c3efe55d3121fec97538f1f
Opcode Fuzzy Hash: 3207760a5c3c3d7edb1a48e7b96f9db21020583a8a64e3d88100701f379be125
Instruction Fuzzy Hash: FC516F35E0061A9FCF15DFB8C990AEEB7B4AF5D300F148169E945B7252DB30AD85CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00A901F0, Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 118
registryCOMMON

Download Yara Rule

C-Code - Quality: 88%

			E00A901F0(void* __ecx, struct HWND__* _a4, WCHAR* _a8, long _a12, long _a16, int _a20, int _a24, int _a28, int _a32, struct HMENU__* _a36) {
				struct _WNDCLASSEXW _v52;
				struct HINSTANCE__* _t44;
				struct HWND__* _t47;
				WCHAR* _t73;
				void* _t84;
				void* _t85;

				_t85 = __ecx;
				if( *((intOrPtr*)( *((intOrPtr*)(__ecx)) + 8))() == 0) {
					L5:
					if( *((intOrPtr*)( *_t85 + 8))() != 0) {
						L9:
						_t44 = E00A8C590();
						_t47 = CreateWindowExW(_a16,  *((intOrPtr*)( *_t85 + 4))(), _a8, _a12, _a20, _a24, _a28, _a32, _a4, _a36, _t44, _t85);
						 *(_t85 + 4) = _t47;
						return _t47;
					} else {
						asm("xorps xmm0, xmm0");
						asm("movq [ebp-0x8], xmm0");
						asm("movups [ebp-0x28], xmm0");
						asm("movups [ebp-0x18], xmm0");
						_v52.lpfnWndProc.style =  *((intOrPtr*)( *_t85 + 0xc))();
						_v52.cbWndExtra = 0;
						_v52.hInstance = 0;
						_v52.hCursor = 0;
						_v52.cbClsExtra = 0xa90c30;
						_v52.hIcon = E00A8C590();
						_v52.hbrBackground = LoadCursorW(0, 0x7f00);
						_v52.lpszMenuName = 0;
						_v52.lpszClassName = 0;
						_v52.hIconSm =  *((intOrPtr*)( *_t85 + 4))();
						if(RegisterClassW( &(_v52.lpfnWndProc)) != 0 || GetLastError() == 0x582) {
							goto L9;
						} else {
							goto L8;
						}
					}
				} else {
					E00AF4C50(_t84,  &_v52, 0, 0x30);
					_v52.cbSize = 0x30;
					if(GetClassInfoExW(0,  *((intOrPtr*)( *_t85 + 8))(),  &_v52) != 0) {
						L3:
						 *(_t85 + 8) = _v52.lpfnWndProc.style;
						_v52.lpfnWndProc.style =  &M00A90B70;
						_v52.hInstance = E00A8C590();
						_v52.lpszClassName =  *((intOrPtr*)( *_t85 + 4))();
						if(RegisterClassExW( &_v52) != 0 || GetLastError() == 0x582) {
							goto L5;
						} else {
							goto L8;
						}
					} else {
						_t73 =  *((intOrPtr*)( *_t85 + 8))();
						if(GetClassInfoExW(E00A8C590(), _t73,  &_v52) == 0) {
							L8:
							return 0;
						} else {
							goto L3;
						}
					}
				}
			}

0x00a901f7
0x00a90200
0x00a90294
0x00a9029d
0x00a9032e
0x00a9032f
0x00a90358
0x00a9035e
0x00a90365
0x00a902a3
0x00a902a5
0x00a902aa
0x00a902af
0x00a902b3
0x00a902ba
0x00a902bd
0x00a902c4
0x00a902cb
0x00a902d2
0x00a902e5
0x00a902ee
0x00a902f5
0x00a902fc
0x00a90306
0x00a90316
0x00000000
0x00000000
0x00000000
0x00000000
0x00a90316
0x00a90206
0x00a9020e
0x00a90216
0x00a90233
0x00a90255
0x00a90258
0x00a9025b
0x00a90267
0x00a90271
0x00a90281
0x00000000
0x00000000
0x00000000
0x00000000
0x00a90235
0x00a9023d
0x00a9024f
0x00a90325
0x00a9032b
0x00000000
0x00000000
0x00000000
0x00a9024f
0x00a90233

APIs

GetClassInfoExW.USER32 ref: 00A9022B
GetClassInfoExW.USER32 ref: 00A90247
RegisterClassExW.USER32 ref: 00A90278
GetLastError.KERNEL32 ref: 00A90283
LoadCursorW.USER32(00000000,00007F00), ref: 00A902E8
RegisterClassW.USER32 ref: 00A9030D
GetLastError.KERNEL32(?,?,00A47D4E), ref: 00A90318
CreateWindowExW.USER32 ref: 00A90358

Strings

0, xrefs: 00A90216

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Class$ErrorInfoLastRegister$CreateCursorLoadWindow
String ID: 0
API String ID: 1185170849-4108050209
Opcode ID: 8e862ac49fc481a772aa9c021da6a4b59d9795716517c55b6a9bda3e32541c9a
Instruction ID: a633ff7993a71e5a55dbcc752b2b6f3bff45c4bb4b36a632029dbf84cd4ebbd1
Opcode Fuzzy Hash: 8e862ac49fc481a772aa9c021da6a4b59d9795716517c55b6a9bda3e32541c9a
Instruction Fuzzy Hash: 88414475A10208AFDF10EFA4D848FAEBBF8EF08344F144559F905E7260EB759940CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00A96CF0, Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 54
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00A96CF0(void* __ecx, signed int _a4) {
				signed int _t11;
				struct HWND__* _t14;
				signed int _t17;
				void* _t19;
				struct HWND__* _t22;

				_t17 = _a4;
				_t11 = 0 | _t17 != 0x00000000;
				 *(__ecx + 0xec0) = _t11;
				_a4 = (_t11 & 0xffffff00 | _t17 != 0x00000000) & 0x000000ff;
				_t19 = __ecx;
				_t14 =  *(__ecx + 0x5fc);
				if(_t14 != 0) {
					_t14 = IsWindow(_t14);
					if(_t14 != 0) {
						_t14 = FindWindowExW( *(_t19 + 0x5fc), 0, L"Shell Embedding", 0);
						if(_t14 != 0) {
							_t14 = FindWindowExW(_t14, 0, L"Shell DocObject View", 0);
							if(_t14 != 0) {
								_t14 = FindWindowExW(_t14, 0, L"Internet Explorer_Server", 0);
								_t22 = _t14;
								if(_t22 != 0) {
									_t14 = SetWindowLongW(_t22, 0xffffffec, GetWindowLongW(_t22, 0xffffffec));
								}
							}
						}
					}
				}
				return _t14;
			}

0x00a96cf3
0x00a96cfa
0x00a96cff
0x00a96d0b
0x00a97321
0x00a97323
0x00a9732b
0x00a9732e
0x00a97336
0x00a9734d
0x00a97351
0x00a9735d
0x00a97361
0x00a9736d
0x00a9736f
0x00a97373
0x00a97382
0x00a97382
0x00a97373
0x00a97361
0x00a97351
0x00a97336
0x00a97389

APIs

IsWindow.USER32(?), ref: 00A9732E
FindWindowExW.USER32 ref: 00A9734D
FindWindowExW.USER32 ref: 00A9735D
FindWindowExW.USER32 ref: 00A9736D
GetWindowLongW.USER32(00000000,000000EC), ref: 00A97378
SetWindowLongW.USER32 ref: 00A97382

Strings

Shell Embedding, xrefs: 00A9733A
Shell DocObject View, xrefs: 00A97355
Internet Explorer_Server, xrefs: 00A97365

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Find$Long
String ID: Internet Explorer_Server$Shell DocObject View$Shell Embedding
API String ID: 189972333-2040739340
Opcode ID: 356e3cb98eaa83fd02963bf2058e5a9bfd8523d19968fdc058b27f5370df2494
Instruction ID: 9e7f21f9005f62fc125ea0ad0013413a7dc505a6bbb7654762f92a4c41e41fd7
Opcode Fuzzy Hash: 356e3cb98eaa83fd02963bf2058e5a9bfd8523d19968fdc058b27f5370df2494
Instruction Fuzzy Hash: BB017131799716A7DB205B254C05FDB3ADD6F64B11F244325BC00FF1D4DBB4E80199A8

Uniqueness

Uniqueness Score: -1.00%

Function 00A8AE40, Relevance: 14.2, APIs: 7, Strings: 1, Instructions: 214
libraryCOMMON

Download Yara Rule

C-Code - Quality: 86%

			E00A8AE40(void* __ebx, int* __ecx, void* __edi, void* __esi, void* __eflags) {
				int _v8;
				char _v16;
				signed int _v20;
				struct tagLOGFONTW _v112;
				int* _v116;
				int* _v120;
				signed int _t112;
				signed int _t113;
				signed int _t144;
				signed int _t145;
				signed int _t146;
				int* _t186;
				int* _t189;
				signed int _t191;
				void* _t192;
				void* _t194;

				_t157 = __ebx;
				_push(0xffffffff);
				_push(0xb282fc);
				_push( *[fs:0x0]);
				_t112 =  *0xb6aa7c; // 0x5cc80e5b
				_t113 = _t112 ^ _t191;
				_v20 = _t113;
				_push(_t113);
				 *[fs:0x0] =  &_v16;
				_t189 = __ecx;
				_v116 = __ecx;
				_v120 = __ecx;
				 *__ecx = 0;
				__ecx[1] = 0xff;
				__ecx[2] = 0;
				__ecx[3] = 0;
				__ecx[4] = 0;
				__ecx[5] = 0;
				__ecx[6] = 0;
				__ecx[7] = 0;
				__ecx[0x14] = 0;
				__ecx[0x15] = 0;
				__ecx[0x16] = 0;
				__ecx[0x17] = 0;
				__ecx[0x18] = 0;
				__ecx[0x19] = 0;
				__ecx[0x1a] = 0;
				__ecx[0x2f] = 0x1000;
				__ecx[0x30] = 0x1000001;
				__ecx[0x31] = 0;
				__ecx[0x32] = 0;
				E00A893F0( &(__ecx[0x33]));
				_v8 = 0;
				__ecx[0x58] = 1;
				E00A894D0( &(__ecx[0x59]), 0);
				_v8 = 1;
				E00A894D0( &(__ecx[0x5c]), 0);
				_v8 = 2;
				E00A894D0( &(__ecx[0x5f]), 0);
				_v8 = 3;
				E00A894D0( &(__ecx[0x62]), 0);
				_v8 = 4;
				E00A894D0( &(__ecx[0x65]), 0);
				_v8 = 5;
				E00A894D0( &(__ecx[0x68]), 0);
				_v8 = 6;
				E00A894D0( &(__ecx[0x6b]), 0);
				_v8 = 7;
				E00A894D0( &(__ecx[0x6e]), 0);
				_v8 = 8;
				E00A89510(__ebx,  &(__ecx[0x71]), 0x53);
				_v8 = 9;
				E00A89510(__ebx,  &(__ecx[0x74]), 0x53);
				_v8 = 0xa;
				E00A89510(__ebx,  &(__ecx[0x77]), 0x53);
				_v8 = 0xb;
				__ecx[0x7a] = 0;
				_t186 =  &(__ecx[0x81]);
				_v116 = _t186;
				E00A893F0( &(_t186[1]));
				_v8 = 0xc;
				E00A894D0( &(__ecx[0xb4]), 0);
				_v8 = 0xd;
				E00A89510(_t157,  &(__ecx[0xb7]), 0x53);
				_v8 = 0xe;
				E00A89510(_t157,  &(__ecx[0xba]), 0x53);
				_v8 = 0xf;
				E00A894D0( &(__ecx[0xbd]), 0);
				_v8 = 0x10;
				__ecx[0xc0] = 0;
				E00A894D0( &(__ecx[0xc7]), 0);
				_v8 = 0x11;
				__ecx[0x7c] = 0xffc0c0c0;
				__ecx[0x7b] = 0xffa7a6aa;
				__ecx[0x7d] = 0xff000000;
				__ecx[0x7e] = 0xff0000ff;
				__ecx[0x7f] = 0xffd3215f;
				__ecx[0x80] = 0xffbae4ff;
				E00AF4C50(_t186,  &_v112, 0, 0x5c);
				_t194 = _t192 - 0x68 + 0xc;
				GetObjectW(GetStockObject(0x11), 0x5c,  &_v112);
				_v112.lfCharSet = 1;
				if(E00A89FB0(0xb714d0) > 0) {
					E00AFBBD4( &(_v112.lfFaceName), 0x20, E00A5A690(0xb714d0));
					_t194 = _t194 + 0xc;
				}
				 *_t186 = CreateFontIndirectW( &_v112);
				E00A896B0(_t189 + 0x208, _t189,  &(_v112.lfFaceName));
				_t144 =  ~(_v112.lfHeight);
				 *(_t189 + 0x28c) = _t144;
				_t145 = _t144 & 0xffffff00 | _v112.lfWeight - 0x000002bc >= 0x00000000;
				 *(_t189 + 0x290) = _t145;
				_t146 = _t145 & 0xffffff00 | _v112.lfUnderline == 0x00000001;
				 *(_t189 + 0x291) = _t146;
				 *((char*)(_t189 + 0x292)) = _t146 & 0xffffff00 | _v112.lfItalic == 0x00000001;
				E00AF4C50(_t186, _t189 + 0x294, 0, 0x3c);
				if( *0xb714cc == 0) {
					 *0xb714cc = CreatePen(0, 1, 0xdc);
					__imp__#17();
					LoadLibraryW(L"msimg32.dll");
				}
				asm("xorps xmm0, xmm0");
				 *(_t189 + 0x74) = 0;
				 *(_t189 + 0x78) = 0;
				 *(_t189 + 0x7c) = 0;
				 *(_t189 + 0x80) = 0;
				 *(_t189 + 0x84) = 0;
				 *(_t189 + 0x88) = 0;
				 *(_t189 + 0x8c) = 0;
				 *(_t189 + 0x90) = 0;
				 *(_t189 + 0xa8) = 0;
				 *(_t189 + 0xa4) = 0;
				asm("movups [esi+0x94], xmm0");
				asm("movups [esi+0xac], xmm0");
				 *((intOrPtr*)(_t189 + 0x70)) = 0xffffffff;
				 *((intOrPtr*)(_t189 + 0x6c)) = 0xffffffff;
				InitializeCriticalSection(_t189 + 0x304);
				 *((intOrPtr*)(_t189 + 0x150)) = 4;
				 *((intOrPtr*)(_t189 + 0x154)) = 2;
				 *((intOrPtr*)(_t189 + 0x158)) = 4;
				 *((intOrPtr*)(_t189 + 0x15c)) = 6;
				 *[fs:0x0] = _v16;
				return E00AE4BF8(_v20 ^ _t191);
			}

0x00a8ae40
0x00a8ae43
0x00a8ae45
0x00a8ae50
0x00a8ae54
0x00a8ae59
0x00a8ae5b
0x00a8ae60
0x00a8ae64
0x00a8ae6a
0x00a8ae6c
0x00a8ae6f
0x00a8ae78
0x00a8ae7e
0x00a8ae85
0x00a8ae8c
0x00a8ae93
0x00a8ae9a
0x00a8aea1
0x00a8aea8
0x00a8aeaf
0x00a8aeb3
0x00a8aeba
0x00a8aec1
0x00a8aec8
0x00a8aecf
0x00a8aed6
0x00a8aedd
0x00a8aee7
0x00a8aef1
0x00a8aefb
0x00a8af02
0x00a8af0f
0x00a8af16
0x00a8af1d
0x00a8af2a
0x00a8af2e
0x00a8af3b
0x00a8af3f
0x00a8af4c
0x00a8af50
0x00a8af5d
0x00a8af61
0x00a8af6e
0x00a8af72
0x00a8af7f
0x00a8af83
0x00a8af90
0x00a8af94
0x00a8afa1
0x00a8afa5
0x00a8afb2
0x00a8afb6
0x00a8afc3
0x00a8afc7
0x00a8afcc
0x00a8afd0
0x00a8afda
0x00a8afe3
0x00a8afe6
0x00a8aff3
0x00a8aff7
0x00a8b004
0x00a8b008
0x00a8b015
0x00a8b019
0x00a8b026
0x00a8b02a
0x00a8b037
0x00a8b03b
0x00a8b045
0x00a8b04f
0x00a8b056
0x00a8b060
0x00a8b06a
0x00a8b074
0x00a8b07e
0x00a8b088
0x00a8b092
0x00a8b097
0x00a8b0a9
0x00a8b0b4
0x00a8b0bf
0x00a8b0d2
0x00a8b0d7
0x00a8b0d7
0x00a8b0e4
0x00a8b0f0
0x00a8b0f8
0x00a8b101
0x00a8b107
0x00a8b10e
0x00a8b114
0x00a8b11b
0x00a8b126
0x00a8b135
0x00a8b144
0x00a8b155
0x00a8b15a
0x00a8b165
0x00a8b165
0x00a8b16b
0x00a8b16e
0x00a8b175
0x00a8b182
0x00a8b189
0x00a8b193
0x00a8b19d
0x00a8b1a7
0x00a8b1b1
0x00a8b1bb
0x00a8b1c5
0x00a8b1cf
0x00a8b1d7
0x00a8b1de
0x00a8b1e5
0x00a8b1ec
0x00a8b1f2
0x00a8b1fe
0x00a8b208
0x00a8b212
0x00a8b21f
0x00a8b236

APIs

GetStockObject.GDI32(00000011), ref: 00A8B0A2
GetObjectW.GDI32(00000000), ref: 00A8B0A9
CreateFontIndirectW.GDI32(?), ref: 00A8B0DE
CreatePen.GDI32(00000000,00000001,000000DC), ref: 00A8B14F
#17.COMCTL32(?,?,?), ref: 00A8B15A
LoadLibraryW.KERNEL32(msimg32.dll,?,?,?), ref: 00A8B165
InitializeCriticalSection.KERNEL32(?), ref: 00A8B1EC

Strings

msimg32.dll, xrefs: 00A8B160

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: CreateObject$CriticalFontIndirectInitializeLibraryLoadSectionStock
String ID: msimg32.dll
API String ID: 730405823-3287713914
Opcode ID: 8f9579eabbec9d22dcaac2c3937966725fcce057eb4f63d8bfdaafff664a334b
Instruction ID: 36761978eb2b3e2ef231aa13d4e41f98ef937f32b99cdb50e07fc437fe7ef0b5
Opcode Fuzzy Hash: 8f9579eabbec9d22dcaac2c3937966725fcce057eb4f63d8bfdaafff664a334b
Instruction Fuzzy Hash: 00B16170500B85DEE721EFB4C919BDBBBF4AF15308F04894DE5AA5B2C2DBB52208CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00A45810, Relevance: 14.2, APIs: 4, Strings: 4, Instructions: 178
COMMON

Download Yara Rule

C-Code - Quality: 75%

			E00A45810(void* __ebx, intOrPtr __ecx, void* __edi, void* __esi, signed int* _a4, intOrPtr _a8, intOrPtr _a12, signed int* _a16, signed int* _a20) {
				signed int _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				intOrPtr _v20;
				void _v24;
				intOrPtr _v28;
				signed int _t43;
				signed int _t46;
				int _t47;
				signed int _t48;
				int _t49;
				signed int _t50;
				signed int _t51;
				signed int _t52;
				signed int _t53;
				signed int _t63;
				signed int* _t95;
				void* _t97;
				char* _t98;
				char* _t99;
				void* _t100;
				intOrPtr _t103;
				intOrPtr _t104;
				signed int _t105;
				signed int* _t107;
				char* _t109;
				void* _t110;
				void* _t111;
				intOrPtr _t112;
				intOrPtr _t113;
				signed int _t114;

				_t43 =  *0xb6aa7c; // 0x5cc80e5b
				_v8 = _t43 ^ _t114;
				_t95 = _a20;
				_t105 =  *_a4;
				_t109 = L"screen-rightbottom";
				_t107 = _a16;
				_t46 = _t105;
				_v28 = __ecx;
				while(1) {
					_t97 =  *_t46;
					if(_t97 !=  *_t109) {
						break;
					}
					if(_t97 == 0) {
						L5:
						_t47 = 0;
					} else {
						_t104 =  *((intOrPtr*)(_t46 + 2));
						if(_t104 != _t109[2]) {
							break;
						} else {
							_t46 = _t46 + 4;
							_t109 =  &(_t109[4]);
							if(_t104 != 0) {
								continue;
							} else {
								goto L5;
							}
						}
					}
					L7:
					if(_t47 != 0) {
						_t98 = L"screen-center";
						_t48 = _t105;
						while(1) {
							_t110 =  *_t48;
							if(_t110 !=  *_t98) {
								break;
							}
							if(_t110 == 0) {
								L14:
								_t49 = 0;
							} else {
								_t113 =  *((intOrPtr*)(_t48 + 2));
								if(_t113 != _t98[2]) {
									break;
								} else {
									_t48 = _t48 + 4;
									_t98 =  &(_t98[4]);
									if(_t113 != 0) {
										continue;
									} else {
										goto L14;
									}
								}
							}
							L16:
							if(_t49 != 0) {
								_t99 = L"parent-center";
								_t50 = _t105;
								while(1) {
									_t111 =  *_t50;
									if(_t111 !=  *_t99) {
										break;
									}
									if(_t111 == 0) {
										L23:
										_t51 = 0;
									} else {
										_t112 =  *((intOrPtr*)(_t50 + 2));
										if(_t112 != _t99[2]) {
											break;
										} else {
											_t50 = _t50 + 4;
											_t99 =  &(_t99[4]);
											if(_t112 != 0) {
												continue;
											} else {
												goto L23;
											}
										}
									}
									L25:
									if(_t51 != 0) {
										_t52 = L"parent-rightbottom";
										while(1) {
											_t100 =  *_t105;
											if(_t100 !=  *_t52) {
												break;
											}
											if(_t100 == 0) {
												L32:
												_t53 = 0;
											} else {
												_t103 =  *((intOrPtr*)(_t105 + 2));
												if(_t103 !=  *((intOrPtr*)(_t52 + 2))) {
													break;
												} else {
													_t105 = _t105 + 4;
													_t52 = _t52 + 4;
													if(_t103 != 0) {
														continue;
													} else {
														goto L32;
													}
												}
											}
											L34:
											if(_t53 == 0) {
												asm("xorps xmm0, xmm0");
												asm("movups [ebp-0x14], xmm0");
												GetWindowRect( *(_v28 + 0x18),  &_v24);
												 *_t107 = _v16 - _a8 - 0x19;
												_t63 = _v12 - _a12 - 0x1b;
												goto L36;
											}
											goto L37;
										}
										asm("sbb eax, eax");
										_t53 = _t52 | 0x00000001;
										goto L34;
									} else {
										asm("xorps xmm0, xmm0");
										asm("movups [ebp-0x14], xmm0");
										GetWindowRect( *(_v28 + 0x18),  &_v24);
										asm("cdq");
										 *_t107 = (_v16 - _v24 - _a8 - _t105 >> 1) + _v24;
										asm("cdq");
										_t63 = (_v12 - _v20 - _a12 - _t105 >> 1) + _v20;
										goto L36;
									}
									goto L37;
								}
								asm("sbb eax, eax");
								_t51 = _t50 | 0x00000001;
								goto L25;
							} else {
								asm("xorps xmm0, xmm0");
								asm("movups [ebp-0x14], xmm0");
								SystemParametersInfoW(0x30, 0,  &_v24, _t49);
								asm("cdq");
								 *_t107 = _v16 - _a8 - _t105 >> 1;
								asm("cdq");
								_t63 = _v12 - _a12 - _t105 >> 1;
								goto L36;
							}
							goto L37;
						}
						asm("sbb eax, eax");
						_t49 = _t48 | 0x00000001;
						goto L16;
					} else {
						asm("xorps xmm0, xmm0");
						asm("movups [ebp-0x14], xmm0");
						SystemParametersInfoW(0x30, 0,  &_v24, _t47);
						 *_t107 = _v16 - _a8 - 0x1e;
						_t63 = _v12 - _a12 - 0xa;
						L36:
						 *_t95 = _t63;
					}
					L37:
					return E00AE4BF8(_v8 ^ _t114);
				}
				asm("sbb eax, eax");
				_t47 = _t46 | 0x00000001;
				goto L7;
			}

0x00a45816
0x00a4581d
0x00a45824
0x00a45828
0x00a4582a
0x00a45830
0x00a45833
0x00a45835
0x00a45838
0x00a45838
0x00a4583e
0x00000000
0x00000000
0x00a45843
0x00a4585a
0x00a4585a
0x00a45845
0x00a45845
0x00a4584d
0x00000000
0x00a4584f
0x00a4584f
0x00a45852
0x00a45858
0x00000000
0x00000000
0x00000000
0x00000000
0x00a45858
0x00a4584d
0x00a45863
0x00a45865
0x00a45896
0x00a4589b
0x00a458a0
0x00a458a0
0x00a458a6
0x00000000
0x00000000
0x00a458ab
0x00a458c2
0x00a458c2
0x00a458ad
0x00a458ad
0x00a458b5
0x00000000
0x00a458b7
0x00a458b7
0x00a458ba
0x00a458c0
0x00000000
0x00000000
0x00000000
0x00000000
0x00a458c0
0x00a458b5
0x00a458cb
0x00a458cd
0x00a45902
0x00a45907
0x00a45910
0x00a45910
0x00a45916
0x00000000
0x00000000
0x00a4591b
0x00a45932
0x00a45932
0x00a4591d
0x00a4591d
0x00a45925
0x00000000
0x00a45927
0x00a45927
0x00a4592a
0x00a45930
0x00000000
0x00000000
0x00000000
0x00000000
0x00a45930
0x00a45925
0x00a4593b
0x00a4593d
0x00a4597c
0x00a45981
0x00a45981
0x00a45987
0x00000000
0x00000000
0x00a4598c
0x00a459a3
0x00a459a3
0x00a4598e
0x00a4598e
0x00a45996
0x00000000
0x00a45998
0x00a45998
0x00a4599b
0x00a459a1
0x00000000
0x00000000
0x00000000
0x00000000
0x00a459a1
0x00a45996
0x00a459ac
0x00a459ae
0x00a459b3
0x00a459ba
0x00a459c1
0x00a459d0
0x00a459d8
0x00000000
0x00a459d8
0x00000000
0x00a459ae
0x00a459a7
0x00a459a9
0x00000000
0x00a4593f
0x00a45942
0x00a45949
0x00a45950
0x00a4595f
0x00a45967
0x00a45972
0x00a45977
0x00000000
0x00a45977
0x00000000
0x00a4593d
0x00a45936
0x00a45938
0x00000000
0x00a458cf
0x00a458d3
0x00a458db
0x00a458df
0x00a458eb
0x00a458f0
0x00a458f8
0x00a458fb
0x00000000
0x00a458fb
0x00000000
0x00a458cd
0x00a458c6
0x00a458c8
0x00000000
0x00a45867
0x00a4586b
0x00a45873
0x00a45877
0x00a45886
0x00a4588e
0x00a459db
0x00a459db
0x00a459db
0x00a459dd
0x00a459ed
0x00a459ed
0x00a4585e
0x00a45860
0x00000000

APIs

SystemParametersInfoW.USER32 ref: 00A45877
SystemParametersInfoW.USER32 ref: 00A458DF
GetWindowRect.USER32 ref: 00A45950
GetWindowRect.USER32 ref: 00A459C1

Strings

parent-rightbottom, xrefs: 00A4597C
screen-center, xrefs: 00A45896
parent-center, xrefs: 00A45902
screen-rightbottom, xrefs: 00A4582A

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: InfoParametersRectSystemWindow
String ID: parent-center$parent-rightbottom$screen-center$screen-rightbottom
API String ID: 85510744-4139651395
Opcode ID: 58b41212d96ba72e543a047ba17e708059f5091390ff7dad2e9f9c5e7d074e44
Instruction ID: 98a4269be042073eabcc087ed668985c950610660f6a6636e4b86b4113d67e96
Opcode Fuzzy Hash: 58b41212d96ba72e543a047ba17e708059f5091390ff7dad2e9f9c5e7d074e44
Instruction Fuzzy Hash: 6D516E3AE0050ADFDB10CF78CA45AAEB7B5EF65720F544165E806E7212EB30EE40CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00A79260, Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 127
COMMON

Download Yara Rule

C-Code - Quality: 77%

			E00A79260(void* __ebx, void* __edx, intOrPtr* _a4) {
				signed char _v8;
				char _v16;
				signed char _v20;
				char _v24;
				signed int _v28;
				char _v32;
				char _v48;
				char _v92;
				char _v144;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t43;
				signed int _t47;
				signed int _t50;
				signed int _t56;
				void* _t61;
				void* _t63;
				signed int _t68;
				signed int _t69;
				void* _t70;
				signed int _t73;
				signed int _t79;
				void* _t83;
				signed int _t86;
				intOrPtr* _t89;
				signed int _t91;
				signed int _t92;
				void* _t93;
				void* _t94;
				void* _t95;
				void* _t98;

				_t83 = __edx;
				_t70 = __ebx;
				_push(0xffffffff);
				_push(0xb2652f);
				_push( *[fs:0x0]);
				_t94 = _t93 - 0x80;
				_t43 =  *0xb6aa7c; // 0x5cc80e5b
				_push(_t43 ^ _t92);
				 *[fs:0x0] =  &_v16;
				_v20 = 0;
				E00A8610F( &_v32, 0);
				_t86 =  *0xb70e5c; // 0x2
				_t47 =  *0xb7092c; // 0x7a4a78
				_v8 = 0;
				_v28 = _t47;
				if(_t86 == 0) {
					E00A8610F( &_v24, _t86);
					_t98 =  *0xb70e5c - _t86; // 0x2
					if(_t98 == 0) {
						_t68 =  *0xb70e48; // 0x2
						_t69 = _t68 + 1;
						 *0xb70e48 = _t69;
						 *0xb70e5c = _t69;
					}
					E00A86167( &_v24);
					_t86 =  *0xb70e5c; // 0x2
				}
				_t73 =  *(_a4 + 4);
				if(_t86 >=  *((intOrPtr*)(_t73 + 0xc))) {
					_t89 = 0;
					__eflags = 0;
					goto L8;
				} else {
					_t89 =  *((intOrPtr*)( *((intOrPtr*)(_t73 + 8)) + _t86 * 4));
					if(_t89 != 0) {
						L24:
						E00A86167( &_v32);
						 *[fs:0x0] = _v16;
						return _t89;
					} else {
						L8:
						if( *((char*)(_t73 + 0x14)) == 0) {
							L11:
							if(_t89 != 0) {
								goto L24;
							}
							L12:
							_t50 = _v28;
							if(_t50 == 0) {
								_push(0x44);
								_t91 = E00AE4920(_t89, __eflags);
								_t95 = _t94 + 4;
								_v28 = _t91;
								_v8 = 1;
								__eflags = _t91;
								if(_t91 == 0) {
									_t89 = 0;
									__eflags = 0;
								} else {
									_t79 =  *(_a4 + 4);
									__eflags = _t79;
									if(_t79 != 0) {
										_t56 =  *(_t79 + 0x18);
										__eflags = _t56;
										if(_t56 == 0) {
											_t25 = _t79 + 0x1c; // 0x1f
											_t56 = _t25;
										}
									} else {
										_t56 = 0xb2f60c;
									}
									E00A6F6F0(_t70,  &_v144, _t56);
									_v20 = 1;
									 *(_t91 + 4) = 0;
									 *_t91 = 0xb36f90;
									E00A86186( &_v144, _t83, _t86, __eflags,  &_v48);
									asm("movups xmm0, [eax]");
									asm("movups [esi+0x8], xmm0");
									_t61 = E00A87E0E(_t70, _t83, __eflags,  &_v92);
									_t95 = _t95 + 8;
									asm("movups xmm0, [eax]");
									asm("movups [esi+0x18], xmm0");
									asm("movups xmm0, [eax+0x10]");
									asm("movups [esi+0x28], xmm0");
									asm("movq xmm0, [eax+0x20]");
									asm("movq [esi+0x38], xmm0");
									 *((intOrPtr*)(_t91 + 0x40)) =  *((intOrPtr*)(_t61 + 0x28));
								}
								__eflags = _v20 & 0x00000001;
								if(__eflags != 0) {
									E00A6FD60( &_v144);
								}
								_a4 = _t89;
								_v8 = 2;
								E00A8652C(__eflags, _t89);
								 *((intOrPtr*)( *_t89 + 4))();
								 *0xb7092c = _t89;
							} else {
								_t89 = _t50;
							}
							goto L24;
						}
						_t63 = E00A86558();
						if(_t86 >=  *((intOrPtr*)(_t63 + 0xc))) {
							goto L12;
						}
						_t89 =  *((intOrPtr*)( *((intOrPtr*)(_t63 + 8)) + _t86 * 4));
						goto L11;
					}
				}
			}

0x00a79260
0x00a79260
0x00a79263
0x00a79265
0x00a79270
0x00a79271
0x00a79279
0x00a79280
0x00a79284
0x00a7928f
0x00a79296
0x00a7929b
0x00a792a1
0x00a792a6
0x00a792ad
0x00a792b2
0x00a792b8
0x00a792bd
0x00a792c3
0x00a792c5
0x00a792ca
0x00a792cb
0x00a792d0
0x00a792d0
0x00a792d8
0x00a792dd
0x00a792dd
0x00a792e6
0x00a792ec
0x00a792fe
0x00a792fe
0x00000000
0x00a792ee
0x00a792f1
0x00a792f6
0x00a793eb
0x00a793ee
0x00a793f8
0x00a79405
0x00a792fc
0x00a79300
0x00a79304
0x00a79316
0x00a79318
0x00000000
0x00000000
0x00a7931e
0x00a7931e
0x00a79323
0x00a7932c
0x00a79333
0x00a79335
0x00a79338
0x00a7933b
0x00a7933f
0x00a79341
0x00a793bb
0x00a793bb
0x00a79343
0x00a79346
0x00a79349
0x00a7934b
0x00a79354
0x00a79357
0x00a79359
0x00a7935b
0x00a7935b
0x00a7935b
0x00a7934d
0x00a7934d
0x00a7934d
0x00a79365
0x00a7936d
0x00a79375
0x00a7937c
0x00a79382
0x00a79387
0x00a7938e
0x00a79392
0x00a79397
0x00a7939a
0x00a7939d
0x00a793a1
0x00a793a5
0x00a793a9
0x00a793ae
0x00a793b6
0x00a793b6
0x00a793bd
0x00a793c1
0x00a793c9
0x00a793c9
0x00a793ce
0x00a793d2
0x00a793d6
0x00a793e2
0x00a793e5
0x00a79325
0x00a79325
0x00a79325
0x00000000
0x00a79323
0x00a79306
0x00a7930e
0x00000000
0x00000000
0x00a79313
0x00000000
0x00a79313
0x00a792f6

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00A79296
std::_Lockit::_Lockit.LIBCPMT ref: 00A792B8
std::_Lockit::~_Lockit.LIBCPMT ref: 00A792D8
__Getctype.LIBCPMT ref: 00A79382
__Getcvt.LIBCPMT ref: 00A79392
std::_Facet_Register.LIBCPMT ref: 00A793D6
std::_Lockit::~_Lockit.LIBCPMT ref: 00A793EE

Strings

xJz, xrefs: 00A792A1, 00A793E5

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_GetctypeGetcvtRegister
String ID: xJz
API String ID: 2755674607-535158615
Opcode ID: 17a348390a49619521eaeac068835cd64b267bc35f70d1e37084a3d16424f7a8
Instruction ID: 829d0fcd8ddbc4ff220b66bf03fff4047d8d92ad157d64ee408375cfc6f3a5b2
Opcode Fuzzy Hash: 17a348390a49619521eaeac068835cd64b267bc35f70d1e37084a3d16424f7a8
Instruction Fuzzy Hash: 4351E271D04654DFDB21EF68DD80BAAB7B4EF04700F14C25EE809AB292DB70A980CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00B146A4, Relevance: 13.8, APIs: 9, Instructions: 300
COMMON

Download Yara Rule

C-Code - Quality: 77%

			E00B146A4(signed int _a4, void* _a8, unsigned int _a12) {
				signed int _v5;
				char _v6;
				void* _v12;
				unsigned int _v16;
				signed int _v20;
				signed int _v24;
				signed int _v28;
				void* _v32;
				long _v36;
				void* _v40;
				long _v44;
				signed int* _t143;
				signed int _t145;
				intOrPtr _t149;
				signed int _t153;
				signed int _t155;
				signed char _t157;
				unsigned int _t158;
				intOrPtr _t162;
				void* _t163;
				signed int _t164;
				signed int _t167;
				long _t168;
				intOrPtr _t175;
				signed int _t176;
				intOrPtr _t178;
				signed int _t180;
				signed int _t184;
				char _t191;
				char* _t192;
				char _t199;
				char* _t200;
				signed char _t211;
				signed int _t213;
				long _t215;
				signed int _t216;
				char _t218;
				signed char _t222;
				signed int _t223;
				unsigned int _t224;
				intOrPtr _t225;
				unsigned int _t229;
				signed int _t231;
				signed int _t232;
				signed int _t233;
				signed int _t234;
				signed int _t235;
				signed char _t236;
				signed int _t237;
				signed int _t239;
				signed int _t240;
				signed int _t241;
				signed int _t242;
				signed int _t246;
				void* _t248;
				void* _t249;

				_t213 = _a4;
				if(_t213 != 0xfffffffe) {
					__eflags = _t213;
					if(_t213 < 0) {
						L58:
						_t143 = E00AF7C54();
						 *_t143 =  *_t143 & 0x00000000;
						__eflags =  *_t143;
						 *((intOrPtr*)(E00AF7C67())) = 9;
						L59:
						_t145 = E00AF7B89();
						goto L60;
					}
					__eflags = _t213 -  *0xb732b0; // 0x40
					if(__eflags >= 0) {
						goto L58;
					}
					_v24 = 1;
					_t239 = _t213 >> 6;
					_t235 = (_t213 & 0x0000003f) * 0x30;
					_v20 = _t239;
					_t149 =  *((intOrPtr*)(0xb730b0 + _t239 * 4));
					_v28 = _t235;
					_t222 =  *((intOrPtr*)(_t235 + _t149 + 0x28));
					_v5 = _t222;
					__eflags = _t222 & 0x00000001;
					if((_t222 & 0x00000001) == 0) {
						goto L58;
					}
					_t223 = _a12;
					__eflags = _t223 - 0x7fffffff;
					if(_t223 <= 0x7fffffff) {
						__eflags = _t223;
						if(_t223 == 0) {
							L57:
							return 0;
						}
						__eflags = _v5 & 0x00000002;
						if((_v5 & 0x00000002) != 0) {
							goto L57;
						}
						__eflags = _a8;
						if(_a8 == 0) {
							goto L6;
						}
						_t153 =  *((intOrPtr*)(_t235 + _t149 + 0x29));
						_v5 = _t153;
						_v32 =  *((intOrPtr*)(_t235 + _t149 + 0x18));
						_t246 = 0;
						_t155 = _t153 - 1;
						__eflags = _t155;
						if(_t155 == 0) {
							_t236 = _v24;
							_t157 =  !_t223;
							__eflags = _t236 & _t157;
							if((_t236 & _t157) != 0) {
								_t158 = 4;
								_t224 = _t223 >> 1;
								_v16 = _t158;
								__eflags = _t224 - _t158;
								if(_t224 >= _t158) {
									_t158 = _t224;
									_v16 = _t224;
								}
								_t246 = E00B101B0(_t224, _t158);
								E00B10176(0);
								E00B10176(0);
								_t249 = _t248 + 0xc;
								_v12 = _t246;
								__eflags = _t246;
								if(_t246 != 0) {
									_t162 = E00B14BF7(_t213, 0, 0, _v24);
									_t225 =  *((intOrPtr*)(0xb730b0 + _t239 * 4));
									_t248 = _t249 + 0x10;
									_t240 = _v28;
									 *((intOrPtr*)(_t240 + _t225 + 0x20)) = _t162;
									_t163 = _t246;
									 *(_t240 + _t225 + 0x24) = _t236;
									_t235 = _t240;
									_t223 = _v16;
									L21:
									_t241 = 0;
									_v40 = _t163;
									_t215 =  *((intOrPtr*)(0xb730b0 + _v20 * 4));
									_v36 = _t215;
									__eflags =  *(_t235 + _t215 + 0x28) & 0x00000048;
									_t216 = _a4;
									if(( *(_t235 + _t215 + 0x28) & 0x00000048) != 0) {
										_t218 =  *((intOrPtr*)(_t235 + _v36 + 0x2a));
										_v6 = _t218;
										__eflags = _t218 - 0xa;
										_t216 = _a4;
										if(_t218 != 0xa) {
											__eflags = _t223;
											if(_t223 != 0) {
												_t241 = _v24;
												 *_t163 = _v6;
												_t216 = _a4;
												_t232 = _t223 - 1;
												__eflags = _v5;
												_v12 = _t163 + 1;
												_v16 = _t232;
												 *((char*)(_t235 +  *((intOrPtr*)(0xb730b0 + _v20 * 4)) + 0x2a)) = 0xa;
												if(_v5 != 0) {
													_t191 =  *((intOrPtr*)(_t235 +  *((intOrPtr*)(0xb730b0 + _v20 * 4)) + 0x2b));
													_v6 = _t191;
													__eflags = _t191 - 0xa;
													if(_t191 != 0xa) {
														__eflags = _t232;
														if(_t232 != 0) {
															_t192 = _v12;
															_t241 = 2;
															 *_t192 = _v6;
															_t216 = _a4;
															_t233 = _t232 - 1;
															_v12 = _t192 + 1;
															_v16 = _t233;
															 *((char*)(_t235 +  *((intOrPtr*)(0xb730b0 + _v20 * 4)) + 0x2b)) = 0xa;
															__eflags = _v5 - _v24;
															if(_v5 == _v24) {
																_t199 =  *((intOrPtr*)(_t235 +  *((intOrPtr*)(0xb730b0 + _v20 * 4)) + 0x2c));
																_v6 = _t199;
																__eflags = _t199 - 0xa;
																if(_t199 != 0xa) {
																	__eflags = _t233;
																	if(_t233 != 0) {
																		_t200 = _v12;
																		_t241 = 3;
																		 *_t200 = _v6;
																		_t216 = _a4;
																		_t234 = _t233 - 1;
																		__eflags = _t234;
																		_v12 = _t200 + 1;
																		_v16 = _t234;
																		 *((char*)(_t235 +  *((intOrPtr*)(0xb730b0 + _v20 * 4)) + 0x2c)) = 0xa;
																	}
																}
															}
														}
													}
												}
											}
										}
									}
									_t164 = E00B1C431(_t216);
									__eflags = _t164;
									if(_t164 == 0) {
										L41:
										_v24 = 0;
										L42:
										_t167 = ReadFile(_v32, _v12, _v16,  &_v36, 0);
										__eflags = _t167;
										if(_t167 == 0) {
											L53:
											_t168 = GetLastError();
											_t241 = 5;
											__eflags = _t168 - _t241;
											if(_t168 != _t241) {
												__eflags = _t168 - 0x6d;
												if(_t168 != 0x6d) {
													L37:
													E00AF7C31(_t168);
													goto L38;
												}
												_t242 = 0;
												goto L39;
											}
											 *((intOrPtr*)(E00AF7C67())) = 9;
											 *(E00AF7C54()) = _t241;
											goto L38;
										}
										_t229 = _a12;
										__eflags = _v36 - _t229;
										if(_v36 > _t229) {
											goto L53;
										}
										_t242 = _t241 + _v36;
										__eflags = _t242;
										L45:
										_t237 = _v28;
										_t175 =  *((intOrPtr*)(0xb730b0 + _v20 * 4));
										__eflags =  *(_t237 + _t175 + 0x28) & 0x00000080;
										if(( *(_t237 + _t175 + 0x28) & 0x00000080) != 0) {
											__eflags = _v5 - 2;
											if(_v5 == 2) {
												__eflags = _v24;
												_push(_t242 >> 1);
												_push(_v40);
												_push(_t216);
												if(_v24 == 0) {
													_t176 = E00B14200();
												} else {
													_t176 = E00B14510();
												}
											} else {
												_t230 = _t229 >> 1;
												__eflags = _t229 >> 1;
												_t176 = E00B143C0(_t229 >> 1, _t229 >> 1, _t216, _v12, _t242, _a8, _t230);
											}
											_t242 = _t176;
										}
										goto L39;
									}
									_t231 = _v28;
									_t178 =  *((intOrPtr*)(0xb730b0 + _v20 * 4));
									__eflags =  *(_t231 + _t178 + 0x28) & 0x00000080;
									if(( *(_t231 + _t178 + 0x28) & 0x00000080) == 0) {
										goto L41;
									}
									_t180 = GetConsoleMode(_v32,  &_v44);
									__eflags = _t180;
									if(_t180 == 0) {
										goto L41;
									}
									__eflags = _v5 - 2;
									if(_v5 != 2) {
										goto L42;
									}
									_t184 = ReadConsoleW(_v32, _v12, _v16 >> 1,  &_v36, 0);
									__eflags = _t184;
									if(_t184 != 0) {
										_t229 = _a12;
										_t242 = _t241 + _v36 * 2;
										goto L45;
									}
									_t168 = GetLastError();
									goto L37;
								} else {
									 *((intOrPtr*)(E00AF7C67())) = 0xc;
									 *(E00AF7C54()) = 8;
									L38:
									_t242 = _t241 | 0xffffffff;
									__eflags = _t242;
									L39:
									E00B10176(_t246);
									return _t242;
								}
							}
							L15:
							 *(E00AF7C54()) =  *_t206 & _t246;
							 *((intOrPtr*)(E00AF7C67())) = 0x16;
							E00AF7B89();
							goto L38;
						}
						__eflags = _t155 != 1;
						if(_t155 != 1) {
							L13:
							_t163 = _a8;
							_v16 = _t223;
							_v12 = _t163;
							goto L21;
						}
						_t211 =  !_t223;
						__eflags = _t211 & 0x00000001;
						if((_t211 & 0x00000001) == 0) {
							goto L15;
						}
						goto L13;
					}
					L6:
					 *(E00AF7C54()) =  *_t151 & 0x00000000;
					 *((intOrPtr*)(E00AF7C67())) = 0x16;
					goto L59;
				} else {
					 *(E00AF7C54()) =  *_t212 & 0x00000000;
					_t145 = E00AF7C67();
					 *_t145 = 9;
					L60:
					return _t145 | 0xffffffff;
				}
			}

0x00b146ad
0x00b146b4
0x00b146ce
0x00b146d0
0x00b14a38
0x00b14a38
0x00b14a3d
0x00b14a3d
0x00b14a45
0x00b14a4b
0x00b14a4b
0x00000000
0x00b14a4b
0x00b146d6
0x00b146dc
0x00000000
0x00000000
0x00b146e4
0x00b146f0
0x00b146f3
0x00b146f6
0x00b146f9
0x00b14700
0x00b14703
0x00b14707
0x00b1470a
0x00b1470d
0x00000000
0x00000000
0x00b14713
0x00b14716
0x00b1471c
0x00b14736
0x00b14738
0x00b14a34
0x00000000
0x00b14a34
0x00b1473e
0x00b14742
0x00000000
0x00000000
0x00b14748
0x00b1474c
0x00000000
0x00000000
0x00b14753
0x00b14757
0x00b1475a
0x00b1475d
0x00b14762
0x00b14762
0x00b14765
0x00b14782
0x00b14787
0x00b14789
0x00b1478b
0x00b147ab
0x00b147ac
0x00b147ae
0x00b147b1
0x00b147b3
0x00b147b5
0x00b147b7
0x00b147b7
0x00b147c2
0x00b147c4
0x00b147cb
0x00b147d0
0x00b147d3
0x00b147d6
0x00b147d8
0x00b147fd
0x00b14802
0x00b14809
0x00b1480c
0x00b1480f
0x00b14813
0x00b14815
0x00b14819
0x00b1481b
0x00b1481e
0x00b14821
0x00b14823
0x00b14826
0x00b1482d
0x00b14830
0x00b14835
0x00b14838
0x00b14841
0x00b14845
0x00b14848
0x00b1484b
0x00b1484e
0x00b14854
0x00b14856
0x00b1485f
0x00b14862
0x00b14865
0x00b14868
0x00b14869
0x00b1486d
0x00b14873
0x00b1487d
0x00b14882
0x00b14892
0x00b14896
0x00b14899
0x00b1489b
0x00b1489d
0x00b1489f
0x00b148a1
0x00b148a9
0x00b148aa
0x00b148ad
0x00b148b0
0x00b148b1
0x00b148b7
0x00b148c1
0x00b148c9
0x00b148cc
0x00b148d8
0x00b148dc
0x00b148df
0x00b148e1
0x00b148e3
0x00b148e5
0x00b148e7
0x00b148ef
0x00b148f0
0x00b148f3
0x00b148f6
0x00b148f6
0x00b148f7
0x00b148fd
0x00b14907
0x00b14907
0x00b148e5
0x00b148e1
0x00b148cc
0x00b1489f
0x00b1489b
0x00b14882
0x00b14856
0x00b1484e
0x00b1490d
0x00b14913
0x00b14915
0x00b14988
0x00b14988
0x00b1498c
0x00b1499c
0x00b149a2
0x00b149a4
0x00b14a00
0x00b14a00
0x00b14a08
0x00b14a09
0x00b14a0b
0x00b14a24
0x00b14a27
0x00b14964
0x00b14965
0x00000000
0x00b1496a
0x00b14a2d
0x00000000
0x00b14a2d
0x00b14a12
0x00b14a1d
0x00000000
0x00b14a1d
0x00b149a6
0x00b149a9
0x00b149ac
0x00000000
0x00000000
0x00b149ae
0x00b149ae
0x00b149b1
0x00b149b4
0x00b149b7
0x00b149be
0x00b149c3
0x00b149c5
0x00b149c9
0x00b149e4
0x00b149e8
0x00b149e9
0x00b149ec
0x00b149ed
0x00b149f9
0x00b149ef
0x00b149ef
0x00b149ef
0x00b149cb
0x00b149cb
0x00b149cb
0x00b149d6
0x00b149db
0x00b149de
0x00b149de
0x00000000
0x00b149c3
0x00b1491a
0x00b1491d
0x00b14924
0x00b14929
0x00000000
0x00000000
0x00b14932
0x00b14938
0x00b1493a
0x00000000
0x00000000
0x00b1493c
0x00b14940
0x00000000
0x00000000
0x00b14954
0x00b1495a
0x00b1495c
0x00b14980
0x00b14983
0x00000000
0x00b14983
0x00b1495e
0x00000000
0x00b147da
0x00b147df
0x00b147ea
0x00b1496b
0x00b1496b
0x00b1496b
0x00b1496e
0x00b1496f
0x00000000
0x00b14977
0x00b147d8
0x00b1478d
0x00b14792
0x00b14799
0x00b1479f
0x00000000
0x00b1479f
0x00b14767
0x00b1476a
0x00b14774
0x00b14774
0x00b14777
0x00b1477a
0x00000000
0x00b1477a
0x00b1476e
0x00b14770
0x00b14772
0x00000000
0x00000000
0x00000000
0x00b14772
0x00b1471e
0x00b14723
0x00b1472b
0x00000000
0x00b146b6
0x00b146bb
0x00b146be
0x00b146c3
0x00b14a50
0x00000000
0x00b14a50

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 404be8ca7c7a7a8a8f2e8660789ffdb8a7beb65fe783da6c93c1e0a560383f64
Instruction ID: c699abfc7efc967d7f99da1bda9ede9a455beda2d15d9e14779154c53ffdfb4e
Opcode Fuzzy Hash: 404be8ca7c7a7a8a8f2e8660789ffdb8a7beb65fe783da6c93c1e0a560383f64
Instruction Fuzzy Hash: E2C1BF74A04289AFCF11DFA8D881BEEBBF4EF0A310F5441D8E554A7392D7349A81CB65

Uniqueness

Uniqueness Score: -1.00%

Function 6B599779, Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 305COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 6B599804
__alldvrm.LIBCMT ref: 6B599A05
__alldvrm.LIBCMT ref: 6B599A27

Strings

~jYk, xrefs: 6B599783
~jYk, xrefs: 6B59978F, 6B5997EA, 6B599803, 6B599989
~jYk, xrefs: 6B5999C6

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: __alldvrm$_strrchr
String ID: ~jYk$~jYk$~jYk
API String ID: 1036877536-3065923752
Opcode ID: 7ed1815fc3b4b0a76c1443ec804e2c6429126901ff09b2b98cbac66725e481ae
Instruction ID: 9c150af28b90fdc8d9de78ec1579bb38b1e276e92925819d72255077cfac2841
Opcode Fuzzy Hash: 7ed1815fc3b4b0a76c1443ec804e2c6429126901ff09b2b98cbac66725e481ae
Instruction Fuzzy Hash: 83A12172D043C69FF706DF68E8927EEBBA5EF96310F1401ADD4959B282C63D8941CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00A9F390, Relevance: 12.4, APIs: 4, Strings: 3, Instructions: 194
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00A9F390(intOrPtr __ecx, void* __edx, WCHAR* _a4) {
				intOrPtr _v8;
				WCHAR* _v12;
				WCHAR* _t14;
				signed short _t18;
				signed short _t19;
				signed short _t20;
				signed short _t24;
				WCHAR* _t31;
				WCHAR* _t32;
				signed int _t34;
				WCHAR* _t35;
				WCHAR* _t36;
				signed int _t38;
				WCHAR* _t39;
				signed short _t40;
				signed int _t41;
				signed int _t43;
				WCHAR* _t44;
				signed int _t45;
				void* _t46;
				WCHAR* _t48;
				signed short _t53;
				signed short _t54;
				signed int _t55;
				signed short _t57;
				WCHAR* _t62;
				signed short _t63;
				WCHAR* _t65;
				signed int _t67;
				signed int _t68;
				WCHAR* _t70;
				WCHAR* _t71;
				WCHAR* _t72;
				WCHAR** _t74;
				void* _t75;

				_t74 = _a4;
				_v8 = __ecx;
				_t14 =  *_t74;
				if( *_t14 == 0x3e) {
					L31:
					return 1;
				} else {
					 *_t14 = 0;
					 *_t74 =  &(( *_t74)[1]);
					E00A9F830(_t74);
					_t18 =  *( *_t74) & 0x0000ffff;
					_t53 = _t18;
					if(_t18 != 0) {
						while(1) {
							_t19 = _t53 & 0x0000ffff;
							if(_t19 == 0x3e || _t19 == 0x2f) {
								goto L31;
							}
							if(_t19 != 0) {
								_t63 = _t19;
								do {
									_t43 = _t63 & 0x0000ffff;
									if(_t43 == 0x5f || _t43 == 0x3a) {
										goto L10;
									} else {
										_t46 = E00AFDF1C(_t63, _t43);
										_t75 = _t75 + 4;
										if(_t46 != 0) {
											goto L10;
										}
									}
									goto L11;
									L10:
									_t44 = CharNextW( *_t74);
									 *_t74 = _t44;
									_t45 =  *_t44 & 0x0000ffff;
									_t63 = _t45;
								} while (_t45 != 0);
							}
							L11:
							_t65 =  *_t74;
							_t70 = _t65;
							_v12 = _t65;
							_t20 =  *_t65 & 0x0000ffff;
							_t54 = _t20;
							_a4 = _t54;
							_t55 = _t54 & 0x0000ffff;
							if(_t20 != 0) {
								_t40 = _t20 & 0x0000ffff;
								while(1) {
									_t41 = _t40 & 0x0000ffff;
									_t70 = _t65;
									_t55 = _t41;
									if(_t41 > 0x20) {
										break;
									}
									_t70 = CharNextW(_t65);
									 *_t74 = _t70;
									_a4 = _t70;
									_t68 =  *_t70 & 0x0000ffff;
									_t55 = _t68;
									_t40 = _t55;
									_t65 = _t70;
									if(_t68 != 0) {
										continue;
									}
									break;
								}
								_t65 = _v12;
							}
							if(_t55 != 0x3d) {
								return E00A9ED90(_v8, __eflags, L"Error while parsing attributes", _t70);
							} else {
								 *_t70 = 0x20;
								 *_t74 =  &(( *_t74)[1]);
								 *_t65 = 0;
								_t71 =  *_t74;
								_t24 =  *_t71 & 0x0000ffff;
								_t57 = _t24;
								if(_t24 != 0) {
									_t48 = _t71;
									while(1) {
										_t38 = _t24 & 0x0000ffff;
										_t71 = _t48;
										_t57 = _t38;
										if(_t38 > 0x20) {
											break;
										}
										_t39 = CharNextW(_t48);
										_t71 = _t39;
										_t48 = _t39;
										 *_t74 = _t71;
										_t67 =  *_t71 & 0x0000ffff;
										_t57 = _t67;
										_t24 = _t67;
										if(_t67 != 0) {
											continue;
										}
										break;
									}
								}
								_t72 =  &(_t71[1]);
								 *_t74 = _t72;
								if(_t57 != 0x22) {
									return E00A9ED90(_v8, __eflags, L"Expected attribute value", _t72);
								} else {
									_a4 = _t72;
									_t73 = _v8;
									if(L00A9F580(_v8, _t74,  &_a4, 0x22) == 0) {
										__eflags = 0;
										return 0;
									} else {
										_t29 =  *_t74;
										if( *( *_t74) == 0) {
											return E00A9ED90(_t73, __eflags, L"Error while parsing attribute string", _t29);
										} else {
											_t31 = _a4;
											 *_t31 = 0;
											_t62 =  *_t74;
											if(_t62 != _t31) {
												 *_t62 = 0x20;
												_t62 =  *_t74;
											}
											_t11 =  &(_t62[1]); // 0x2
											_t32 = _t11;
											 *_t74 = _t32;
											if( *_t32 > 0) {
												while(1) {
													_t35 =  *_t74;
													if( *_t35 > 0x20) {
														goto L30;
													}
													_t36 = CharNextW(_t35);
													 *_t74 = _t36;
													if( *_t36 > 0) {
														continue;
													}
													goto L30;
												}
											}
											L30:
											_t34 =  *( *_t74) & 0x0000ffff;
											_t53 = _t34;
											if(_t34 != 0) {
												continue;
											} else {
												goto L31;
											}
										}
									}
								}
							}
							goto L36;
						}
					}
					goto L31;
				}
				L36:
			}

0x00a9f398
0x00a9f39e
0x00a9f3a1
0x00a9f3a7
0x00a9f527
0x00a9f52d
0x00a9f3ad
0x00a9f3af
0x00a9f3b4
0x00a9f3b8
0x00a9f3bf
0x00a9f3c2
0x00a9f3c7
0x00a9f3d3
0x00a9f3d3
0x00a9f3d9
0x00000000
0x00000000
0x00a9f3eb
0x00a9f3ed
0x00a9f3f0
0x00a9f3f0
0x00a9f3f6
0x00000000
0x00a9f3fd
0x00a9f3fe
0x00a9f403
0x00a9f408
0x00000000
0x00000000
0x00a9f408
0x00000000
0x00a9f40a
0x00a9f40c
0x00a9f40e
0x00a9f410
0x00a9f413
0x00a9f415
0x00a9f3f0
0x00a9f41a
0x00a9f41a
0x00a9f41c
0x00a9f41e
0x00a9f421
0x00a9f424
0x00a9f426
0x00a9f429
0x00a9f42f
0x00a9f431
0x00a9f434
0x00a9f434
0x00a9f437
0x00a9f439
0x00a9f43e
0x00000000
0x00000000
0x00a9f443
0x00a9f445
0x00a9f447
0x00a9f44a
0x00a9f44d
0x00a9f452
0x00a9f454
0x00a9f456
0x00000000
0x00000000
0x00000000
0x00a9f456
0x00a9f458
0x00a9f458
0x00a9f45f
0x00a9f57c
0x00a9f465
0x00a9f46a
0x00a9f46f
0x00a9f472
0x00a9f475
0x00a9f477
0x00a9f47c
0x00a9f481
0x00a9f483
0x00a9f485
0x00a9f485
0x00a9f488
0x00a9f48a
0x00a9f48f
0x00000000
0x00000000
0x00a9f492
0x00a9f498
0x00a9f49a
0x00a9f49c
0x00a9f49e
0x00a9f4a1
0x00a9f4a3
0x00a9f4a8
0x00000000
0x00000000
0x00000000
0x00a9f4a8
0x00a9f4aa
0x00a9f4b0
0x00a9f4b3
0x00a9f4b9
0x00a9f565
0x00a9f4bf
0x00a9f4c4
0x00a9f4c7
0x00a9f4d5
0x00a9f548
0x00a9f54e
0x00a9f4d7
0x00a9f4d7
0x00a9f4dd
0x00a9f543
0x00a9f4df
0x00a9f4df
0x00a9f4e4
0x00a9f4e7
0x00a9f4eb
0x00a9f4f2
0x00a9f4f5
0x00a9f4f5
0x00a9f4f7
0x00a9f4f7
0x00a9f4fa
0x00a9f500
0x00a9f502
0x00a9f502
0x00a9f508
0x00000000
0x00000000
0x00a9f50b
0x00a9f50d
0x00a9f513
0x00000000
0x00000000
0x00000000
0x00a9f513
0x00a9f502
0x00a9f515
0x00a9f517
0x00a9f51a
0x00a9f51f
0x00000000
0x00000000
0x00000000
0x00000000
0x00a9f51f
0x00a9f4dd
0x00a9f4d5
0x00a9f4b9
0x00000000
0x00a9f45f
0x00a9f3d3
0x00000000
0x00a9f3c7
0x00000000

APIs

Part of subcall function 00A9F830: CharNextW.USER32(?,745EEEF0,00A9E28C,?,00A9F018,00A9E28C), ref: 00A9F857

CharNextW.USER32(00A9E28A,00A9E28A,00000000,00A9E28C,00000000,00A9E28C,00A9E28C), ref: 00A9F40C
CharNextW.USER32(?,00A9E28A,00000000,00A9E28C,00000000,00A9E28C,00A9E28C), ref: 00A9F441
CharNextW.USER32(?,00A9E28A,00000000,00A9E28C,00000000,00A9E28C,00A9E28C), ref: 00A9F492
CharNextW.USER32(00000002,00A9E288,00A9E28C,00000022,00A9E28A,00000000,00A9E28C,00000000,00A9E28C,00A9E28C), ref: 00A9F50B

Strings

Error while parsing attributes, xrefs: 00A9F56C
Error while parsing attribute string, xrefs: 00A9F531
Expected attribute value, xrefs: 00A9F555

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: CharNext
String ID: Error while parsing attribute string$Error while parsing attributes$Expected attribute value
API String ID: 3213498283-2127762582
Opcode ID: 9c4e679e507e6c115a848093ac30e542f53eb0faebdcad8c2674ef046d209c05
Instruction ID: 8015ae6518939244497fac3254b06fa8b24c4195ac0b4c6ca9c3b80813377a23
Opcode Fuzzy Hash: 9c4e679e507e6c115a848093ac30e542f53eb0faebdcad8c2674ef046d209c05
Instruction Fuzzy Hash: A551BC757002018FCF24EF5DD48097AB3E6EFA8361B25447AE985CB390EA35CC82C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 00A95880, Relevance: 12.4, APIs: 4, Strings: 3, Instructions: 178
memoryCOMMON

Download Yara Rule

C-Code - Quality: 42%

			E00A95880(void* __ebx, intOrPtr __ecx, void* __edx, void* __edi, void* __esi, intOrPtr _a4) {
				intOrPtr* _v0;
				char _v8;
				char _v16;
				signed int _v20;
				char _v220;
				char _v2068;
				char _v2200;
				char _v2204;
				char _v2208;
				char _v2212;
				intOrPtr _v2216;
				intOrPtr _v2228;
				char _v2232;
				void* __ebp;
				signed int _t55;
				signed int _t56;
				intOrPtr* _t74;
				void* _t76;
				signed int _t78;
				void* _t99;
				intOrPtr* _t110;
				intOrPtr* _t111;
				intOrPtr* _t115;
				void* _t121;
				intOrPtr _t124;
				char _t126;
				intOrPtr* _t127;
				intOrPtr _t129;
				char _t131;
				void* _t132;
				signed int _t133;
				void* _t136;
				void* _t137;
				void* _t145;

				_t121 = __edx;
				_t99 = __ebx;
				_push(0xffffffff);
				_push(0xb289b1);
				_push( *[fs:0x0]);
				_t137 = _t136 - 0x8a8;
				_t55 =  *0xb6aa7c; // 0x5cc80e5b
				_t56 = _t55 ^ _t133;
				_v20 = _t56;
				_push(_t56);
				 *[fs:0x0] =  &_v16;
				_t129 = __ecx;
				_v2216 = __ecx;
				_t124 = _a4;
				if( *((intOrPtr*)(__ecx + 0x618)) == 0 || _t124 == 0) {
					L14:
					 *[fs:0x0] = _v16;
					return E00AE4BF8(_v20 ^ _t133);
				} else {
					E00A893C0( &_v2200, 0xb2daf8, 0xffffffff);
					_v8 = 0;
					E00A896B0( &_v2200, _t129, _t124);
					if(E00A89780( &_v2200, L"about:noop") != 0) {
						L13:
						E00A754A0( &_v2200);
						goto L14;
					} else {
						_t109 = _t129 + 0xf50;
						E00A89600(_t129 + 0xf50,  &_v2200);
						_t141 =  *((intOrPtr*)(_t129 + 0xeb8));
						if( *((intOrPtr*)(_t129 + 0xeb8)) != 0) {
							asm("xorps xmm0, xmm0");
							asm("movlpd [ebp-0x8a0], xmm0");
							E00AFBF34(_t109, _t121, _t141,  &_v2212);
							E00AF4C50(_t124,  &_v220, 0, 0xc8);
							_push(_v2208);
							E00A74540( &_v220, 0x64, L"%lld", _v2212);
							_t137 = _t137 + 0x24;
							E00A89920( &_v2200,  &_v220);
						}
						asm("xorps xmm0, xmm0");
						asm("movups [ebp-0x8b4], xmm0");
						__imp__#8( &_v2232);
						_v8 = 1;
						_t110 = E00A84B40();
						if(_t110 == 0) {
							_push(0x80004005);
							E00A43FD0(_t99, _t124, _t129);
							asm("int3");
							asm("int3");
							asm("int3");
							_push(_t133);
							_t111 =  *((intOrPtr*)(_v2228 + 0xb0));
							__eflags = _t111;
							if(_t111 != 0) {
								_v0 = _t111;
								goto ( *((intOrPtr*)( *_t111 + 0x6c)));
							}
							return 0x80004001;
						} else {
							_t23 =  *((intOrPtr*)( *((intOrPtr*)( *_t110 + 0xc))))() + 0x10; // 0x10
							_t126 = _t23;
							_v2204 = _t126;
							_t74 =  *0xb718ac; // 0x7a6c80
							_v8 = 2;
							_t131 =  *_t74;
							_v2208 = _t131;
							if(_t131 != _t74) {
								do {
									E00AF4C50(_t126,  &_v2068, 0, 0x800);
									_push( *((intOrPtr*)(_t131 + 0x14)));
									E00A74540( &_v2068, 0x400, L"%s: %s",  *((intOrPtr*)(_t131 + 0x10)));
									_t137 = _t137 + 0x20;
									if( *((intOrPtr*)(_t126 - 0xc)) != 0) {
										E00A7E6B0( &_v2204, _t126, L"\r\n");
									}
									E00A7E6B0( &_v2204, _t126,  &_v2068);
									_t74 = E00A77B30( &_v2208);
									_t131 = _v2208;
									_t126 = _v2204;
									_t145 = _t131 -  *0xb718ac; // 0x7a6c80
								} while (_t145 != 0);
							}
							E00A93BF0(_t74,  &_v2232, _t126, _t126);
							_t76 = E00A5A690( &_v2200);
							__imp__#2(_t76);
							_t132 = _t76;
							_t115 =  *((intOrPtr*)(_v2216 + 0x618));
							_t78 =  *((intOrPtr*)( *_t115 + 0x2c))(_t115, _t132, 0, 0, 0,  &_v2232);
							__imp__#6(_t132);
							_v8 = 1;
							_t127 = _t126 + 0xfffffff0;
							asm("lock xadd [edi+0xc], eax");
							if((_t78 | 0xffffffff) - 1 <= 0) {
								 *((intOrPtr*)( *((intOrPtr*)( *_t127)) + 4))(_t127);
							}
							__imp__#9( &_v2232);
							goto L13;
						}
					}
				}
			}

0x00a95880
0x00a95880
0x00a95883
0x00a95885
0x00a95890
0x00a95891
0x00a95897
0x00a9589c
0x00a9589e
0x00a958a3
0x00a958a7
0x00a958ad
0x00a958af
0x00a958bc
0x00a958bf
0x00a95ac6
0x00a95ac9
0x00a95ae0
0x00a958cd
0x00a958da
0x00a958e6
0x00a958ed
0x00a95904
0x00a95abb
0x00a95ac1
0x00000000
0x00a9590a
0x00a95911
0x00a95917
0x00a9591c
0x00a95923
0x00a9592b
0x00a9592f
0x00a95937
0x00a9594a
0x00a9594f
0x00a95969
0x00a9596e
0x00a9597e
0x00a9597e
0x00a95989
0x00a9598d
0x00a95994
0x00a9599a
0x00a959a3
0x00a959a7
0x00a95ae3
0x00a95ae8
0x00a95aed
0x00a95aee
0x00a95aef
0x00a95af0
0x00a95af6
0x00a95afc
0x00a95afe
0x00a95b02
0x00a95b06
0x00a95b06
0x00a95b0f
0x00a959ad
0x00a959b4
0x00a959b4
0x00a959b7
0x00a959bd
0x00a959c2
0x00a959c6
0x00a959c8
0x00a959d0
0x00a959d2
0x00a959e0
0x00a959e5
0x00a959fc
0x00a95a01
0x00a95a08
0x00a95a15
0x00a95a15
0x00a95a27
0x00a95a32
0x00a95a37
0x00a95a3d
0x00a95a43
0x00a95a43
0x00a959d2
0x00a95a52
0x00a95a5d
0x00a95a63
0x00a95a6f
0x00a95a7a
0x00a95a88
0x00a95a8c
0x00a95a92
0x00a95a96
0x00a95a9c
0x00a95aa4
0x00a95aab
0x00a95aab
0x00a95ab5
0x00000000
0x00a95ab5
0x00a959a7
0x00a95904

APIs

VariantInit.OLEAUT32(5CC80E5B), ref: 00A95994
SysAllocString.OLEAUT32(00000000), ref: 00A95A63
SysFreeString.OLEAUT32(00000000), ref: 00A95A8C
VariantClear.OLEAUT32(5CC80E5B), ref: 00A95AB5

Strings

%s: %s, xrefs: 00A959F1
about:noop, xrefs: 00A958F2
%lld, xrefs: 00A95961

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: StringVariant$AllocClearFreeInit
String ID: %lld$%s: %s$about:noop
API String ID: 760788290-1016184914
Opcode ID: 9a74b2be7b128c1cdd4d60684967e87af872272d689693a6edf1a74ac9d25114
Instruction ID: fdd0feaa5b6fcd1f70a911db14dbe143957b0e72d1fa57439cd1e96008227e7d
Opcode Fuzzy Hash: 9a74b2be7b128c1cdd4d60684967e87af872272d689693a6edf1a74ac9d25114
Instruction Fuzzy Hash: 6F6191319002189FDB20EB64CD46FEAB7F8BF05310F1881E9E559A7691DF70AA85CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00AF4051, Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 87
COMMON

Download Yara Rule

C-Code - Quality: 15%

			E00AF4051(void* __ebx, void* __edi) {
				signed char _t126;
				int _t127;
				void* _t130;
				void* _t136;
				signed int _t138;
				void _t146;
				void _t147;
				int _t149;
				unsigned int _t150;
				int _t151;
				signed int _t163;
				int _t172;
				unsigned int _t173;
				int _t174;
				int _t176;
				int _t181;
				intOrPtr* _t185;
				signed int _t190;
				unsigned int _t194;
				int _t195;
				int _t197;
				signed int _t203;
				intOrPtr _t205;
				void* _t207;
				signed int _t215;
				void* _t223;
				void* _t225;
				void* _t228;
				void* _t229;
				void* _t230;
				intOrPtr* _t232;
				void* _t236;
				void* _t238;
				void* _t239;
				void* _t241;
				void* _t243;

				E00AE57F0(__ebx, __edi, 0xb661c0, 0x14);
				_t185 =  *((intOrPtr*)(_t236 + 8));
				if(_t185 != 0) {
					 *(_t236 - 4) =  *(_t236 - 4) & 0x00000000;
					_t205 =  *((intOrPtr*)( *_t185 - 4));
					_t163 =  *(_t205 + 8);
					asm("sbb ecx, ecx");
					_t165 =  ~_t163 &  *(_t185 - _t163);
					_t223 = _t185 -  *((intOrPtr*)(_t205 + 4)) - ( ~_t163 &  *(_t185 - _t163));
					_t126 =  *( *((intOrPtr*)(_t205 + 0x10)) + 4);
					_push( *((intOrPtr*)(_t236 + 0x14)));
					__eflags = _t126 & 0x00000001;
					if((_t126 & 0x00000001) != 0) {
						_push(_t185 -  *((intOrPtr*)(_t236 + 0xc)) - _t223);
						_push( *((intOrPtr*)(_t236 + 0x10)));
						_push(_t205);
						_push(_t223);
						__eflags = _t126 & 0x00000002;
						if((_t126 & 0x00000002) != 0) {
							_t127 = E00AF3E4B(_t165);
						} else {
							_t127 = E00AF3C75(_t165);
						}
						_t239 = _t238 + 0x14;
					} else {
						_push( *((intOrPtr*)(_t236 + 0x10)));
						_push(_t205);
						_t127 = E00AF3D62(_t165);
						_t239 = _t238 + 0xc;
					}
					__eflags = _t127;
					if(_t127 != 0) {
						_t130 = E00AF3FAF(_t223, _t127 + 8) + _t223;
						 *(_t236 - 4) = 0xfffffffe;
						goto L2;
					} else {
						__eflags =  *((intOrPtr*)(_t236 + 0x18)) - _t127;
						if( *((intOrPtr*)(_t236 + 0x18)) != _t127) {
							E00AF4035(_t236 - 0x24, "Bad dynamic_cast!");
							E00AF3827(_t236 - 0x24, 0xb6313c);
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							_push(_t205);
							_push(_t223);
							_t225 =  *(_t239 + 0x10);
							_t172 =  *(_t239 + 0x14);
							_t207 =  *(_t239 + 0xc);
							_t136 = _t225 + _t172;
							__eflags = _t207 - _t225;
							if(_t207 <= _t225) {
								L16:
								__eflags = _t172 - 0x20;
								if(_t172 < 0x20) {
									L87:
									_t173 = _t172 & 0x0000001f;
									__eflags = _t173;
									if(_t173 != 0) {
										_t138 = _t173;
										_t174 = _t173 >> 2;
										__eflags = _t174;
										while(_t174 != 0) {
											 *_t207 =  *_t225;
											_t207 = _t207 + 4;
											_t225 = _t225 + 4;
											_t174 = _t174 - 1;
											__eflags = _t174;
										}
										_t176 = _t138 & 0x00000003;
										__eflags = _t176;
										while(_t176 != 0) {
											 *_t207 =  *_t225;
											_t225 = _t225 + 1;
											_t207 = _t207 + 1;
											_t176 = _t176 - 1;
											__eflags = _t176;
										}
									}
									goto L93;
								} else {
									__eflags = _t172 - 0x80;
									if(__eflags >= 0) {
										asm("bt dword [0xb72038], 0x1");
										if(__eflags >= 0) {
											__eflags = (_t207 ^ _t225) & 0x0000000f;
											if(__eflags != 0) {
												L24:
												asm("bt dword [0xb72038], 0x0");
												if(__eflags >= 0) {
													goto L49;
												} else {
													__eflags = _t207 & 0x00000003;
													if((_t207 & 0x00000003) != 0) {
														goto L49;
													} else {
														__eflags = _t225 & 0x00000003;
														if(__eflags == 0) {
															asm("bt edi, 0x2");
															if(__eflags < 0) {
																_t147 =  *_t225;
																_t172 = _t172 - 4;
																__eflags = _t172;
																_t225 = _t225 + 4;
																 *_t207 = _t147;
																_t207 = _t207 + 4;
															}
															asm("bt edi, 0x3");
															if(__eflags < 0) {
																asm("movq xmm1, [esi]");
																_t172 = _t172 - 8;
																__eflags = _t172;
																_t225 = _t225 + 8;
																asm("movq [edi], xmm1");
																_t207 = _t207 + 8;
															}
															__eflags = _t225 & 0x00000007;
															if(__eflags == 0) {
																asm("movdqa xmm1, [esi-0x8]");
																_t228 = _t225 - 8;
																do {
																	asm("movdqa xmm3, [esi+0x10]");
																	_t172 = _t172 - 0x30;
																	asm("movdqa xmm0, [esi+0x20]");
																	asm("movdqa xmm5, [esi+0x30]");
																	_t228 = _t228 + 0x30;
																	__eflags = _t172 - 0x30;
																	asm("movdqa xmm2, xmm3");
																	asm("palignr xmm3, xmm1, 0x8");
																	asm("movdqa [edi], xmm3");
																	asm("movdqa xmm4, xmm0");
																	asm("palignr xmm0, xmm2, 0x8");
																	asm("movdqa [edi+0x10], xmm0");
																	asm("movdqa xmm1, xmm5");
																	asm("palignr xmm5, xmm4, 0x8");
																	asm("movdqa [edi+0x20], xmm5");
																	_t207 = _t207 + 0x30;
																} while (_t172 >= 0x30);
																_t225 = _t228 + 8;
															} else {
																asm("bt esi, 0x3");
																if(__eflags >= 0) {
																	asm("movdqa xmm1, [esi-0x4]");
																	_t229 = _t225 - 4;
																	do {
																		asm("movdqa xmm3, [esi+0x10]");
																		_t172 = _t172 - 0x30;
																		asm("movdqa xmm0, [esi+0x20]");
																		asm("movdqa xmm5, [esi+0x30]");
																		_t229 = _t229 + 0x30;
																		__eflags = _t172 - 0x30;
																		asm("movdqa xmm2, xmm3");
																		asm("palignr xmm3, xmm1, 0x4");
																		asm("movdqa [edi], xmm3");
																		asm("movdqa xmm4, xmm0");
																		asm("palignr xmm0, xmm2, 0x4");
																		asm("movdqa [edi+0x10], xmm0");
																		asm("movdqa xmm1, xmm5");
																		asm("palignr xmm5, xmm4, 0x4");
																		asm("movdqa [edi+0x20], xmm5");
																		_t207 = _t207 + 0x30;
																	} while (_t172 >= 0x30);
																	_t225 = _t229 + 4;
																	while(1) {
																		L42:
																		__eflags = _t172 - 0x10;
																		if(__eflags < 0) {
																			break;
																		}
																		asm("movdqu xmm1, [esi]");
																		_t172 = _t172 - 0x10;
																		_t225 = _t225 + 0x10;
																		asm("movdqa [edi], xmm1");
																		_t207 = _t207 + 0x10;
																	}
																	asm("bt ecx, 0x2");
																	if(__eflags < 0) {
																		_t146 =  *_t225;
																		_t172 = _t172 - 4;
																		__eflags = _t172;
																		_t225 = _t225 + 4;
																		 *_t207 = _t146;
																		_t207 = _t207 + 4;
																	}
																	asm("bt ecx, 0x3");
																	if(__eflags < 0) {
																		asm("movq xmm1, [esi]");
																		__eflags = _t172;
																		_t225 = _t225 + 8;
																		asm("movq [edi], xmm1");
																		_t207 = _t207 + 8;
																	}
																	goto __eax;
																}
																asm("movdqa xmm1, [esi-0xc]");
																_t230 = _t225 - 0xc;
																do {
																	asm("movdqa xmm3, [esi+0x10]");
																	_t172 = _t172 - 0x30;
																	asm("movdqa xmm0, [esi+0x20]");
																	asm("movdqa xmm5, [esi+0x30]");
																	_t230 = _t230 + 0x30;
																	__eflags = _t172 - 0x30;
																	asm("movdqa xmm2, xmm3");
																	asm("palignr xmm3, xmm1, 0xc");
																	asm("movdqa [edi], xmm3");
																	asm("movdqa xmm4, xmm0");
																	asm("palignr xmm0, xmm2, 0xc");
																	asm("movdqa [edi+0x10], xmm0");
																	asm("movdqa xmm1, xmm5");
																	asm("palignr xmm5, xmm4, 0xc");
																	asm("movdqa [edi+0x20], xmm5");
																	_t207 = _t207 + 0x30;
																} while (_t172 >= 0x30);
																_t225 = _t230 + 0xc;
															}
															goto L42;
														}
													}
												}
												goto L51;
											} else {
												asm("bt dword [0xb6aa90], 0x1");
												if(__eflags < 0) {
													_t149 = _t225 & 0x0000000f;
													__eflags = _t149;
													if(_t149 != 0) {
														_push(_t172 - 0x10);
														_t150 = 0x10 - _t149;
														_t181 = _t150 & 0x00000003;
														__eflags = _t181;
														while(_t181 != 0) {
															 *_t207 =  *_t225;
															_t225 = _t225 + 1;
															_t207 = _t207 + 1;
															_t181 = _t181 - 1;
															__eflags = _t181;
														}
														_t151 = _t150 >> 2;
														__eflags = _t151;
														while(_t151 != 0) {
															 *_t207 =  *_t225;
															_t225 = _t225 + 4;
															_t207 = _t207 + 4;
															_t151 = _t151 - 1;
															__eflags = _t151;
														}
														_pop(_t172);
													}
													_t194 = _t172;
													_t172 = _t172 & 0x0000007f;
													_t195 = _t194 >> 7;
													__eflags = _t195;
													while(_t195 != 0) {
														asm("movdqa xmm0, [esi]");
														asm("movdqa xmm1, [esi+0x10]");
														asm("movdqa xmm2, [esi+0x20]");
														asm("movdqa xmm3, [esi+0x30]");
														asm("movdqa [edi], xmm0");
														asm("movdqa [edi+0x10], xmm1");
														asm("movdqa [edi+0x20], xmm2");
														asm("movdqa [edi+0x30], xmm3");
														asm("movdqa xmm4, [esi+0x40]");
														asm("movdqa xmm5, [esi+0x50]");
														asm("movdqa xmm6, [esi+0x60]");
														asm("movdqa xmm7, [esi+0x70]");
														asm("movdqa [edi+0x40], xmm4");
														asm("movdqa [edi+0x50], xmm5");
														asm("movdqa [edi+0x60], xmm6");
														asm("movdqa [edi+0x70], xmm7");
														_t225 = _t225 + 0x80;
														_t207 = _t207 + 0x80;
														_t195 = _t195 - 1;
														__eflags = _t195;
													}
													goto L83;
												} else {
													goto L24;
												}
											}
										} else {
											memcpy(_t207, _t225, _t172);
											return  *((intOrPtr*)(_t239 + 0x18));
										}
									} else {
										asm("bt dword [0xb6aa90], 0x1");
										if(__eflags < 0) {
											L83:
											__eflags = _t172;
											if(_t172 != 0) {
												_t197 = _t172 >> 5;
												__eflags = _t197;
												if(_t197 != 0) {
													do {
														asm("movdqu xmm0, [esi]");
														asm("movdqu xmm1, [esi+0x10]");
														asm("movdqu [edi], xmm0");
														asm("movdqu [edi+0x10], xmm1");
														_t225 = _t225 + 0x20;
														_t207 = _t207 + 0x20;
														_t197 = _t197 - 1;
														__eflags = _t197;
													} while (_t197 != 0);
												}
												goto L87;
											}
											L93:
											return  *(_t239 + 0xc);
										} else {
											L49:
											__eflags = _t207 & 0x00000003;
											while((_t207 & 0x00000003) != 0) {
												 *_t207 =  *_t225;
												_t172 = _t172 - 1;
												_t225 = _t225 + 1;
												_t207 = _t207 + 1;
												__eflags = _t207 & 0x00000003;
											}
											L51:
											_t190 = _t172;
											__eflags = _t172 - 0x20;
											if(_t172 < 0x20) {
												goto L87;
											} else {
												memcpy(_t207, _t225, _t172 >> 2 << 2);
												_t241 = _t239 + 0xc;
												switch( *((intOrPtr*)((_t190 & 0x00000003) * 4 +  &M00AF43B4))) {
													case 0:
														return  *((intOrPtr*)(_t241 + 0xc));
														goto L99;
													case 1:
														 *__edi =  *__esi;
														__eax =  *((intOrPtr*)(__esp + 0xc));
														_pop(__esi);
														_pop(__edi);
														return __eax;
														goto L99;
													case 2:
														 *__edi =  *__esi;
														_t68 = __esi + 1; // 0xc0330cc4
														 *((char*)(__edi + 1)) =  *_t68;
														__eax =  *((intOrPtr*)(__esp + 0xc));
														_pop(__esi);
														_pop(__edi);
														return __eax;
														goto L99;
													case 3:
														 *__edi =  *__esi;
														 *((char*)(__edi + 1)) =  *((intOrPtr*)(__esi + 1));
														 *((char*)(__edi + 2)) =  *((intOrPtr*)(__esi + 2));
														__eax =  *((intOrPtr*)(__esp + 0xc));
														_pop(__esi);
														_pop(__edi);
														return __eax;
														goto L99;
												}
											}
										}
									}
								}
							} else {
								__eflags = _t207 - _t136;
								if(_t207 < _t136) {
									_t232 = _t225 + _t172;
									_t215 = _t207 + _t172;
									__eflags = _t172 - 0x20;
									if(__eflags < 0) {
										L74:
										__eflags = _t172 & 0xfffffffc;
										while((_t172 & 0xfffffffc) != 0) {
											_t215 = _t215 - 4;
											_t232 = _t232 - 4;
											 *_t215 =  *_t232;
											_t172 = _t172 - 4;
											__eflags = _t172 & 0xfffffffc;
										}
										__eflags = _t172;
										if(_t172 != 0) {
											do {
												_t215 = _t215 - 1;
												_t232 = _t232 - 1;
												 *_t215 =  *_t232;
												_t172 = _t172 - 1;
												__eflags = _t172;
											} while (_t172 != 0);
										}
										return  *(_t239 + 0xc);
									} else {
										asm("bt dword [0xb6aa90], 0x1");
										if(__eflags < 0) {
											__eflags = _t215 & 0x0000000f;
											if((_t215 & 0x0000000f) != 0) {
												do {
													_t172 = _t172 - 1;
													_t232 = _t232 - 1;
													_t215 = _t215 - 1;
													 *_t215 =  *_t232;
													__eflags = _t215 & 0x0000000f;
												} while ((_t215 & 0x0000000f) != 0);
												while(1) {
													L70:
													__eflags = _t172 - 0x80;
													if(_t172 < 0x80) {
														break;
													}
													_t232 = _t232 - 0x80;
													_t215 = _t215 - 0x80;
													asm("movdqu xmm0, [esi]");
													asm("movdqu xmm1, [esi+0x10]");
													asm("movdqu xmm2, [esi+0x20]");
													asm("movdqu xmm3, [esi+0x30]");
													asm("movdqu xmm4, [esi+0x40]");
													asm("movdqu xmm5, [esi+0x50]");
													asm("movdqu xmm6, [esi+0x60]");
													asm("movdqu xmm7, [esi+0x70]");
													asm("movdqu [edi], xmm0");
													asm("movdqu [edi+0x10], xmm1");
													asm("movdqu [edi+0x20], xmm2");
													asm("movdqu [edi+0x30], xmm3");
													asm("movdqu [edi+0x40], xmm4");
													asm("movdqu [edi+0x50], xmm5");
													asm("movdqu [edi+0x60], xmm6");
													asm("movdqu [edi+0x70], xmm7");
													_t172 = _t172 - 0x80;
													__eflags = _t172 & 0xffffff80;
													if((_t172 & 0xffffff80) != 0) {
														continue;
													}
													break;
												}
												__eflags = _t172 - 0x20;
												if(_t172 >= 0x20) {
													do {
														_t232 = _t232 - 0x20;
														_t215 = _t215 - 0x20;
														asm("movdqu xmm0, [esi]");
														asm("movdqu xmm1, [esi+0x10]");
														asm("movdqu [edi], xmm0");
														asm("movdqu [edi+0x10], xmm1");
														_t172 = _t172 - 0x20;
														__eflags = _t172 & 0xffffffe0;
													} while ((_t172 & 0xffffffe0) != 0);
												}
												goto L74;
											}
											goto L70;
										} else {
											__eflags = _t215 & 0x00000003;
											if((_t215 & 0x00000003) != 0) {
												_t203 = _t215 & 0x00000003;
												_t172 = _t172 - _t203;
												__eflags = _t172;
												do {
													 *(_t215 - 1) =  *((intOrPtr*)(_t232 - 1));
													_t232 = _t232 - 1;
													_t215 = _t215 - 1;
													_t203 = _t203 - 1;
													__eflags = _t203;
												} while (_t203 != 0);
											}
											__eflags = _t172 - 0x20;
											if(_t172 < 0x20) {
												goto L74;
											} else {
												asm("std");
												memcpy(_t215 - 4, _t232 - 4, _t172 >> 2 << 2);
												_t243 = _t239 + 0xc;
												asm("cld");
												switch( *((intOrPtr*)((_t172 & 0x00000003) * 4 +  &M00AF4460))) {
													case 0:
														return  *((intOrPtr*)(_t243 + 0xc));
														goto L99;
													case 1:
														 *((char*)(__edi + 3)) =  *((intOrPtr*)(__esi + 3));
														__eax =  *((intOrPtr*)(__esp + 0xc));
														_pop(__esi);
														_pop(__edi);
														return __eax;
														goto L99;
													case 2:
														_t89 = __esi + 3; // 0x5b5fc033
														 *((char*)(__edi + 3)) =  *_t89;
														_t91 = __esi + 2; // 0x5fc0330c
														 *((char*)(__edi + 2)) =  *_t91;
														__eax =  *((intOrPtr*)(__esp + 0xc));
														_pop(__esi);
														_pop(__edi);
														return __eax;
														goto L99;
													case 3:
														 *((char*)(__edi + 3)) =  *((intOrPtr*)(__esi + 3));
														 *((char*)(__edi + 2)) =  *((intOrPtr*)(__esi + 2));
														 *((char*)(__edi + 1)) =  *((intOrPtr*)(__esi + 1));
														__eax =  *((intOrPtr*)(__esp + 0xc));
														_pop(__esi);
														_pop(__edi);
														return __eax;
														goto L99;
												}
											}
										}
									}
								} else {
									goto L16;
								}
							}
						} else {
							 *(_t236 - 4) = 0xfffffffe;
							goto L1;
						}
					}
				} else {
					L1:
					_t130 = 0;
					L2:
					 *[fs:0x0] =  *((intOrPtr*)(_t236 - 0x10));
					return _t130;
				}
				L99:
			}

0x00af4058
0x00af405d
0x00af4062
0x00af4076
0x00af407c
0x00af4084
0x00af408d
0x00af408f
0x00af4091
0x00af4096
0x00af4099
0x00af409c
0x00af409e
0x00af40b3
0x00af40b4
0x00af40b7
0x00af40b8
0x00af40b9
0x00af40bb
0x00af40c4
0x00af40bd
0x00af40bd
0x00af40bd
0x00af40c9
0x00af40a0
0x00af40a0
0x00af40a3
0x00af40a4
0x00af40a9
0x00af40a9
0x00af40cc
0x00af40ce
0x00af40ea
0x00af40ec
0x00000000
0x00af40d0
0x00af40d0
0x00af40d3
0x00af412e
0x00af413e
0x00af4143
0x00af4144
0x00af4145
0x00af4146
0x00af4147
0x00af4148
0x00af4149
0x00af414a
0x00af414b
0x00af414c
0x00af414d
0x00af414e
0x00af414f
0x00af4150
0x00af4151
0x00af4152
0x00af4156
0x00af415a
0x00af4162
0x00af4164
0x00af4166
0x00af4170
0x00af4170
0x00af4173
0x00af464b
0x00af464b
0x00af464b
0x00af464e
0x00af4650
0x00af4652
0x00af4652
0x00af4655
0x00af4659
0x00af465b
0x00af465e
0x00af4661
0x00af4661
0x00af4661
0x00af4668
0x00af4668
0x00af466b
0x00af466f
0x00af4671
0x00af4672
0x00af4673
0x00af4673
0x00af4673
0x00af466b
0x00000000
0x00af4179
0x00af4179
0x00af417f
0x00af4194
0x00af419c
0x00af41ab
0x00af41b0
0x00af41c0
0x00af41c0
0x00af41c8
0x00000000
0x00af41ce
0x00af41ce
0x00af41d4
0x00000000
0x00af41da
0x00af41da
0x00af41e0
0x00af41e6
0x00af41ea
0x00af41ec
0x00af41ee
0x00af41ee
0x00af41f1
0x00af41f4
0x00af41f6
0x00af41f6
0x00af41f9
0x00af41fd
0x00af41ff
0x00af4203
0x00af4203
0x00af4206
0x00af4209
0x00af420d
0x00af420d
0x00af4210
0x00af4216
0x00af427d
0x00af4282
0x00af4288
0x00af4288
0x00af428d
0x00af4290
0x00af4295
0x00af429a
0x00af429d
0x00af42a0
0x00af42a4
0x00af42aa
0x00af42ae
0x00af42b2
0x00af42b8
0x00af42bd
0x00af42c1
0x00af42c7
0x00af42cc
0x00af42cc
0x00af42d1
0x00af4218
0x00af4218
0x00af421c
0x00af42d6
0x00af42db
0x00af42e0
0x00af42e0
0x00af42e5
0x00af42e8
0x00af42ed
0x00af42f2
0x00af42f5
0x00af42f8
0x00af42fc
0x00af4302
0x00af4306
0x00af430a
0x00af4310
0x00af4315
0x00af4319
0x00af431f
0x00af4324
0x00af4324
0x00af4329
0x00af432c
0x00af432c
0x00af432c
0x00af432f
0x00000000
0x00000000
0x00af4331
0x00af4335
0x00af4338
0x00af433b
0x00af433f
0x00af433f
0x00af4344
0x00af4348
0x00af434a
0x00af434c
0x00af434c
0x00af434f
0x00af4352
0x00af4354
0x00af4354
0x00af4357
0x00af435b
0x00af435d
0x00af4361
0x00af4364
0x00af4367
0x00af436b
0x00af436b
0x00af4375
0x00af4375
0x00af4222
0x00af4227
0x00af422c
0x00af422c
0x00af4231
0x00af4234
0x00af4239
0x00af423e
0x00af4241
0x00af4244
0x00af4248
0x00af424e
0x00af4252
0x00af4256
0x00af425c
0x00af4261
0x00af4265
0x00af426b
0x00af4270
0x00af4270
0x00af4275
0x00af4275
0x00000000
0x00af4216
0x00af41e0
0x00af41d4
0x00000000
0x00af41b2
0x00af41b2
0x00af41ba
0x00af45a2
0x00af45a5
0x00af45a7
0x00af4699
0x00af469a
0x00af469e
0x00af469e
0x00af46a1
0x00af46a5
0x00af46a7
0x00af46a8
0x00af46a9
0x00af46a9
0x00af46a9
0x00af46ac
0x00af46ac
0x00af46af
0x00af46b3
0x00af46b5
0x00af46b8
0x00af46bb
0x00af46bb
0x00af46bb
0x00af46be
0x00af46be
0x00af45ad
0x00af45af
0x00af45b2
0x00af45b2
0x00af45b5
0x00af45c0
0x00af45c4
0x00af45c9
0x00af45ce
0x00af45d3
0x00af45d7
0x00af45dc
0x00af45e1
0x00af45e6
0x00af45eb
0x00af45f0
0x00af45f5
0x00af45fa
0x00af45ff
0x00af4604
0x00af4609
0x00af460e
0x00af4614
0x00af461a
0x00af461a
0x00af461a
0x00000000
0x00000000
0x00000000
0x00000000
0x00af41ba
0x00af419e
0x00af419e
0x00af41a6
0x00af41a6
0x00af4181
0x00af4181
0x00af4189
0x00af461d
0x00af461d
0x00af461f
0x00af4623
0x00af4626
0x00af4628
0x00af4630
0x00af4630
0x00af4634
0x00af4639
0x00af463d
0x00af4642
0x00af4645
0x00af4648
0x00af4648
0x00af4648
0x00af4630
0x00000000
0x00af4628
0x00af4680
0x00af4686
0x00af418f
0x00af4377
0x00af4377
0x00af437d
0x00af4381
0x00af4383
0x00af4384
0x00af4387
0x00af438a
0x00af438a
0x00af4392
0x00af4392
0x00af4394
0x00af4397
0x00000000
0x00af439d
0x00af43a0
0x00af43a0
0x00af43a5
0x00000000
0x00af43ca
0x00000000
0x00000000
0x00af43ce
0x00af43d0
0x00af43d4
0x00af43d5
0x00af43d6
0x00000000
0x00000000
0x00af43da
0x00af43dc
0x00af43df
0x00af43e2
0x00af43e6
0x00af43e7
0x00af43e8
0x00000000
0x00000000
0x00af43ee
0x00af43f3
0x00af43f9
0x00af43fc
0x00af4400
0x00af4401
0x00af4402
0x00000000
0x00000000
0x00af43a5
0x00af4397
0x00af4189
0x00af417f
0x00af4168
0x00af4168
0x00af416a
0x00af4404
0x00af4407
0x00af440a
0x00af440d
0x00af4564
0x00af4564
0x00af456a
0x00af456c
0x00af456f
0x00af4574
0x00af4576
0x00af4579
0x00af4579
0x00af4581
0x00af4583
0x00af4585
0x00af4585
0x00af4588
0x00af458d
0x00af458f
0x00af458f
0x00af458f
0x00af4585
0x00af459a
0x00af4413
0x00af4413
0x00af441b
0x00af44b5
0x00af44bb
0x00af44bd
0x00af44bd
0x00af44be
0x00af44bf
0x00af44c2
0x00af44c4
0x00af44c4
0x00af44cc
0x00af44cc
0x00af44cc
0x00af44d2
0x00000000
0x00000000
0x00af44d4
0x00af44da
0x00af44e0
0x00af44e4
0x00af44e9
0x00af44ee
0x00af44f3
0x00af44f8
0x00af44fd
0x00af4502
0x00af4507
0x00af450b
0x00af4510
0x00af4515
0x00af451a
0x00af451f
0x00af4524
0x00af4529
0x00af452e
0x00af4534
0x00af453a
0x00000000
0x00000000
0x00000000
0x00af453a
0x00af453c
0x00af453f
0x00af4541
0x00af4541
0x00af4544
0x00af4547
0x00af454b
0x00af4550
0x00af4554
0x00af4559
0x00af455c
0x00af455c
0x00af4541
0x00000000
0x00af453f
0x00000000
0x00af4421
0x00af4421
0x00af4427
0x00af442b
0x00af442e
0x00af442e
0x00af4430
0x00af4433
0x00af4436
0x00af4437
0x00af4438
0x00af4438
0x00af4438
0x00af4430
0x00af443d
0x00af4440
0x00000000
0x00af4446
0x00af4454
0x00af4455
0x00af4455
0x00af4457
0x00af4458
0x00000000
0x00af4476
0x00000000
0x00000000
0x00af447b
0x00af447e
0x00af4482
0x00af4483
0x00af4484
0x00000000
0x00000000
0x00af4488
0x00af448b
0x00af448e
0x00af4491
0x00af4494
0x00af4498
0x00af4499
0x00af449a
0x00000000
0x00000000
0x00af449f
0x00af44a5
0x00af44ab
0x00af44ae
0x00af44b2
0x00af44b3
0x00af44b4
0x00000000
0x00000000
0x00af4458
0x00af4440
0x00af441b
0x00000000
0x00000000
0x00000000
0x00af416a
0x00af40d5
0x00af40d5
0x00000000
0x00af40d5
0x00af40d3
0x00af4064
0x00af4064
0x00af4064
0x00af4066
0x00af4069
0x00af4075
0x00af4075
0x00000000

APIs

FindSITargetTypeInstance.LIBVCRUNTIME ref: 00AF40A4
FindMITargetTypeInstance.LIBVCRUNTIME ref: 00AF40BD
FindVITargetTypeInstance.LIBVCRUNTIME ref: 00AF40C4
PMDtoOffset.LIBCMT ref: 00AF40E3

Strings

Bad dynamic_cast!, xrefs: 00AF4125

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: FindInstanceTargetType$Offset
String ID: Bad dynamic_cast!
API String ID: 1467055271-2956939130
Opcode ID: 89475ffde5c3c22db02fbe37f10f7e04642c1d40088da8b4d974e41f7e4ad851
Instruction ID: 9524ba294111c0c2c2e3e6eca5fa3696e65ab5ff442e80d0f1c6da179cd11a56
Opcode Fuzzy Hash: 89475ffde5c3c22db02fbe37f10f7e04642c1d40088da8b4d974e41f7e4ad851
Instruction Fuzzy Hash: C821F972A04609DFDF14DFE4DE06ABE77B4EB49720F108259FB1193290DB38EA008791

Uniqueness

Uniqueness Score: -1.00%

Function 00A90080, Relevance: 12.1, APIs: 8, Instructions: 124
COMMON

Download Yara Rule

C-Code - Quality: 65%

			E00A90080(void* __ebx, void* __ecx, void* __edx, void* __edi, void* __esi) {
				signed int _v8;
				struct tagRECT _v24;
				intOrPtr _v28;
				intOrPtr _v32;
				int _v36;
				void _v40;
				struct tagRECT _v56;
				intOrPtr _v60;
				signed int _t29;
				signed int _t33;
				struct HWND__* _t34;
				int _t53;
				int _t55;
				void* _t64;
				intOrPtr _t65;
				struct HWND__* _t67;
				int _t70;
				void* _t75;
				intOrPtr _t76;
				intOrPtr _t77;
				void* _t79;
				struct HWND__* _t81;
				int _t84;
				signed int _t86;

				_t75 = __edx;
				_t29 =  *0xb6aa7c; // 0x5cc80e5b
				_v8 = _t29 ^ _t86;
				_t79 = __ecx;
				asm("xorps xmm0, xmm0");
				asm("movups [ebp-0x34], xmm0");
				GetWindowRect( *(__ecx + 4),  &_v56);
				asm("xorps xmm0, xmm0");
				asm("movups [ebp-0x24], xmm0");
				asm("movups [ebp-0x14], xmm0");
				_t33 = GetWindowLongW( *(_t79 + 4), 0xfffffff0);
				_t67 =  *(_t79 + 4);
				if((_t33 & 0x40000000) == 0) {
					_t34 = GetWindow(_t67, 4);
				} else {
					_t34 = GetParent(_t67);
				}
				_t81 = _t34;
				if(_t81 != 0) {
					GetWindowLongW(_t81, 0xfffffff0);
					_t81 =  !=  ? 0 : _t81;
				}
				SystemParametersInfoW(0x30, 0,  &_v40, 0);
				if(_t81 != 0) {
					GetWindowRect(_t81,  &_v24);
				} else {
					asm("movups xmm0, [ebp-0x24]");
					asm("movups [ebp-0x14], xmm0");
				}
				_t64 = _v56.right - _v56.left;
				_v60 = _v56.bottom - _v56.top;
				asm("cdq");
				asm("cdq");
				_t84 = (_v24.right + _v24.left - _t75 >> 1) - (_t64 - _t75 >> 1);
				asm("cdq");
				asm("cdq");
				_t70 = (_v24.bottom + _v24.top - _t75 >> 1) - (_v60 - _t75 >> 1);
				_t53 = _v40;
				if(_t84 >= _t53) {
					_t76 = _v32;
					if(_t84 + _t64 > _t76) {
						_t84 = _t76 - _t64;
					}
				} else {
					_t84 = _t53;
				}
				_t55 = _v36;
				if(_t70 >= _t55) {
					_t65 = _v60;
					_t77 = _v28;
					if(_t70 + _t65 > _t77) {
						_t70 = _t77 - _t65;
					}
				} else {
					_t70 = _t55;
				}
				SetWindowPos( *(_t79 + 4), 0, _t84, _t70, 0xffffffff, 0xffffffff, 0x15);
				return E00AE4BF8(_v8 ^ _t86);
			}

0x00a90080
0x00a90086
0x00a9008d
0x00a9009c
0x00a9009e
0x00a900a2
0x00a900a9
0x00a900b0
0x00a900b3
0x00a900b7
0x00a900bb
0x00a900c1
0x00a900c9
0x00a900d7
0x00a900cb
0x00a900cc
0x00a900cc
0x00a900dd
0x00a900e1
0x00a900e6
0x00a900f8
0x00a900f8
0x00a90105
0x00a9010d
0x00a9011e
0x00a9010f
0x00a9010f
0x00a90113
0x00a90113
0x00a90129
0x00a9012c
0x00a90135
0x00a9013c
0x00a90143
0x00a9014b
0x00a90153
0x00a9015a
0x00a9015c
0x00a90161
0x00a90167
0x00a9016f
0x00a90173
0x00a90173
0x00a90163
0x00a90163
0x00a90163
0x00a90175
0x00a9017a
0x00a90180
0x00a90183
0x00a9018b
0x00a9018f
0x00a9018f
0x00a9017c
0x00a9017c
0x00a9017c
0x00a9019e
0x00a901b4

APIs

GetWindowRect.USER32 ref: 00A900A9
GetWindowLongW.USER32(00000000,000000F0), ref: 00A900BB
GetParent.USER32(00000000), ref: 00A900CC
GetWindow.USER32(00000000,00000004), ref: 00A900D7
GetWindowLongW.USER32(00000000,000000F0), ref: 00A900E6
SystemParametersInfoW.USER32 ref: 00A90105
GetWindowRect.USER32 ref: 00A9011E
SetWindowPos.USER32(00000000,00000000,?,?,000000FF,000000FF,00000015), ref: 00A9019E

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$LongRect$InfoParametersParentSystem
String ID:
API String ID: 1649471469-0
Opcode ID: 09fc18d8333713b09d3ed367ada482d7f9728b821616a4e5daa737a61dcb7983
Instruction ID: 45246f209522f12a98d21f282dec91facbb70a563bc1609027d34904a3c53fdd
Opcode Fuzzy Hash: 09fc18d8333713b09d3ed367ada482d7f9728b821616a4e5daa737a61dcb7983
Instruction Fuzzy Hash: C5417C31E0051AAFCF24CF78CE85BAEB7F9AB58354F254325E915F7290EB60AD408B50

Uniqueness

Uniqueness Score: -1.00%

Function 00A68E30, Relevance: 10.7, APIs: 7, Instructions: 235
COMMON

Download Yara Rule

C-Code - Quality: 43%

			E00A68E30(void* __ebx, signed int __ecx, void* __edi, signed int _a4, intOrPtr* _a8) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				signed int _v24;
				signed int _v28;
				intOrPtr _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				signed int _v44;
				void* __esi;
				void* _t77;
				intOrPtr* _t78;
				intOrPtr _t80;
				void* _t82;
				signed int _t83;
				signed int _t84;
				int _t87;
				intOrPtr _t91;
				void* _t92;
				intOrPtr _t95;
				void* _t102;
				intOrPtr _t103;
				void* _t111;
				intOrPtr* _t116;
				intOrPtr _t118;
				signed int _t121;
				signed int _t122;
				signed int _t123;
				void* _t127;
				signed int _t129;
				intOrPtr* _t134;
				signed int _t137;
				void* _t139;
				void* _t140;
				void* _t141;
				void* _t143;
				intOrPtr _t144;
				void* _t146;
				signed int _t148;
				signed int _t150;
				signed int _t151;
				signed int _t154;
				void* _t155;
				intOrPtr* _t156;
				intOrPtr* _t159;
				intOrPtr* _t161;
				intOrPtr* _t165;
				signed int _t166;
				intOrPtr* _t169;
				void* _t174;
				void* _t175;

				_t175 = _t174 - 0x28;
				_t159 = __ecx;
				_t129 = _a4;
				_v20 = __ecx;
				if(_t129 == 0) {
					L46:
					return 0;
				} else {
					_t121 = _t129;
					_t3 = _t121 + 2; // 0xb35d82
					_t140 = _t3;
					do {
						_t77 =  *_t121;
						_t121 = _t121 + 2;
					} while (_t77 != 0);
					_t122 = _t121 - _t140;
					_t123 = _t122 >> 1;
					_v28 = _t123;
					if(_t122 == 0) {
						goto L46;
					} else {
						_t78 = _a8;
						if(_t78 == 0) {
							_t148 = 0;
						} else {
							_t156 = _t78;
							_t6 = _t156 + 2; // 0xa71d5e
							_t139 = _t6;
							do {
								_t118 =  *_t156;
								_t156 = _t156 + 2;
							} while (_t118 != 0);
							_t129 = _a4;
							_t148 = _t156 - _t139 >> 1;
						}
						_t161 =  *_t159;
						_v8 = _t148;
						_v24 = 0;
						_t80 = _t161 +  *(_t161 - 0xc) * 2;
						_v32 = _t80;
						if(_t161 >= _t80) {
							L45:
							return _v24;
						} else {
							_t150 = 0;
							while(1) {
								_push(_t129);
								_push(_t161);
								_t82 = E00AF4E7D(_t129);
								_t175 = _t175 + 8;
								if(_t82 == 0) {
									goto L15;
								} else {
									goto L13;
								}
								do {
									L13:
									_push(_a4);
									_t161 = _t82 + _t123 * 2;
									_t150 = _t150 + 1;
									_push(_t161);
									_t82 = E00AF4E7D(_t129);
									_t175 = _t175 + 8;
								} while (_t82 != 0);
								_v24 = _t150;
								L15:
								if(_t161 == 0) {
									_t83 = 0;
								} else {
									_t116 = _t161;
									_t19 = _t116 + 2; // 0x5e
									_t141 = _t19;
									do {
										_t129 =  *_t116;
										_t116 = _t116 + 2;
									} while (_t129 != 0);
									_t83 = _t116 - _t141 >> 1;
								}
								_t161 = _t161 + _t83 * 2 + 2;
								if(_t161 < _v32) {
									_t129 = _a4;
									continue;
								}
								_t151 = _v8;
								if(_t150 <= 0) {
									goto L45;
								} else {
									_t165 =  *_v20;
									_v16 = _t165;
									_t84 =  *((intOrPtr*)(_t165 - 0xc));
									_t154 = (_t151 - _t123) * _v24 + _t84;
									_v12 = _t84;
									_v44 = _t154;
									_t143 =  >  ? _t154 : _t84;
									if(_t143 < 0) {
										L47:
										E00A43FD0(_t123, _t154, _t165);
										asm("int3");
										asm("int3");
										_t166 = _t129;
										SetFocus( *(_t166 - 0x35c));
										_t87 = SetForegroundWindow( *(_t166 + 0x4c));
										__imp__SwitchToThisWindow( *(_t166 + 0x4c), 1, _t165, 0x80070057);
										return _t87;
									} else {
										if((0x00000001 -  *((intOrPtr*)(_t165 - 4)) |  *((intOrPtr*)(_t165 - 8)) - _t143) < 0) {
											_t169 = _v20;
											E00A44D30(_t169, _t143, _t143);
											_t165 =  *_t169;
											_v16 = _t165;
										}
										_t129 = _v16;
										_t91 = _t129 + _v12 * 2;
										_v40 = _t91;
										if(_t129 < _t91) {
											do {
												_push(_a4);
												_push(_t165);
												_t155 = E00AF4E7D(_t129);
												_t175 = _t175 + 8;
												if(_t155 != 0) {
													_t144 = _v8 + _v8;
													_v32 = _t144;
													_v36 = _t123 + _t123;
													do {
														_t165 = _t144 + _t155;
														_t127 = _v12 - (_t155 - _v16 >> 1) - _v28;
														_t102 = _v36 + _t155;
														_t136 = _t127 + _t127;
														if(_t127 + _t127 == 0) {
															L33:
															_t103 = 0;
														} else {
															if(_t165 != 0) {
																if(_t102 == 0) {
																	goto L30;
																} else {
																	E00AF46D0(_t165, _t102, _t136);
																	_t175 = _t175 + 0xc;
																	goto L33;
																}
															} else {
																L30:
																 *((intOrPtr*)(E00AF7C67())) = 0x16;
																E00AF7B89();
																_t103 = 0x16;
															}
														}
														_push(_t103);
														E00A43F30(_t127, _t144, _t155, _t165);
														_push(E00A46300(_t155, _v32, _a8, _v32));
														E00A43F30(_t127, _t144, _t155, _t165);
														_t137 = _v8;
														_push(_a4);
														_push(_t165);
														_t123 = _v28;
														 *((short*)(_t155 + (_t127 + _t137) * 2)) = 0;
														_v12 = _v12 + _t137 - _t123;
														_t111 = E00AF4E7D(_t137);
														_t144 = _v32;
														_t155 = _t111;
														_t175 = _t175 + 0x20;
													} while (_t155 != 0);
												}
												if(_t165 == 0) {
													_t129 = 0;
												} else {
													_t134 = _t165;
													_t146 = _t134 + 2;
													do {
														_t95 =  *_t134;
														_t134 = _t134 + 2;
													} while (_t95 != 0);
													_t129 = _t134 - _t146 >> 1;
												}
												_t165 = _t165 + _t129 * 2 + 2;
											} while (_t165 < _v40);
											_t154 = _v44;
										}
										if(_t154 < 0) {
											goto L47;
										} else {
											_t129 = _v20;
											_t92 =  *_t129;
											_t68 = _t92 - 8; // 0x2b0072
											if(_t154 >  *_t68) {
												goto L47;
											} else {
												 *(_t92 - 0xc) = _t154;
												 *((short*)( *_t129 + _t154 * 2)) = 0;
												goto L45;
											}
										}
									}
								}
								goto L48;
							}
						}
					}
				}
				L48:
			}

0x00a68e33
0x00a68e38
0x00a68e3a
0x00a68e3d
0x00a68e42
0x00a6907a
0x00a69081
0x00a68e48
0x00a68e48
0x00a68e4a
0x00a68e4a
0x00a68e50
0x00a68e50
0x00a68e53
0x00a68e56
0x00a68e5b
0x00a68e5d
0x00a68e5f
0x00a68e62
0x00000000
0x00a68e68
0x00a68e68
0x00a68e6e
0x00a68e89
0x00a68e70
0x00a68e70
0x00a68e72
0x00a68e72
0x00a68e75
0x00a68e75
0x00a68e78
0x00a68e7b
0x00a68e82
0x00a68e85
0x00a68e85
0x00a68e8b
0x00a68e8d
0x00a68e90
0x00a68e9a
0x00a68e9d
0x00a68ea2
0x00a6906e
0x00a69077
0x00a68ea8
0x00a68ea8
0x00a68eb3
0x00a68eb3
0x00a68eb4
0x00a68eb5
0x00a68eba
0x00a68ebf
0x00000000
0x00000000
0x00000000
0x00000000
0x00a68ec1
0x00a68ec1
0x00a68ec1
0x00a68ec4
0x00a68ec7
0x00a68ec8
0x00a68ec9
0x00a68ece
0x00a68ed1
0x00a68ed5
0x00a68ed8
0x00a68eda
0x00a68ef2
0x00a68edc
0x00a68edc
0x00a68ede
0x00a68ede
0x00a68ee1
0x00a68ee1
0x00a68ee4
0x00a68ee7
0x00a68eee
0x00a68eee
0x00a68ef7
0x00a68efd
0x00a68eb0
0x00000000
0x00a68eb0
0x00a68f01
0x00a68f04
0x00000000
0x00a68f0a
0x00a68f13
0x00a68f15
0x00a68f18
0x00a68f1b
0x00a68f1f
0x00a68f24
0x00a68f27
0x00a68f2c
0x00a69084
0x00a69089
0x00a6908e
0x00a6908f
0x00a69091
0x00a69099
0x00a690a2
0x00a690ad
0x00a690b4
0x00a68f32
0x00a68f41
0x00a68f43
0x00a68f49
0x00a68f4e
0x00a68f50
0x00a68f50
0x00a68f53
0x00a68f59
0x00a68f5c
0x00a68f61
0x00a68f67
0x00a68f67
0x00a68f6a
0x00a68f70
0x00a68f72
0x00a68f77
0x00a68f80
0x00a68f86
0x00a68f89
0x00a68f90
0x00a68f93
0x00a68fa2
0x00a68fa5
0x00a68fa7
0x00a68fac
0x00a68fd8
0x00a68fd8
0x00a68fae
0x00a68fb0
0x00a68fcb
0x00000000
0x00a68fcd
0x00a68fd0
0x00a68fd5
0x00000000
0x00a68fd5
0x00a68fb2
0x00a68fb2
0x00a68fb7
0x00a68fbd
0x00a68fc2
0x00a68fc2
0x00a68fb0
0x00a68fda
0x00a68fdb
0x00a68fee
0x00a68fef
0x00a68ff4
0x00a68ff9
0x00a68ffc
0x00a69000
0x00a69003
0x00a6900b
0x00a6900e
0x00a69013
0x00a69016
0x00a69018
0x00a6901b
0x00a68f90
0x00a69025
0x00a69041
0x00a69027
0x00a69027
0x00a69029
0x00a69030
0x00a69030
0x00a69033
0x00a69036
0x00a6903d
0x00a6903d
0x00a69046
0x00a69049
0x00a69052
0x00a69052
0x00a69057
0x00000000
0x00a69059
0x00a69059
0x00a6905c
0x00a6905e
0x00a69061
0x00000000
0x00a69063
0x00a69063
0x00a6906a
0x00000000
0x00a6906a
0x00a69061
0x00a69057
0x00a68f2c
0x00000000
0x00a68f04
0x00a68eb3
0x00a68ea2
0x00a68e62
0x00000000

APIs

_wcsstr.LIBVCRUNTIME ref: 00A68EB5
_wcsstr.LIBVCRUNTIME ref: 00A68EC9
_wcsstr.LIBVCRUNTIME ref: 00A68F6B

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: _wcsstr
String ID:
API String ID: 1512112989-0
Opcode ID: de439cd03d59115664f8f70ae48e612f61505b3f885cc4d5d41e82eeb4d62a4b
Instruction ID: 58e73c1130353167ffe11b1137cb7df3053ad821e02486453f2488cfc88f3f67
Opcode Fuzzy Hash: de439cd03d59115664f8f70ae48e612f61505b3f885cc4d5d41e82eeb4d62a4b
Instruction Fuzzy Hash: B781B236E0021A9FCF24DFA8C9819AFB7B9EF98344B154559ED05AB214DB35AE01CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00A98B60, Relevance: 10.7, APIs: 3, Strings: 3, Instructions: 184
COMMON

Download Yara Rule

C-Code - Quality: 58%

			E00A98B60(void* __ebx, void* __ecx, void* __edi, void* __esi, unsigned int _a12) {
				signed int _v8;
				struct tagRECT _v24;
				struct tagPOINT _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				intOrPtr _v44;
				intOrPtr _v48;
				signed int _t53;
				unsigned int _t72;
				intOrPtr _t88;
				void* _t111;
				void* _t115;
				void* _t122;
				unsigned int _t123;
				long _t124;
				unsigned int _t141;
				long _t143;
				void* _t147;
				void* _t149;
				intOrPtr* _t150;
				signed int _t151;

				_t147 = __edi;
				_t111 = __ebx;
				_t53 =  *0xb6aa7c; // 0x5cc80e5b
				_v8 = _t53 ^ _t151;
				_t141 = _a12;
				_v32.x = _t141;
				_v32.y = _t141 >> 0x10;
				_t149 = __ecx;
				ScreenToClient(E00A89FD0(__ecx),  &_v32);
				GetClientRect(E00A89FD0(_t149),  &_v24);
				if(IsZoomed(E00A89FD0(_t149)) != 0) {
					L13:
					_t115 = _t149 + 0x30;
					E00A8C040(_t115);
					_t143 = _v32.x;
					asm("movups xmm0, [eax]");
					asm("movd ecx, xmm0");
					asm("movups [ebp-0x2c], xmm0");
					if(_t143 >= _v24.left + _t115 && _t143 < _v24.right - _v40) {
						_t72 = _v32.y;
						if(_t72 < _v44 || _t72 >= _v36) {
							goto L21;
						} else {
							_push(_t72);
							_t150 = E00A8BFE0(_t149 + 0x30, _t143);
							if(_t150 == 0 || E00AFBA54(_t111, _t147, _t150,  *((intOrPtr*)( *_t150 + 0x10))(), L"ButtonUI") == 0 || E00AFBA54(_t111, _t147, _t150,  *((intOrPtr*)( *_t150 + 0x10))(), L"OptionUI") == 0 || E00AFBA54(_t111, _t147, _t150,  *((intOrPtr*)( *_t150 + 0x10))(), L"TextUI") == 0) {
								goto L21;
							}
						}
					}
					return E00AE4BF8(_v8 ^ _t151);
				} else {
					_t122 = _t149 + 0x30;
					E00A8C6B0(_t122);
					asm("movups xmm0, [eax]");
					asm("movups [ebp-0x2c], xmm0");
					asm("psrldq xmm0, 0x4");
					asm("movd ecx, xmm0");
					_t123 = _v32.y;
					if(_t123 >= _v24.top + _t122) {
						_t88 = _v48;
						if(_t123 <= _v24.bottom - _v36) {
							_t124 = _v32.x;
							if(_t124 >= _t88 + _v24.left) {
								if(_t124 <= _v24.right - _v40) {
									goto L13;
								} else {
									return E00AE4BF8(_v8 ^ _t151);
								}
							} else {
								return E00AE4BF8(_v8 ^ _t151);
							}
						} else {
							if(_v32.x >= _t88 + _v24.left) {
								return E00AE4BF8(_v8 ^ _t151);
							} else {
								return E00AE4BF8(_v8 ^ _t151);
							}
						}
					} else {
						if(_v32.x >= _v48 + _v24.left) {
							return E00AE4BF8(_v8 ^ _t151);
						} else {
							return E00AE4BF8(_v8 ^ _t151);
						}
					}
				}
			}

0x00a98b60
0x00a98b60
0x00a98b66
0x00a98b6d
0x00a98b70
0x00a98b76
0x00a98b80
0x00a98b83
0x00a98b8f
0x00a98ba1
0x00a98bb7
0x00a98cbb
0x00a98cbb
0x00a98cbe
0x00a98cc3
0x00a98cc6
0x00a98ccc
0x00a98cd0
0x00a98cd8
0x00a98ce4
0x00a98cea
0x00000000
0x00a98cf1
0x00a98cf1
0x00a98cfb
0x00a98cff
0x00000000
0x00000000
0x00a98cff
0x00a98cea
0x00a98d64
0x00a98bbd
0x00a98bbd
0x00a98bc0
0x00a98bc5
0x00a98bcb
0x00a98bcf
0x00a98bd4
0x00a98bda
0x00a98bdf
0x00a98c31
0x00a98c34
0x00a98c7e
0x00a98c83
0x00a98ca3
0x00000000
0x00a98ca5
0x00a98cb8
0x00a98cb8
0x00a98c85
0x00a98c98
0x00a98c98
0x00a98c36
0x00a98c3e
0x00a98c78
0x00a98c40
0x00a98c53
0x00a98c53
0x00a98c3e
0x00a98be1
0x00a98bec
0x00a98c26
0x00a98bee
0x00a98c01
0x00a98c01
0x00a98bec
0x00a98bdf

APIs

ScreenToClient.USER32 ref: 00A98B8F
GetClientRect.USER32 ref: 00A98BA1
IsZoomed.USER32(00000000), ref: 00A98BAF

Strings

ButtonUI, xrefs: 00A98D05
OptionUI, xrefs: 00A98D1E
TextUI, xrefs: 00A98D37

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Client$RectScreenZoomed
String ID: ButtonUI$OptionUI$TextUI
API String ID: 1298762932-513331901
Opcode ID: 3b98c580ddec939316eea241e386249b4c07afa29c9d64cf44a3d86f54b0fb2c
Instruction ID: 02ec61df1e84da4f9cb7042ef2d13aa71610e0502c91347e9dbdf28d02ef40c7
Opcode Fuzzy Hash: 3b98c580ddec939316eea241e386249b4c07afa29c9d64cf44a3d86f54b0fb2c
Instruction Fuzzy Hash: 26513F31F001098BCF14EBA8DA95ABEB3F5AF59300F504559E816E7285EF39ED40CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00A6F500, Relevance: 10.7, APIs: 3, Strings: 3, Instructions: 155
COMMON

Download Yara Rule

C-Code - Quality: 62%

			E00A6F500(void* __ebx, signed int __ecx, void* __edx, intOrPtr _a4, char _a8, signed char _a12) {
				intOrPtr* _v0;
				signed int _v4;
				signed int _v8;
				signed int _v16;
				signed int _v20;
				signed int _v24;
				signed int _v28;
				char _v32;
				char _v36;
				char _v52;
				intOrPtr _v56;
				signed int _v68;
				void* _v76;
				signed int _v80;
				char _v84;
				char _v88;
				intOrPtr _v92;
				signed int _v96;
				intOrPtr* _v100;
				char _v112;
				char _v128;
				signed int _v132;
				signed int _v184;
				intOrPtr* _v192;
				intOrPtr _v232;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t142;
				intOrPtr _t149;
				signed char _t150;
				intOrPtr* _t155;
				signed int _t162;
				void* _t165;
				signed int _t170;
				signed int _t175;
				signed int _t180;
				signed int _t181;
				intOrPtr* _t183;
				char _t186;
				void* _t195;
				intOrPtr* _t201;
				intOrPtr _t212;
				signed char _t220;
				signed char _t222;
				signed int _t224;
				char _t226;
				signed char _t230;
				signed char _t231;
				signed char _t233;
				char* _t237;
				intOrPtr* _t238;
				signed int _t239;
				intOrPtr* _t253;
				intOrPtr _t254;
				void* _t258;
				intOrPtr _t260;
				intOrPtr _t261;
				void* _t262;
				void* _t263;
				intOrPtr* _t265;
				intOrPtr* _t267;
				intOrPtr* _t269;
				void* _t273;
				char* _t276;
				intOrPtr _t277;
				signed int _t279;
				intOrPtr _t280;
				intOrPtr* _t281;
				intOrPtr _t283;
				signed int _t287;
				signed int _t288;
				void* _t290;
				void* _t291;
				void* _t292;
				void* _t293;
				signed int _t295;
				signed int _t296;
				void* _t297;

				_t258 = __edx;
				_push(0xffffffff);
				_push(0xb25b44);
				_push( *[fs:0x0]);
				_t291 = _t290 - 0x24;
				_push(__ebx);
				_t142 =  *0xb6aa7c; // 0x5cc80e5b
				_push(_t142 ^ _t286);
				 *[fs:0x0] =  &_v16;
				_t265 = __ecx;
				_v24 = __ecx;
				_t224 = 0;
				_v20 = 0;
				_t301 = _a12;
				if(_a12 != 0) {
					 *__ecx = 0xb35db8;
					 *((intOrPtr*)(__ecx + 0x18)) = 0xb35dac;
					_v8 = 0;
					_t224 = 1;
					_v20 = 1;
				}
				_push(8);
				 *((intOrPtr*)(_t265 +  *((intOrPtr*)( *_t265 + 4)))) = 0xb35db4;
				 *((intOrPtr*)( *((intOrPtr*)( *_t265 + 4)) + _t265 - 4)) =  *((intOrPtr*)( *_t265 + 4)) - 0x18;
				_t149 =  *_t265;
				 *(_t265 + 8) = 0;
				 *(_t265 + 0xc) = 0;
				_t16 = _t149 + 4; // 0xb58734
				_t273 =  *_t16 + _t265;
				 *(_t273 + 0x30) = 0;
				 *(_t273 + 8) = 0;
				 *(_t273 + 0x10) = 0;
				 *((intOrPtr*)(_t273 + 0x14)) = 0x201;
				 *((intOrPtr*)(_t273 + 0x18)) = 6;
				 *(_t273 + 0x1c) = 0;
				 *(_t273 + 0x20) = 0;
				 *(_t273 + 0x24) = 0;
				 *(_t273 + 0x28) = 0;
				 *(_t273 + 0x2c) = 0;
				 *(_t273 + 0xc) = 0;
				_t150 = E00AE4920(_t273, _t301);
				_t292 = _t291 + 4;
				_a12 = _t150;
				if(_t150 == 0) {
					_t230 = 0;
					__eflags = 0;
				} else {
					_push(1);
					_v8 = 1;
					_t222 = E00A8655E();
					_t230 = _a12;
					_t292 = _t292 + 4;
					 *(_t230 + 4) = _t222;
				}
				 *(_t273 + 0x30) = _t230;
				 *((intOrPtr*)(_t273 + 0x38)) = _a4;
				 *(_t273 + 0x3c) = 0;
				_t231 =  *(_t230 + 4);
				_v8 = 2;
				_a12 = _t231;
				_v28 = _t231;
				 *((intOrPtr*)( *_t231 + 4))();
				_v20 = _t224 | 0x00000002;
				_v8 = 3;
				_t155 = E00A6F380(_t224 | 0x00000002, _t258,  &_v32);
				_t293 = _t292 + 4;
				_t259 =  *_t155;
				_t226 =  *((intOrPtr*)( *((intOrPtr*)( *_t155 + 0x20))))(0x20);
				_t233 = _a12;
				_v8 = 4;
				if(_t233 != 0) {
					_t259 =  *_t233;
					_t220 =  *((intOrPtr*)( *_t233 + 8))();
					if(_t220 != 0) {
						_t259 =  *_t220;
						_t233 = _t220;
						 *((intOrPtr*)( *_t220))(1);
					}
				}
				_v8 = 0;
				 *((char*)(_t273 + 0x40)) = _t226;
				if( *((intOrPtr*)(_t273 + 0x38)) != 0) {
					L10:
					if(_a8 != 0) {
						E00A86A5C(_t233, _t273);
					}
					 *[fs:0x0] = _v16;
					return _t265;
				} else {
					_t162 =  *(_t273 + 0xc) & 0x00000013 | 0x00000004;
					 *(_t273 + 0xc) = _t162;
					_t233 =  *(_t273 + 0x10) & _t162;
					if(_t233 != 0) {
						__eflags = _t233 & 0x00000004;
						if((_t233 & 0x00000004) == 0) {
							__eflags = _t233 & 0x00000002;
							_t276 =  ==  ? "ios_base::eofbit set" : "ios_base::failbit set";
						} else {
							_t276 = "ios_base::badbit set";
						}
						_push(1);
						_t165 = E00A73830(_t226, _t259, _t265,  &_v32);
						_t295 = _t293 + 8;
						_t237 =  &_v52;
						E00A6FA50(_t226, _t237, _t265, _t276, _t165);
						E00AF3827( &_v52, 0xb61164);
						asm("int3");
						asm("int3");
						asm("int3");
						asm("int3");
						asm("int3");
						asm("int3");
						asm("int3");
						asm("int3");
						asm("int3");
						asm("int3");
						_t287 = _t295;
						_push(0xffffffff);
						_push(0xb25baa);
						_push( *[fs:0x0]);
						_t296 = _t295 - 0x10;
						_push(_t276);
						_t170 =  *0xb6aa7c; // 0x5cc80e5b
						_push(_t170 ^ _t287);
						 *[fs:0x0] =  &_v88;
						_t277 = _t237;
						_v92 = _t277;
						E00A8610F(_t237, 0);
						_v80 = 0;
						 *(_t277 + 4) = 0;
						 *((char*)(_t277 + 8)) = 0;
						 *(_t277 + 0xc) = 0;
						 *((char*)(_t277 + 0x10)) = 0;
						 *(_t277 + 0x14) = 0;
						 *((short*)(_t277 + 0x18)) = 0;
						 *((intOrPtr*)(_t277 + 0x1c)) = 0;
						 *((short*)(_t277 + 0x20)) = 0;
						 *((intOrPtr*)(_t277 + 0x24)) = 0;
						 *((char*)(_t277 + 0x28)) = 0;
						 *((intOrPtr*)(_t277 + 0x2c)) = 0;
						 *((char*)(_t277 + 0x30)) = 0;
						_t175 = _v68;
						_v80 = 6;
						__eflags = _t175;
						if(_t175 == 0) {
							_t238 =  &_v36;
							E00A6FB70(_t238, "bad locale name");
							E00AF3827( &_v36, 0xb61110);
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							_push(_t287);
							_t288 = _t296;
							_push(0xffffffff);
							_push(0xb25be0);
							_push( *[fs:0x0]);
							_t297 = _t296 - 0x58;
							_t180 =  *0xb6aa7c; // 0x5cc80e5b
							_t181 = _t180 ^ _t288;
							_v132 = _t181;
							_push(_t277);
							_push(_t265);
							_push(_t181);
							 *[fs:0x0] =  &_v128;
							_t267 = _t238;
							_v184 = _t267;
							_t183 = _v100;
							_v184 = _t267;
							_v192 = _t183;
							__eflags =  *((intOrPtr*)(_t183 + 0x14)) - 0x10;
							_t239 =  *(_t183 + 0x10);
							_v184 = _t239;
							if( *((intOrPtr*)(_t183 + 0x14)) >= 0x10) {
								_v88 =  *_t183;
							}
							__eflags = _t239 - 0x10;
							if(_t239 >= 0x10) {
								_t279 = _t239 | 0x0000000f;
								__eflags = _t279 - 0x7fffffff;
								_t280 =  >  ? 0x7fffffff : _t279;
								_t95 = _t280 + 1; // 0x1
								_t186 = L00A4BEB0(_t226, _t259, _t267, _t280, _t95);
								__eflags = _v80 + 1;
								_v112 = _t186;
								E00AF4150(_t186, _v88, _v80 + 1);
								_t239 = _v80;
								_t297 = _t297 + 0xc;
								_v92 = _t280;
							} else {
								asm("movups xmm0, [eax]");
								_v92 = 0xf;
								asm("movups [ebp-0x64], xmm0");
							}
							_t281 = _v0;
							_v96 = _t239;
							_v80 = _v4;
							_v16 = 0;
							__eflags = _t239;
							if(_t239 != 0) {
								E00A73390(_t226,  &_v112, 0xb35cac, 2);
							}
							 *((intOrPtr*)( *_t281 + 8))( &_v52, _v80);
							__eflags = _v32 - 0x10;
							_t194 =  >=  ? _v52 :  &_v52;
							_v16 = 1;
							_t195 = E00A73390(_t226,  &_v112,  >=  ? _v52 :  &_v52, _v36);
							_t260 = _v32;
							__eflags = _t260 - 0x10;
							if(_t260 < 0x10) {
								L31:
								asm("movups xmm1, [ebp-0x64]");
								__eflags = _v92 - 0x10;
								asm("movq xmm0, [ebp-0x54]");
								asm("movd eax, xmm1");
								asm("movq [ebp-0x30], xmm0");
								asm("xorps xmm0, xmm0");
								 *_t267 = 0xb35c0c;
								_t246 =  >=  ? _t195 :  &_v76;
								asm("movq [edi+0x4], xmm0");
								_v84 =  >=  ? _t195 :  &_v76;
								_v80 = 1;
								asm("movups [ebp-0x40], xmm1");
								E00AF535E( &_v84, _t267 + 4);
								_t261 = _v56;
								_t297 = _t297 + 8;
								 *_t267 = 0xb35c2c;
								__eflags = _t261 - 0x10;
								if(_t261 < 0x10) {
									L35:
									 *((intOrPtr*)(_t267 + 0xc)) = _v4;
									 *_t267 = 0xb35ca4;
									 *((intOrPtr*)(_t267 + 0x10)) = _v0;
									 *[fs:0x0] = _v24;
									__eflags = _v28 ^ _t288;
									return E00AE4BF8(_v28 ^ _t288);
								} else {
									_t253 = _v76;
									_t262 = _t261 + 1;
									_t201 = _t253;
									__eflags = _t262 - 0x1000;
									if(_t262 < 0x1000) {
										L34:
										_push(_t262);
										E00AE4950(_t253);
										goto L35;
									} else {
										_t253 =  *((intOrPtr*)(_t253 - 4));
										_t262 = _t262 + 0x23;
										__eflags = _t201 - _t253 + 0xfffffffc - 0x1f;
										if(__eflags > 0) {
											goto L37;
										} else {
											goto L34;
										}
									}
								}
							} else {
								_t254 = _v52;
								_t263 = _t260 + 1;
								_t212 = _t254;
								__eflags = _t263 - 0x1000;
								if(_t263 < 0x1000) {
									L30:
									_push(_t263);
									_t195 = E00AE4950(_t254);
									_t297 = _t297 + 8;
									goto L31;
								} else {
									_t253 =  *((intOrPtr*)(_t254 - 4));
									_t262 = _t263 + 0x23;
									__eflags = _t212 - _t253 + 0xfffffffc - 0x1f;
									if(__eflags > 0) {
										E00AF7B99(_t226, _t253, _t262, _t267, __eflags);
										L37:
										E00AF7B99(_t226, _t253, _t262, _t267, __eflags);
										asm("int3");
										asm("int3");
										_push(_t288);
										_push(_t281);
										_t283 = _v232;
										asm("xorps xmm0, xmm0");
										_push(_t267);
										_t269 = _t253;
										 *_t269 = 0xb35c0c;
										asm("movq [eax], xmm0");
										E00AF535E(_t283 + 4, _t269 + 4);
										 *_t269 = 0xb35ca4;
										 *((intOrPtr*)(_t269 + 0xc)) =  *((intOrPtr*)(_t283 + 0xc));
										 *((intOrPtr*)(_t269 + 0x10)) =  *((intOrPtr*)(_t283 + 0x10));
										return _t269;
									} else {
										goto L30;
									}
								}
							}
						} else {
							E00A86665(_t226, _t259, _t265, _t277, _t175);
							 *[fs:0x0] = _v20;
							return _t277;
						}
					} else {
						goto L10;
					}
				}
			}

0x00a6f500
0x00a6f503
0x00a6f505
0x00a6f510
0x00a6f511
0x00a6f514
0x00a6f517
0x00a6f51e
0x00a6f522
0x00a6f528
0x00a6f52a
0x00a6f52d
0x00a6f52f
0x00a6f532
0x00a6f535
0x00a6f537
0x00a6f53d
0x00a6f544
0x00a6f547
0x00a6f54c
0x00a6f54c
0x00a6f551
0x00a6f556
0x00a6f565
0x00a6f569
0x00a6f56b
0x00a6f572
0x00a6f579
0x00a6f57c
0x00a6f57e
0x00a6f585
0x00a6f58c
0x00a6f593
0x00a6f59a
0x00a6f5a1
0x00a6f5a8
0x00a6f5af
0x00a6f5b6
0x00a6f5bd
0x00a6f5c4
0x00a6f5cb
0x00a6f5d0
0x00a6f5d3
0x00a6f5d8
0x00a6f5f3
0x00a6f5f3
0x00a6f5da
0x00a6f5da
0x00a6f5dc
0x00a6f5e3
0x00a6f5e8
0x00a6f5eb
0x00a6f5ee
0x00a6f5ee
0x00a6f5f8
0x00a6f5fb
0x00a6f5fe
0x00a6f605
0x00a6f608
0x00a6f60f
0x00a6f612
0x00a6f617
0x00a6f61d
0x00a6f623
0x00a6f62b
0x00a6f630
0x00a6f635
0x00a6f63e
0x00a6f640
0x00a6f643
0x00a6f64c
0x00a6f64e
0x00a6f650
0x00a6f655
0x00a6f657
0x00a6f659
0x00a6f65d
0x00a6f65d
0x00a6f655
0x00a6f663
0x00a6f667
0x00a6f66a
0x00a6f67f
0x00a6f683
0x00a6f686
0x00a6f68b
0x00a6f693
0x00a6f6a1
0x00a6f66c
0x00a6f675
0x00a6f678
0x00a6f67b
0x00a6f67d
0x00a6f6a4
0x00a6f6a7
0x00a6f6b0
0x00a6f6bd
0x00a6f6a9
0x00a6f6a9
0x00a6f6a9
0x00a6f6c3
0x00a6f6c6
0x00a6f6cb
0x00a6f6ce
0x00a6f6d3
0x00a6f6e1
0x00a6f6e6
0x00a6f6e7
0x00a6f6e8
0x00a6f6e9
0x00a6f6ea
0x00a6f6eb
0x00a6f6ec
0x00a6f6ed
0x00a6f6ee
0x00a6f6ef
0x00a6f6f1
0x00a6f6f3
0x00a6f6f5
0x00a6f700
0x00a6f701
0x00a6f704
0x00a6f705
0x00a6f70c
0x00a6f710
0x00a6f716
0x00a6f718
0x00a6f71d
0x00a6f722
0x00a6f729
0x00a6f730
0x00a6f734
0x00a6f73b
0x00a6f741
0x00a6f748
0x00a6f74c
0x00a6f74f
0x00a6f753
0x00a6f756
0x00a6f759
0x00a6f75c
0x00a6f75f
0x00a6f762
0x00a6f766
0x00a6f768
0x00a6f78d
0x00a6f790
0x00a6f79e
0x00a6f7a3
0x00a6f7a4
0x00a6f7a5
0x00a6f7a6
0x00a6f7a7
0x00a6f7a8
0x00a6f7a9
0x00a6f7aa
0x00a6f7ab
0x00a6f7ac
0x00a6f7ad
0x00a6f7ae
0x00a6f7af
0x00a6f7b0
0x00a6f7b1
0x00a6f7b3
0x00a6f7b5
0x00a6f7c0
0x00a6f7c1
0x00a6f7c4
0x00a6f7c9
0x00a6f7cb
0x00a6f7ce
0x00a6f7cf
0x00a6f7d0
0x00a6f7d4
0x00a6f7da
0x00a6f7dc
0x00a6f7df
0x00a6f7e2
0x00a6f7e5
0x00a6f7e8
0x00a6f7ec
0x00a6f7ef
0x00a6f7f2
0x00a6f7f6
0x00a6f7f6
0x00a6f7f9
0x00a6f7fc
0x00a6f815
0x00a6f81b
0x00a6f81d
0x00a6f820
0x00a6f824
0x00a6f82e
0x00a6f82f
0x00a6f837
0x00a6f83c
0x00a6f83f
0x00a6f842
0x00a6f7fe
0x00a6f7fe
0x00a6f801
0x00a6f808
0x00a6f808
0x00a6f848
0x00a6f84b
0x00a6f84e
0x00a6f851
0x00a6f858
0x00a6f85a
0x00a6f866
0x00a6f866
0x00a6f876
0x00a6f879
0x00a6f883
0x00a6f88b
0x00a6f88f
0x00a6f894
0x00a6f897
0x00a6f89a
0x00a6f8c8
0x00a6f8c8
0x00a6f8cf
0x00a6f8d3
0x00a6f8d8
0x00a6f8dc
0x00a6f8e1
0x00a6f8e4
0x00a6f8ea
0x00a6f8ed
0x00a6f8f5
0x00a6f8fc
0x00a6f901
0x00a6f905
0x00a6f90a
0x00a6f90d
0x00a6f910
0x00a6f916
0x00a6f919
0x00a6f943
0x00a6f948
0x00a6f94e
0x00a6f954
0x00a6f95a
0x00a6f967
0x00a6f971
0x00a6f91b
0x00a6f91b
0x00a6f91e
0x00a6f91f
0x00a6f921
0x00a6f927
0x00a6f939
0x00a6f939
0x00a6f93b
0x00000000
0x00a6f929
0x00a6f929
0x00a6f92c
0x00a6f934
0x00a6f937
0x00000000
0x00000000
0x00000000
0x00000000
0x00a6f937
0x00a6f927
0x00a6f89c
0x00a6f89c
0x00a6f89f
0x00a6f8a0
0x00a6f8a2
0x00a6f8a8
0x00a6f8be
0x00a6f8be
0x00a6f8c0
0x00a6f8c5
0x00000000
0x00a6f8aa
0x00a6f8aa
0x00a6f8ad
0x00a6f8b5
0x00a6f8b8
0x00a6f974
0x00a6f979
0x00a6f979
0x00a6f97e
0x00a6f97f
0x00a6f980
0x00a6f983
0x00a6f984
0x00a6f987
0x00a6f98a
0x00a6f98b
0x00a6f991
0x00a6f997
0x00a6f99f
0x00a6f9a4
0x00a6f9b0
0x00a6f9b6
0x00a6f9be
0x00000000
0x00000000
0x00000000
0x00a6f8b8
0x00a6f8a8
0x00a6f76a
0x00a6f76c
0x00a6f779
0x00a6f785
0x00a6f785
0x00000000
0x00000000
0x00000000
0x00a6f67d

APIs

std::locale::_Init.LIBCPMT ref: 00A6F5E3
std::ios_base::_Addstd.LIBCPMT ref: 00A6F686
__CxxThrowException@8.LIBVCRUNTIME ref: 00A6F6E1

Strings

ios_base::failbit set, xrefs: 00A6F6B3
ios_base::badbit set, xrefs: 00A6F6A9, 00A6F6D2
ios_base::eofbit set, xrefs: 00A6F6B8

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: AddstdException@8InitThrowstd::ios_base::_std::locale::_
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 3446850132-1866435925
Opcode ID: 015c715c046b82e0ac32725e4ff9b511e412e448c8beb4735ce5afaeb41d3940
Instruction ID: ae9ddc3a8148d02895303fe4dd0255cc7b5f927e81b40c2dcc97271c2b5dc06c
Opcode Fuzzy Hash: 015c715c046b82e0ac32725e4ff9b511e412e448c8beb4735ce5afaeb41d3940
Instruction Fuzzy Hash: 495178B19007459FEB20CF58D989B9ABBF4FF04304F10856DE95A9B791D7B6EA04CB80

Uniqueness

Uniqueness Score: -1.00%

Function 00A79410, Relevance: 10.7, APIs: 3, Strings: 3, Instructions: 154
COMMON

Download Yara Rule

C-Code - Quality: 60%

			E00A79410(intOrPtr* __ecx, void* __edx, intOrPtr _a4, char _a8, signed char _a12) {
				signed int _v0;
				signed int _v8;
				char _v16;
				signed int _v20;
				intOrPtr* _v24;
				signed char _v28;
				char _v32;
				char _v52;
				signed int _v68;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t79;
				intOrPtr _t86;
				signed char _t87;
				intOrPtr* _t92;
				signed int _t98;
				void* _t101;
				signed int _t105;
				signed char _t114;
				signed char _t116;
				signed int _t118;
				signed int _t120;
				signed int _t123;
				signed int _t124;
				signed char _t130;
				signed char _t131;
				signed char _t133;
				intOrPtr* _t137;
				void* _t140;
				intOrPtr* _t143;
				intOrPtr* _t145;
				void* _t150;
				char* _t153;
				intOrPtr* _t154;
				void* _t159;
				void* _t160;
				void* _t161;

				_t140 = __edx;
				_push(0xffffffff);
				_push(0xb25b44);
				_push( *[fs:0x0]);
				_t160 = _t159 - 0x24;
				_t79 =  *0xb6aa7c; // 0x5cc80e5b
				_push(_t79 ^ _t157);
				 *[fs:0x0] =  &_v16;
				_t143 = __ecx;
				_v24 = __ecx;
				_t118 = 0;
				_v20 = 0;
				_t166 = _a12;
				if(_a12 != 0) {
					 *__ecx = 0xb36fe4;
					 *((intOrPtr*)(__ecx + 0x18)) = 0xb36fd8;
					_v8 = 0;
					_t118 = 1;
					_v20 = 1;
				}
				_push(8);
				 *((intOrPtr*)(_t143 +  *((intOrPtr*)( *_t143 + 4)))) = 0xb36fe0;
				 *((intOrPtr*)( *((intOrPtr*)( *_t143 + 4)) + _t143 - 4)) =  *((intOrPtr*)( *_t143 + 4)) - 0x18;
				_t86 =  *_t143;
				 *(_t143 + 8) = 0;
				 *(_t143 + 0xc) = 0;
				_t16 = _t86 + 4; // 0xb58dac
				_t150 =  *_t16 + _t143;
				 *(_t150 + 0x30) = 0;
				 *(_t150 + 8) = 0;
				 *(_t150 + 0x10) = 0;
				 *((intOrPtr*)(_t150 + 0x14)) = 0x201;
				 *((intOrPtr*)(_t150 + 0x18)) = 6;
				 *(_t150 + 0x1c) = 0;
				 *(_t150 + 0x20) = 0;
				 *(_t150 + 0x24) = 0;
				 *(_t150 + 0x28) = 0;
				 *(_t150 + 0x2c) = 0;
				 *(_t150 + 0xc) = 0;
				_t87 = E00AE4920(_t150, _t166);
				_t161 = _t160 + 4;
				_a12 = _t87;
				if(_t87 == 0) {
					_t130 = 0;
					__eflags = 0;
				} else {
					_push(1);
					_v8 = 1;
					_t116 = E00A8655E();
					_t130 = _a12;
					_t161 = _t161 + 4;
					 *(_t130 + 4) = _t116;
				}
				 *(_t150 + 0x30) = _t130;
				 *((intOrPtr*)(_t150 + 0x38)) = _a4;
				 *(_t150 + 0x3c) = 0;
				_t131 =  *(_t130 + 4);
				_v8 = 2;
				_a12 = _t131;
				_v28 = _t131;
				 *((intOrPtr*)( *_t131 + 4))();
				_v20 = _t118 | 0x00000002;
				_v8 = 3;
				_t92 = E00A79260(_t118 | 0x00000002, _t140,  &_v32);
				_t141 =  *_t92;
				_t120 =  *((intOrPtr*)( *_t92 + 0x30))(0x20) & 0x0000ffff;
				_t133 = _a12;
				_v8 = 4;
				if(_t133 != 0) {
					_t114 =  *((intOrPtr*)( *_t133 + 8))();
					if(_t114 != 0) {
						_t141 =  *_t114;
						_t133 = _t114;
						 *((intOrPtr*)( *_t114))(1);
					}
				}
				_v8 = 0;
				 *(_t150 + 0x40) = _t120;
				if( *((intOrPtr*)(_t150 + 0x38)) != 0) {
					L10:
					if(_a8 != 0) {
						E00A86A5C(_t133, _t150);
					}
					 *[fs:0x0] = _v16;
					return _t143;
				} else {
					_t98 =  *(_t150 + 0xc) & 0x00000013 | 0x00000004;
					 *(_t150 + 0xc) = _t98;
					_t133 =  *(_t150 + 0x10) & _t98;
					if(_t133 != 0) {
						__eflags = _t133 & 0x00000004;
						if((_t133 & 0x00000004) == 0) {
							__eflags = _t133 & 0x00000002;
							_t153 =  ==  ? "ios_base::eofbit set" : "ios_base::failbit set";
						} else {
							_t153 = "ios_base::badbit set";
						}
						_push(1);
						_t101 = E00A73830(_t120, _t141, _t143,  &_v32);
						_t137 =  &_v52;
						E00A6FA50(_t120, _t137, _t143, _t153, _t101);
						E00AF3827( &_v52, 0xb61164);
						asm("int3");
						asm("int3");
						asm("int3");
						asm("int3");
						asm("int3");
						asm("int3");
						asm("int3");
						asm("int3");
						asm("int3");
						asm("int3");
						_push(_t120);
						_push(_t153);
						_t154 = _t137;
						_push(_t143);
						_t145 = _v68;
						 *(_t154 + 0x10) = 0;
						 *(_t154 + 0x14) = 0;
						__eflags =  *((intOrPtr*)(_t145 + 0x14)) - 8;
						_t105 =  *(_t145 + 0x10);
						_v68 = _t105;
						if( *((intOrPtr*)(_t145 + 0x14)) >= 8) {
							_t145 =  *_t145;
						}
						__eflags = _t105 - 8;
						if(_t105 >= 8) {
							_t123 = _t105 | 0x00000007;
							__eflags = _t123 - 0x7ffffffe;
							_t124 =  >  ? 0x7ffffffe : _t123;
							_t71 = _t124 + 1; // 0x1
							 *_t154 = E00A46180(_t124, _t141, _t145, _t71);
							E00AF4150(_t108, _t145, 2 + _v0 * 2);
							 *(_t154 + 0x10) = _v0;
							 *(_t154 + 0x14) = _t124;
							return _t154;
						} else {
							asm("movups xmm0, [edi]");
							asm("movups [esi], xmm0");
							 *(_t154 + 0x10) = _t105;
							 *(_t154 + 0x14) = 7;
							return _t154;
						}
					} else {
						goto L10;
					}
				}
			}

0x00a79410
0x00a79413
0x00a79415
0x00a79420
0x00a79421
0x00a79427
0x00a7942e
0x00a79432
0x00a79438
0x00a7943a
0x00a7943d
0x00a7943f
0x00a79442
0x00a79445
0x00a79447
0x00a7944d
0x00a79454
0x00a79457
0x00a7945c
0x00a7945c
0x00a79461
0x00a79466
0x00a79475
0x00a79479
0x00a7947b
0x00a79482
0x00a79489
0x00a7948c
0x00a7948e
0x00a79495
0x00a7949c
0x00a794a3
0x00a794aa
0x00a794b1
0x00a794b8
0x00a794bf
0x00a794c6
0x00a794cd
0x00a794d4
0x00a794db
0x00a794e0
0x00a794e3
0x00a794e8
0x00a79503
0x00a79503
0x00a794ea
0x00a794ea
0x00a794ec
0x00a794f3
0x00a794f8
0x00a794fb
0x00a794fe
0x00a794fe
0x00a79508
0x00a7950b
0x00a7950e
0x00a79515
0x00a79518
0x00a7951f
0x00a79522
0x00a79527
0x00a7952d
0x00a79533
0x00a7953b
0x00a79545
0x00a7954c
0x00a7954f
0x00a79552
0x00a7955b
0x00a7955f
0x00a79564
0x00a79566
0x00a79568
0x00a7956c
0x00a7956c
0x00a79564
0x00a79572
0x00a79576
0x00a7957a
0x00a7958f
0x00a79593
0x00a79596
0x00a7959b
0x00a795a3
0x00a795b1
0x00a7957c
0x00a79585
0x00a79588
0x00a7958b
0x00a7958d
0x00a795b4
0x00a795b7
0x00a795c0
0x00a795cd
0x00a795b9
0x00a795b9
0x00a795b9
0x00a795d3
0x00a795d6
0x00a795de
0x00a795e3
0x00a795f1
0x00a795f6
0x00a795f7
0x00a795f8
0x00a795f9
0x00a795fa
0x00a795fb
0x00a795fc
0x00a795fd
0x00a795fe
0x00a795ff
0x00a79603
0x00a79604
0x00a79605
0x00a79607
0x00a79608
0x00a7960b
0x00a79612
0x00a79619
0x00a7961d
0x00a79620
0x00a79623
0x00a79625
0x00a79625
0x00a79627
0x00a7962a
0x00a7964d
0x00a79650
0x00a79652
0x00a79655
0x00a79661
0x00a7966d
0x00a79678
0x00a7967d
0x00a79684
0x00a7962c
0x00a7962c
0x00a79635
0x00a79638
0x00a7963d
0x00a79643
0x00a79643
0x00000000
0x00000000
0x00000000
0x00a7958d

APIs

std::locale::_Init.LIBCPMT ref: 00A794F3
std::ios_base::_Addstd.LIBCPMT ref: 00A79596
__CxxThrowException@8.LIBVCRUNTIME ref: 00A795F1

Strings

ios_base::failbit set, xrefs: 00A795C3
ios_base::badbit set, xrefs: 00A795B9, 00A795E2
ios_base::eofbit set, xrefs: 00A795C8

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: AddstdException@8InitThrowstd::ios_base::_std::locale::_
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 3446850132-1866435925
Opcode ID: 4ba0aec25d957f80fe373b8de47401ec9e777878b01ecc6f06d7d651c542ac74
Instruction ID: 0a5ba0cc97181679859f29d0ca38e68dc8caedbca7aa58db07a7c377ef3f5d73
Opcode Fuzzy Hash: 4ba0aec25d957f80fe373b8de47401ec9e777878b01ecc6f06d7d651c542ac74
Instruction Fuzzy Hash: C75159B19007059FDB20CF55D999B5BBBF4FF04304F10856EE91A9B681D7B6EA18CB80

Uniqueness

Uniqueness Score: -1.00%

Function 00B130F3, Relevance: 10.7, APIs: 7, Instructions: 152
fileCOMMON

Download Yara Rule

C-Code - Quality: 73%

			E00B130F3(void* __ebx, void* __edi, void* __esi, intOrPtr* _a4, signed int _a8, signed char* _a12, intOrPtr _a16) {
				signed int _v8;
				signed char _v15;
				char _v16;
				void _v24;
				short _v28;
				char _v31;
				void _v32;
				long _v36;
				intOrPtr _v40;
				void* _v44;
				signed int _v48;
				signed char* _v52;
				long _v56;
				int _v60;
				signed int _t78;
				signed int _t80;
				int _t86;
				void* _t94;
				long _t97;
				void _t105;
				void* _t112;
				signed int _t116;
				signed int _t118;
				signed char _t123;
				signed char _t128;
				intOrPtr _t129;
				signed int _t131;
				signed char* _t133;
				intOrPtr* _t135;
				signed int _t136;
				void* _t137;

				_t78 =  *0xb6aa7c; // 0x5cc80e5b
				_v8 = _t78 ^ _t136;
				_t80 = _a8;
				_t118 = _t80 >> 6;
				_t116 = (_t80 & 0x0000003f) * 0x30;
				_t133 = _a12;
				_v52 = _t133;
				_v48 = _t118;
				_v44 =  *((intOrPtr*)( *((intOrPtr*)(0xb730b0 + _t118 * 4)) + _t116 + 0x18));
				_v40 = _a16 + _t133;
				_t86 = GetConsoleCP();
				_t135 = _a4;
				_v60 = _t86;
				 *_t135 = 0;
				 *((intOrPtr*)(_t135 + 4)) = 0;
				 *((intOrPtr*)(_t135 + 8)) = 0;
				while(_t133 < _v40) {
					_v28 = 0;
					_v31 =  *_t133;
					_t129 =  *((intOrPtr*)(0xb730b0 + _v48 * 4));
					_t123 =  *(_t129 + _t116 + 0x2d);
					if((_t123 & 0x00000004) == 0) {
						if(( *(E00B096B6(_t116, _t129) + ( *_t133 & 0x000000ff) * 2) & 0x00008000) == 0) {
							_push(1);
							_push(_t133);
							goto L8;
						} else {
							if(_t133 >= _v40) {
								_t131 = _v48;
								 *((char*)( *((intOrPtr*)(0xb730b0 + _t131 * 4)) + _t116 + 0x2e)) =  *_t133;
								 *( *((intOrPtr*)(0xb730b0 + _t131 * 4)) + _t116 + 0x2d) =  *( *((intOrPtr*)(0xb730b0 + _t131 * 4)) + _t116 + 0x2d) | 0x00000004;
								 *((intOrPtr*)(_t135 + 4)) =  *((intOrPtr*)(_t135 + 4)) + 1;
							} else {
								_t112 = E00B102F8( &_v28, _t133, 2);
								_t137 = _t137 + 0xc;
								if(_t112 != 0xffffffff) {
									_t133 =  &(_t133[1]);
									goto L9;
								}
							}
						}
					} else {
						_t128 = _t123 & 0x000000fb;
						_v16 =  *((intOrPtr*)(_t129 + _t116 + 0x2e));
						_push(2);
						_v15 = _t128;
						 *(_t129 + _t116 + 0x2d) = _t128;
						_push( &_v16);
						L8:
						_push( &_v28);
						_t94 = E00B102F8();
						_t137 = _t137 + 0xc;
						if(_t94 != 0xffffffff) {
							L9:
							_t133 =  &(_t133[1]);
							_t97 = WideCharToMultiByte(_v60, 0,  &_v28, 1,  &_v24, 5, 0, 0);
							_v56 = _t97;
							if(_t97 != 0) {
								if(WriteFile(_v44,  &_v24, _t97,  &_v36, 0) == 0) {
									L19:
									 *_t135 = GetLastError();
								} else {
									 *((intOrPtr*)(_t135 + 4)) =  *((intOrPtr*)(_t135 + 8)) - _v52 + _t133;
									if(_v36 >= _v56) {
										if(_v31 != 0xa) {
											goto L16;
										} else {
											_t105 = 0xd;
											_v32 = _t105;
											if(WriteFile(_v44,  &_v32, 1,  &_v36, 0) == 0) {
												goto L19;
											} else {
												if(_v36 >= 1) {
													 *((intOrPtr*)(_t135 + 8)) =  *((intOrPtr*)(_t135 + 8)) + 1;
													 *((intOrPtr*)(_t135 + 4)) =  *((intOrPtr*)(_t135 + 4)) + 1;
													goto L16;
												}
											}
										}
									}
								}
							}
						}
					}
					goto L20;
					L16:
				}
				L20:
				return E00AE4BF8(_v8 ^ _t136);
			}

0x00b130fb
0x00b13102
0x00b13105
0x00b1310d
0x00b13111
0x00b1311d
0x00b13120
0x00b13123
0x00b1312a
0x00b13132
0x00b13135
0x00b1313b
0x00b13141
0x00b13146
0x00b13148
0x00b1314b
0x00b13150
0x00b1315a
0x00b13161
0x00b13164
0x00b1316b
0x00b13172
0x00b1319e
0x00b131c4
0x00b131c6
0x00000000
0x00b131a0
0x00b131a3
0x00b1326a
0x00b13276
0x00b13281
0x00b13286
0x00b131a9
0x00b131b0
0x00b131b5
0x00b131bb
0x00b131c1
0x00000000
0x00b131c1
0x00b131bb
0x00b131a3
0x00b13174
0x00b13178
0x00b1317b
0x00b13181
0x00b13183
0x00b13186
0x00b1318a
0x00b131c7
0x00b131ca
0x00b131cb
0x00b131d0
0x00b131d6
0x00b131dc
0x00b131eb
0x00b131f1
0x00b131f7
0x00b131fc
0x00b13218
0x00b1328b
0x00b13291
0x00b1321a
0x00b13222
0x00b1322b
0x00b13231
0x00000000
0x00b13233
0x00b13235
0x00b13238
0x00b13251
0x00000000
0x00b13253
0x00b13257
0x00b13259
0x00b1325c
0x00000000
0x00b1325c
0x00b13257
0x00b13251
0x00b13231
0x00b1322b
0x00b13218
0x00b131fc
0x00b131d6
0x00000000
0x00b1325f
0x00b1325f
0x00b13293
0x00b132a5

APIs

GetConsoleCP.KERNEL32(?,?,?,?,?,?,?,?,?,00B13868,?,?,?,?,?,?), ref: 00B13135
__fassign.LIBCMT ref: 00B131B0
__fassign.LIBCMT ref: 00B131CB
WideCharToMultiByte.KERNEL32(?,00000000,?,00000001,?,00000005,00000000,00000000), ref: 00B131F1
WriteFile.KERNEL32(?,?,00000000,00B13868,00000000,?,?,?,?,?,?,?,?,?,00B13868,?), ref: 00B13210
WriteFile.KERNEL32(?,?,00000001,00B13868,00000000,?,?,?,?,?,?,?,?,?,00B13868,?), ref: 00B13249

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: FileWrite__fassign$ByteCharConsoleMultiWide
String ID:
API String ID: 1324828854-0
Opcode ID: 3b7bef786baeeb7648609ebddb76a3148615edd19b12a14aef82d04a925e19c1
Instruction ID: c26502cd65c856e51f9897d41814d14c7b9213a681592286ad9b92ea22b84cc8
Opcode Fuzzy Hash: 3b7bef786baeeb7648609ebddb76a3148615edd19b12a14aef82d04a925e19c1
Instruction Fuzzy Hash: 4C51B270D00209AFDB10DFA8DC85AEEBBF4FF09710F14419AE955E7291E7709A81CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 6B59F28D, Relevance: 10.7, APIs: 7, Instructions: 152fileCOMMON

Download Yara Rule

APIs

GetConsoleCP.KERNEL32(00000000,00000000,?,?,?,?,?,?,?,6B59FA02,00000000,00000000,00000000,00000000,00000000,?), ref: 6B59F2CF
__fassign.LIBCMT ref: 6B59F34A
__fassign.LIBCMT ref: 6B59F365
WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000001,00000000,00000005,00000000,00000000), ref: 6B59F38B
WriteFile.KERNEL32(?,00000000,00000000,6B59FA02,00000000,?,?,?,?,?,?,?,?,?,6B59FA02,00000000), ref: 6B59F3AA
WriteFile.KERNEL32(?,00000000,00000001,6B59FA02,00000000,?,?,?,?,?,?,?,?,?,6B59FA02,00000000), ref: 6B59F3E3

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: FileWrite__fassign$ByteCharConsoleMultiWide
String ID:
API String ID: 1324828854-0
Opcode ID: 31969ddf493d52f2b0752808ae15e5da8ec803579e1501bccba6f64dd01627a3
Instruction ID: de627ed7e89b5d589fdf906577194d25120d905f26846f074ef7062c885c1d56
Opcode Fuzzy Hash: 31969ddf493d52f2b0752808ae15e5da8ec803579e1501bccba6f64dd01627a3
Instruction Fuzzy Hash: 725190B19002899FEB10DFA8E881AEEBBF4FF49710F15416AF555F7251E734A940CB60

Uniqueness

Uniqueness Score: -1.00%

Function 6B594310, Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 145COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 6B59433B
___except_validate_context_record.LIBVCRUNTIME ref: 6B594343
_ValidateLocalCookies.LIBCMT ref: 6B5943D1
__IsNonwritableInCurrentImage.LIBCMT ref: 6B5943FC
_ValidateLocalCookies.LIBCMT ref: 6B594451

Strings

csm, xrefs: 6B5943E6

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 3ac5060dc722a15be1b6ceadef183bb5a55385622840682d3a3cdf7f94b56c40
Instruction ID: 02e7e387d670fa4f08439cc81c3914e5c3503af7ec7d083cf1481966cf3d1bcb
Opcode Fuzzy Hash: 3ac5060dc722a15be1b6ceadef183bb5a55385622840682d3a3cdf7f94b56c40
Instruction Fuzzy Hash: AA510830E002889BEF20EF78E8906DE7BB5BF45328F148195D8289B351D73ADD55CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A8BE90, Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 94
windowCOMMON

Download Yara Rule

C-Code - Quality: 85%

			E00A8BE90(void* __ebx, struct HWND__** __ecx, struct HWND__* _a4) {
				long _v28;
				int _v32;
				char _v36;
				void* __edi;
				void* __esi;
				void* _t30;
				struct HWND__** _t58;
				void* _t59;
				struct HWND__* _t60;

				_t58 = __ecx;
				if(IsWindowVisible( *__ecx) != 0) {
					GetFocus();
					_t63 = _t58[0x16];
					if(_t58[0x16] != 0) {
						asm("xorps xmm0, xmm0");
						_v36 = 0x14;
						asm("movlpd [ebp-0x18], xmm0");
						asm("movlpd [ebp-0x10], xmm0");
						asm("movlpd [ebp-0x8], xmm0");
						_v32 = 0;
						_v28 = GetTickCount();
						 *((intOrPtr*)( *(_t58[0x16]) + 0x150))( &_v36);
						E00A8EFC0(__ebx, _t58, _t58, _t59, _t63, _t58[0x16], L"killfocus", 0, 0, 0);
						_t58[0x16] = 0;
					}
				}
				_t58[0x1a] = 0;
				_t58[0x18] = 0;
				_t58[0x19] = 0;
				if(_t58[0x15] != 0) {
					E00A89BA0( &(_t58[0x65]));
					 *((intOrPtr*)( *(_t58[0x15]) + 0x24))(_t58, 0, 0);
					E00A89970( &(_t58[0x68]), _t58[0x15]);
					PostMessageW( *_t58, 0x8001, 0, 0);
				}
				_t60 = _a4;
				_t58[0x15] = _t60;
				_t58[0x30] = 0x101;
				if((GetWindowLongW( *_t58, 0xffffffec) & 0x08000000) == 0) {
					_t58[0x30] = 1;
				}
				if(_t60 != 0) {
					_t30 =  *((intOrPtr*)(_t60->i + 0x28))();
					 *((intOrPtr*)(_t60->i + 0x24))(_t58, _t30, 1);
					 *((intOrPtr*)(_t60->i + 0x144))( &M00A8FE60, _t58, 0);
					return 1;
				} else {
					return 0;
				}
			}

0x00a8be98
0x00a8bea4
0x00a8bea6
0x00a8beac
0x00a8beb0
0x00a8beb2
0x00a8beb5
0x00a8bebc
0x00a8bec1
0x00a8bec6
0x00a8becb
0x00a8bede
0x00a8bee4
0x00a8befa
0x00a8beff
0x00a8beff
0x00a8beb0
0x00a8bf0a
0x00a8bf11
0x00a8bf18
0x00a8bf1f
0x00a8bf27
0x00a8bf38
0x00a8bf42
0x00a8bf52
0x00a8bf52
0x00a8bf58
0x00a8bf5f
0x00a8bf62
0x00a8bf76
0x00a8bf78
0x00a8bf78
0x00a8bf81
0x00a8bf91
0x00a8bf9c
0x00a8bfab
0x00a8bfb8
0x00a8bf84
0x00a8bf8a
0x00a8bf8a

APIs

IsWindowVisible.USER32(?), ref: 00A8BE9C
GetFocus.USER32(?,00000000,?,00A9896F,00000000,?,00000000,?,?,00000000), ref: 00A8BEA6
GetTickCount.KERNEL32 ref: 00A8BED2

Part of subcall function 00A8EFC0: GetTickCount.KERNEL32 ref: 00A8F050

PostMessageW.USER32(?,00008001,00000000,00000000), ref: 00A8BF52
GetWindowLongW.USER32(?,000000EC), ref: 00A8BF6B

Strings

killfocus, xrefs: 00A8BEF0

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: CountTickWindow$FocusLongMessagePostVisible
String ID: killfocus
API String ID: 1163015642-1616503811
Opcode ID: ae018f73de61020303ee4936513856b9e4ad429a9552cc2684b0303c6e6623eb
Instruction ID: 33db3cf5ba0ae09eddab24d0b8632baed6c768033e14de1268b72704061542b2
Opcode Fuzzy Hash: ae018f73de61020303ee4936513856b9e4ad429a9552cc2684b0303c6e6623eb
Instruction Fuzzy Hash: 7F31AE30600615EBEB20AF55CC49BAABBB5FF98714F200209F505572A0CBB5A895CFD0

Uniqueness

Uniqueness Score: -1.00%

Function 00A79DE0, Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 93
COMMON

Download Yara Rule

C-Code - Quality: 43%

			E00A79DE0(void* __ebx, void* __ecx, void* __edi, void* __esi, signed int _a4, char _a8) {
				char _v12;
				signed int _v28;
				char _v32;
				intOrPtr _v36;
				void* __ebp;
				signed int _t22;
				void* _t25;
				intOrPtr _t30;
				void* _t38;
				signed char _t41;
				signed int _t44;
				void* _t45;
				intOrPtr _t46;
				void* _t47;
				void* _t53;
				void* _t55;
				void* _t56;
				void* _t57;

				_t47 = __edi;
				_t38 = __ebx;
				_t56 = _t55 - 0x1c;
				_t22 = _a4 & 0x00000017;
				 *(__ecx + 0xc) = _t22;
				_t41 =  *(__ecx + 0x10) & _t22;
				if(_t41 == 0) {
					return _t22;
				} else {
					if(_a8 != 0) {
						E00AF3827(0, 0);
					}
					if((_t41 & 0x00000004) == 0) {
						__eflags = _t41 & 0x00000002;
						_t51 =  ==  ? "ios_base::eofbit set" : "ios_base::failbit set";
						__eflags =  ==  ? "ios_base::eofbit set" : "ios_base::failbit set";
					} else {
						_t51 = "ios_base::badbit set";
					}
					_push(1);
					_t25 = E00A73830(_t38, _t45, _t47,  &_v12);
					_t57 = _t56 + 8;
					E00A6FA50(_t38,  &_v32, _t47, _t51, _t25);
					E00AF3827( &_v32, 0xb61164);
					asm("int3");
					asm("int3");
					asm("int3");
					asm("int3");
					asm("int3");
					asm("int3");
					asm("int3");
					asm("int3");
					asm("int3");
					asm("int3");
					asm("int3");
					asm("int3");
					asm("int3");
					asm("int3");
					asm("int3");
					_t53 = _t57;
					_t29 = _v28;
					_t30 = _v32;
					_t44 = _v28 + _t29 * 2 << 3;
					if(_t44 < 0x1000) {
						L12:
						_push(_t44);
						return E00AE4950(_t30);
					} else {
						_t46 =  *((intOrPtr*)(_t30 - 4));
						_t44 = _t44 + 0x23;
						if(_t30 - _t46 + 0xfffffffc > 0x1f) {
							E00AF7B99(_t38, _t44, _t46, _t47, __eflags);
							asm("int3");
							asm("int3");
							asm("int3");
							asm("int3");
							_push(_t53);
							_push(_t44 + 8);
							return E00A88086(_v36, _v32, _v28);
						} else {
							_t30 = _t46;
							goto L12;
						}
					}
				}
			}

0x00a79de0
0x00a79de0
0x00a79de6
0x00a79de9
0x00a79dec
0x00a79df3
0x00a79df5
0x00a79e03
0x00a79df7
0x00a79dfb
0x00a79e0a
0x00a79e0a
0x00a79e12
0x00a79e1b
0x00a79e28
0x00a79e28
0x00a79e14
0x00a79e14
0x00a79e14
0x00a79e2e
0x00a79e31
0x00a79e36
0x00a79e3e
0x00a79e4c
0x00a79e51
0x00a79e52
0x00a79e53
0x00a79e54
0x00a79e55
0x00a79e56
0x00a79e57
0x00a79e58
0x00a79e59
0x00a79e5a
0x00a79e5b
0x00a79e5c
0x00a79e5d
0x00a79e5e
0x00a79e5f
0x00a79e61
0x00a79e63
0x00a79e69
0x00a79e6c
0x00a79e75
0x00a79e89
0x00a79e89
0x00a79e94
0x00a79e77
0x00a79e77
0x00a79e7a
0x00a79e85
0x00a79e97
0x00a79e9c
0x00a79e9d
0x00a79e9e
0x00a79e9f
0x00a79ea0
0x00a79ea6
0x00a79eb9
0x00a79e87
0x00a79e87
0x00000000
0x00a79e87
0x00a79e85
0x00a79e75

APIs

__CxxThrowException@8.LIBVCRUNTIME ref: 00A79E0A

Part of subcall function 00AF3827: RaiseException.KERNEL32(?,?,00A860BB,?,00B6A044,?,00000007,?,?,?,?,00A860BB,?,00B63034,?), ref: 00AF3887

__CxxThrowException@8.LIBVCRUNTIME ref: 00A79E4C
__Getwctypes.LIBCPMT ref: 00A79EB0

Part of subcall function 00A88086: GetStringTypeW.KERNEL32(00000001,?,?,?,?,00A79EB5,?,00B61164,?,?,?,?,?,00B61164,ios_base::failbit set,00000000), ref: 00A8809A

Strings

ios_base::failbit set, xrefs: 00A79E1E
ios_base::badbit set, xrefs: 00A79E14, 00A79E3D
ios_base::eofbit set, xrefs: 00A79E23

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Exception@8Throw$ExceptionGetwctypesRaiseStringType
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 3507211915-1866435925
Opcode ID: efdfa63c450cfcdf06c7769f5f3f34daa549e5ee4a3f8d45f585bf10c7d72ddd
Instruction ID: 9936c4a5f19ccf369c4fbb1546e228b443ddbe5c635742c5c42deb4bb50fad5b
Opcode Fuzzy Hash: efdfa63c450cfcdf06c7769f5f3f34daa549e5ee4a3f8d45f585bf10c7d72ddd
Instruction Fuzzy Hash: BD212B7390020C6BCB24EA9CDC46FEE739CDB04310F14C466FA1C8B542DA35EA5587D2

Uniqueness

Uniqueness Score: -1.00%

Function 00A8F3F0, Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 83
windowCOMMON

Download Yara Rule

C-Code - Quality: 74%

			E00A8F3F0(struct HWND__** __ecx, intOrPtr* _a4) {
				long _v28;
				intOrPtr* _v32;
				char _v36;
				void* __edi;
				void* __esi;
				int _t22;
				intOrPtr _t24;
				void* _t36;
				struct HWND__** _t47;
				intOrPtr* _t49;

				_t47 = __ecx;
				_t22 = IsWindowVisible( *__ecx);
				if(_t22 == 0) {
					return _t22;
				}
				GetFocus();
				_t24 =  *((intOrPtr*)(_t47 + 0x58));
				_t49 = _a4;
				if(_t49 != _t24) {
					_t53 = _t24;
					if(_t24 != 0) {
						asm("xorps xmm0, xmm0");
						_v36 = 0x14;
						asm("movlpd [ebp-0x18], xmm0");
						asm("movlpd [ebp-0x10], xmm0");
						asm("movlpd [ebp-0x8], xmm0");
						_v32 = _t49;
						_v28 = GetTickCount();
						 *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t47 + 0x58)))) + 0x150))( &_v36);
						_t24 = E00A8EFC0(_t36, _t47, _t47, _t49, _t53,  *((intOrPtr*)(_t47 + 0x58)), L"killfocus", 0, 0, 0);
						 *((intOrPtr*)(_t47 + 0x58)) = 0;
					}
					if(_t49 != 0) {
						_t24 =  *((intOrPtr*)( *_t49 + 0x20))();
						if(_t24 == _t47) {
							_t24 =  *((intOrPtr*)( *((intOrPtr*)( *_t49 + 0x108))))();
							if(_t24 != 0) {
								_t24 =  *((intOrPtr*)( *((intOrPtr*)( *_t49 + 0x114))))();
								_t57 = _t24;
								if(_t24 != 0) {
									asm("xorps xmm0, xmm0");
									 *((intOrPtr*)(_t47 + 0x58)) = _t49;
									asm("movlpd [ebp-0x18], xmm0");
									asm("movlpd [ebp-0x10], xmm0");
									asm("movlpd [ebp-0x8], xmm0");
									_v36 = 0x15;
									_v32 = _t49;
									_v28 = GetTickCount();
									 *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t47 + 0x58)))) + 0x150))( &_v36);
									_t24 = E00A8EFC0(_t36, _t47, _t47, _t49, _t57,  *((intOrPtr*)(_t47 + 0x58)), L"setfocus", 0, 0, 0);
								}
							}
						}
					}
				}
				return _t24;
			}

0x00a8f3f7
0x00a8f3fb
0x00a8f403
0x00a8f4f2
0x00a8f4f2
0x00a8f40a
0x00a8f410
0x00a8f413
0x00a8f418
0x00a8f41e
0x00a8f420
0x00a8f422
0x00a8f425
0x00a8f42c
0x00a8f431
0x00a8f436
0x00a8f43b
0x00a8f44a
0x00a8f450
0x00a8f466
0x00a8f46b
0x00a8f46b
0x00a8f474
0x00a8f47a
0x00a8f47f
0x00a8f48b
0x00a8f48f
0x00a8f49b
0x00a8f49d
0x00a8f49f
0x00a8f4a1
0x00a8f4a4
0x00a8f4a7
0x00a8f4ac
0x00a8f4b1
0x00a8f4b6
0x00a8f4bd
0x00a8f4cc
0x00a8f4d2
0x00a8f4e8
0x00a8f4e8
0x00a8f49f
0x00a8f48f
0x00a8f47f
0x00a8f474
0x00000000

APIs

IsWindowVisible.USER32(00000000), ref: 00A8F3FB
GetFocus.USER32(00000000,?,?,?,?,?,?,00000000,00000000), ref: 00A8F40A
GetTickCount.KERNEL32 ref: 00A8F43E

Part of subcall function 00A8EFC0: GetTickCount.KERNEL32 ref: 00A8F050

GetTickCount.KERNEL32 ref: 00A8F4C0

Strings

killfocus, xrefs: 00A8F45C
setfocus, xrefs: 00A8F4DE

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: CountTick$FocusVisibleWindow
String ID: killfocus$setfocus
API String ID: 2565274150-1991930995
Opcode ID: 532fc4504e9e59628885bc5a60aef9e5b5a3a199c54413470cb2884fd24f9380
Instruction ID: 8e1eea96fb105cf0cc90ffc09d90840aa328e360fcbb61c6990e37b9fcc8b768
Opcode Fuzzy Hash: 532fc4504e9e59628885bc5a60aef9e5b5a3a199c54413470cb2884fd24f9380
Instruction Fuzzy Hash: ED314F30A0075A9BCB11EF55CC45BBEB7B1BF99704F24025AF500A72A4DBB1A981CFD4

Uniqueness

Uniqueness Score: -1.00%

Function 00A90870, Relevance: 10.6, APIs: 7, Instructions: 74
windowCOMMON

Download Yara Rule

C-Code - Quality: 79%

			E00A90870(void* __ebx, void* __ecx, void* __edi, void* __esi, void _a4, void _a8) {
				signed int _v8;
				struct tagRECT _v24;
				signed int _t25;
				long _t31;
				int _t52;
				void* _t55;
				signed int _t56;

				_t25 =  *0xb6aa7c; // 0x5cc80e5b
				_v8 = _t25 ^ _t56;
				_t55 = __ecx;
				asm("xorps xmm0, xmm0");
				asm("movups [ebp-0x14], xmm0");
				if(GetClientRect( *(__ecx + 4),  &_v24) != 0) {
					_t48 =  !=  ? _a4 : _v24.right;
					_v24.right =  !=  ? _a4 : _v24.right;
					_t50 =  !=  ? _a8 : _v24.bottom;
					_v24.bottom =  !=  ? _a8 : _v24.bottom;
					if((GetWindowLongW( *(_t55 + 4), 0xfffffff0) & 0x40000000) != 0 || GetMenu( *(_t55 + 4)) == 0) {
						_t52 = 0;
					} else {
						_t52 = 1;
					}
					_t31 = GetWindowLongW( *(_t55 + 4), 0xffffffec);
					if(AdjustWindowRectEx( &_v24, GetWindowLongW( *(_t55 + 4), 0xfffffff0), _t52, _t31) != 0) {
						SetWindowPos( *(_t55 + 4), 0, 0, 0, _v24.right - _v24.left, _v24.bottom - _v24.top, 0x16);
					}
				}
				return E00AE4BF8(_v8 ^ _t56);
			}

0x00a90876
0x00a9087d
0x00a90881
0x00a90887
0x00a9088a
0x00a90899
0x00a908a7
0x00a908b6
0x00a908bc
0x00a908c5
0x00a908cf
0x00a908e5
0x00a908de
0x00a908de
0x00a908de
0x00a908ec
0x00a90906
0x00a90921
0x00a90921
0x00a90906
0x00a90935

APIs

GetClientRect.USER32 ref: 00A90891
GetWindowLongW.USER32(00000000,000000F0), ref: 00A908C8
GetMenu.USER32(00000000), ref: 00A908D4
GetWindowLongW.USER32(00000000,000000EC), ref: 00A908EC
GetWindowLongW.USER32(00000000,000000F0), ref: 00A908F5
AdjustWindowRectEx.USER32(?,00000000), ref: 00A908FC
SetWindowPos.USER32(00000000,00000000,00000000,00000000,00000016,?,00000016), ref: 00A90921

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Long$Rect$AdjustClientMenu
String ID:
API String ID: 1765799542-0
Opcode ID: 5d2ac0dba96e6391cbacff86c936469a647d560c8f872c7cbc0ba4631383dc66
Instruction ID: 8145b16481b452038430db9a80b5afc0f045b350f49cc824a170108f0167c5f4
Opcode Fuzzy Hash: 5d2ac0dba96e6391cbacff86c936469a647d560c8f872c7cbc0ba4631383dc66
Instruction Fuzzy Hash: 78213E31A00209EFDF20DFA9DD44EAEB7B9EF44750F108259B425A7190CB70ED40CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00B1A774, Relevance: 10.6, APIs: 7, Instructions: 65
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00B1A774(intOrPtr _a4) {
				void* _t18;

				_t45 = _a4;
				if(_a4 != 0) {
					E00B1A4BB(_t45, 7);
					E00B1A4BB(_t45 + 0x1c, 7);
					E00B1A4BB(_t45 + 0x38, 0xc);
					E00B1A4BB(_t45 + 0x68, 0xc);
					E00B1A4BB(_t45 + 0x98, 2);
					E00B10176( *((intOrPtr*)(_t45 + 0xa0)));
					E00B10176( *((intOrPtr*)(_t45 + 0xa4)));
					E00B10176( *((intOrPtr*)(_t45 + 0xa8)));
					E00B1A4BB(_t45 + 0xb4, 7);
					E00B1A4BB(_t45 + 0xd0, 7);
					E00B1A4BB(_t45 + 0xec, 0xc);
					E00B1A4BB(_t45 + 0x11c, 0xc);
					E00B1A4BB(_t45 + 0x14c, 2);
					E00B10176( *((intOrPtr*)(_t45 + 0x154)));
					E00B10176( *((intOrPtr*)(_t45 + 0x158)));
					E00B10176( *((intOrPtr*)(_t45 + 0x15c)));
					return E00B10176( *((intOrPtr*)(_t45 + 0x160)));
				}
				return _t18;
			}

0x00b1a77a
0x00b1a77f
0x00b1a788
0x00b1a793
0x00b1a79e
0x00b1a7a9
0x00b1a7b7
0x00b1a7c2
0x00b1a7cd
0x00b1a7d8
0x00b1a7e6
0x00b1a7f4
0x00b1a805
0x00b1a813
0x00b1a821
0x00b1a82c
0x00b1a837
0x00b1a842
0x00000000
0x00b1a852
0x00b1a857

APIs

Part of subcall function 00B1A4BB: _free.LIBCMT ref: 00B1A4E4

_free.LIBCMT ref: 00B1A7C2

Part of subcall function 00B10176: RtlFreeHeap.NTDLL(00000000,00000000,?,00B1A4E9,?,00000000,?,00000000,?,00B1A78D,?,00000007,?,?,00B1AAEC,?), ref: 00B1018C
Part of subcall function 00B10176: GetLastError.KERNEL32(?,?,00B1A4E9,?,00000000,?,00000000,?,00B1A78D,?,00000007,?,?,00B1AAEC,?,?), ref: 00B1019E

_free.LIBCMT ref: 00B1A7CD
_free.LIBCMT ref: 00B1A7D8
_free.LIBCMT ref: 00B1A82C
_free.LIBCMT ref: 00B1A837
_free.LIBCMT ref: 00B1A842
_free.LIBCMT ref: 00B1A84D

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: b9808e11546ccfa4a05328b635b0cf1fd2c4361a9da80a34f8da99dfa69f6cac
Instruction ID: 9054fc7635162ec18930df81cd349bc417b71ad38266e1b6cae70a96fd8669ee
Opcode Fuzzy Hash: b9808e11546ccfa4a05328b635b0cf1fd2c4361a9da80a34f8da99dfa69f6cac
Instruction Fuzzy Hash: AB110A71941B04BAD631FBB0CC0BFCB77ECAF09700FC08C55B299A62D2DAADB5958651

Uniqueness

Uniqueness Score: -1.00%

Function 6B59E39F, Relevance: 10.6, APIs: 7, Instructions: 65COMMON

Download Yara Rule

APIs

Part of subcall function 6B59E363: _free.LIBCMT ref: 6B59E38C

_free.LIBCMT ref: 6B59E3ED

Part of subcall function 6B5990E5: HeapFree.KERNEL32(00000000,00000000,?,6B59E391,?,00000000,?,00000000,?,6B59E3B8,?,00000007,?,?,6B59C1BE,?), ref: 6B5990FB
Part of subcall function 6B5990E5: GetLastError.KERNEL32(?,?,6B59E391,?,00000000,?,00000000,?,6B59E3B8,?,00000007,?,?,6B59C1BE,?,?), ref: 6B59910D

_free.LIBCMT ref: 6B59E3F8
_free.LIBCMT ref: 6B59E403
_free.LIBCMT ref: 6B59E457
_free.LIBCMT ref: 6B59E462
_free.LIBCMT ref: 6B59E46D
_free.LIBCMT ref: 6B59E478

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: bbeb1dae612b7170b406d7441e9f74e7deb0b3581e31486021cf89aebb5d9a5f
Instruction ID: e7e4ce705168c0a9c4fb9118cb0e93472cad424c071ed90674e63ae25f8220eb
Opcode Fuzzy Hash: bbeb1dae612b7170b406d7441e9f74e7deb0b3581e31486021cf89aebb5d9a5f
Instruction Fuzzy Hash: F311FC71950B88AAF921B7B0EC4BFCB779C7F85B04F404C19B2AD66056DB6DB9084650

Uniqueness

Uniqueness Score: -1.00%

Function 00A8C700, Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 33
libraryloaderCOMMON

Download Yara Rule

C-Code - Quality: 79%

			E00A8C700(struct HWND__** __ecx, void* __eflags, struct HWND__* _a4) {
				struct HWND__* _t4;
				struct HINSTANCE__* _t7;
				_Unknown_base(*)()* _t8;
				intOrPtr* _t13;
				struct HWND__** _t14;
				struct HINSTANCE__* _t15;

				_t4 = _a4;
				_t14 = __ecx;
				 *__ecx = _t4;
				 *((intOrPtr*)(_t14 + 8)) = GetDC(_t4);
				E00A89970(0xb71554, _t14);
				_t13 = _t14 + 0x300;
				 *_t13 = 0;
				_t7 = LoadLibraryW(L"Dwmapi.dll");
				_t15 = _t7;
				if(_t15 != 0) {
					_t8 = GetProcAddress(_t15, "DwmIsCompositionEnabled");
					if(_t8 != 0) {
						 *_t8(_t13);
					}
					return FreeLibrary(_t15);
				}
				return _t7;
			}

0x00a8c703
0x00a8c707
0x00a8c70b
0x00a8c719
0x00a8c71c
0x00a8c721
0x00a8c727
0x00a8c732
0x00a8c738
0x00a8c73c
0x00a8c744
0x00a8c74c
0x00a8c74f
0x00a8c74f
0x00000000
0x00a8c752
0x00a8c75b

APIs

GetDC.USER32(?), ref: 00A8C70D
LoadLibraryW.KERNEL32(Dwmapi.dll,?,?,00000000,?,00A97C82,?,?,?,?), ref: 00A8C732
GetProcAddress.KERNEL32(00000000,DwmIsCompositionEnabled), ref: 00A8C744
FreeLibrary.KERNEL32(00000000,?,00000000,?,00A97C82,?,?,?,?), ref: 00A8C752

Strings

DwmIsCompositionEnabled, xrefs: 00A8C73E
Dwmapi.dll, xrefs: 00A8C72D

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Library$AddressFreeLoadProc
String ID: DwmIsCompositionEnabled$Dwmapi.dll
API String ID: 145871493-137364670
Opcode ID: aa9ee07077b689cda6cf4b9bce6301704155c07b33875455e28b71f43e275c16
Instruction ID: 2bdb141fa441b69f201dfb10d8ab3d0e9fae96e2af5d7baa0b0a9d05f1b4ce3e
Opcode Fuzzy Hash: aa9ee07077b689cda6cf4b9bce6301704155c07b33875455e28b71f43e275c16
Instruction Fuzzy Hash: 46F0A732501311ABC3216FA8DC48AAB77ECEF95711B244569F955D3250DF70E901CBF5

Uniqueness

Uniqueness Score: -1.00%

Function 00B11D61, Relevance: 9.2, APIs: 6, Instructions: 216
COMMON

Download Yara Rule

C-Code - Quality: 69%

			E00B11D61(void* __ebx, void* __ecx, void* __edi, void* __esi, intOrPtr* _a4, intOrPtr _a8, signed int _a12, char* _a16, int _a20, intOrPtr _a24, short* _a28, int _a32, intOrPtr _a36) {
				signed int _v8;
				int _v12;
				void* _v24;
				signed int _t49;
				signed int _t54;
				int _t58;
				signed int _t60;
				short* _t62;
				signed int _t66;
				short* _t70;
				int _t71;
				int _t78;
				short* _t81;
				signed int _t87;
				signed int _t90;
				void* _t95;
				void* _t96;
				int _t98;
				short* _t101;
				int _t103;
				signed int _t106;
				short* _t107;
				void* _t110;

				_push(__ecx);
				_push(__ecx);
				_t49 =  *0xb6aa7c; // 0x5cc80e5b
				_v8 = _t49 ^ _t106;
				_push(__esi);
				_t103 = _a20;
				if(_t103 > 0) {
					_t78 = E00B0B88A(_a16, _t103);
					_t110 = _t78 - _t103;
					_t4 = _t78 + 1; // 0x1
					_t103 = _t4;
					if(_t110 >= 0) {
						_t103 = _t78;
					}
				}
				_t98 = _a32;
				if(_t98 == 0) {
					_t98 =  *( *_a4 + 8);
					_a32 = _t98;
				}
				_t54 = MultiByteToWideChar(_t98, 1 + (0 | _a36 != 0x00000000) * 8, _a16, _t103, 0, 0);
				_v12 = _t54;
				if(_t54 == 0) {
					L38:
					return E00AE4BF8(_v8 ^ _t106);
				} else {
					_t95 = _t54 + _t54;
					_t85 = _t95 + 8;
					asm("sbb eax, eax");
					if((_t95 + 0x00000008 & _t54) == 0) {
						_t81 = 0;
						__eflags = 0;
						L14:
						if(_t81 == 0) {
							L36:
							_t105 = 0;
							L37:
							E00A8837F(_t81);
							goto L38;
						}
						_t58 = MultiByteToWideChar(_t98, 1, _a16, _t103, _t81, _v12);
						_t121 = _t58;
						if(_t58 == 0) {
							goto L36;
						}
						_t100 = _v12;
						_t60 = L00B119C2(_t85, _t103, _t121, _a8, _a12, _t81, _v12, 0, 0, 0, 0, 0);
						_t105 = _t60;
						if(_t105 == 0) {
							goto L36;
						}
						if((_a12 & 0x00000400) == 0) {
							_t96 = _t105 + _t105;
							_t87 = _t96 + 8;
							__eflags = _t96 - _t87;
							asm("sbb eax, eax");
							__eflags = _t87 & _t60;
							if((_t87 & _t60) == 0) {
								_t101 = 0;
								__eflags = 0;
								L30:
								__eflags = _t101;
								if(__eflags == 0) {
									L35:
									E00A8837F(_t101);
									goto L36;
								}
								_t62 = L00B119C2(_t87, _t105, __eflags, _a8, _a12, _t81, _v12, _t101, _t105, 0, 0, 0);
								__eflags = _t62;
								if(_t62 == 0) {
									goto L35;
								}
								_push(0);
								_push(0);
								__eflags = _a28;
								if(_a28 != 0) {
									_push(_a28);
									_push(_a24);
								} else {
									_push(0);
									_push(0);
								}
								_t105 = WideCharToMultiByte(_a32, 0, _t101, _t105, ??, ??, ??, ??);
								__eflags = _t105;
								if(_t105 != 0) {
									E00A8837F(_t101);
									goto L37;
								} else {
									goto L35;
								}
							}
							_t90 = _t96 + 8;
							__eflags = _t96 - _t90;
							asm("sbb eax, eax");
							_t66 = _t60 & _t90;
							_t87 = _t96 + 8;
							__eflags = _t66 - 0x400;
							if(_t66 > 0x400) {
								__eflags = _t96 - _t87;
								asm("sbb eax, eax");
								_t101 = E00B101B0(_t87, _t66 & _t87);
								_pop(_t87);
								__eflags = _t101;
								if(_t101 == 0) {
									goto L35;
								}
								 *_t101 = 0xdddd;
								L28:
								_t101 =  &(_t101[4]);
								goto L30;
							}
							__eflags = _t96 - _t87;
							asm("sbb eax, eax");
							E00AE5500();
							_t101 = _t107;
							__eflags = _t101;
							if(_t101 == 0) {
								goto L35;
							}
							 *_t101 = 0xcccc;
							goto L28;
						}
						_t70 = _a28;
						if(_t70 == 0) {
							goto L37;
						}
						_t125 = _t105 - _t70;
						if(_t105 > _t70) {
							goto L36;
						}
						_t71 = L00B119C2(0, _t105, _t125, _a8, _a12, _t81, _t100, _a24, _t70, 0, 0, 0);
						_t105 = _t71;
						if(_t71 != 0) {
							goto L37;
						}
						goto L36;
					}
					asm("sbb eax, eax");
					_t72 = _t54 & _t95 + 0x00000008;
					_t85 = _t95 + 8;
					if((_t54 & _t95 + 0x00000008) > 0x400) {
						__eflags = _t95 - _t85;
						asm("sbb eax, eax");
						_t81 = E00B101B0(_t85, _t72 & _t85);
						_pop(_t85);
						__eflags = _t81;
						if(__eflags == 0) {
							goto L36;
						}
						 *_t81 = 0xdddd;
						L12:
						_t81 =  &(_t81[4]);
						goto L14;
					}
					asm("sbb eax, eax");
					E00AE5500();
					_t81 = _t107;
					if(_t81 == 0) {
						goto L36;
					}
					 *_t81 = 0xcccc;
					goto L12;
				}
			}

0x00b11d66
0x00b11d67
0x00b11d68
0x00b11d6f
0x00b11d73
0x00b11d74
0x00b11d7a
0x00b11d80
0x00b11d86
0x00b11d89
0x00b11d89
0x00b11d8c
0x00b11d8e
0x00b11d8e
0x00b11d8c
0x00b11d90
0x00b11d95
0x00b11d9c
0x00b11d9f
0x00b11d9f
0x00b11dbb
0x00b11dc1
0x00b11dc6
0x00b11f59
0x00b11f6c
0x00b11dcc
0x00b11dcc
0x00b11dcf
0x00b11dd4
0x00b11dd8
0x00b11e2c
0x00b11e2c
0x00b11e2e
0x00b11e30
0x00b11f4e
0x00b11f4e
0x00b11f50
0x00b11f51
0x00000000
0x00b11f57
0x00b11e41
0x00b11e47
0x00b11e49
0x00000000
0x00000000
0x00b11e4f
0x00b11e61
0x00b11e66
0x00b11e6a
0x00000000
0x00000000
0x00b11e77
0x00b11eb1
0x00b11eb4
0x00b11eb7
0x00b11eb9
0x00b11ebb
0x00b11ebd
0x00b11f09
0x00b11f09
0x00b11f0b
0x00b11f0b
0x00b11f0d
0x00b11f47
0x00b11f48
0x00000000
0x00b11f4d
0x00b11f21
0x00b11f26
0x00b11f28
0x00000000
0x00000000
0x00b11f2c
0x00b11f2d
0x00b11f2e
0x00b11f31
0x00b11f6d
0x00b11f70
0x00b11f33
0x00b11f33
0x00b11f34
0x00b11f34
0x00b11f41
0x00b11f43
0x00b11f45
0x00b11f76
0x00000000
0x00000000
0x00000000
0x00000000
0x00b11f45
0x00b11ebf
0x00b11ec2
0x00b11ec4
0x00b11ec6
0x00b11ec8
0x00b11ecb
0x00b11ed0
0x00b11eeb
0x00b11eed
0x00b11ef7
0x00b11ef9
0x00b11efa
0x00b11efc
0x00000000
0x00000000
0x00b11efe
0x00b11f04
0x00b11f04
0x00000000
0x00b11f04
0x00b11ed2
0x00b11ed4
0x00b11ed8
0x00b11edd
0x00b11edf
0x00b11ee1
0x00000000
0x00000000
0x00b11ee3
0x00000000
0x00b11ee3
0x00b11e79
0x00b11e7e
0x00000000
0x00000000
0x00b11e84
0x00b11e86
0x00000000
0x00000000
0x00b11e9d
0x00b11ea2
0x00b11ea6
0x00000000
0x00000000
0x00000000
0x00b11eac
0x00b11ddf
0x00b11de1
0x00b11de3
0x00b11deb
0x00b11e0a
0x00b11e0c
0x00b11e16
0x00b11e18
0x00b11e19
0x00b11e1b
0x00000000
0x00000000
0x00b11e21
0x00b11e27
0x00b11e27
0x00000000
0x00b11e27
0x00b11def
0x00b11df3
0x00b11df8
0x00b11dfc
0x00000000
0x00000000
0x00b11e02
0x00000000
0x00b11e02

APIs

MultiByteToWideChar.KERNEL32(00000001,00000000,?,?,00000000,00000000,?,?,?,?,?,?,00B11FB2,00000001,00000001,?), ref: 00B11DBB
MultiByteToWideChar.KERNEL32(00000001,00000001,?,?,00000000,?,?,?,?,?,?,?,00B11FB2,00000001,00000001,?), ref: 00B11E41
WideCharToMultiByte.KERNEL32(00000001,00000000,00000000,00000000,5CC80E5B,?,00000000,00000000,?,00000400,00000000,?,00000000,00000000,00000000,00000000), ref: 00B11F3B
__freea.LIBCMT ref: 00B11F48

Part of subcall function 00B101B0: RtlAllocateHeap.NTDLL(00000000,?,00000000,?,00B16929,00000000,?,?,00AFC193,?,00000008,?,00B0B90E,00000000,00000000), ref: 00B101E2

__freea.LIBCMT ref: 00B11F51
__freea.LIBCMT ref: 00B11F76

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide__freea$AllocateHeap
String ID:
API String ID: 1414292761-0
Opcode ID: 093c435968a113aa779c8973cfd2a26b92aebdcc5f76d647c48395f1bcf96d96
Instruction ID: dffe191acdcccdfb0feb9c1d37de102db3b1ba9011381adbc1b1b1eef1c018f3
Opcode Fuzzy Hash: 093c435968a113aa779c8973cfd2a26b92aebdcc5f76d647c48395f1bcf96d96
Instruction Fuzzy Hash: C851E472610216ABDB259F68CC81EFF77E9EF44750F944AA8FE08E6150EB34DC81C690

Uniqueness

Uniqueness Score: -1.00%

Function 6B59C373, Relevance: 9.2, APIs: 6, Instructions: 216COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000001,00000000,?,?,00000000,00000000,?,6B596DF2,6B596DF2,?,?,?,6B59C5C4,00000001,00000001,94E85006), ref: 6B59C3CD
MultiByteToWideChar.KERNEL32(00000001,00000001,?,?,00000000,?,?,?,?,6B59C5C4,00000001,00000001,94E85006,?,?,?), ref: 6B59C453
WideCharToMultiByte.KERNEL32(00000001,00000000,00000000,00000000,?,94E85006,00000000,00000000,?,00000400,00000000,?,00000000,00000000,00000000,00000000), ref: 6B59C54D
__freea.LIBCMT ref: 6B59C55A

Part of subcall function 6B599335: HeapAlloc.KERNEL32(00000000,?,00000004,?,6B59A50E,?,00000000,?,6B5973C2,?,00000004,?,?,?,?,6B597F90), ref: 6B599367

__freea.LIBCMT ref: 6B59C563
__freea.LIBCMT ref: 6B59C588

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide__freea$AllocHeap
String ID:
API String ID: 3147120248-0
Opcode ID: d5a62ab21d3d5af7d11ff81f45632cdd9b2976666b99492045f1420927b57821
Instruction ID: b0d9337fef4099925623d52f8587300c53ebd4ccc38bee4f7165b3d3975f4df8
Opcode Fuzzy Hash: d5a62ab21d3d5af7d11ff81f45632cdd9b2976666b99492045f1420927b57821
Instruction Fuzzy Hash: 9C51E672600286AFFB15AF64ED41EEF37A9EB84A54F1146A9FC18D6144EB3CDC40C6A0

Uniqueness

Uniqueness Score: -1.00%

Function 00B09B52, Relevance: 9.2, APIs: 6, Instructions: 200
COMMON

Download Yara Rule

C-Code - Quality: 80%

			E00B09B52(void* __ebx, void* __edx, void* __edi, void* __esi, intOrPtr _a4, intOrPtr _a8) {
				signed int _v8;
				char _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				char* _v44;
				char _v48;
				void* __ecx;
				signed int _t67;
				signed int _t70;
				signed int _t71;
				signed int _t75;
				intOrPtr _t76;
				signed int _t79;
				signed int _t86;
				intOrPtr _t88;
				void* _t97;
				signed int _t99;
				void* _t101;
				void* _t103;
				void* _t108;
				signed int _t112;
				signed int _t113;
				signed int _t116;
				void* _t120;
				signed int _t123;
				signed int _t125;
				intOrPtr _t126;
				signed int _t128;
				intOrPtr _t130;
				signed int _t131;
				void* _t135;
				void* _t136;
				void* _t138;

				_t120 = __edx;
				_t97 = __ebx;
				_push(_t101);
				if(_a8 != 0) {
					_push(__esi);
					_push(__edi);
					_t123 = 0;
					_t67 = E00B124F0( &_v8, 0, 0, _a8, 0x7fffffff);
					_t136 = _t135 + 0x14;
					__eflags = _t67;
					if(_t67 == 0) {
						L5:
						_t128 = E00B111D6(_t101, _v8, 2);
						_pop(_t103);
						__eflags = _t128;
						if(_t128 == 0) {
							L11:
							E00B10176(_t128);
							_t70 = _t123;
							goto L12;
						} else {
							_t71 = E00B124F0(_t123, _t128, _v8, _a8, 0xffffffff);
							_t136 = _t136 + 0x14;
							__eflags = _t71;
							if(_t71 == 0) {
								_t123 = E00B0E369(_t103, _a4, _t128);
								goto L11;
							} else {
								__eflags = _t71 - 0x16;
								if(_t71 == 0x16) {
									goto L13;
								} else {
									__eflags = _t71 - 0x22;
									if(_t71 != 0x22) {
										goto L11;
									} else {
										goto L13;
									}
								}
							}
						}
					} else {
						__eflags = _t67 - 0x16;
						if(_t67 == 0x16) {
							L13:
							_push(_t123);
							_push(_t123);
							_push(_t123);
							_push(_t123);
							E00AF7BB6();
							asm("int3");
							E00AE57F0(_t97, _t123, 0xb665c0, 0x1c);
							_t130 = _a4;
							_t75 = E00B09B52(_t97, _t120, _t123, _t130, _t130, _a8);
							_t108 = _t123;
							_t125 = _t75;
							__eflags = _t125;
							if(_t125 != 0) {
								_t76 = E00B10027(_t97, _t108, _t120);
								_v40 = _t76;
								_v48 =  *((intOrPtr*)(_t76 + 0x4c));
								_t110 =  *((intOrPtr*)(_t76 + 0x48));
								_v44 =  *((intOrPtr*)(_t76 + 0x48));
								_v32 = 0;
								_t79 = L00B16C23( *((intOrPtr*)(_t76 + 0x48)),  &_v32, 0, 0, _t125, 0,  &_v48);
								_t138 = _t136 + 0x18;
								__eflags = _t79;
								if(_t79 == 0) {
									L22:
									_t99 = E00B101B0(_t110, _v32 + 4);
									__eflags = _t99;
									if(_t99 == 0) {
										goto L15;
									} else {
										_t20 = _t99 + 4; // 0x4
										_v36 = _t20;
										_t110 =  &_v48;
										_t125 = 0;
										_t86 = L00B16C23( &_v48, 0, _t20, _v32, 0, 0xffffffff,  &_v48);
										_t138 = _t138 + 0x18;
										__eflags = _t86;
										if(_t86 == 0) {
											L29:
											_t126 = _v48;
											E00B09645(4);
											_pop(_t112);
											_v8 = _v8 & 0x00000000;
											_t131 = _t130 + _t130;
											_t113 = _t112 | 0xffffffff;
											__eflags =  *(_t126 + 0x24 + _t131 * 8);
											if(__eflags != 0) {
												asm("lock xadd [edx], eax");
												if(__eflags == 0) {
													E00B10176( *(_t126 + 0x24 + _t131 * 8));
													_pop(_t116);
													 *(_t126 + 0x24 + _t131 * 8) =  *(_t126 + 0x24 + _t131 * 8) & 0x00000000;
													_t113 = _t116 | 0xffffffff;
													__eflags = _t113;
												}
											}
											_t88 = _v40;
											__eflags =  *(_t88 + 0x350) & 0x00000002;
											if(( *(_t88 + 0x350) & 0x00000002) == 0) {
												__eflags =  *0xb6bf50 & 0x00000001;
												if(( *0xb6bf50 & 0x00000001) == 0) {
													__eflags =  *(_t126 + 0x24 + _t131 * 8);
													if( *(_t126 + 0x24 + _t131 * 8) != 0) {
														asm("lock xadd [eax], ecx");
														__eflags = _t113 == 1;
														if(_t113 == 1) {
															E00B10176( *(_t126 + 0x24 + _t131 * 8));
															_t51 = _t126 + 0x24 + _t131 * 8;
															 *_t51 =  *(_t126 + 0x24 + _t131 * 8) & 0x00000000;
															__eflags =  *_t51;
														}
													}
												}
											}
											 *_t99 =  *((intOrPtr*)(_t126 + 0xc));
											 *(_t126 + 0x24 + _t131 * 8) = _t99;
											 *((intOrPtr*)(_t126 + 0x1c + _t131 * 8)) = _v36;
											_v8 = 0xfffffffe;
											E00B09D43();
										} else {
											__eflags = _t86 - 0x16;
											if(_t86 == 0x16) {
												L26:
												_push(_t125);
												_push(_t125);
												_push(_t125);
												_push(_t125);
												_push(_t125);
												goto L20;
											} else {
												__eflags = _t86 - 0x22;
												if(_t86 != 0x22) {
													__eflags = _t86;
													if(_t86 == 0) {
														goto L29;
													} else {
														E00B10176(_t99);
														goto L15;
													}
												} else {
													goto L26;
												}
											}
										}
									}
								} else {
									__eflags = _t79 - 0x16;
									if(_t79 == 0x16) {
										L19:
										_push(0);
										_push(0);
										_push(0);
										_push(0);
										_push(0);
										L20:
										_t79 = E00AF7BB6();
									} else {
										__eflags = _t79 - 0x22;
										if(_t79 == 0x22) {
											goto L19;
										}
									}
									__eflags = _t79;
									if(_t79 != 0) {
										goto L15;
									} else {
										goto L22;
									}
								}
							} else {
								L15:
							}
							return E00AE5836();
						} else {
							__eflags = _t67 - 0x22;
							if(_t67 == 0x22) {
								goto L13;
							} else {
								goto L5;
							}
						}
					}
				} else {
					_t70 = E00B0E369(_t101, _a4, 0);
					L12:
					return _t70;
				}
			}

0x00b09b52
0x00b09b52
0x00b09b57
0x00b09b5c
0x00b09b6c
0x00b09b6d
0x00b09b76
0x00b09b7e
0x00b09b83
0x00b09b86
0x00b09b88
0x00b09b94
0x00b09b9e
0x00b09ba1
0x00b09ba2
0x00b09ba4
0x00b09bd5
0x00b09bd6
0x00b09bdc
0x00000000
0x00b09ba6
0x00b09bb0
0x00b09bb5
0x00b09bb8
0x00b09bba
0x00b09bd3
0x00000000
0x00b09bbc
0x00b09bbc
0x00b09bbf
0x00000000
0x00b09bc1
0x00b09bc1
0x00b09bc4
0x00000000
0x00b09bc6
0x00000000
0x00b09bc6
0x00b09bc4
0x00b09bbf
0x00b09bba
0x00b09b8a
0x00b09b8a
0x00b09b8d
0x00b09be4
0x00b09be4
0x00b09be5
0x00b09be6
0x00b09be7
0x00b09be9
0x00b09bee
0x00b09bf6
0x00b09bfe
0x00b09c02
0x00b09c08
0x00b09c09
0x00b09c0b
0x00b09c0d
0x00b09c16
0x00b09c1b
0x00b09c21
0x00b09c24
0x00b09c27
0x00b09c2c
0x00b09c3b
0x00b09c40
0x00b09c43
0x00b09c45
0x00b09c5f
0x00b09c6c
0x00b09c6e
0x00b09c70
0x00000000
0x00b09c72
0x00b09c72
0x00b09c75
0x00b09c78
0x00b09c83
0x00b09c86
0x00b09c8b
0x00b09c8e
0x00b09c90
0x00b09cb3
0x00b09cb3
0x00b09cb8
0x00b09cbd
0x00b09cbe
0x00b09cc2
0x00b09cc8
0x00b09ccb
0x00b09ccd
0x00b09cd1
0x00b09cd5
0x00b09cdb
0x00b09ce0
0x00b09ce1
0x00b09ce6
0x00b09ce6
0x00b09ce6
0x00b09cd5
0x00b09ce9
0x00b09cec
0x00b09cf3
0x00b09cf5
0x00b09cfc
0x00b09d02
0x00b09d04
0x00b09d06
0x00b09d0a
0x00b09d0b
0x00b09d11
0x00b09d17
0x00b09d17
0x00b09d17
0x00b09d17
0x00b09d0b
0x00b09d04
0x00b09cfc
0x00b09d1f
0x00b09d21
0x00b09d28
0x00b09d2c
0x00b09d33
0x00b09c92
0x00b09c92
0x00b09c95
0x00b09c9c
0x00b09c9c
0x00b09c9d
0x00b09c9e
0x00b09c9f
0x00b09ca0
0x00000000
0x00b09c97
0x00b09c97
0x00b09c9a
0x00b09ca3
0x00b09ca5
0x00000000
0x00b09ca7
0x00b09ca8
0x00000000
0x00b09cad
0x00000000
0x00000000
0x00000000
0x00b09c9a
0x00b09c95
0x00b09c90
0x00b09c47
0x00b09c47
0x00b09c4a
0x00b09c51
0x00b09c51
0x00b09c52
0x00b09c53
0x00b09c54
0x00b09c55
0x00b09c56
0x00b09c56
0x00b09c4c
0x00b09c4c
0x00b09c4f
0x00000000
0x00000000
0x00b09c4f
0x00b09c5b
0x00b09c5d
0x00000000
0x00000000
0x00000000
0x00000000
0x00b09c5d
0x00b09c0f
0x00b09c0f
0x00b09c0f
0x00b09d3f
0x00b09b8f
0x00b09b8f
0x00b09b92
0x00000000
0x00000000
0x00000000
0x00000000
0x00b09b92
0x00b09b8d
0x00b09b5e
0x00b09b63
0x00b09be0
0x00b09be3
0x00b09be3

APIs

__cftoe.LIBCMT ref: 00B09B7E
__cftoe.LIBCMT ref: 00B09BB0

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: __cftoe
String ID:
API String ID: 4189289331-0
Opcode ID: 48575f939af13c4d8efeb1cab80e556bf13799ac84406fd5a086a74da6273512
Instruction ID: 43204c00d70d5cd21ad5200a6a5e35f7617f48d4c9f3e889bcbba484496d1595
Opcode Fuzzy Hash: 48575f939af13c4d8efeb1cab80e556bf13799ac84406fd5a086a74da6273512
Instruction Fuzzy Hash: 88511932900205ABDF359B689C41EAE7FF9EF49334F20429AF915961D3DB35D9808664

Uniqueness

Uniqueness Score: -1.00%

Function 00A6F380, Relevance: 9.1, APIs: 6, Instructions: 116
COMMON

Download Yara Rule

C-Code - Quality: 83%

			E00A6F380(void* __ebx, void* __edx, intOrPtr* _a4) {
				signed char _v8;
				char _v16;
				signed char _v20;
				char _v24;
				signed int _v28;
				char _v32;
				char _v48;
				char _v100;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t40;
				signed int _t44;
				signed int _t47;
				signed int _t53;
				void* _t57;
				signed int _t62;
				signed int _t63;
				void* _t64;
				signed int _t67;
				signed int _t73;
				void* _t77;
				signed int _t80;
				intOrPtr* _t83;
				signed int _t85;
				signed int _t86;
				void* _t87;
				void* _t88;
				void* _t89;
				void* _t92;

				_t77 = __edx;
				_t64 = __ebx;
				_push(0xffffffff);
				_push(0xb25aff);
				_push( *[fs:0x0]);
				_t88 = _t87 - 0x54;
				_t40 =  *0xb6aa7c; // 0x5cc80e5b
				_push(_t40 ^ _t86);
				 *[fs:0x0] =  &_v16;
				_v20 = 0;
				E00A8610F( &_v32, 0);
				_t80 =  *0xb70e60; // 0x1
				_t44 =  *0xb708b8; // 0x7a6e00
				_v8 = 0;
				_v28 = _t44;
				if(_t80 == 0) {
					E00A8610F( &_v24, _t80);
					_t92 =  *0xb70e60 - _t80; // 0x1
					if(_t92 == 0) {
						_t62 =  *0xb70e48; // 0x2
						_t63 = _t62 + 1;
						 *0xb70e48 = _t63;
						 *0xb70e60 = _t63;
					}
					E00A86167( &_v24);
					_t80 =  *0xb70e60; // 0x1
				}
				_t67 =  *(_a4 + 4);
				if(_t80 >=  *((intOrPtr*)(_t67 + 0xc))) {
					_t83 = 0;
					__eflags = 0;
					goto L8;
				} else {
					_t83 =  *((intOrPtr*)( *((intOrPtr*)(_t67 + 8)) + _t80 * 4));
					if(_t83 != 0) {
						L24:
						E00A86167( &_v32);
						 *[fs:0x0] = _v16;
						return _t83;
					} else {
						L8:
						if( *((char*)(_t67 + 0x14)) == 0) {
							L11:
							if(_t83 != 0) {
								goto L24;
							}
							L12:
							_t47 = _v28;
							if(_t47 == 0) {
								_push(0x18);
								_t85 = E00AE4920(_t83, __eflags);
								_t89 = _t88 + 4;
								_v28 = _t85;
								_v8 = 1;
								__eflags = _t85;
								if(_t85 == 0) {
									_t83 = 0;
									__eflags = 0;
								} else {
									_t73 =  *(_a4 + 4);
									__eflags = _t73;
									if(_t73 != 0) {
										_t53 =  *(_t73 + 0x18);
										__eflags = _t53;
										if(_t53 == 0) {
											_t25 = _t73 + 0x1c; // 0x1f
											_t53 = _t25;
										}
									} else {
										_t53 = 0xb2f60c;
									}
									E00A6F6F0(_t64,  &_v100, _t53);
									_v20 = 1;
									 *(_t85 + 4) = 0;
									 *_t85 = 0xb35c74;
									E00A86186( &_v100, _t77, _t80, __eflags,  &_v48);
									_t89 = _t89 + 4;
									asm("movups xmm0, [eax]");
									asm("movups [esi+0x8], xmm0");
								}
								__eflags = _v20 & 0x00000001;
								if(__eflags != 0) {
									E00A6FD60( &_v100);
								}
								_a4 = _t83;
								_v8 = 2;
								E00A8652C(__eflags, _t83);
								 *((intOrPtr*)( *_t83 + 4))();
								 *0xb708b8 = _t83;
							} else {
								_t83 = _t47;
							}
							goto L24;
						}
						_t57 = E00A86558();
						if(_t80 >=  *((intOrPtr*)(_t57 + 0xc))) {
							goto L12;
						}
						_t83 =  *((intOrPtr*)( *((intOrPtr*)(_t57 + 8)) + _t80 * 4));
						goto L11;
					}
				}
			}

0x00a6f380
0x00a6f380
0x00a6f383
0x00a6f385
0x00a6f390
0x00a6f391
0x00a6f396
0x00a6f39d
0x00a6f3a1
0x00a6f3ac
0x00a6f3b3
0x00a6f3b8
0x00a6f3be
0x00a6f3c3
0x00a6f3ca
0x00a6f3cf
0x00a6f3d5
0x00a6f3da
0x00a6f3e0
0x00a6f3e2
0x00a6f3e7
0x00a6f3e8
0x00a6f3ed
0x00a6f3ed
0x00a6f3f5
0x00a6f3fa
0x00a6f3fa
0x00a6f403
0x00a6f409
0x00a6f41b
0x00a6f41b
0x00000000
0x00a6f40b
0x00a6f40e
0x00a6f413
0x00a6f4da
0x00a6f4dd
0x00a6f4e7
0x00a6f4f4
0x00a6f419
0x00a6f41d
0x00a6f421
0x00a6f433
0x00a6f435
0x00000000
0x00000000
0x00a6f43b
0x00a6f43b
0x00a6f440
0x00a6f449
0x00a6f450
0x00a6f452
0x00a6f455
0x00a6f458
0x00a6f45c
0x00a6f45e
0x00a6f4ad
0x00a6f4ad
0x00a6f460
0x00a6f463
0x00a6f466
0x00a6f468
0x00a6f471
0x00a6f474
0x00a6f476
0x00a6f478
0x00a6f478
0x00a6f478
0x00a6f46a
0x00a6f46a
0x00a6f46a
0x00a6f47f
0x00a6f487
0x00a6f48f
0x00a6f496
0x00a6f49c
0x00a6f4a1
0x00a6f4a4
0x00a6f4a7
0x00a6f4a7
0x00a6f4af
0x00a6f4b3
0x00a6f4b8
0x00a6f4b8
0x00a6f4bd
0x00a6f4c1
0x00a6f4c5
0x00a6f4d1
0x00a6f4d4
0x00a6f442
0x00a6f442
0x00a6f442
0x00000000
0x00a6f440
0x00a6f423
0x00a6f42b
0x00000000
0x00000000
0x00a6f430
0x00000000
0x00a6f430
0x00a6f413

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00A6F3B3
std::_Lockit::_Lockit.LIBCPMT ref: 00A6F3D5
std::_Lockit::~_Lockit.LIBCPMT ref: 00A6F3F5
__Getctype.LIBCPMT ref: 00A6F49C
std::_Facet_Register.LIBCPMT ref: 00A6F4C5
std::_Lockit::~_Lockit.LIBCPMT ref: 00A6F4DD

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_GetctypeRegister
String ID:
API String ID: 1102183713-0
Opcode ID: 2fadc2fb07629328c5925a52793feccf888e59cc4156ec8cc2cfc808a46e8c8f
Instruction ID: 866f14350c9ea7ab3a0ceff4edeba2e21fc8b02187b7a2140337ebb7fd2dfae5
Opcode Fuzzy Hash: 2fadc2fb07629328c5925a52793feccf888e59cc4156ec8cc2cfc808a46e8c8f
Instruction Fuzzy Hash: 7241E171900214CFDB11EF58E989BABB7B5EF04714F14816AE80AAB752DF71AD41CB81

Uniqueness

Uniqueness Score: -1.00%

Function 00B10027, Relevance: 9.0, APIs: 6, Instructions: 50
COMMON

Download Yara Rule

C-Code - Quality: 69%

			E00B10027(void* __ebx, void* __ecx, void* __edx) {
				void* __edi;
				void* __esi;
				intOrPtr _t2;
				void* _t3;
				void* _t4;
				intOrPtr _t9;
				void* _t11;
				void* _t20;
				void* _t21;
				void* _t23;
				void* _t25;
				void* _t27;
				void* _t29;
				void* _t31;
				void* _t32;
				long _t36;
				long _t37;
				void* _t40;

				_t29 = __edx;
				_t23 = __ecx;
				_t20 = __ebx;
				_t36 = GetLastError();
				_t2 =  *0xb6bcb0; // 0x7
				_t42 = _t2 - 0xffffffff;
				if(_t2 == 0xffffffff) {
					L2:
					_t3 = E00B111D6(_t23, 1, 0x364);
					_t31 = _t3;
					_pop(_t25);
					if(_t31 != 0) {
						_t4 = E00B11713(_t25, _t36, __eflags,  *0xb6bcb0, _t31);
						__eflags = _t4;
						if(_t4 != 0) {
							E00B0FE96(_t25, _t31, 0xb730a8);
							E00B10176(0);
							_t40 = _t40 + 0xc;
							__eflags = _t31;
							if(_t31 == 0) {
								goto L9;
							} else {
								goto L8;
							}
						} else {
							_push(_t31);
							goto L4;
						}
					} else {
						_push(_t3);
						L4:
						E00B10176();
						_pop(_t25);
						L9:
						SetLastError(_t36);
						E00B0B8A6(_t20, _t29, _t31, _t36);
						asm("int3");
						_push(_t20);
						_push(_t36);
						_push(_t31);
						_t37 = GetLastError();
						_t21 = 0;
						_t9 =  *0xb6bcb0; // 0x7
						_t45 = _t9 - 0xffffffff;
						if(_t9 == 0xffffffff) {
							L12:
							_t32 = E00B111D6(_t25, 1, 0x364);
							_pop(_t27);
							if(_t32 != 0) {
								_t11 = E00B11713(_t27, _t37, __eflags,  *0xb6bcb0, _t32);
								__eflags = _t11;
								if(_t11 != 0) {
									E00B0FE96(_t27, _t32, 0xb730a8);
									E00B10176(_t21);
									__eflags = _t32;
									if(_t32 != 0) {
										goto L19;
									} else {
										goto L18;
									}
								} else {
									_push(_t32);
									goto L14;
								}
							} else {
								_push(_t21);
								L14:
								E00B10176();
								L18:
								SetLastError(_t37);
							}
						} else {
							_t32 = E00B116BD(_t25, _t37, _t45, _t9);
							if(_t32 != 0) {
								L19:
								SetLastError(_t37);
								_t21 = _t32;
							} else {
								goto L12;
							}
						}
						return _t21;
					}
				} else {
					_t31 = E00B116BD(_t23, _t36, _t42, _t2);
					if(_t31 != 0) {
						L8:
						SetLastError(_t36);
						return _t31;
					} else {
						goto L2;
					}
				}
			}

0x00b10027
0x00b10027
0x00b10027
0x00b10031
0x00b10033
0x00b10038
0x00b1003b
0x00b10049
0x00b10050
0x00b10055
0x00b10058
0x00b1005b
0x00b1006d
0x00b10072
0x00b10074
0x00b1007f
0x00b10086
0x00b1008b
0x00b1008e
0x00b10090
0x00000000
0x00000000
0x00000000
0x00000000
0x00b10076
0x00b10076
0x00000000
0x00b10076
0x00b1005d
0x00b1005d
0x00b1005e
0x00b1005e
0x00b10063
0x00b1009e
0x00b1009f
0x00b100a5
0x00b100aa
0x00b100ad
0x00b100ae
0x00b100af
0x00b100b6
0x00b100b8
0x00b100ba
0x00b100bf
0x00b100c2
0x00b100d0
0x00b100dc
0x00b100df
0x00b100e2
0x00b100f4
0x00b100f9
0x00b100fb
0x00b10106
0x00b1010c
0x00b10114
0x00b10116
0x00000000
0x00000000
0x00000000
0x00000000
0x00b100fd
0x00b100fd
0x00000000
0x00b100fd
0x00b100e4
0x00b100e4
0x00b100e5
0x00b100e5
0x00b10118
0x00b10119
0x00b10119
0x00b100c4
0x00b100ca
0x00b100ce
0x00b10121
0x00b10122
0x00b10128
0x00000000
0x00000000
0x00000000
0x00b100ce
0x00b1012f
0x00b1012f
0x00b1003d
0x00b10043
0x00b10047
0x00b10092
0x00b10093
0x00b1009d
0x00000000
0x00000000
0x00000000
0x00b10047

APIs

GetLastError.KERNEL32(?,?,00AFDD21,00B66398,00000010), ref: 00B1002B
_free.LIBCMT ref: 00B1005E
_free.LIBCMT ref: 00B10086
SetLastError.KERNEL32(00000000), ref: 00B10093
SetLastError.KERNEL32(00000000), ref: 00B1009F
_abort.LIBCMT ref: 00B100A5

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorLast$_free$_abort
String ID:
API String ID: 3160817290-0
Opcode ID: 8632feede2d368304e3791f51b2ef2e79eab4c60951de8c1b99f5323c0eef149
Instruction ID: af7756bcde51dcec79dfe5bd73aa96430a7ba1f99fc0e700dd6931777d836b3f
Opcode Fuzzy Hash: 8632feede2d368304e3791f51b2ef2e79eab4c60951de8c1b99f5323c0eef149
Instruction Fuzzy Hash: 97F0F43611470836C2323738AD0EF9B26EADBC5771BA444A4F518E32E1EFE48CC24261

Uniqueness

Uniqueness Score: -1.00%

Function 6B598F96, Relevance: 9.0, APIs: 6, Instructions: 50COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,6B596491,?,76568B40,?,6B595FB6,?,76568B40,?,76564830), ref: 6B598F9A
_free.LIBCMT ref: 6B598FCD
_free.LIBCMT ref: 6B598FF5
SetLastError.KERNEL32(00000000), ref: 6B599002
SetLastError.KERNEL32(00000000), ref: 6B59900E
_abort.LIBCMT ref: 6B599014

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorLast$_free$_abort
String ID:
API String ID: 3160817290-0
Opcode ID: b52925903d86ace05b0135c94ac3e8b5ce25e34a12b6d31131f960fff2adc53a
Instruction ID: 3742712caa9d409bae6352f1128f27d0e1d04d15ecd244135e67616b194c6105
Opcode Fuzzy Hash: b52925903d86ace05b0135c94ac3e8b5ce25e34a12b6d31131f960fff2adc53a
Instruction Fuzzy Hash: C8F031369486C16BFA1377747C0AECE366AABC2BA5F164454F529B21C5EF2DC8014172

Uniqueness

Uniqueness Score: -1.00%

Function 00A45453, Relevance: 8.9, APIs: 2, Strings: 3, Instructions: 163
COMMON

Download Yara Rule

C-Code - Quality: 61%

			E00A45453(void* __ebx, void* __edx, signed int __edi, void* __esi, void* __eflags, struct HINSTANCE__* _a4, struct HRSRC__* _a8, signed int _a12) {
				char _v4;
				intOrPtr _v12;
				signed int _v16;
				signed int _v20;
				char _v40;
				char _v60;
				char _v64;
				intOrPtr _v68;
				void* _v72;
				intOrPtr _v76;
				char _v92;
				void* _t67;
				void* _t69;
				void* _t71;
				void* _t73;
				void* _t74;
				intOrPtr _t77;
				void* _t82;
				void* _t91;
				void* _t100;
				intOrPtr* _t103;
				void* _t115;
				void* _t118;
				intOrPtr _t124;
				intOrPtr _t125;
				intOrPtr* _t130;
				signed int _t132;
				void* _t146;
				signed int _t147;
				intOrPtr* _t148;
				void* _t149;
				intOrPtr* _t152;
				intOrPtr* _t154;
				void* _t158;
				void* _t160;
				signed short* _t163;
				signed int _t166;
				void* _t171;
				void* _t172;
				void* _t173;
				void* _t174;
				void* _t188;

				_t160 = __esi;
				_t146 = __edx;
				_t123 = __ebx;
				_t124 =  *0xb70870; // 0x4ff7b8
				E00A5A2B0(_t124);
				_t67 = E00A434A0( &_v40, L"GetVersion");
				_t172 = _t171 + 8;
				_t158 = __edi | 0xffffffff;
				if(_t67 != 0) {
					_push( &_v72);
					E00A71760(__ebx);
					_t172 = _t172 + 4;
					_v4 = 2;
					E00A43660( &_v64,  &_v72);
					_v4 = 3;
					if(_v60 != 0) {
						_t115 = E00A43960( &_v92, __esi, _v64);
						_v4 = 4;
						__imp__#9(_v60);
						if(_t115 >= 0) {
							if(_v60 != 0) {
								asm("movups xmm0, [ebp-0x5c]");
								asm("movups [eax], xmm0");
								_t118 = 0;
								__eflags = 0;
							} else {
								 *((intOrPtr*)(E00AF7C67())) = 0x16;
								E00AF7B89();
								_t118 = _t158 + 0x17;
							}
							_push(_t118);
							E00A43F30(_t123, _t146, _t158, _t160);
							_t172 = _t172 + 4;
							_v92 = 0;
						}
						__imp__#9( &_v92);
					}
					_t148 = _v64 + 0xfffffff0;
					_v4 = 2;
					asm("lock xadd [edx+0xc], eax");
					_t112 = _t158 - 1;
					if(_t158 - 1 <= 0) {
						_t112 =  *((intOrPtr*)( *((intOrPtr*)( *_t148)) + 4))(_t148);
					}
					_v4 = 0;
					E00A439C0(_t112,  &_v72);
				}
				_t69 = E00A434A0( &_v40, L"SetWindowTitle");
				_t173 = _t172 + 8;
				if(_t69 == 0) {
					_t71 = E00A434A0( &_v40, L"ShowTitleBar");
					_t174 = _t173 + 8;
					__eflags = _t71;
					if(_t71 == 0) {
						_t73 = E00A434A0( &_v40, L"GotoMainTab");
						_t125 = _v68;
						_t173 = _t174 + 8;
						__eflags = _t73;
						if(__eflags == 0) {
							_t74 = L00A6C220(_t123, _t125, _t158, _t160, _v76, _t160, _v60);
							_t160 = _t74;
						} else {
							E00A90850(_t125 - 0x3d0, 0x10, 0xb, 0);
							_t160 = 1;
						}
					} else {
						_v72 = 1;
						E00A74580(0, _t160, 0,  &_v72);
						_t173 = _t174 + 0x10;
						__eflags = _v72;
						_v64 = _v72 != 0;
						_t91 = E00A8BFC0(_v68 - 0x330, L"browser_titlebar");
						__eflags = _t91;
						if(__eflags != 0) {
							 *((intOrPtr*)( *_t91 + 0x10c))(_v64);
						}
						goto L26;
					}
					goto L31;
				} else {
					_t130 = E00A445F0();
					if(_t130 == 0) {
						_push(0x80004005);
						E00A43FD0(_t123, _t158, _t160);
						goto L37;
					} else {
						_v60 =  *((intOrPtr*)( *((intOrPtr*)( *_t130 + 0xc))))() + 0x10;
						_v4 = 5;
						_t100 = E00A74760(_t158, 0, _t160, 0,  &_v60);
						_t173 = _t173 + 0x10;
						if(_t100 == 0) {
							_v4 = 0;
							_t152 = _v60 + 0xfffffff0;
							asm("lock xadd [edx+0xc], edi");
							__eflags = _t158;
							if(__eflags <= 0) {
								 *((intOrPtr*)( *((intOrPtr*)( *_t152)) + 4))(_t152);
							}
							_t160 = 0;
						} else {
							_t103 = E00A8BFC0(_v68 - 0x330, L"browser_title");
							if(_t103 != 0) {
								 *((intOrPtr*)( *_t103 + 0x30))(_v60);
							}
							_v4 = 0;
							_t154 = _v60 + 0xfffffff0;
							asm("lock xadd [edx+0xc], edi");
							_t188 = _t158;
							if(_t188 > 0) {
								L26:
								_t160 = 1;
							} else {
								 *((intOrPtr*)( *((intOrPtr*)( *_t154)) + 4))(_t154);
								_t160 = 1;
							}
						}
						L31:
						_t147 = _v20;
						if(_t147 < 8) {
							L35:
							 *[fs:0x0] = _v12;
							return E00AE4BF8(_v16 ^ _t166);
						} else {
							_t130 = _v40;
							_t148 = 2 + _t147 * 2;
							_t77 = _t130;
							if(_t148 < 0x1000) {
								L34:
								_push(_t148);
								E00AE4950(_t130);
								goto L35;
							} else {
								_t130 =  *((intOrPtr*)(_t130 - 4));
								_t148 = _t148 + 0x23;
								if(_t77 - _t130 + 0xfffffffc > 0x1f) {
									L37:
									E00AF7B99(_t123, _t130, _t148, _t158, __eflags);
									asm("int3");
									asm("int3");
									asm("int3");
									asm("int3");
									_push(_t166);
									_push(_t160);
									_t82 = LoadResource(_a4, _a8);
									__eflags = _t82;
									if(_t82 == 0) {
										L46:
										__eflags = 0;
										return 0;
									} else {
										_t163 = LockResource(_t82);
										__eflags = _t163;
										if(_t163 == 0) {
											goto L46;
										} else {
											_t149 = _t163 + SizeofResource(_a4, _a8);
											_t132 = _a12 & 0x0000000f;
											__eflags = _t132;
											if(_t132 <= 0) {
												L43:
												__eflags = _t163 - _t149;
												if(_t163 >= _t149) {
													goto L46;
												} else {
													__eflags =  *_t163;
													if( *_t163 == 0) {
														goto L46;
													} else {
														return _t163;
													}
												}
											} else {
												while(1) {
													__eflags = _t163 - _t149;
													if(_t163 >= _t149) {
														goto L46;
													}
													_t163 =  &(( &(_t163[ *_t163 & 0x0000ffff]))[1]);
													_t132 = _t132 - 1;
													__eflags = _t132;
													if(_t132 != 0) {
														continue;
													} else {
														goto L43;
													}
													goto L47;
												}
												goto L46;
											}
										}
									}
								} else {
									goto L34;
								}
							}
						}
					}
				}
				L47:
			}

0x00a45453
0x00a45453
0x00a45453
0x00a45453
0x00a45459
0x00a45467
0x00a4546c
0x00a4546f
0x00a45474
0x00a4547d
0x00a4547e
0x00a45483
0x00a45489
0x00a45491
0x00a4549a
0x00a4549e
0x00a454a6
0x00a454ae
0x00a454b2
0x00a454ba
0x00a454c1
0x00a454d8
0x00a454dc
0x00a454df
0x00a454df
0x00a454c3
0x00a454c8
0x00a454ce
0x00a454d3
0x00a454d3
0x00a454e1
0x00a454e2
0x00a454e7
0x00a454ec
0x00a454ec
0x00a454f4
0x00a454f4
0x00a454ff
0x00a45502
0x00a45506
0x00a4550b
0x00a4550e
0x00a45515
0x00a45515
0x00a4551b
0x00a4551f
0x00a4551f
0x00a4552d
0x00a45532
0x00a45537
0x00a455e9
0x00a455ee
0x00a455f1
0x00a455f3
0x00a45649
0x00a4564e
0x00a45651
0x00a45654
0x00a45656
0x00a45677
0x00a4567c
0x00a45658
0x00a45664
0x00a45669
0x00a45669
0x00a455f5
0x00a455f8
0x00a45605
0x00a4560d
0x00a45610
0x00a45614
0x00a45623
0x00a45628
0x00a4562a
0x00a45633
0x00a45633
0x00000000
0x00a4562a
0x00000000
0x00a4553d
0x00a45542
0x00a45546
0x00a456dd
0x00a456e2
0x00000000
0x00a4554c
0x00a45556
0x00a4555c
0x00a45566
0x00a4556b
0x00a45570
0x00a455c0
0x00a455c4
0x00a455c7
0x00a455cd
0x00a455cf
0x00a455d6
0x00a455d6
0x00a455d9
0x00a45572
0x00a45580
0x00a45587
0x00a45590
0x00a45590
0x00a45596
0x00a4559a
0x00a4559d
0x00a455a3
0x00a455a5
0x00a45639
0x00a45639
0x00a455ab
0x00a455b0
0x00a455b3
0x00a455b3
0x00a455a5
0x00a4567e
0x00a4567e
0x00a45684
0x00a456b4
0x00a456b9
0x00a456d0
0x00a45686
0x00a45686
0x00a45689
0x00a45690
0x00a45698
0x00a456aa
0x00a456aa
0x00a456ac
0x00000000
0x00a4569a
0x00a4569a
0x00a4569d
0x00a456a8
0x00a456e7
0x00a456e7
0x00a456ec
0x00a456ed
0x00a456ee
0x00a456ef
0x00a456f0
0x00a456f3
0x00a456fa
0x00a45700
0x00a45702
0x00a45749
0x00a45749
0x00a4574d
0x00a45704
0x00a4570b
0x00a4570d
0x00a4570f
0x00000000
0x00a45711
0x00a45720
0x00a45723
0x00a45723
0x00a45726
0x00a4573a
0x00a4573a
0x00a4573c
0x00000000
0x00a4573e
0x00a4573e
0x00a45742
0x00000000
0x00a45744
0x00a45748
0x00a45748
0x00a45742
0x00a45728
0x00a45728
0x00a45728
0x00a4572a
0x00000000
0x00000000
0x00a45732
0x00a45735
0x00a45735
0x00a45738
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00a45738
0x00000000
0x00a45728
0x00a45726
0x00a4570f
0x00000000
0x00000000
0x00000000
0x00a456a8
0x00a45698
0x00a45684
0x00a45546
0x00000000

APIs

Part of subcall function 00A5A2B0: DestroyWindow.USER32(00000000,?,00A6CAEA,?,?), ref: 00A5D583

Part of subcall function 00A71760: GetModuleFileNameW.KERNEL32(00A40000,?,00000104,5CC80E5B), ref: 00A717BD

Part of subcall function 00A43960: VariantClear.OLEAUT32 ref: 00A4396C
Part of subcall function 00A43960: SysAllocString.OLEAUT32(?), ref: 00A43981

VariantClear.OLEAUT32(00000000), ref: 00A454B2
VariantClear.OLEAUT32(?), ref: 00A454F4

Strings

GetVersion, xrefs: 00A45461
SetWindowTitle, xrefs: 00A45527
browser_title, xrefs: 00A45575

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ClearVariant$AllocDestroyFileModuleNameStringWindow
String ID: GetVersion$SetWindowTitle$browser_title
API String ID: 2369965443-1712168002
Opcode ID: 88fced8384575570f5f32caa75d1fb3e47b9181e27e467746f76f3c2d619bdb2
Instruction ID: 73a5fa4db419a3517094896f0d8f15162adec976acb0f236395898399df93efe
Opcode Fuzzy Hash: 88fced8384575570f5f32caa75d1fb3e47b9181e27e467746f76f3c2d619bdb2
Instruction Fuzzy Hash: 80513339E00508DBDB04EBB8DD45BADF7B5AF84311F188168E815AB2A3EB30DE45CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00A74580, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 88COMMON

Download Yara Rule

APIs

VariantInit.OLEAUT32(5CC80E5B), ref: 00A745F2
VariantChangeType.OLEAUT32(0000000B,0000000B,00000000,0000000B), ref: 00A74610
VariantClear.OLEAUT32(?), ref: 00A74650

Strings

%s, failed get %d parameter, not enough parameters, xrefs: 00A745BF
%s, failed get %d parameter, change type %d to VT_BOOL failed., xrefs: 00A74627

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Variant$ChangeClearInitType
String ID: %s, failed get %d parameter, change type %d to VT_BOOL failed.$%s, failed get %d parameter, not enough parameters
API String ID: 3357537223-2392694051
Opcode ID: fd711c9bef610bb9d50f69aa897bac5292348cb0bfa59198a41e5e7f84703b8c
Instruction ID: 930fa24294a0c433bf5c8bdc6159cb166b55d842ad8bb58c7b8b2684a6f4bbea
Opcode Fuzzy Hash: fd711c9bef610bb9d50f69aa897bac5292348cb0bfa59198a41e5e7f84703b8c
Instruction Fuzzy Hash: D5218973E006549BDB21DF65DD45BAAB7BCEB49710F11816AFC15E7280E774AD00CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00A74670, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 86COMMON

Download Yara Rule

APIs

VariantInit.OLEAUT32(5CC80E5B), ref: 00A746E2
VariantChangeType.OLEAUT32(00000016,00000016,00000000,00000016), ref: 00A74700
VariantClear.OLEAUT32(?), ref: 00A74739

Strings

%s, failed get %d parameter, not enough parameters, xrefs: 00A746AF
%s, failed get %d parameter, change type %d to VT_INT failed., xrefs: 00A74717

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Variant$ChangeClearInitType
String ID: %s, failed get %d parameter, change type %d to VT_INT failed.$%s, failed get %d parameter, not enough parameters
API String ID: 3357537223-3980957764
Opcode ID: 25530accbc6b00321924f057028784b4e0f80659ed32964d083b656b68f0b7b7
Instruction ID: ecf668e7dcf4b61b30411ceacf3eb6d6f3e6d427613350fec096230ea7fc503a
Opcode Fuzzy Hash: 25530accbc6b00321924f057028784b4e0f80659ed32964d083b656b68f0b7b7
Instruction Fuzzy Hash: DC218576E002189BDB24DF65DD45BAAB7FCEB49710F11826AFC19E7240E775A900CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00B0CAF5, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 38libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,?,00B0CAA6,00000003,?,00B0CA46,00000003,00B66660,0000000C,00B0CB9D,00000003,00000002), ref: 00B0CB15
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00B0CB28
FreeLibrary.KERNEL32(00000000,?,?,?,00B0CAA6,00000003,?,00B0CA46,00000003,00B66660,0000000C,00B0CB9D,00000003,00000002,00000000), ref: 00B0CB4B

Strings

mscoree.dll, xrefs: 00B0CB0E
CorExitProcess, xrefs: 00B0CB20

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 718ff213008b19bb7abe95fe63c983f014229a8e1e2deca6314d2b63935f9577
Instruction ID: 7e469ac7dbce0d399533eef5edb8fe6edf7dfb0f7c6250b79c46978ca622c913
Opcode Fuzzy Hash: 718ff213008b19bb7abe95fe63c983f014229a8e1e2deca6314d2b63935f9577
Instruction Fuzzy Hash: CBF04431A0120CBBCB119FA5DC0AB9DBFF4EB04711F404194F805A31A0CF749E41DB91

Uniqueness

Uniqueness Score: -1.00%

Function 6B59772A, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 38libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,?,6B5976DB,00000003,?,6B59767B,00000003,6B5A9208,0000000C,6B5977C3,00000003,00000002), ref: 6B59774A
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 6B59775D
FreeLibrary.KERNEL32(00000000,?,?,?,6B5976DB,00000003,?,6B59767B,00000003,6B5A9208,0000000C,6B5977C3,00000003,00000002,00000000), ref: 6B597780

Strings

mscoree.dll, xrefs: 6B597743
CorExitProcess, xrefs: 6B597755

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: ce521399ab2e23a02408eafc9f7c0d75a6b5889a314eafa15931e72dfd3f3e98
Instruction ID: 34852199ec0aa554691457dc10946805924933ffc0828d2b9e83afe74b942169
Opcode Fuzzy Hash: ce521399ab2e23a02408eafc9f7c0d75a6b5889a314eafa15931e72dfd3f3e98
Instruction Fuzzy Hash: 9DF03130A00108BBDB11AF61D849BEEBFA8EB45255F114095E805F2240DB75D944CA90

Uniqueness

Uniqueness Score: -1.00%

Function 00A70A10, Relevance: 7.7, APIs: 5, Instructions: 193COMMON

Download Yara Rule

APIs

Part of subcall function 00A445F0: GetProcessHeap.KERNEL32(00A75638,5CC80E5B), ref: 00A44601

SHGetSpecialFolderPathW.SHELL32(00000000,?,0000001A,00000000), ref: 00A70A90
SHCreateDirectoryExW.SHELL32(00000000,?,00000000,00000000,?,?,?), ref: 00A70AE4
PathFileExistsW.SHLWAPI(?), ref: 00A70AEB
GetModuleFileNameW.KERNEL32(00000000,?,00000104,00000001,00000001,?), ref: 00A70BC0
PathFindFileNameW.SHLWAPI(?), ref: 00A70BCD

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: FilePath$Name$CreateDirectoryExistsFindFolderHeapModuleProcessSpecial
String ID:
API String ID: 2115416257-0
Opcode ID: d0e7dfc9a578e0838d75debd6e52c0d05ceef7f8de8d7975dda894b9fff03f8a
Instruction ID: d895836b5aa18d1d91dbf2855b6fa22f1f54533ff77018db5010827409e27f4d
Opcode Fuzzy Hash: d0e7dfc9a578e0838d75debd6e52c0d05ceef7f8de8d7975dda894b9fff03f8a
Instruction Fuzzy Hash: B751B471A402099BDB20DF68DC49FEAB7B8EF44310F148659F929D72D1DB70AA45CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00B0D513, Relevance: 7.6, APIs: 5, Instructions: 129COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 00B0D585
_free.LIBCMT ref: 00B0D5A5

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: _free
String ID:
API String ID: 269201875-0
Opcode ID: f9c8ef31555a64fe976c9f24ed315a2e9b6a4f5f0e2d04b4241613a9baf5574e
Instruction ID: 1031ad285dc10d01ab23c66de7ab7273d14b5351eb6591c79fe757342c732434
Opcode Fuzzy Hash: f9c8ef31555a64fe976c9f24ed315a2e9b6a4f5f0e2d04b4241613a9baf5574e
Instruction Fuzzy Hash: 2A419436A002149FCB14DFB8C991A5EBBF5EF88714B1585A9E915EB3D1DB31ED01CB80

Uniqueness

Uniqueness Score: -1.00%

Function 6B597F03, Relevance: 7.6, APIs: 5, Instructions: 129COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 6B597F75
_free.LIBCMT ref: 6B597F95

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: _free
String ID:
API String ID: 269201875-0
Opcode ID: d71e391d9b566a4f361601d1e116e21291062fefe4d31322b5517f7a4bd406b4
Instruction ID: eb42a02ed19d2fc17ab54a3e4cb6cfbbb66adee67eb3c892c0143c4d2bfb413f
Opcode Fuzzy Hash: d71e391d9b566a4f361601d1e116e21291062fefe4d31322b5517f7a4bd406b4
Instruction Fuzzy Hash: 4841D032A002849FEB14EF78D881A9EB7B5FF85714F1145AAE515EB341EB35AD01CB80

Uniqueness

Uniqueness Score: -1.00%

Function 00B100AB, Relevance: 7.6, APIs: 5, Instructions: 53COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,00AF7C6C,00B11228,?,00B10055,00000001,00000364,?,00AFDD21,00B66398,00000010), ref: 00B100B0
_free.LIBCMT ref: 00B100E5
_free.LIBCMT ref: 00B1010C
SetLastError.KERNEL32(00000000), ref: 00B10119
SetLastError.KERNEL32(00000000), ref: 00B10122

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorLast$_free
String ID:
API String ID: 3170660625-0
Opcode ID: 0cf0dd2bfeddb043c2c8c0c9ef118396a4bdac8c9ef931ed66f7feba41e57f62
Instruction ID: 70e59e6d2b4a624c24e89bb6f51beb25dbdecc57d326918f42893b01d1cae56d
Opcode Fuzzy Hash: 0cf0dd2bfeddb043c2c8c0c9ef118396a4bdac8c9ef931ed66f7feba41e57f62
Instruction Fuzzy Hash: C501F43621460077C632B7789C89EAF26E9DBE57B1BB004A8F515F3291EFF888D14265

Uniqueness

Uniqueness Score: -1.00%

Function 6B59901A, Relevance: 7.6, APIs: 5, Instructions: 53COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,6B595D9A,6B59A52C,?,6B5973C2,?,00000004,?,?,?,?,6B597F90,?,?), ref: 6B59901F
_free.LIBCMT ref: 6B599054
_free.LIBCMT ref: 6B59907B
SetLastError.KERNEL32(00000000,?,?,?,00000000,00000000,?,00000000), ref: 6B599088
SetLastError.KERNEL32(00000000,?,?,?,00000000,00000000,?,00000000), ref: 6B599091

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorLast$_free
String ID:
API String ID: 3170660625-0
Opcode ID: f6473c47ce5bbeb7b0e8b4126d6a42c0c493e7e3f9cbc04e8160ea2a51e8cb3f
Instruction ID: beb9394b3056a62b29945aae56559b52c477402581b2e17d64b55261a1906952
Opcode Fuzzy Hash: f6473c47ce5bbeb7b0e8b4126d6a42c0c493e7e3f9cbc04e8160ea2a51e8cb3f
Instruction Fuzzy Hash: F201D1369446816FF623B7753C4AACF377DABC2768B120468F638B2286EB2DC8014021

Uniqueness

Uniqueness Score: -1.00%

Function 00B1A236, Relevance: 7.5, APIs: 5, Instructions: 40COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 00B1A24E

Part of subcall function 00B10176: RtlFreeHeap.NTDLL(00000000,00000000,?,00B1A4E9,?,00000000,?,00000000,?,00B1A78D,?,00000007,?,?,00B1AAEC,?), ref: 00B1018C
Part of subcall function 00B10176: GetLastError.KERNEL32(?,?,00B1A4E9,?,00000000,?,00000000,?,00B1A78D,?,00000007,?,?,00B1AAEC,?,?), ref: 00B1019E

_free.LIBCMT ref: 00B1A260
_free.LIBCMT ref: 00B1A272
_free.LIBCMT ref: 00B1A284
_free.LIBCMT ref: 00B1A296

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 116e34ad5342e9df3e0955e3add2cca30c15d78da5bc93cbe851df8c1b5a9174
Instruction ID: 17314c9bce59ed6dccb83cb7f2596cd1b5aabcac23b068b671a870cb81b9d779
Opcode Fuzzy Hash: 116e34ad5342e9df3e0955e3add2cca30c15d78da5bc93cbe851df8c1b5a9174
Instruction Fuzzy Hash: 21F0F932515214ABC635EB68E8C2C9B77F9EA047107E44C89F108E7661CFB9FDC0CAA5

Uniqueness

Uniqueness Score: -1.00%

Function 6B59E2FA, Relevance: 7.5, APIs: 5, Instructions: 40COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 6B59E312

Part of subcall function 6B5990E5: HeapFree.KERNEL32(00000000,00000000,?,6B59E391,?,00000000,?,00000000,?,6B59E3B8,?,00000007,?,?,6B59C1BE,?), ref: 6B5990FB
Part of subcall function 6B5990E5: GetLastError.KERNEL32(?,?,6B59E391,?,00000000,?,00000000,?,6B59E3B8,?,00000007,?,?,6B59C1BE,?,?), ref: 6B59910D

_free.LIBCMT ref: 6B59E324
_free.LIBCMT ref: 6B59E336
_free.LIBCMT ref: 6B59E348
_free.LIBCMT ref: 6B59E35A

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 2056cd8c2329dcce4cd909fa1651e3079659ac8271a39edb711aa3f125c6d58b
Instruction ID: e16df407b180c4a20182d1a22fdd4514a1f34fd9269d3e0209e4c9d1c737828a
Opcode Fuzzy Hash: 2056cd8c2329dcce4cd909fa1651e3079659ac8271a39edb711aa3f125c6d58b
Instruction Fuzzy Hash: 50F04F319102849BAE21EBB8F886CDF33E9FB857507514C49E029E7505C738FC854AA4

Uniqueness

Uniqueness Score: -1.00%

Function 00A541D0, Relevance: 7.5, APIs: 5, Instructions: 33fileCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNEL32(00000010,00000010,?,00A53E97,00000010,?,?,?,?,?), ref: 00A541D8
PathFileExistsW.SHLWAPI(00000010,?,00A53E97,00000010,?,?,?,?,?), ref: 00A541E3
SetFileAttributesW.KERNEL32(00000010,00000080,?,00A53E97,00000010,?,?,?,?,?), ref: 00A541F3
DeleteFileW.KERNEL32(00000010,?,00A53E97,00000010,?,?,?,?,?), ref: 00A541FE
MoveFileExW.KERNEL32(00000010,00000000,00000004,?,00A53E97,00000010,?,?,?,?,?), ref: 00A5420D

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: File$Delete$AttributesExistsMovePath
String ID:
API String ID: 3704743691-0
Opcode ID: a347aadf13823e21f5d5b2e96dfb168626e910bfc6c5c27d325f43fe7ece90f4
Instruction ID: c7ed24f3fa06654751eed14abea62822bd19d123074726fdaf51fb57fae1283e
Opcode Fuzzy Hash: a347aadf13823e21f5d5b2e96dfb168626e910bfc6c5c27d325f43fe7ece90f4
Instruction Fuzzy Hash: CBE06531381221A7D6302B71AC48BDE369CAF1575BF010114F909D6450DF64D54346E5

Uniqueness

Uniqueness Score: -1.00%

Function 00A7DA70, Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 189timethreadCOMMON

Download Yara Rule

APIs

GetLocalTime.KERNEL32(?), ref: 00A7DAE5
GetCurrentThreadId.KERNEL32 ref: 00A7DB02
GetCurrentProcessId.KERNEL32(00000000), ref: 00A7DB09

Part of subcall function 00A7DD90: PathFileExistsW.SHLWAPI(?,?,00000000), ref: 00A7DDBA
Part of subcall function 00A7DD90: SHCreateDirectoryExW.SHELL32(00000000,?,00000000,?,00000000), ref: 00A7DDC5
Part of subcall function 00A7DD90: PathFileExistsW.SHLWAPI(?,?,00000000), ref: 00A7DDCE
Part of subcall function 00A7DD90: GetLocalTime.KERNEL32(?,?,?,00000000), ref: 00A7DE3E
Part of subcall function 00A7DD90: GetCurrentThreadId.KERNEL32 ref: 00A7DE8A
Part of subcall function 00A7DD90: GetCurrentProcessId.KERNEL32(00000000,?,?,?,?,?,00000000), ref: 00A7DE91

Part of subcall function 00A43FD0: __CxxThrowException@8.LIBVCRUNTIME ref: 00A43FE7

Strings

%04d-%02d-%02d %02d:%02d:%02d.%03d [%06x:%06x][%s] , xrefs: 00A7DB48

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Current$ExistsFileLocalPathProcessThreadTime$CreateDirectoryException@8Throw
String ID: %04d-%02d-%02d %02d:%02d:%02d.%03d [%06x:%06x][%s]
API String ID: 2071543617-1949151303
Opcode ID: 8e8c6b66490db7c287ca4ad97248c615ebb9bc9c5f938c41a49c3b1408c520e3
Instruction ID: 6c58ec314ebe3985001bce028c7b99800bacc48266265795a93c643a8ed397f5
Opcode Fuzzy Hash: 8e8c6b66490db7c287ca4ad97248c615ebb9bc9c5f938c41a49c3b1408c520e3
Instruction Fuzzy Hash: DA71AF75900159DBDB24DF64CD44BAEB3F8EF48300F1485EAE90AA7641EB71AE85CF60

Uniqueness

Uniqueness Score: -1.00%

Function 00A8E910, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 141keyboardCOMMON

Download Yara Rule

APIs

GetTickCount.KERNEL32 ref: 00A8EA0E
_wcsstr.LIBVCRUNTIME ref: 00A8EA6B
GetKeyState.USER32(00000010), ref: 00A8EA85

Strings

RichEditUI, xrefs: 00A8EA60

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: CountStateTick_wcsstr
String ID: RichEditUI
API String ID: 1310091763-2796277332
Opcode ID: 294aa345c33161673abccc9e6677460d993482b8e7f53e64fe28101eeac2d6b8
Instruction ID: 2adfc4e4b323d682363cb8aac87556740bd31bbb66405059cbcedce5882958dd
Opcode Fuzzy Hash: 294aa345c33161673abccc9e6677460d993482b8e7f53e64fe28101eeac2d6b8
Instruction Fuzzy Hash: 4841B035A00208DFCF18EF68C884AEEB7A5FF99701F0481A9EC199B355DB719945CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A71F00, Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 137COMMON

Download Yara Rule

APIs

__fread_nolock.LIBCMT ref: 00A71F7C

Strings

0HVv, xrefs: 00A71FC2, 00A72001
r+b, xrefs: 00A71F0F

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: __fread_nolock
String ID: 0HVv$r+b
API String ID: 2638373210-2527539397
Opcode ID: e20628f1496a7656cccc9a3597e7546b41add7de36039a60dd7639f8f70d494c
Instruction ID: 89503a7d38b612c2160648153f2aee6f01ad285ffd4188e67c76d13301f5ed4b
Opcode Fuzzy Hash: e20628f1496a7656cccc9a3597e7546b41add7de36039a60dd7639f8f70d494c
Instruction Fuzzy Hash: AA4104716043046AEB30ABBCDC85B2EB7A8AF41710F14C62EF50D8B292D371E945C3A5

Uniqueness

Uniqueness Score: -1.00%

Function 00A44F90, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 118COMMON

Download Yara Rule

APIs

FindWindowExW.USER32 ref: 00A44FE1
EnableWindow.USER32(00000000,00000000), ref: 00A45034
EnableWindow.USER32(00000000,00000001), ref: 00A45064

Strings

LITE_GAME_BOX_MAIN_WINDOW, xrefs: 00A44FD9

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Enable$Find
String ID: LITE_GAME_BOX_MAIN_WINDOW
API String ID: 241260159-995087692
Opcode ID: e2efacf7fafd915184cb49da9cdca935b2bd063d0bd7abd3398993a77483b6e1
Instruction ID: 13c56e31192af2fe92152e85f4fd03ec3e568075b9bf29950a8bc24ea49a324d
Opcode Fuzzy Hash: e2efacf7fafd915184cb49da9cdca935b2bd063d0bd7abd3398993a77483b6e1
Instruction Fuzzy Hash: 0841827AE006159FDB24DFA8CD81BAEB7F5EF88710F510529E915B7281CB75AD008B90

Uniqueness

Uniqueness Score: -1.00%

Function 00A48250, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 92COMMON

Download Yara Rule

APIs

Part of subcall function 00A986F0: GetWindowLongW.USER32(00000000,000000F0), ref: 00A98728
Part of subcall function 00A986F0: SetWindowLongW.USER32 ref: 00A98743
Part of subcall function 00A986F0: GetClientRect.USER32 ref: 00A98755
Part of subcall function 00A986F0: SetWindowPos.USER32(00000000,00000000,00A4828E,?,?,?,00000020), ref: 00A9877B
Part of subcall function 00A986F0: FindResourceW.KERNEL32(00000000,00000000,?,?), ref: 00A987DF
Part of subcall function 00A986F0: LoadResource.KERNEL32(00000000,00000000,?,?), ref: 00A987F6
Part of subcall function 00A986F0: FreeResource.KERNEL32(00000000,?,?), ref: 00A98807

Part of subcall function 00A90080: GetWindowRect.USER32 ref: 00A900A9
Part of subcall function 00A90080: GetWindowLongW.USER32(00000000,000000F0), ref: 00A900BB
Part of subcall function 00A90080: GetParent.USER32(00000000), ref: 00A900CC
Part of subcall function 00A90080: GetWindowLongW.USER32(00000000,000000F0), ref: 00A900E6
Part of subcall function 00A90080: SystemParametersInfoW.USER32 ref: 00A90105
Part of subcall function 00A90080: SetWindowPos.USER32(00000000,00000000,?,?,000000FF,000000FF,00000015), ref: 00A9019E

SetWindowPos.USER32(?,000000FF,00000000,00000000,00000000,00000000,00000083), ref: 00A482C3
SetWindowPos.USER32(?,000000FE,00000000,00000000,00000000,00000000,00000083), ref: 00A482D7
SwitchToThisWindow.USER32(?,00000001), ref: 00A482DE

Part of subcall function 00A90AF0: IsWindow.USER32(00000000), ref: 00A90AF9
Part of subcall function 00A90AF0: ShowWindow.USER32(00000000,-00000004,?,00A5D59E,00000000,00000000), ref: 00A90B14

Part of subcall function 00A74CA0: PostThreadMessageW.USER32 ref: 00A74D0C

Strings

CChangeGameWindow::_ShowWindow, xrefs: 00A4829E

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Long$Resource$Rect$ClientFindFreeInfoLoadMessageParametersParentPostShowSwitchSystemThisThread
String ID: CChangeGameWindow::_ShowWindow
API String ID: 3604550518-1501245210
Opcode ID: 96730f724a0e98e262e4b65ee2e4505770760371d5641598ae17480e8994e18a
Instruction ID: de034ecdd61a3c1aee524501c4d0ec816ee81edf1810080a17be9df4549b321b
Opcode Fuzzy Hash: 96730f724a0e98e262e4b65ee2e4505770760371d5641598ae17480e8994e18a
Instruction Fuzzy Hash: 25318D30B40209BBDF14DF64DD46FAEBBA5FF44B10F104229F515AA2D0DBB5A910CB94

Uniqueness

Uniqueness Score: -1.00%

Function 00A6F6F0, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 67COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00A6F71D
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00A6F76C
__CxxThrowException@8.LIBVCRUNTIME ref: 00A6F79E

Strings

bad locale name, xrefs: 00A6F788

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: std::_$Exception@8Locinfo::_Locinfo_ctorLockitLockit::_Throw
String ID: bad locale name
API String ID: 3707412701-1405518554
Opcode ID: 8b42ab267ab2a5abf7b8fb3630321cbaf29ca832ca8538c2e1656aff3f5e087d
Instruction ID: 48167bc4809ce94fce45d3ca850e7d7dc557136db1d9cde68f99695e06088e3e
Opcode Fuzzy Hash: 8b42ab267ab2a5abf7b8fb3630321cbaf29ca832ca8538c2e1656aff3f5e087d
Instruction Fuzzy Hash: 4711E271904B449FD720DF68C905B4BBBF8EF19700F008A6EE459D3B81D7B9A504CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A431B0, Relevance: 6.1, APIs: 4, Instructions: 140COMMON

Download Yara Rule

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(00B722A8,00000000), ref: 00A431B7
GetLastError.KERNEL32 ref: 00A431C1
InitializeCriticalSectionAndSpinCount.KERNEL32(00B72A18,00000000,00000000), ref: 00A431F7
GetLastError.KERNEL32 ref: 00A43201

Part of subcall function 00A43FD0: __CxxThrowException@8.LIBVCRUNTIME ref: 00A43FE7

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: CountCriticalErrorInitializeLastSectionSpin$Exception@8Throw
String ID:
API String ID: 3390831176-0
Opcode ID: b2efcc3dc11b6fa971d31049f7035482401e34992e6dd23a2e79611e15b769b4
Instruction ID: dfe57998473e5b9b495a5ba733eeee649e3ac724143af3db394c7be262a04e73
Opcode Fuzzy Hash: b2efcc3dc11b6fa971d31049f7035482401e34992e6dd23a2e79611e15b769b4
Instruction Fuzzy Hash: C83123BB7003065BDF149F6AEC85B9B7B9CAFD0740F100169FD05CB246EB74EA418AA5

Uniqueness

Uniqueness Score: -1.00%

Function 00B16885, Relevance: 6.1, APIs: 4, Instructions: 110COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,?,00000000,00000000,00000000,00B0B90E,?,00000000,00000000,00000001,00000000,?,00000001,00B0B90E), ref: 00B168D2
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?), ref: 00B1695B
GetStringTypeW.KERNEL32(?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00AFC193,?), ref: 00B1696D
__freea.LIBCMT ref: 00B16976

Part of subcall function 00B101B0: RtlAllocateHeap.NTDLL(00000000,?,00000000,?,00B16929,00000000,?,?,00AFC193,?,00000008,?,00B0B90E,00000000,00000000), ref: 00B101E2

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide$AllocateHeapStringType__freea
String ID:
API String ID: 2652629310-0
Opcode ID: 10425b76df999770ce1cf058632d57e25f27e9accf09ac759c22735b826c7608
Instruction ID: 6654f9133a725d4a4b2d795ac74b9fad62b2ddf484175b358a4f8cc31bbd9f2e
Opcode Fuzzy Hash: 10425b76df999770ce1cf058632d57e25f27e9accf09ac759c22735b826c7608
Instruction Fuzzy Hash: 2D31BD72A0020AABDF249F65DC85DEE7BE5EB44750F9401A8FC04D7150EB35CD91CB90

Uniqueness

Uniqueness Score: -1.00%

Function 6B59E483, Relevance: 6.1, APIs: 4, Instructions: 110COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(?,00000000,94E85006,6B5965B4,00000000,00000000,6B596DF2,?,6B596DF2,?,00000001,6B5965B4,94E85006,00000001,6B596DF2,6B596DF2), ref: 6B59E4D0
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?), ref: 6B59E559
GetStringTypeW.KERNEL32(?,00000000,00000000,?), ref: 6B59E56B
__freea.LIBCMT ref: 6B59E574

Part of subcall function 6B599335: HeapAlloc.KERNEL32(00000000,?,00000004,?,6B59A50E,?,00000000,?,6B5973C2,?,00000004,?,?,?,?,6B597F90), ref: 6B599367

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide$AllocHeapStringType__freea
String ID:
API String ID: 573072132-0
Opcode ID: 50893b7bcc482049a012da4b813c141a1c8d5a006c2b42897e7a5565d46c5c6b
Instruction ID: a8893655feca56e25ae729a3035eaec9596b6933cc233e66e4a5f5abfb1f7bdd
Opcode Fuzzy Hash: 50893b7bcc482049a012da4b813c141a1c8d5a006c2b42897e7a5565d46c5c6b
Instruction Fuzzy Hash: E831E372A1024A9BEF15EF74EC81EEE7BA5FB40710F054168EC18E6154E739CD54CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00B114B5, Relevance: 6.1, APIs: 4, Instructions: 52libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,00000000,00000000,?,00B1145C,?,00000000,00000000,00000000,?,00B1173A,00000006,FlsSetValue), ref: 00B114E7
GetLastError.KERNEL32(?,00B1145C,?,00000000,00000000,00000000,?,00B1173A,00000006,FlsSetValue,00B4D3D0,FlsSetValue,00000000,00000364,?,00B100F9), ref: 00B114F3
LoadLibraryExW.KERNEL32(00000000,00000000,00000000,?,00B1145C,?,00000000,00000000,00000000,?,00B1173A,00000006,FlsSetValue,00B4D3D0,FlsSetValue,00000000), ref: 00B11501

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: LibraryLoad$ErrorLast
String ID:
API String ID: 3177248105-0
Opcode ID: f8e16c9f0ce8a8b60a019239fb760d8d711b6af65e0b0244d090bcaf4325f064
Instruction ID: d24fe4b93e7880cec48a58892fe66d73f22fc993c62c1c8490568be2528144ff
Opcode Fuzzy Hash: f8e16c9f0ce8a8b60a019239fb760d8d711b6af65e0b0244d090bcaf4325f064
Instruction Fuzzy Hash: 9A01A736711222EBCB324A6DDC8499677E9EF95BA17A00A64FA07D7280DB20D94186E0

Uniqueness

Uniqueness Score: -1.00%

Function 6B59A69E, Relevance: 6.1, APIs: 4, Instructions: 52libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,00000000,00000000,?,6B59A645,?,00000000,00000000,00000000,?,6B59A842,00000006,FlsSetValue), ref: 6B59A6D0
GetLastError.KERNEL32(?,6B59A645,?,00000000,00000000,00000000,?,6B59A842,00000006,FlsSetValue,6B5A49D8,FlsSetValue,00000000,00000364,?,6B599068), ref: 6B59A6DC
LoadLibraryExW.KERNEL32(00000000,00000000,00000000,?,6B59A645,?,00000000,00000000,00000000,?,6B59A842,00000006,FlsSetValue,6B5A49D8,FlsSetValue,00000000), ref: 6B59A6EA

Memory Dump Source

Source File: 00000000.00000002.894767544.000000006B591000.00000020.00020000.sdmp, Offset: 6B590000, based on PE: true

Associated: 00000000.00000002.894756370.000000006B590000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894825349.000000006B5A3000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.894861732.000000006B5AA000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.894878807.000000006B5AC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.900014066.000000006BFAC000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.903259392.000000006C9AC000.00000002.00020000.sdmp Download File

Similarity

API ID: LibraryLoad$ErrorLast
String ID:
API String ID: 3177248105-0
Opcode ID: 80568768c7dfe11ca2218dd66a029804eee9ffd8e7b7ee5b4519bc4f5eaedfff
Instruction ID: 66bfcdd518c7db05b1787e5ce58f495e9db53d5f9020db02a5a5fc861e7fde92
Opcode Fuzzy Hash: 80568768c7dfe11ca2218dd66a029804eee9ffd8e7b7ee5b4519bc4f5eaedfff
Instruction Fuzzy Hash: DC01FC36F451B29BEB219B6CEC459CB7BE8AF06BA47124560FA16F3140DB68D801C6F0

Uniqueness

Uniqueness Score: -1.00%

Function 00A887D8, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 58COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(0000000D,?,00A86A08,?,00000000,?,00000000,?,00A73847,00B708BC,00A6F200,00B708C0,?,00A6F6CB,00000000,00000001), ref: 00A8885C

Strings

ios_base::failbit set, xrefs: 00A887DB

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorLast
String ID: ios_base::failbit set
API String ID: 1452528299-3924258884
Opcode ID: 8681a11415de1a7d741e7c5d10569cec8f0574bceaa972d517996e9e85346fa8
Instruction ID: 609f60076ec3eef4e0a6e0840754f2e038f62752fd16f9a93769f0259a53b56f
Opcode Fuzzy Hash: 8681a11415de1a7d741e7c5d10569cec8f0574bceaa972d517996e9e85346fa8
Instruction Fuzzy Hash: DD113C36200216AFCF22AFA4DC849AABB65FF18795B918439F90597220DF749C11DBD1

Uniqueness

Uniqueness Score: -1.00%

Function 00A88A10, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 22COMMON

Download Yara Rule

APIs

Part of subcall function 00A88B06: GetLastError.KERNEL32 ref: 00A88B18

IsDebuggerPresent.KERNEL32(?,?,?,00A42E7D), ref: 00A88A43
OutputDebugStringW.KERNEL32(ERROR : Unable to initialize critical section in CAtlBaseModule,?,?,?,00A42E7D), ref: 00A88A52

Strings

ERROR : Unable to initialize critical section in CAtlBaseModule, xrefs: 00A88A4D

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: DebugDebuggerErrorLastOutputPresentString
String ID: ERROR : Unable to initialize critical section in CAtlBaseModule
API String ID: 389471666-631824599
Opcode ID: c3869426a965f252436b36a12ee62814f842ab9d236fb72f571efeb92ee69f0b
Instruction ID: 95bfbd2707d37fb07fe53202990e4415565f9e51b74b99d4aadb0479d9dae245
Opcode Fuzzy Hash: c3869426a965f252436b36a12ee62814f842ab9d236fb72f571efeb92ee69f0b
Instruction Fuzzy Hash: 8DE06DB06003508FD330EF64E508346BAE4AF44746F418D5EE456C7680DFB8E489CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A860BC, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 13COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00A860C8

Part of subcall function 00A86033: std::exception::exception.LIBCONCRT ref: 00A86040

__CxxThrowException@8.LIBVCRUNTIME ref: 00A860D6

Part of subcall function 00AF3827: RaiseException.KERNEL32(?,?,00A860BB,?,00B6A044,?,00000007,?,?,?,?,00A860BB,?,00B63034,?), ref: 00AF3887

Strings

bad function call, xrefs: 00A860DC

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ExceptionException@8RaiseThrowstd::exception::exceptionstd::invalid_argument::invalid_argument
String ID: bad function call
API String ID: 1586462112-3612616537
Opcode ID: 6d3519ed75884cc2862ba43d2ac1547e2fbc3886e3a80a55a8367d444165a68b
Instruction ID: 496aa1dbfc6babfbaec0f85431162cfb640f7293a9b11638eb07a5aa17fa3e27
Opcode Fuzzy Hash: 6d3519ed75884cc2862ba43d2ac1547e2fbc3886e3a80a55a8367d444165a68b
Instruction Fuzzy Hash: 96C01269C0420C77CF08BAE5D94698C77BC5E10740F9085A0B61092051DA78971C86D5

Uniqueness

Uniqueness Score: -1.00%

Function 00A9EC00, Relevance: 5.2, APIs: 4, Instructions: 157COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(0000FDE9,00000000,?,?,00000000,00000000,00000000,?,?,?,?,00AA1280,00000000,?,00000000,?), ref: 00A9EC4E
MultiByteToWideChar.KERNEL32(0000FDE9,00000000,?,00000000,00000000,00000000,?), ref: 00A9EC74
MultiByteToWideChar.KERNEL32(00000000,00000000,?,?,00000000,00000000,00000000,?,?,?,?,00AA1280,00000000,?,00000000,?), ref: 00A9ECA0
MultiByteToWideChar.KERNEL32(00000000,00000000,?,00000000,00000000,00000000,?), ref: 00A9ECC3

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide
String ID:
API String ID: 626452242-0
Opcode ID: e32c1110a4d6dd93331b316c2741a32e2f80a93b1e8a8beb0b1197a95fb0a6e8
Instruction ID: 3792f34cb71331bf1e26f9983b967168096c0f43fe7cfc59bd720788ca78b19b
Opcode Fuzzy Hash: e32c1110a4d6dd93331b316c2741a32e2f80a93b1e8a8beb0b1197a95fb0a6e8
Instruction Fuzzy Hash: CC5113B1B04309BBEF21DF68CC81B6ABBE5AF16360F544254F9959F286D730ED0087A1

Uniqueness

Uniqueness Score: -1.00%

Function 00AE5C60, Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00AE645C,00000000,00000000,00000002,?,00000002,?,00AE645C,00000000,0000FDE9,?,?,0000FDE9), ref: 00AE5CAF
GetLastError.KERNEL32(?,00AE645C,00000000,0000FDE9,?,?,0000FDE9), ref: 00AE5CC0
MultiByteToWideChar.KERNEL32(00AE645C,00000000,00000000,0000FDE9,00000000,00000000,?,00AE645C,00000000,0000FDE9,?,?,0000FDE9), ref: 00AE5CD9
MultiByteToWideChar.KERNEL32(00AE645C,00000000,00000000,0000FDE9,?,00000000,?,?,?,?,?,00AE645C,00000000,0000FDE9,?,?), ref: 00AE5D00

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide$ErrorLast
String ID:
API String ID: 1717984340-0
Opcode ID: 074f802325f06d7650c9a7abaa17951cc3c469ec751e3709dce3b64e496c1ecf
Instruction ID: 28eec7bbc0c5ca3bda663b623ccb0b2340f142bfc05d6d87900bc8486b15c1eb
Opcode Fuzzy Hash: 074f802325f06d7650c9a7abaa17951cc3c469ec751e3709dce3b64e496c1ecf
Instruction Fuzzy Hash: DB315FB6600306BFE7205F65ECC5FA7BB6DEF54354F108225F90487141DB72AD148BA0

Uniqueness

Uniqueness Score: -1.00%

Function 00B1F610, Relevance: 5.1, APIs: 4, Instructions: 91COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000003,00000000,00B1FCB4,00B1FCB6,?,00B1FCB6,?,?,00B1FCB4,?,?,?,?,?,?), ref: 00B1F65E
GetLastError.KERNEL32(?,00B1FCB4,?,?,?,?,?,?), ref: 00B1F66F
MultiByteToWideChar.KERNEL32(00000003,00000000,00B1FCB4,?,00000000,00000000,?,00B1FCB4,?,?,?,?,?,?), ref: 00B1F687
MultiByteToWideChar.KERNEL32(00000003,00000000,00B1FCB4,?,?,00000000,?,?,?,?,?,?,00B1FCB4,?), ref: 00B1F6AD

Memory Dump Source

Source File: 00000000.00000002.890019500.0000000000A41000.00000020.00020000.sdmp, Offset: 00A40000, based on PE: true

Associated: 00000000.00000002.889948981.0000000000A40000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890212841.0000000000B2D000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.890277725.0000000000B6A000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890286064.0000000000B6D000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.890296067.0000000000B70000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.890304676.0000000000B74000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide$ErrorLast
String ID:
API String ID: 1717984340-0
Opcode ID: e654f0a4217f4bd89a116c64f0b126f82d4bacfa641fdfe4643cc9c28d517cb5
Instruction ID: f612e3985eacce299f9fb3c34eb6f53db2f06ac4fdad5d5e613644760d9cb785
Opcode Fuzzy Hash: e654f0a4217f4bd89a116c64f0b126f82d4bacfa641fdfe4643cc9c28d517cb5
Instruction Fuzzy Hash: DC2129B6640317BBF7205FA4CC85FB77B9CEF14744F104265FA0846191DBA25D16C7A0

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: smy.exe PID: 4484 Parent PID: 6704 smy.exeCOMMON

Executed Functions

Function 0024F900, Relevance: 101.6, APIs: 15, Strings: 42, Instructions: 1847COMMON

Download Yara Rule

Strings

type, xrefs: 0024FFEC
height1, xrefs: 002502C6
Image, xrefs: 0024F9AD
bktransrefresh, xrefs: 00250EDD
underline, xrefs: 0024FD49
size, xrefs: 0024FC6B, 0025086A
maxinfo, xrefs: 00250D05
Font, xrefs: 0024FB8A
bktrans, xrefs: 00250E5C
useshadow, xrefs: 00250AEB
Window, xrefs: 002507E9
fade1, xrefs: 002503A6
linkfontcolor, xrefs: 00251042
Animation, xrefs: 0024FF29
scale, xrefs: 00250225, 00250295, 00250305, 00250375
width2, xrefs: 00250258
linkhoverfontcolor, xrefs: 002510BB
overshoot, xrefs: 002505A0
mininfo, xrefs: 00250C89
showdirty, xrefs: 00250D85
defaultfontcolor, xrefs: 00250FD0
duration, xrefs: 00250483
caption, xrefs: 002509AC
true, xrefs: 0024FCFF, 0024FD7F, 0024FDFF, 0024FE7F, 00250B21, 00250DBF, 00250E92, 00250F13
italic, xrefs: 0024FDC9
bold, xrefs: 0024FCC6
alpha, xrefs: 002503E5, 00250455, 00250E0A
roundcorner, xrefs: 00250A6F
disabledfontcolor, xrefs: 00250F5E
selectedcolor, xrefs: 0025112D
value, xrefs: 0025073A
height2, xrefs: 00250336
name, xrefs: 0024FC2A, 002506F0
width1, xrefs: 002501E6
shadowsize, xrefs: 00250BB5
default, xrefs: 0024FE46
move, xrefs: 0025006B, 002500DA, 00250147, 002501B5
curvetype, xrefs: 00250545
Default, xrefs: 0025065F
shadowimage, xrefs: 00250B6C
fade2, xrefs: 00250418
sizebox, xrefs: 002508E6

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: Animation$Default$Font$Image$Window$alpha$bktrans$bktransrefresh$bold$caption$curvetype$default$defaultfontcolor$disabledfontcolor$duration$fade1$fade2$height1$height2$italic$linkfontcolor$linkhoverfontcolor$maxinfo$mininfo$move$name$overshoot$roundcorner$scale$selectedcolor$shadowimage$shadowsize$showdirty$size$sizebox$true$type$underline$useshadow$value$width1$width2
API String ID: 0-3466223086
Opcode ID: 798270d248d71e69a5da078a8892ea9e78debc402c465b06f09fe8311000c8eb
Instruction ID: 1e3d647fe96b1d0ee2047b4531d02eda9dc89c352d8a19d3af9fa749939013b4
Opcode Fuzzy Hash: 798270d248d71e69a5da078a8892ea9e78debc402c465b06f09fe8311000c8eb
Instruction Fuzzy Hash: B7D20962A301169ADF389F20CD917BAB372FF60755F5440E8DD0AA7241E7329EB8CB54

Uniqueness

Uniqueness Score: -1.00%

Function 0025C570, Relevance: 48.0, APIs: 25, Strings: 2, Instructions: 745filewindowCOMMON

Download Yara Rule

APIs

LoadImageW.USER32 ref: 0025C753
LoadImageW.USER32 ref: 0025C7B8
GetIconInfo.USER32(00000000,?), ref: 0025C7F9
GetDC.USER32(00000000), ref: 0025C83E
CreateCompatibleDC.GDI32(00000000), ref: 0025C84B
CreateCompatibleBitmap.GDI32(?,?,?), ref: 0025C864
SelectObject.GDI32(?,00000000), ref: 0025C877
DrawIconEx.USER32 ref: 0025C89A
DeleteDC.GDI32(?), ref: 0025C8A6
ReleaseDC.USER32 ref: 0025C8B4
DestroyIcon.USER32(00000000), ref: 0025C8BB
CreateFileW.KERNEL32(00000000,80000000,00000001,00000000,00000003,00000080,00000000,?,?,00000000,00000000,?,?), ref: 0025C98B
GetFileSize.KERNEL32(?,00000000,?,00000084,00000002,Function_000354A0,?,00000000,00000000,?,?), ref: 0025C9E8
ReadFile.KERNEL32(?,00000000,00000000,00000000,00000000,00000000,?,?), ref: 0025CA26
CloseHandle.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,?,?), ref: 0025CA33
FindResourceW.KERNEL32(00000000,?,?,?,?), ref: 0025CCD5
LoadResource.KERNEL32(00000000,00000000), ref: 0025CCEC
SizeofResource.KERNEL32(00000000,00000000), ref: 0025CCFF
LockResource.KERNEL32(00000000,00000000), ref: 0025CD25
FreeResource.KERNEL32(00000000), ref: 0025CD3B
CreateFileW.KERNEL32(?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 0025CD76
GetFileSize.KERNEL32(00000000,00000000), ref: 0025CD86
ReadFile.KERNEL32(00000000,00000000,00000000,00000000,00000000), ref: 0025CDC0
CloseHandle.KERNEL32(00000000), ref: 0025CDC7
CreateDIBSection.GDI32(00000000,?,00000000,?,00000000,00000000), ref: 0025CEDD

Strings

.ico, xrefs: 0025C5DE, 0025C67E
(, xrefs: 0025CEAF

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: File$CreateResource$IconLoad$CloseCompatibleHandleImageReadSize$BitmapDeleteDestroyDrawFindFreeInfoLockObjectReleaseSectionSelectSizeof
String ID: ($.ico
API String ID: 176542572-4199203635
Opcode ID: 5c1819ce72df4ead4d30c06e4c22aa6b4151459ca36bf3e5c104df5a0901a4a6
Instruction ID: 1c66f4078d71ed3e3ea03bfb48e8907577f548a56168d6c3a9779334ae10e266
Opcode Fuzzy Hash: 5c1819ce72df4ead4d30c06e4c22aa6b4151459ca36bf3e5c104df5a0901a4a6
Instruction Fuzzy Hash: C752D3719102299FDB20EF64CC45BAEB7B8BF05301F5480D9E989A7281EF709E94CF95

Uniqueness

Uniqueness Score: -1.00%

Function 0025A680, Relevance: 32.1, APIs: 5, Strings: 13, Instructions: 643COMMON

Download Yara Rule

APIs

CharNextW.USER32(?,0024916C,000000FF,79EB413B,?), ref: 0025A7FC
CharNextW.USER32(?,0024916C,000000FF,79EB413B,?), ref: 0025A833
CharNextW.USER32(?,0024916C,000000FF,79EB413B,?), ref: 0025A88F
CharNextW.USER32(?,0024916C,000000FF,79EB413B,?), ref: 0025A8CA
CharNextW.USER32(?,0024916C,000000FF,79EB413B,?), ref: 0025A901

Strings

mask, xrefs: 0025AC72
dest, xrefs: 0025AA54
res, xrefs: 0025A980
restype, xrefs: 0025A998
true, xrefs: 0025AD33, 0025AD9F, 0025AE0F
hole, xrefs: 0025AD19
xtiled, xrefs: 0025AD85
source, xrefs: 0025AB22
file, xrefs: 0025A968, 0025AF40
corner, xrefs: 0025ABCA
ytiled, xrefs: 0025ADF5
resample, xrefs: 0025AE65
fade, xrefs: 0025ACDD

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CharNext
String ID: corner$dest$fade$file$hole$mask$res$resample$restype$source$true$xtiled$ytiled
API String ID: 3213498283-500689389
Opcode ID: 8582bd0ee614c7be940826f6a50a8904010b13f179c1ce5563f741812a4e865d
Instruction ID: c7c07cb635de1ac120cdb8ce6f82e3f97cefd6d31d830a1e311516946511a98b
Opcode Fuzzy Hash: 8582bd0ee614c7be940826f6a50a8904010b13f179c1ce5563f741812a4e865d
Instruction Fuzzy Hash: 9C42C071D202299ACF21AF24CD5ABE9B3B4EF19301F4442D5E94DA3191EB709EE8CF51

Uniqueness

Uniqueness Score: -1.00%

Function 002C2954, Relevance: 21.4, APIs: 7, Strings: 5, Instructions: 370timeCOMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 002C29D6
_free.LIBCMT ref: 002C29FA
_free.LIBCMT ref: 002C2B81
GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,002FD518), ref: 002C2B93
WideCharToMultiByte.KERNEL32(00000000,00000000,W. Europe Standard Time,000000FF,00000000,0000003F,00000000,?,?), ref: 002C2C0B
WideCharToMultiByte.KERNEL32(00000000,00000000,W. Europe Daylight Time,000000FF,?,0000003F,00000000,?), ref: 002C2C38
_free.LIBCMT ref: 002C2D4D

Strings

W. Europe Daylight Time, xrefs: 002C2C31
L-,, xrefs: 002C2B3C, 002C2C55, 002C2B42
D-,, xrefs: 002C2AE1, 002C29D2, 002C2A3B
W. Europe Standard Time, xrefs: 002C2C04
D-,, xrefs: 002C299A, 002C2A1E, 002C2A38, 002C2A64, 002C2A8B, 002C2AB0, 002C2AE8, 002C2B32

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ByteCharMultiWide$InformationTimeZone
String ID: D-,$D-,$L-,$W. Europe Daylight Time$W. Europe Standard Time
API String ID: 314583886-2023501087
Opcode ID: c96c8f3edcef287b653d473f38d81ae6a1a2061ac0d1969dda4536725cf23a2e
Instruction ID: 949a732c5174a03e464def617cc2e8010cb2129fce7096529917feb6808c570b
Opcode Fuzzy Hash: c96c8f3edcef287b653d473f38d81ae6a1a2061ac0d1969dda4536725cf23a2e
Instruction Fuzzy Hash: 49C12771A20206EFCB25DF689C41FAABBBDAF45350F1442AEE84497251DF708E5ACB50

Uniqueness

Uniqueness Score: -1.00%

Function 002347E0, Relevance: 14.2, APIs: 6, Strings: 2, Instructions: 207windowfilenetworkCOMMON

Download Yara Rule

APIs

PeekMessageW.USER32 ref: 0023482C
SetEvent.KERNEL32 ref: 00234838

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

Part of subcall function 001F4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,002DDAF8,?,?,?,?,001F36E1,002DDAF8,?,?,?,002DDAF8), ref: 001F4186
Part of subcall function 001F4130: FindResourceW.KERNEL32(00000000,002DDAF8,00000006,?,002DDAF8), ref: 001F41C4

GetMessageW.USER32(?,00000000,00000000,00000000), ref: 00234851
URLDownloadToCacheFileA.URLMON(00000000,?,?,00000104,00000000,00000000), ref: 002348AD
DeleteFileA.KERNEL32(00000000), ref: 002348D3
GetMessageW.USER32(?,00000000,00000000,00000000), ref: 00234A7C

Strings

http://l.public.ludashi.com/pc/Updata/Usuallog, xrefs: 0023493C, 0023494C
CStatistic::Thread_SendPingback, URLDownloadToCacheFileA failed., xrefs: 002348B6

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Message$FileFindResource$CacheDeleteDownloadEventHeapPeekProcess
String ID: CStatistic::Thread_SendPingback, URLDownloadToCacheFileA failed.$http://l.public.ludashi.com/pc/Updata/Usuallog
API String ID: 2365722304-76294699
Opcode ID: e444d443b241fcb5dde87dbee629d4978cc1c40236dc31e96b2d7c5e2c974b35
Instruction ID: c775be2f1d09731a93becfda04f14dc826804d320d7d98892dbb9a60e62221e1
Opcode Fuzzy Hash: e444d443b241fcb5dde87dbee629d4978cc1c40236dc31e96b2d7c5e2c974b35
Instruction Fuzzy Hash: 1B7113B1951219ABEB20FB64CC4DB9EB7B8AF05314F1042D4E504A72D1DB78AF94CF94

Uniqueness

Uniqueness Score: -1.00%

Function 002625C0, Relevance: 10.8, APIs: 3, Strings: 3, Instructions: 332librarycomloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(00000000), ref: 00262629
GetProcAddress.KERNEL32(00000000,DllGetClassObject), ref: 00262644
CoCreateInstance.OLE32(?,00000000,00000017,00306240,00000000), ref: 002626BF

Strings

showactivex, xrefs: 0026289F
UIActiveX, xrefs: 00262887
DllGetClassObject, xrefs: 0026263A

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressCreateInstanceLibraryLoadProc
String ID: DllGetClassObject$UIActiveX$showactivex
API String ID: 3919134875-1617538497
Opcode ID: 9b39cbdf19b552d2e11e972d32513b21636c4423b5ea1d8325e451f5769d1c7f
Instruction ID: 907b35b9edf699eb81339d36885fbb082b6d457494c5acc91ee8443d925ba60b
Opcode Fuzzy Hash: 9b39cbdf19b552d2e11e972d32513b21636c4423b5ea1d8325e451f5769d1c7f
Instruction Fuzzy Hash: 8AD15B70A11706DFDB14CFA4C898BAEBBB8FF48704F244468E805EB291DB75A955CF60

Uniqueness

Uniqueness Score: -1.00%

Function 002591E0, Relevance: 82.8, APIs: 54, Instructions: 1820windowCOMMON

Download Yara Rule

APIs

CreateCompatibleDC.GDI32(?), ref: 00259235

Part of subcall function 00280D20: GetVersion.KERNEL32(?,?,?,00259258), ref: 00280D2D

SelectObject.GDI32(?,?), ref: 00259295
SetStretchBltMode.GDI32(?,00000004), ref: 002592A6
IntersectRect.USER32 ref: 0025930C
BitBlt.GDI32(?,?,?,?,?,?,00000000,00000000,00CC0020), ref: 0025934C
IntersectRect.USER32 ref: 00259390
StretchBlt.GDI32(?,?,002D995E,000000FF,?,?,?,?,?,?,00CC0020), ref: 0025940E
IntersectRect.USER32 ref: 0025944A
StretchBlt.GDI32(?,?,002D995E,?,?,?,?,?,?,?,00CC0020), ref: 00259487
IntersectRect.USER32 ref: 002594C2
StretchBlt.GDI32(?,?,002D995E,000000FF,002D995E,?,?,?,?,?,00CC0020), ref: 00259516
IntersectRect.USER32 ref: 00259553
StretchBlt.GDI32(?,?,002D995E,?,?,?,00000000,?,00000000,?,00CC0020), ref: 00259598
IntersectRect.USER32 ref: 002595D6
StretchBlt.GDI32(?,?,002D995E,000000FF,002D995E,?,?,?,?,?,00CC0020), ref: 0025962C
IntersectRect.USER32 ref: 0025966D
StretchBlt.GDI32(?,?,002D995E,000000FF,?,?,00000000,?,00000000,?,00CC0020), ref: 002596C9
IntersectRect.USER32 ref: 00259706
StretchBlt.GDI32(?,?,002D995E,?,?,?,?,00000000,?,00000000,00CC0020), ref: 0025974C
IntersectRect.USER32 ref: 0025978B
StretchBlt.GDI32(?,?,002D995E,000000FF,?,?,?,?,00000000,?,00CC0020), ref: 002597E5
IntersectRect.USER32 ref: 00259828
StretchBlt.GDI32(?,?,002D995E,000000FF,?,?,00000000,?,00000000,?,00CC0020), ref: 00259873
SelectObject.GDI32(?,00000000), ref: 0025A61D
DeleteDC.GDI32(?), ref: 0025A626
DeleteObject.GDI32(?), ref: 0025A633

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: IntersectRectStretch$Object$DeleteSelect$CompatibleCreateModeVersion
String ID:
API String ID: 2820791957-0
Opcode ID: 65c3c8f9d1813161a8d396a91b024caf1c8bd0ced1bff6c47eafafa1fb7c56a2
Instruction ID: 054a84d0a10fef670cc486875f7a0461016c50caf1cea673c3a072e6beb0ecc9
Opcode Fuzzy Hash: 65c3c8f9d1813161a8d396a91b024caf1c8bd0ced1bff6c47eafafa1fb7c56a2
Instruction Fuzzy Hash: 1C03AF75E1020AEFCF14CFE8D988AADBBB5FF48310F148159E919A7264DB30A955CF50

Uniqueness

Uniqueness Score: -1.00%

Function 0023CBB2, Relevance: 79.3, APIs: 42, Strings: 3, Instructions: 502COMMON

Download Yara Rule

APIs

GetUpdateRect.USER32(?,?,00000000), ref: 0023CBC7
BeginPaint.USER32(?,?), ref: 0023CBF7
EndPaint.USER32(?,?,?,?), ref: 0023CC06
GetWindowLongW.USER32(?,000000EC), ref: 0023CC6C
SetWindowLongW.USER32 ref: 0023CC83
GetClientRect.USER32(?,?), ref: 0023CC9C
BeginPaint.USER32(?,?), ref: 0023CCBE
DeleteDC.GDI32(?), ref: 0023CCCC
DeleteObject.GDI32(?), ref: 0023CCE0
IsRectEmpty.USER32 ref: 0023CD0B
DeleteDC.GDI32(00000000), ref: 0023CD2D
DeleteObject.GDI32(00000000), ref: 0023CD3B

Strings

windowinit, xrefs: 0023CDD6, 0023D086
window_size_changed, xrefs: 0023CE10, 0023D0C0
windowresized, xrefs: 0023CDF2, 0023D0A2

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Delete$PaintRect$BeginLongObjectWindow$ClientEmptyUpdate
String ID: window_size_changed$windowinit$windowresized
API String ID: 397477748-276426059
Opcode ID: 7ca0066e0546c1b21e531fd5c549aa53d4539309b1fcd56097f3e444f189964c
Instruction ID: 10f27191baa38e7dea555491e45ab144c3111b592b88a293ce34c2d5573a9574
Opcode Fuzzy Hash: 7ca0066e0546c1b21e531fd5c549aa53d4539309b1fcd56097f3e444f189964c
Instruction Fuzzy Hash: 33227370A11616AFDB25DF24DC48FA9BBB9FF05304F104295F508A76A1DB71AEA4CF80

Uniqueness

Uniqueness Score: -1.00%

Function 002512B0, Relevance: 41.5, APIs: 2, Strings: 25, Instructions: 966stringCOMMON

Download Yara Rule

APIs

Part of subcall function 002499C0: CharNextW.USER32(00000000,79EB413B,?,?,00000000), ref: 00249A5C
Part of subcall function 002499C0: CharNextW.USER32(-00000004,79EB413B,?,?,00000000), ref: 00249ACB

lstrcmpW.KERNEL32(00000000,00000000,focus), ref: 00252D6A
lstrcmpW.KERNEL32(00000000,00000000,true), ref: 00252D82

Strings

Combo, xrefs: 00251AC7
Image, xrefs: 0025133D
Font, xrefs: 0025137B
LdsWebView, xrefs: 002517A8
IContainer, xrefs: 00252DAA
Include, xrefs: 00251435
focus, xrefs: 00252D52
Label, xrefs: 00251B33
source, xrefs: 002514EF
tab_group, xrefs: 0025180A
Banner, xrefs: 00251CF3
Option, xrefs: 00251C13
Gif, xrefs: 00251894
Animation, xrefs: 002513F3
TreeView, xrefs: 00251735
List, xrefs: 00251973
Slider, xrefs: 00251C83
Text, xrefs: 002519E3
Mask, xrefs: 00251A53
count, xrefs: 002514BB
true, xrefs: 00252D70
Edit, xrefs: 00251907
TreeNode, xrefs: 002515CB, 0025160B, 00252CCA
Button, xrefs: 00251BA7
Default, xrefs: 002513B5

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CharNextlstrcmp
String ID: Animation$Banner$Button$Combo$Default$Edit$Font$Gif$IContainer$Image$Include$Label$LdsWebView$List$Mask$Option$Slider$Text$TreeNode$TreeView$count$focus$source$tab_group$true
API String ID: 3193436799-2682643405
Opcode ID: ec2b284d9ad2ab1a4e8d6422f89acc263627e039c45ee7af72d2f51f27134c9a
Instruction ID: e405025fa8817599ea47f53bfba77732ba58f6b6b9811b11f36a0efc0d25f710
Opcode Fuzzy Hash: ec2b284d9ad2ab1a4e8d6422f89acc263627e039c45ee7af72d2f51f27134c9a
Instruction Fuzzy Hash: AD720971A202169BDF24AF20CD41BBA72B6FF24746F4440B5DD0697281EB32DE79CB94

Uniqueness

Uniqueness Score: -1.00%

Function 002486F0, Relevance: 31.8, APIs: 13, Strings: 5, Instructions: 288windowCOMMON

Download Yara Rule

APIs

GetWindowLongW.USER32(00000000,000000F0), ref: 00248728
SetWindowLongW.USER32 ref: 00248743
GetClientRect.USER32(00000000,001F828E), ref: 00248755
SetWindowPos.USER32(00000000,00000000,001F828E,?,?,?,00000020), ref: 0024877B

Part of subcall function 0023C700: GetDC.USER32(?), ref: 0023C70D
Part of subcall function 0023C700: LoadLibraryW.KERNEL32(Dwmapi.dll,?,?,00000000,?,00247C82,?,?,?,?), ref: 0023C732
Part of subcall function 0023C700: GetProcAddress.KERNEL32(00000000,DwmIsCompositionEnabled), ref: 0023C744
Part of subcall function 0023C700: FreeLibrary.KERNEL32(00000000,?,00000000,?,00247C82,?,?,?,?), ref: 0023C752

FindResourceW.KERNEL32(00000000,00000000,?,?), ref: 002487DF
LoadResource.KERNEL32(00000000,00000000,?,?), ref: 002487F6
FreeResource.KERNEL32(00000000,?,?), ref: 00248807
SizeofResource.KERNEL32(00000000,00000000,?,?), ref: 00248818
LockResource.KERNEL32(?,00000000), ref: 00248841
FreeResource.KERNEL32(00000000), ref: 00248857
MessageBoxW.USER32(00000000,002E4160,Duilib,00000010), ref: 00248959
ExitProcess.KERNEL32 ref: 00248961
GetParent.USER32(?), ref: 00248A22

Strings

ZIPRES, xrefs: 002487D0
xml, xrefs: 002488F3
Duilib, xrefs: 0024894E
file='share/shadow.png' corner='4,2,4,6' hole='true', xrefs: 002489FB, 00248A02
;Ay, xrefs: 00248715, 00248A57

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Resource$FreeWindow$LibraryLoadLong$AddressClientExitFindLockMessageParentProcProcessRectSizeof
String ID: ;Ay$Duilib$ZIPRES$file='share/shadow.png' corner='4,2,4,6' hole='true'$xml
API String ID: 4224122098-801723194
Opcode ID: 02e49af9eaf645fd4b3e1cf641cfa56111a3fe7ad0eb5f71f259ad2cdedc0a6d
Instruction ID: 95bd4ef6ad50f0aabf53092b0ce11ea277685637704e95ef9021126d7017d9a3
Opcode Fuzzy Hash: 02e49af9eaf645fd4b3e1cf641cfa56111a3fe7ad0eb5f71f259ad2cdedc0a6d
Instruction Fuzzy Hash: A8A1C1B1A20615ABDF19AB74DD59BBE77A9AF44300F040169F506E3282DF74AE20CF61

Uniqueness

Uniqueness Score: -1.00%

Function 00244C95, Relevance: 31.6, APIs: 12, Strings: 6, Instructions: 125COMMON

Download Yara Rule

APIs

FindWindowExW.USER32 ref: 00244D46
IsWindow.USER32(00000000), ref: 00244D4E
FindWindowExW.USER32 ref: 00244D66
IsWindow.USER32(00000000), ref: 00244D6E
FindWindowExW.USER32 ref: 00244D86
IsWindow.USER32(00000000), ref: 00244D90
SetWindowLongW.USER32 ref: 00244DAC
SetPropW.USER32(?,{0034D9EE-60D5-4ebb-9C17-0E237DF4F656},00000000), ref: 00244DBD
SetWindowLongW.USER32 ref: 00244DC9
SetPropW.USER32(?,{22CEB27E-D1AA-4b4b-A1EA-96945DE5B3E2},00000000), ref: 00244DD4
SetWindowLongW.USER32 ref: 00244DE0
SetPropW.USER32(?,{74F07C83-AB7B-4909-BF77-BE87C7273F6B},00000000), ref: 00244DEB

Strings

{0034D9EE-60D5-4ebb-9C17-0E237DF4F656}, xrefs: 00244DB5
Shell Embedding, xrefs: 00244D39
Internet Explorer_Server, xrefs: 00244D7E
{22CEB27E-D1AA-4b4b-A1EA-96945DE5B3E2}, xrefs: 00244DCC
{74F07C83-AB7B-4909-BF77-BE87C7273F6B}, xrefs: 00244DE3
Shell DocObject View, xrefs: 00244D5E

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$FindLongProp
String ID: Internet Explorer_Server$Shell DocObject View$Shell Embedding${0034D9EE-60D5-4ebb-9C17-0E237DF4F656}${22CEB27E-D1AA-4b4b-A1EA-96945DE5B3E2}${74F07C83-AB7B-4909-BF77-BE87C7273F6B}
API String ID: 3934802028-1673684522
Opcode ID: b22f51c64e97c958e3c16310bd6bc2838df8385d3bfc80468f43e9a7d7c01d4d
Instruction ID: 78d25e9ea82c16b917d0009acb5f24f6bfb2de26cca205deff5b8dd496bd390c
Opcode Fuzzy Hash: b22f51c64e97c958e3c16310bd6bc2838df8385d3bfc80468f43e9a7d7c01d4d
Instruction Fuzzy Hash: 4E41DF31A50255ABDB24AF25EC45F6A3BA4EF44710F14417AFC04EB2E2CB75AC20DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 001FCF90, Relevance: 28.5, APIs: 3, Strings: 13, Instructions: 511COMMON

Download Yara Rule

Strings

h--, xrefs: 001FD165
down_skin_fail, xrefs: 001FD429
7z_download_start, xrefs: 001FCFCA
\Utils\7z.dll, xrefs: 001FD053
7z_download_fail, xrefs: 001FD0F5
down_icon_fail, xrefs: 001FD259
\NetBridge.dll, xrefs: 001FD54A
weiduan, xrefs: 001FCFCF, 001FD0FA
7z_download_success, xrefs: 001FD0E6
ico, xrefs: 001FD1B0, 001FD1CA
h--, xrefs: 001FD335
http://cdn-file-ssl-wan.ludashi.com/wan/wan/7z.dll, xrefs: 001FD029, 001FD040
PQVS<, xrefs: 001FD3C5

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$HeapProcess
String ID: 7z_download_fail$7z_download_start$7z_download_success$PQVS<$\NetBridge.dll$\Utils\7z.dll$down_icon_fail$down_skin_fail$http://cdn-file-ssl-wan.ludashi.com/wan/wan/7z.dll$h--$h--$ico$weiduan
API String ID: 377148374-4108638428
Opcode ID: 31a1338b5f79d5778c45259376f96b5a2179c5ad1f839bec8889f5eb0a7e4b86
Instruction ID: 801455ce6b924856015102587508e29ce2c33bf9a435a146cd1a96e797231b44
Opcode Fuzzy Hash: 31a1338b5f79d5778c45259376f96b5a2179c5ad1f839bec8889f5eb0a7e4b86
Instruction Fuzzy Hash: D402D271A00649AFDB00DFA8DD4ABBEB7B5FF05720F148258F915AB2D2DB709904CB91

Uniqueness

Uniqueness Score: -1.00%

Function 002525E7, Relevance: 26.0, APIs: 2, Strings: 15, Instructions: 463stringCOMMON

Download Yara Rule

APIs

lstrcmpW.KERNEL32(00000000,00000000,focus), ref: 00252D6A
lstrcmpW.KERNEL32(00000000,00000000,true), ref: 00252D82

Strings

Image, xrefs: 0025133D
ContainerEx, xrefs: 00252733
count, xrefs: 002514BB
Font, xrefs: 0025137B
true, xrefs: 00252D70
PngSequence, xrefs: 002526C3
ChildLayout, xrefs: 002525E7
Include, xrefs: 00251435
focus, xrefs: 00252D52
GifProgress, xrefs: 00252653
source, xrefs: 002514EF
', xrefs: 0025278E
TreeNode, xrefs: 00252CCA
Default, xrefs: 002513B5
Animation, xrefs: 002513F3

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: lstrcmp
String ID: '$Animation$ChildLayout$ContainerEx$Default$Font$GifProgress$Image$Include$PngSequence$TreeNode$count$focus$source$true
API String ID: 1534048567-2867028424
Opcode ID: 5bd867b8f0729e0f6792524ada7f184ea2de789447b70dc9fe8365a0e9c5437a
Instruction ID: d708a04bf40529ea1498ef16fbf01f633b9216afe116712d9f51321bd77874d8
Opcode Fuzzy Hash: 5bd867b8f0729e0f6792524ada7f184ea2de789447b70dc9fe8365a0e9c5437a
Instruction Fuzzy Hash: 53F11671A20216DADF24AF20CD41BBA72B6BF25705F4540F4DD05AB281EB329E6DCF94

Uniqueness

Uniqueness Score: -1.00%

Function 00252427, Relevance: 26.0, APIs: 2, Strings: 15, Instructions: 460stringCOMMON

Download Yara Rule

APIs

lstrcmpW.KERNEL32(00000000,00000000,focus), ref: 00252D6A
lstrcmpW.KERNEL32(00000000,00000000,true), ref: 00252D82

Strings

Image, xrefs: 0025133D
count, xrefs: 002514BB
Font, xrefs: 0025137B
true, xrefs: 00252D70
GridLayout, xrefs: 00252573
Include, xrefs: 00251435
focus, xrefs: 00252D52
source, xrefs: 002514EF
ListHeader, xrefs: 00252427
TreeNode, xrefs: 00252CCA
WebBrowser, xrefs: 00252503
#, xrefs: 002525C6
Default, xrefs: 002513B5
TileLayout, xrefs: 00252493
Animation, xrefs: 002513F3

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: lstrcmp
String ID: #$Animation$Default$Font$GridLayout$Image$Include$ListHeader$TileLayout$TreeNode$WebBrowser$count$focus$source$true
API String ID: 1534048567-3677948613
Opcode ID: 11a17c7d53d0924705e4560c5546d7d0a2ab936151b9eb11cbc7fcb760270619
Instruction ID: 9dcfb2d5e944661ba4f0bff199e7d9ea42708eba83a62acd11ddb95f962e11e9
Opcode Fuzzy Hash: 11a17c7d53d0924705e4560c5546d7d0a2ab936151b9eb11cbc7fcb760270619
Instruction Fuzzy Hash: EDF13771A20216DADF24AF20CD41BBA72B5BF25705F4440F4DD05AB281EB319E6DCF94

Uniqueness

Uniqueness Score: -1.00%

Function 00252897, Relevance: 22.9, APIs: 2, Strings: 13, Instructions: 399COMMON

Download Yara Rule

Strings

Image, xrefs: 0025133D
count, xrefs: 002514BB
Font, xrefs: 0025137B
AnnularProgress, xrefs: 0025290D
true, xrefs: 00252D70
Include, xrefs: 00251435
focus, xrefs: 00252D52
source, xrefs: 002514EF
TreeNode, xrefs: 00252CCA
ListTextElement, xrefs: 00252897
Default, xrefs: 002513B5
+, xrefs: 0025295A
Animation, xrefs: 002513F3

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: +$Animation$AnnularProgress$Default$Font$Image$Include$ListTextElement$TreeNode$count$focus$source$true
API String ID: 0-134947597
Opcode ID: c67c5559b5fac8192157f96f409f30339cb42ab0675d1952d6204858274a6ecc
Instruction ID: 648d3e0a01f27c0a629639d465ea622b7d9f3faba251fa327aa3cc2a2d9d3c44
Opcode Fuzzy Hash: c67c5559b5fac8192157f96f409f30339cb42ab0675d1952d6204858274a6ecc
Instruction Fuzzy Hash: BAE10371A202169BDB24AF60CD41BBA73B6BF25705F4440F4DD09AB281EB319E69CF94

Uniqueness

Uniqueness Score: -1.00%

Function 00252AC7, Relevance: 22.9, APIs: 2, Strings: 13, Instructions: 396stringCOMMON

Download Yara Rule

APIs

lstrcmpW.KERNEL32(00000000,00000000,focus), ref: 00252D6A
lstrcmpW.KERNEL32(00000000,00000000,true), ref: 00252D82

Strings

Image, xrefs: 0025133D
0, xrefs: 00252B86
count, xrefs: 002514BB
Font, xrefs: 0025137B
true, xrefs: 00252D70
Include, xrefs: 00251435
focus, xrefs: 00252D52
source, xrefs: 002514EF
ListContainerSubItem, xrefs: 00252B33
TreeNode, xrefs: 00252CCA
ListContainerElement, xrefs: 00252AC7
Default, xrefs: 002513B5
Animation, xrefs: 002513F3

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: lstrcmp
String ID: 0$Animation$Default$Font$Image$Include$ListContainerElement$ListContainerSubItem$TreeNode$count$focus$source$true
API String ID: 1534048567-217303985
Opcode ID: afd22ce7b6c1d66ae129a052f9189b61679a9784efb0e0cca045ea23c28bdaf5
Instruction ID: 7536233b1b624df92cb2507aea754a257336cebc112bbb0409566bb0411bb56d
Opcode Fuzzy Hash: afd22ce7b6c1d66ae129a052f9189b61679a9784efb0e0cca045ea23c28bdaf5
Instruction Fuzzy Hash: 87E11571A202169BDF24AF20CD41BBA73B6BF25705F4540F4DD09AB281EB319E69CF94

Uniqueness

Uniqueness Score: -1.00%

Function 002527B9, Relevance: 22.9, APIs: 2, Strings: 13, Instructions: 394stringCOMMON

Download Yara Rule

APIs

lstrcmpW.KERNEL32(00000000,00000000,focus), ref: 00252D6A
lstrcmpW.KERNEL32(00000000,00000000,true), ref: 00252D82

Strings

Image, xrefs: 0025133D
VerticalLayout, xrefs: 002527B9
count, xrefs: 002514BB
Font, xrefs: 0025137B
true, xrefs: 00252D70
), xrefs: 00252876
Include, xrefs: 00251435
focus, xrefs: 00252D52
source, xrefs: 002514EF
TreeNode, xrefs: 00252CCA
ListHeaderItem, xrefs: 00252823
Default, xrefs: 002513B5
Animation, xrefs: 002513F3

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: lstrcmp
String ID: )$Animation$Default$Font$Image$Include$ListHeaderItem$TreeNode$VerticalLayout$count$focus$source$true
API String ID: 1534048567-1084760048
Opcode ID: 18aa1dc93d8c0695d4e4dc207aaacfead865ed0c28c2df7cd1a7879679fdb558
Instruction ID: f8f0b90bd013dee1dcfe7c5ba3d63ebedb9fc1b783e06365283360774053993b
Opcode Fuzzy Hash: 18aa1dc93d8c0695d4e4dc207aaacfead865ed0c28c2df7cd1a7879679fdb558
Instruction Fuzzy Hash: 7FE11571A202169BDF24AF60CD41BFA73B6BF24705F4540E4DD09AB281EB319E69CF94

Uniqueness

Uniqueness Score: -1.00%

Function 0025297B, Relevance: 22.9, APIs: 2, Strings: 13, Instructions: 394stringCOMMON

Download Yara Rule

APIs

lstrcmpW.KERNEL32(00000000,00000000,focus), ref: 00252D6A
lstrcmpW.KERNEL32(00000000,00000000,true), ref: 00252D82

Strings

Image, xrefs: 0025133D
count, xrefs: 002514BB
Font, xrefs: 0025137B
true, xrefs: 00252D70
Include, xrefs: 00251435
focus, xrefs: 00252D52
source, xrefs: 002514EF
ListLabelElement, xrefs: 002529E5
TreeNode, xrefs: 00252CCA
-, xrefs: 00252A36
Default, xrefs: 002513B5
Animation, xrefs: 002513F3
HorizontalLayout, xrefs: 0025297B

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: lstrcmp
String ID: -$Animation$Default$Font$HorizontalLayout$Image$Include$ListLabelElement$TreeNode$count$focus$source$true
API String ID: 1534048567-3623310783
Opcode ID: 4e20f63d02894a020843f6c0e70d6b24f4659ac9b45681312a8660a44c23ff10
Instruction ID: 41ef99a8fa91191c2d4e4fe1739add99a29c972c1432ebe636ef29f2aa4b4f37
Opcode Fuzzy Hash: 4e20f63d02894a020843f6c0e70d6b24f4659ac9b45681312a8660a44c23ff10
Instruction Fuzzy Hash: 48E10571A202169BDF24AF20CD41BFA73B5BF24705F4540E4DD0AA7281EB319EA9CF94

Uniqueness

Uniqueness Score: -1.00%

Function 00252A57, Relevance: 21.4, APIs: 2, Strings: 12, Instructions: 364COMMON

Download Yara Rule

Strings

RoundBkColorControl, xrefs: 00252A57
Image, xrefs: 0025133D
TreeNode, xrefs: 00252CCA
count, xrefs: 002514BB
Font, xrefs: 0025137B
true, xrefs: 00252D70
., xrefs: 00252AA6
Default, xrefs: 002513B5
Include, xrefs: 00251435
Animation, xrefs: 002513F3
focus, xrefs: 00252D52
source, xrefs: 002514EF

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: .$Animation$Default$Font$Image$Include$RoundBkColorControl$TreeNode$count$focus$source$true
API String ID: 0-2860141532
Opcode ID: 501dd6c5484a018105347f9f79c0ce178eb2049cdde3a442eea88ed043f0e633
Instruction ID: 122ba0a143b2d54815da9ed73b6646631d0f63852b8a3a13ff5b34249e8c9ab5
Opcode Fuzzy Hash: 501dd6c5484a018105347f9f79c0ce178eb2049cdde3a442eea88ed043f0e633
Instruction Fuzzy Hash: 28D1F471A202169BDF24AF10CD41BFA73B5BF24705F4540E4DD09A7281EB319EA9CF94

Uniqueness

Uniqueness Score: -1.00%

Function 00252BA0, Relevance: 21.4, APIs: 2, Strings: 12, Instructions: 362stringCOMMON

Download Yara Rule

APIs

lstrcmpW.KERNEL32(00000000,00000000,focus), ref: 00252D6A
lstrcmpW.KERNEL32(00000000,00000000,true), ref: 00252D82

Strings

Image, xrefs: 0025133D
TreeNode, xrefs: 00252CCA
count, xrefs: 002514BB
ListContainerElementEx, xrefs: 00252BA0
Font, xrefs: 0025137B
true, xrefs: 00252D70
Default, xrefs: 002513B5
Include, xrefs: 00251435
1, xrefs: 00252BE9
Animation, xrefs: 002513F3
focus, xrefs: 00252D52
source, xrefs: 002514EF

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: lstrcmp
String ID: 1$Animation$Default$Font$Image$Include$ListContainerElementEx$TreeNode$count$focus$source$true
API String ID: 1534048567-3117121380
Opcode ID: ffbe2cdc2c0853be42316d9e3cd9dcf065b6dc9987b650389c435ee4fb46f3d6
Instruction ID: 72cdbdc80d092b23bf81f24fa71f4db77c4803a711120dc3963c793735e7b51a
Opcode Fuzzy Hash: ffbe2cdc2c0853be42316d9e3cd9dcf065b6dc9987b650389c435ee4fb46f3d6
Instruction Fuzzy Hash: EED1F571A202169BDF24AF10CD41BFA73B5BF24705F4540E4DD09A7281EB319EA9CF94

Uniqueness

Uniqueness Score: -1.00%

Function 0022E3C6, Relevance: 21.2, APIs: 2, Strings: 10, Instructions: 246COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32(00000003,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 0022E3DD
WideCharToMultiByte.KERNEL32(00000003,00000000,?,000000FF,?,-00000001,00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 0022E413

Strings

pgstation.exe, xrefs: 0022E5E2
\2, xrefs: 0022E4C4
LastRunVer, xrefs: 0022E4A2, 0022E4F8, 0022E60E, 0022E625
;Ay, xrefs: 0022E695
0HVv, xrefs: 0022E48E
Software\LDSGameCenterExtra, xrefs: 0022E4A7, 0022E613
X2, xrefs: 0022E51A
LDSGameCenter.exe, xrefs: 0022E5C5
ubj, xrefs: 0022E5F6
Software\LDSGameCenter, xrefs: 0022E4FD, 0022E62A

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide
String ID: 0HVv$;Ay$LDSGameCenter.exe$LastRunVer$Software\LDSGameCenter$Software\LDSGameCenterExtra$X2$\2$pgstation.exe$ubj
API String ID: 626452242-3807759133
Opcode ID: 5b3963bce61e5462fcc98299cca588c726de1fdec5e342f295f2c20dc172a4f9
Instruction ID: 7a2f2fef7b6134309bd3ee3ac4ccb75fcc15e43833d253618387c392ef68dcdb
Opcode Fuzzy Hash: 5b3963bce61e5462fcc98299cca588c726de1fdec5e342f295f2c20dc172a4f9
Instruction Fuzzy Hash: 3381E471A40249EBDB10DFE8DC49B9EF7B8EF54314F248269F914A72C1DB70AA15CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00235E30, Relevance: 21.1, APIs: 6, Strings: 6, Instructions: 77COMMON

Download Yara Rule

Strings

zlib_compress, xrefs: 00235EAB
HttpUninit, xrefs: 00235E91
InitByDllPath HasMsSign failed, xrefs: 00235E56
zlib_uncompress, xrefs: 00235E9E
zlib_compressBound, xrefs: 00235EB8
HttpInit, xrefs: 00235E89

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: HttpInit$HttpUninit$InitByDllPath HasMsSign failed$zlib_compress$zlib_compressBound$zlib_uncompress
API String ID: 0-2891362972
Opcode ID: fc7031643ae779190aa4fb9098117e4ca4c070645a2154ed907d602ccad57849
Instruction ID: e4634363387b96a4acd15b7682b565b7c176f29fac99483ae9d3bcd117478191
Opcode Fuzzy Hash: fc7031643ae779190aa4fb9098117e4ca4c070645a2154ed907d602ccad57849
Instruction Fuzzy Hash: 75214FB1A64B27ABDB109F6AE808B55FBA4FB54320F048537E418C2A40D774E9B1CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 001FAC50, Relevance: 19.6, APIs: 5, Strings: 6, Instructions: 361COMMON

Download Yara Rule

Strings

CGameConfig::GetInstallPath installPath-no_dirre_defaylt:%s, xrefs: 001FAFC6
default, xrefs: 001FACB5
CGameConfig::GetInstallPath installPath-make_sure:%s, xrefs: 001FAFB7
CGameConfig::GetInstallPath installPath:%s, xrefs: 001FB031
CGameConfig::GetInstallPath installPath-default:%s, xrefs: 001FACCA
CGameConfig::GetInstallPath installPath-driver:%s, xrefs: 001FAD1B

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Path$CreateDirectoryException@8ExistsFileFolderSpecialThrow
String ID: CGameConfig::GetInstallPath installPath-default:%s$CGameConfig::GetInstallPath installPath-driver:%s$CGameConfig::GetInstallPath installPath-make_sure:%s$CGameConfig::GetInstallPath installPath-no_dirre_defaylt:%s$CGameConfig::GetInstallPath installPath:%s$default
API String ID: 1711007527-1607741555
Opcode ID: 598aead148eed34988371c05516a9ab5a3216218d93c55b84ad505a76b0ca920
Instruction ID: d4f4a85a6b1081a55db198c6aa7a301fa2ab68cd3982ef5d6d4e2733d178581a
Opcode Fuzzy Hash: 598aead148eed34988371c05516a9ab5a3216218d93c55b84ad505a76b0ca920
Instruction Fuzzy Hash: 48D1D371A00219AFDB24DF64DC45FAAB7B5FF45310F0445A9F619AB282DB30AD44CF92

Uniqueness

Uniqueness Score: -1.00%

Function 00225642, Relevance: 19.4, APIs: 6, Strings: 5, Instructions: 153COMMON

Download Yara Rule

APIs

Part of subcall function 001F4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,002DDAF8,?,?,?,?,001F36E1,002DDAF8,?,?,?,002DDAF8), ref: 001F4186
Part of subcall function 001F4130: FindResourceW.KERNEL32(00000000,002DDAF8,00000006,?,002DDAF8), ref: 001F41C4

SHGetSpecialFolderPathW.SHELL32(00000000,?,0000001A,00000000), ref: 002256AD
PathAppendW.SHLWAPI(?,LDSGameCenter), ref: 002256C5
PathAppendW.SHLWAPI(?,Log), ref: 002256D3
SHCreateDirectoryExW.SHELL32(00000000,?,00000000), ref: 002256E0
GetModuleFileNameW.KERNEL32(001F0000,?,00000104), ref: 0022570D
PathFileExistsW.SHLWAPI(?), ref: 002257F1

Part of subcall function 0022E140: PathRemoveFileSpecW.SHLWAPI(00000000,?,?,?,?), ref: 0022E221

Strings

.on, xrefs: 002257CC
%s\%s.log, xrefs: 002257AF
Log, xrefs: 002256C7
LDSGameCenter, xrefs: 002256BF
pJVv, xrefs: 002256B3

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Path$File$AppendFindResource$CreateDirectoryExistsFolderModuleNameRemoveSpecSpecial
String ID: %s\%s.log$.on$LDSGameCenter$Log$pJVv
API String ID: 2581096778-4271074572
Opcode ID: e3a6a463bada363b403fca745041e6a79f67fb24916ae7f0ac40afdd4febc140
Instruction ID: 9b4323f05a2a823d9b27fda429fe7797a4e2b3f1582ab40003a9f2fc4199f1da
Opcode Fuzzy Hash: e3a6a463bada363b403fca745041e6a79f67fb24916ae7f0ac40afdd4febc140
Instruction Fuzzy Hash: 6851B3B1D006589BDB10DB64DC49BDDB7B8EF14315F4041D9EA09A7292DB70AF88CF94

Uniqueness

Uniqueness Score: -1.00%

Function 0023412C, Relevance: 17.9, APIs: 3, Strings: 7, Instructions: 379threadwindowCOMMON

Download Yara Rule

APIs

Part of subcall function 002337B0: MultiByteToWideChar.KERNEL32(00000003,00000000,?,000000FF,00000000,00000000,?,?,?,?,?,00000000,002D6A28,000000FF,?,80004005), ref: 00233889
Part of subcall function 002337B0: MultiByteToWideChar.KERNEL32(00000003,00000000,?,000000FF,?,-00000001,?,?,?,?,00000000,002D6A28,000000FF,?,80004005,79EB413B), ref: 002338BB

_wcsstr.LIBVCRUNTIME ref: 002343DC
GetTickCount.KERNEL32 ref: 00234411
PostThreadMessageW.USER32 ref: 0023452A

Strings

action=, xrefs: 00234301
&from=, xrefs: 00234287
&sign=, xrefs: 0023424F
http://s.ludashi.com/wan, xrefs: 0023448E
action=, xrefs: 00234397
&forcetick=%d, xrefs: 0023441E
&lds_game_secret, xrefs: 00234155

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide$CountMessagePostThreadTick_wcsstr
String ID: &forcetick=%d$&from=$&lds_game_secret$&sign=$action=$action=$http://s.ludashi.com/wan
API String ID: 3799094310-3821931251
Opcode ID: 0e5ceb007cc139114816099a84f1e4c7a897dd1cd5410472f962768a2ad2954f
Instruction ID: d172f416605558b7a5c20b6849c2cd976da6ec4cbe4f0207242b96e7496714ce
Opcode Fuzzy Hash: 0e5ceb007cc139114816099a84f1e4c7a897dd1cd5410472f962768a2ad2954f
Instruction Fuzzy Hash: A6F19A70A10159DBDB10EBA8CC89B9DF7B4BF15304F1481E8E149EB292DB74AE98CF50

Uniqueness

Uniqueness Score: -1.00%

Function 0024E6B0, Relevance: 17.9, APIs: 4, Strings: 6, Instructions: 360fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,80000000,00000001,00000000,00000003,00000080,00000000,?,?,00000000,00000000,79EB413B,?,?,?), ref: 0024E7B0
GetFileSize.KERNEL32(?,00000000,?,00000084,00000002,Function_000354A0,?,00000000,00000000,79EB413B,?,?,?), ref: 0024E83D
ReadFile.KERNEL32(?,?,?,00000000,00000000,?,?,?,?), ref: 0024E8A2
CloseHandle.KERNEL32(?,?,?,?,?), ref: 0024E8A9

Strings

File too large, xrefs: 0024E85F
Could not read file, xrefs: 0024E8F3
Error opening zip file, xrefs: 0024EA5F
Could not unzip file, xrefs: 0024EAB4
Error opening file, xrefs: 0024E80F
File is empty, xrefs: 0024E84F

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: File$CloseCreateHandleReadSize
String ID: Could not read file$Could not unzip file$Error opening file$Error opening zip file$File is empty$File too large
API String ID: 3919263394-637979653
Opcode ID: 4cbd5d49b132ff85007495012f37097cf39de4a37397c2763f5ddb7206b1eb78
Instruction ID: 88ba70676f2077ab57e81503653178bc132ffa86c0e76810aba8609ff86acbc0
Opcode Fuzzy Hash: 4cbd5d49b132ff85007495012f37097cf39de4a37397c2763f5ddb7206b1eb78
Instruction Fuzzy Hash: 42D190B0920219ABEF25EF60DC46BDEB368BF05754F1041A5E919B3282DBB05BA4CF51

Uniqueness

Uniqueness Score: -1.00%

Function 0022D5B0, Relevance: 17.8, APIs: 6, Strings: 4, Instructions: 323COMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(?,79EB413B), ref: 0022D603

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

SHGetSpecialFolderPathW.SHELL32(00000000,?,0000001A,00000000), ref: 0022D69D
PathAppendW.SHLWAPI(?,LDSGameCenter), ref: 0022D6AF
PathCombineW.SHLWAPI(?,?,Log\LDSGameCenter.log), ref: 0022D6C2

Part of subcall function 001F4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,002DDAF8,?,?,?,?,001F36E1,002DDAF8,?,?,?,002DDAF8), ref: 001F4186
Part of subcall function 001F4130: FindResourceW.KERNEL32(00000000,002DDAF8,00000006,?,002DDAF8), ref: 001F41C4

PathRemoveFileSpecW.SHLWAPI(00000000,?,?,?,?), ref: 0022D83F
DeleteCriticalSection.KERNEL32(00000005,79EB413B,?,?,?,00000000,002D6550,000000FF,?,80004005,80004005,80004005), ref: 0022D980

Strings

@0., xrefs: 0022D5FC
Log\LDSGameCenter.log, xrefs: 0022D6B5
LDSGameCenter, xrefs: 0022D6A3
pJVv, xrefs: 0022D6AF

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Path$CriticalFindResourceSection$AppendCombineDeleteFileFolderHeapInitializeProcessRemoveSpecSpecial
String ID: @0.$LDSGameCenter$Log\LDSGameCenter.log$pJVv
API String ID: 3624597452-2027903630
Opcode ID: c3c15d276f440c121689c0e2d1c1131babbcbd6723cc07476ed5d5af46332822
Instruction ID: 79bcdb2516eb24b8f64ddeebf1faf93c11cd665b02d08f86b0fba61da34e6167
Opcode Fuzzy Hash: c3c15d276f440c121689c0e2d1c1131babbcbd6723cc07476ed5d5af46332822
Instruction Fuzzy Hash: 99C1E47190161AAFCB14DF68DC48BAAF7B4FF44310F1482ADE8099B691DB34AE55CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0020C0E0, Relevance: 17.8, APIs: 3, Strings: 7, Instructions: 284windowCOMMON

Download Yara Rule

APIs

_wcsstr.LIBVCRUNTIME ref: 0020C119
DebugBreak.KERNEL32(?,?), ref: 0020C125

Part of subcall function 0020ADA0: PathFileExistsW.SHLWAPI(-00000010), ref: 0020ADEF

MessageBoxW.USER32(00000000,002E3218,00000000,00000030), ref: 0020C4FC

Part of subcall function 001FD500: PathFileExistsW.SHLWAPI(?,\NetBridge.dll,0000000E), ref: 001FD562

MessageBoxW.USER32(00000000,002E3248,00000000,00000030), ref: 0020C485

Strings

-debugbreak, xrefs: 0020C113
showinst, xrefs: 0020C1C4, 0020C6A8
CMainControl::_EnsureLoad360Dlls, LoadExeDir360Net failed., xrefs: 0020C454
\WdGameData_%s, xrefs: 0020C16D
uninstall, xrefs: 0020C2AC
install_extra, xrefs: 0020C320
install, xrefs: 0020C238

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ExistsFileMessagePath$BreakDebug_wcsstr
String ID: -debugbreak$CMainControl::_EnsureLoad360Dlls, LoadExeDir360Net failed.$\WdGameData_%s$install$install_extra$showinst$uninstall
API String ID: 1991904086-992619606
Opcode ID: 61250b7882a6ca38bd3f83ab9f48f1d8addc7ec9ec2df766553f750d39c900ea
Instruction ID: 91984ab0f7248a26883df031b0ca845d179b7bbd357560f628ba3faf0d5576e0
Opcode Fuzzy Hash: 61250b7882a6ca38bd3f83ab9f48f1d8addc7ec9ec2df766553f750d39c900ea
Instruction Fuzzy Hash: 82B13670A20249DBDF04EBA4CC85BEEFBB4BF55314F208258E405A32D2DB74AA14CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0020E1B0, Relevance: 16.6, APIs: 11, Instructions: 89windowCOMMON

Download Yara Rule

APIs

Part of subcall function 002486F0: GetWindowLongW.USER32(00000000,000000F0), ref: 00248728
Part of subcall function 002486F0: SetWindowLongW.USER32 ref: 00248743
Part of subcall function 002486F0: GetClientRect.USER32(00000000,001F828E), ref: 00248755
Part of subcall function 002486F0: SetWindowPos.USER32(00000000,00000000,001F828E,?,?,?,00000020), ref: 0024877B
Part of subcall function 002486F0: FindResourceW.KERNEL32(00000000,00000000,?,?), ref: 002487DF
Part of subcall function 002486F0: LoadResource.KERNEL32(00000000,00000000,?,?), ref: 002487F6
Part of subcall function 002486F0: FreeResource.KERNEL32(00000000,?,?), ref: 00248807

Part of subcall function 0020E360: DestroyWindow.USER32(00000000), ref: 0020E41F

SetWindowTextW.USER32(?,?), ref: 0020E1E5
DestroyIcon.USER32(?), ref: 0020E210
DestroyIcon.USER32(?), ref: 0020E227
GetSystemMetrics.USER32 ref: 0020E23F
GetSystemMetrics.USER32 ref: 0020E244
LoadImageW.USER32 ref: 0020E252
GetSystemMetrics.USER32 ref: 0020E266
GetSystemMetrics.USER32 ref: 0020E26B
LoadImageW.USER32 ref: 0020E273
SendMessageW.USER32(?,00000080,00000001,?), ref: 0020E296
SendMessageW.USER32(?,00000080,00000000,00000000), ref: 0020E2A3

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$MetricsSystem$DestroyLoadResource$IconImageLongMessageSend$ClientFindFreeRectText
String ID:
API String ID: 3527752567-0
Opcode ID: 518c9bf98ddbd507655e9210edeb5dacb4283c6ef22681e1cfa3294a43d94392
Instruction ID: 8d998597425d17f5ae04f5ddb3011341b613d46585ab1567a55936578a1e9871
Opcode Fuzzy Hash: 518c9bf98ddbd507655e9210edeb5dacb4283c6ef22681e1cfa3294a43d94392
Instruction Fuzzy Hash: 7A314F75650304BFEB119F61DC85F6A7BA9FF48750F048065FD046B292CAB2AD10CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 0020C830, Relevance: 16.0, APIs: 3, Strings: 6, Instructions: 219COMMON

Download Yara Rule

APIs

GetTickCount.KERNEL32 ref: 0020C85A
GetModuleHandleW.KERNEL32(00000000), ref: 0020C968
GetTickCount.KERNEL32 ref: 0020C9C6

Strings

_sec, xrefs: 0020CA48
run, xrefs: 0020C883
exit, xrefs: 0020CA1E
HookInitialize, MH_Initialize failed, ret=%d, xrefs: 0020C8CE
LastRunTime, xrefs: 0020C922
%lu, xrefs: 0020C9FD

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CountTick$HandleModule
String ID: %lu$HookInitialize, MH_Initialize failed, ret=%d$LastRunTime$_sec$exit$run
API String ID: 503989783-2451729631
Opcode ID: eaba7df268eb7e3cf6295b87a05fe83b25e457aa9c09d427fad3ed97944641d1
Instruction ID: a0c7a3074a801497bb528d6ce816df19438132657b8bdc15957dc2c07b343fdf
Opcode Fuzzy Hash: eaba7df268eb7e3cf6295b87a05fe83b25e457aa9c09d427fad3ed97944641d1
Instruction Fuzzy Hash: D381D4B0A11749AFDB00EFB8CD0AB9EBBF4AF05314F144268F914A72D2DB749914CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0023AE40, Relevance: 16.0, APIs: 7, Strings: 2, Instructions: 214libraryCOMMON

Download Yara Rule

APIs

GetStockObject.GDI32(00000011), ref: 0023B0A2
GetObjectW.GDI32(00000000), ref: 0023B0A9
CreateFontIndirectW.GDI32(?), ref: 0023B0DE
CreatePen.GDI32(00000000,00000001,000000DC), ref: 0023B14F
#17.COMCTL32(?,?,?), ref: 0023B15A
LoadLibraryW.KERNEL32(msimg32.dll,?,?,?), ref: 0023B165
InitializeCriticalSection.KERNEL32(?), ref: 0023B1EC

Strings

msimg32.dll, xrefs: 0023B160
;Ay, xrefs: 0023B229

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CreateObject$CriticalFontIndirectInitializeLibraryLoadSectionStock
String ID: ;Ay$msimg32.dll
API String ID: 730405823-525277042
Opcode ID: d0fb60d811ac2cf5bd008a98ae7e0c9d39c8e002692d1145681addc02b26e7dd
Instruction ID: 5b0d6f4efd8a2dab9c5b6a20be1dc0ad5dcc52e468da5608695a927b89d75c07
Opcode Fuzzy Hash: d0fb60d811ac2cf5bd008a98ae7e0c9d39c8e002692d1145681addc02b26e7dd
Instruction Fuzzy Hash: 8CB16BB0401B85DEE721DFB4C819BDBBBE4AF15308F00894DE5AA5B2C2DBB56248CF51

Uniqueness

Uniqueness Score: -1.00%

Function 002C2B29, Relevance: 15.9, APIs: 5, Strings: 4, Instructions: 171timeCOMMON

Download Yara Rule

APIs

GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,002FD518), ref: 002C2B93
WideCharToMultiByte.KERNEL32(00000000,00000000,W. Europe Standard Time,000000FF,00000000,0000003F,00000000,?,?), ref: 002C2C0B
WideCharToMultiByte.KERNEL32(00000000,00000000,W. Europe Daylight Time,000000FF,?,0000003F,00000000,?), ref: 002C2C38
_free.LIBCMT ref: 002C2B81

Part of subcall function 002C0176: RtlFreeHeap.NTDLL(00000000,00000000,?,002CA4E9,?,00000000,?,00000000,?,002CA78D,?,00000007,?,?,002CAAEC,?), ref: 002C018C
Part of subcall function 002C0176: GetLastError.KERNEL32(?,?,002CA4E9,?,00000000,?,00000000,?,002CA78D,?,00000007,?,?,002CAAEC,?,?), ref: 002C019E

_free.LIBCMT ref: 002C2D4D

Strings

W. Europe Daylight Time, xrefs: 002C2C31
L-,, xrefs: 002C2B3C, 002C2C55, 002C2B42
W. Europe Standard Time, xrefs: 002C2C04
D-,, xrefs: 002C299A, 002C2A1E, 002C2A38, 002C2A64, 002C2A8B, 002C2AB0, 002C2AE8, 002C2B32

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide_free$ErrorFreeHeapInformationLastTimeZone
String ID: D-,$L-,$W. Europe Daylight Time$W. Europe Standard Time
API String ID: 1286116820-1091283210
Opcode ID: c33fdd4bd3a5637b070569d61927f754deeeab6b34b9a2de03427107cefc4051
Instruction ID: 97052d0e5340ec575ea1ce8aac600c9c7360641a15fd4252aa344efb8bdb7a7d
Opcode Fuzzy Hash: c33fdd4bd3a5637b070569d61927f754deeeab6b34b9a2de03427107cefc4051
Instruction Fuzzy Hash: 41510471910209EBCB25EF689C41EAEB7BCAB44350F10036EE51497190DF709F598B50

Uniqueness

Uniqueness Score: -1.00%

Function 002401F0, Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 118registryCOMMON

Download Yara Rule

APIs

GetClassInfoExW.USER32 ref: 0024022B
GetClassInfoExW.USER32 ref: 00240247
RegisterClassExW.USER32 ref: 00240278
GetLastError.KERNEL32 ref: 00240283
LoadCursorW.USER32(00000000,00007F00), ref: 002402E8
RegisterClassW.USER32 ref: 0024030D
GetLastError.KERNEL32 ref: 00240318
CreateWindowExW.USER32 ref: 00240358

Strings

OF&, xrefs: 002401F0

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Class$ErrorInfoLastRegister$CreateCursorLoadWindow
String ID: OF&
API String ID: 1185170849-4037639825
Opcode ID: 016359457c1fafe4266fa2ac07f2f64597b89cc2e40b26d20734f17d07e5de63
Instruction ID: c16590a2f67916dd8a620334773d0827d86f0ee5561d8cd25955ad04228168ce
Opcode Fuzzy Hash: 016359457c1fafe4266fa2ac07f2f64597b89cc2e40b26d20734f17d07e5de63
Instruction Fuzzy Hash: E0414875A20209AFDB14DFA4E848BAEBFF8EF48304F14455AF905E7250DB719990CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00246CF0, Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 54COMMON

Download Yara Rule

APIs

IsWindow.USER32(?), ref: 0024732E
FindWindowExW.USER32 ref: 0024734D
FindWindowExW.USER32 ref: 0024735D
FindWindowExW.USER32 ref: 0024736D
GetWindowLongW.USER32(00000000,000000EC), ref: 00247378
SetWindowLongW.USER32 ref: 00247382

Strings

Shell Embedding, xrefs: 0024733A
Internet Explorer_Server, xrefs: 00247365
Shell DocObject View, xrefs: 00247355

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Find$Long
String ID: Internet Explorer_Server$Shell DocObject View$Shell Embedding
API String ID: 189972333-2040739340
Opcode ID: f342f15b2a1d0e71c75562d150c7e796bc576cd4b1d7a06d0456d31acdbc8539
Instruction ID: 7e73f929abb781dda0836f14c75696d8d6c0022b29b1f97b235309d58f449950
Opcode Fuzzy Hash: f342f15b2a1d0e71c75562d150c7e796bc576cd4b1d7a06d0456d31acdbc8539
Instruction Fuzzy Hash: 12012430AA5713A7D7201F25AC05F973EDC6F14B51F154262BC10F61C0CB70EC1089A4

Uniqueness

Uniqueness Score: -1.00%

Function 00247320, Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 41COMMON

Download Yara Rule

APIs

IsWindow.USER32(?), ref: 0024732E
FindWindowExW.USER32 ref: 0024734D
FindWindowExW.USER32 ref: 0024735D
FindWindowExW.USER32 ref: 0024736D
GetWindowLongW.USER32(00000000,000000EC), ref: 00247378
SetWindowLongW.USER32 ref: 00247382

Strings

Shell Embedding, xrefs: 0024733A
Internet Explorer_Server, xrefs: 00247365
Shell DocObject View, xrefs: 00247355

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Find$Long
String ID: Internet Explorer_Server$Shell DocObject View$Shell Embedding
API String ID: 189972333-2040739340
Opcode ID: a4d54d78a7347e3e70aa2cfbd6886425f59e926825fba5e9f4d4fd20bef7954d
Instruction ID: 70e61c3982c45a0ad529d1a04b6a574ad68cf21f9c914083e76d3537edc67b4a
Opcode Fuzzy Hash: a4d54d78a7347e3e70aa2cfbd6886425f59e926825fba5e9f4d4fd20bef7954d
Instruction Fuzzy Hash: D7F09070AE5B2376D7301E256C09F972E8C5B21B91F160262BD20F61D0CBA4EC1089A4

Uniqueness

Uniqueness Score: -1.00%

Function 002096A8, Relevance: 14.3, APIs: 2, Strings: 6, Instructions: 258COMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBVCRUNTIME ref: 002096BC

Part of subcall function 002A3827: RaiseException.KERNEL32(?,?,002360BB,?,0031A044,?,0000000F,?,?,?,?,002360BB,?,00313034,?), ref: 002A3887

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

InitializeCriticalSection.KERNEL32(?), ref: 002097A8

Part of subcall function 002220B0: SHGetValueW.SHLWAPI(?,;Ay,?,00000001,?,?), ref: 0022213F

Strings

http://wan.ludashi.com/(?:(?:web/game)|yeyou)/(.*?)\?.*?s=(\d+).*, xrefs: 00209919
hp%-, xrefs: 002099B5
http://wan.ludashi.com/site/{game_id}, xrefs: 00209907
LastRunTime, xrefs: 0020989A
http://wan.ludashi.com/web/wpay?game={game_id}&server={server_id}, xrefs: 002098F5
@0., xrefs: 0020979D

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalExceptionException@8HeapInitializeProcessRaiseSectionThrowValue
String ID: @0.$LastRunTime$hp%-$http://wan.ludashi.com/(?:(?:web/game)|yeyou)/(.*?)\?.*?s=(\d+).*$http://wan.ludashi.com/site/{game_id}$http://wan.ludashi.com/web/wpay?game={game_id}&server={server_id}
API String ID: 1114886752-2572327791
Opcode ID: be6501103fa63d540566957fec6ea40aca123d81b50b76bebb9d9fec38e8ebba
Instruction ID: 0a518e9259e48ac7f5623e8c5fcb60b736c18a283f7dbc2e1f0a0d927750ab92
Opcode Fuzzy Hash: be6501103fa63d540566957fec6ea40aca123d81b50b76bebb9d9fec38e8ebba
Instruction Fuzzy Hash: BC91D23060168ADFE710EF78C819BAEB7E4EF11315F04856DE56A9B693DB30E904CB52

Uniqueness

Uniqueness Score: -1.00%

Function 00221270, Relevance: 14.2, APIs: 4, Strings: 4, Instructions: 159registryCOMMON

Download Yara Rule

APIs

Part of subcall function 002075B0: GetModuleHandleW.KERNEL32(Advapi32.dll,002D3238,LDSGameCenter,00000000,002D3238,?,0022BBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,002D3238), ref: 002075D4
Part of subcall function 002075B0: RegCloseKey.ADVAPI32(00000000,?,0022BBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,002D3238), ref: 00207637

RegQueryValueExW.KERNEL32(00000000,svcVersion,00000000,?,?,?,80000002,SOFTWARE\Microsoft\Internet Explorer,00020019,79EB413B), ref: 00221330
RegQueryValueExW.ADVAPI32(00000000,Version,00000000,?,?,00000200), ref: 002213A2
RegCloseKey.KERNEL32(00000000), ref: 002213D3
RegCloseKey.ADVAPI32(00000000,?), ref: 00221443

Strings

;Ay, xrefs: 00221294, 0022144B
Version, xrefs: 0022139C
svcVersion, xrefs: 0022132A
SOFTWARE\Microsoft\Internet Explorer, xrefs: 002212EC

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Close$QueryValue$HandleModule
String ID: ;Ay$SOFTWARE\Microsoft\Internet Explorer$Version$svcVersion
API String ID: 374096546-1099604711
Opcode ID: 23a0b06f72f332cc3d32e413516b8e89f143c51ccf95d21c737926f54b68d052
Instruction ID: fcceecb408c78b3d8cd08c973f982730b6013a13a6af0e8f4a40b0db6be0008e
Opcode Fuzzy Hash: 23a0b06f72f332cc3d32e413516b8e89f143c51ccf95d21c737926f54b68d052
Instruction Fuzzy Hash: 9051A47195022DABDB20DF94EC89FEEB7B9AF24700F1001D9E508E6280DB709E94CF95

Uniqueness

Uniqueness Score: -1.00%

Function 00209141, Relevance: 14.2, APIs: 6, Strings: 2, Instructions: 157COMMON

Download Yara Rule

APIs

Part of subcall function 00220A10: SHGetSpecialFolderPathW.SHELL32(00000000,?,0000001A,00000000), ref: 00220A90
Part of subcall function 00220A10: SHCreateDirectoryExW.SHELL32(00000000,?,00000000,00000000,?,?,?), ref: 00220AE4
Part of subcall function 00220A10: PathFileExistsW.SHLWAPI(?), ref: 00220AEB

GdiplusStartup.GDIPLUS(?,00000001,00000000,0000000B,?,?,\WdGame\Log), ref: 002091C6
GdiplusShutdown.GDIPLUS(00000000,00001388,0000000B,?,00000001,00000000), ref: 00209275
EnterCriticalSection.KERNEL32(00320808,00000000,00001388,0000000B,?,00000001,00000000), ref: 00209284
DestroyWindow.USER32(00000000,?,?,?,?,?,?,?,?,?,?,\WdGame\Log,0000000B), ref: 0020929E
LeaveCriticalSection.KERNEL32(00320808,?,?,?,?,?,?,?,?,?,?,\WdGame\Log,0000000B), ref: 002092E7
CoUninitialize.OLE32(?,?,?,?,?,?,?,?,?,?,\WdGame\Log,0000000B), ref: 0020933F

Strings

\WdGame.log, xrefs: 00209181
\WdGame\Log, xrefs: 00209143

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalGdiplusPathSection$CreateDestroyDirectoryEnterExistsFileFolderLeaveShutdownSpecialStartupUninitializeWindow
String ID: \WdGame.log$\WdGame\Log
API String ID: 3745756869-1914079685
Opcode ID: 2ed14149d03e87571e95fc5675499512b29b48fc11607e544f7e7f72e9eb13da
Instruction ID: 0d0af5882e2e9f77b72dc59d61647b3b17c585043daa5da8725914beb800c199
Opcode Fuzzy Hash: 2ed14149d03e87571e95fc5675499512b29b48fc11607e544f7e7f72e9eb13da
Instruction Fuzzy Hash: 0951B1B0A207069FDB20EF64DC45B5AB7E8FF04701F048528E816A72D3DB749954CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0020ADA0, Relevance: 14.1, APIs: 3, Strings: 5, Instructions: 110COMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(-00000010), ref: 0020ADEF

Strings

CMainControl::_LoadInstalledGameConfig, skin not found '%s', xrefs: 0020AE7D
CMainControl::_LoadInstalledGameConfig, invalid config '%s', xrefs: 0020AE21
CMainControl::_LoadInstalledGameConfig, not found '%s', xrefs: 0020ADFB
CMainControl::_LoadInstalledGameConfig, NetBridge not found '%s', xrefs: 0020AE5A
\NetBridge.dll, xrefs: 0020AE32

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ExistsFilePath
String ID: CMainControl::_LoadInstalledGameConfig, NetBridge not found '%s'$CMainControl::_LoadInstalledGameConfig, invalid config '%s'$CMainControl::_LoadInstalledGameConfig, not found '%s'$CMainControl::_LoadInstalledGameConfig, skin not found '%s'$\NetBridge.dll
API String ID: 1174141254-3133116890
Opcode ID: 94d68636e06dc1b205714f270f869d6ce993ffde80a3b5dc0dd858bf524be076
Instruction ID: a020e0aadc7dc3b6beab0c38da5e0b8852fd5f8d503a3bd58c087a8a61f2824f
Opcode Fuzzy Hash: 94d68636e06dc1b205714f270f869d6ce993ffde80a3b5dc0dd858bf524be076
Instruction Fuzzy Hash: AC3127B6910719ABDB01DFA8DC49B5BF7A8EF55320F948234F818D3282E7719D208B91

Uniqueness

Uniqueness Score: -1.00%

Function 002075B0, Relevance: 14.1, APIs: 4, Strings: 4, Instructions: 66registrylibraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(Advapi32.dll,002D3238,LDSGameCenter,00000000,002D3238,?,0022BBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,002D3238), ref: 002075D4
GetProcAddress.KERNEL32(00000000,RegOpenKeyTransactedW), ref: 002075EB
RegOpenKeyExW.KERNEL32(82-,0002001F,00000000,?,00000000,002D3238,LDSGameCenter,00000000,002D3238,?,0022BBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,002D3238), ref: 00207624
RegCloseKey.ADVAPI32(00000000,?,0022BBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,002D3238), ref: 00207637

Strings

Advapi32.dll, xrefs: 002075CF
82-, xrefs: 00207621, 00207603
RegOpenKeyTransactedW, xrefs: 002075E5
LDSGameCenter, xrefs: 002075BE

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressCloseHandleModuleOpenProc
String ID: 82-$Advapi32.dll$LDSGameCenter$RegOpenKeyTransactedW
API String ID: 823179699-4062192233
Opcode ID: 9b1a61d11bbc0ea5abfd319978023e45e32afd7cb5c92ab462b13df69edb6dc7
Instruction ID: 42d56a11262dc4ad4ffc9eef8f95da3d6dbfa72a748b1eb518e821793b1db39a
Opcode Fuzzy Hash: 9b1a61d11bbc0ea5abfd319978023e45e32afd7cb5c92ab462b13df69edb6dc7
Instruction Fuzzy Hash: 45118E31E18B06EBDB108F99DC48F9ABBACEB44701F148025B906D6191E7B2ED60DB60

Uniqueness

Uniqueness Score: -1.00%

Function 00241430, Relevance: 13.8, APIs: 9, Instructions: 328COMMON

Download Yara Rule

APIs

IntersectRect.USER32 ref: 00241480

Part of subcall function 0025BBD0: GetClipBox.GDI32(002414AB,?), ref: 0025BBFC
Part of subcall function 0025BBD0: CreateRectRgnIndirect.GDI32(?), ref: 0025BC06
Part of subcall function 0025BBD0: CreateRectRgnIndirect.GDI32(?), ref: 0025BC13
Part of subcall function 0025BBD0: ExtSelectClipRgn.GDI32(002414AB,00000000,00000001), ref: 0025BC20

Part of subcall function 00249C50: IntersectRect.USER32 ref: 00249C91
Part of subcall function 00249C50: CreateCompatibleDC.GDI32(?), ref: 00249CB3
Part of subcall function 00249C50: CreateCompatibleBitmap.GDI32(?,?,?), ref: 00249CD0
Part of subcall function 00249C50: DeleteDC.GDI32(?), ref: 00249CE6
Part of subcall function 00249C50: AlphaBlend.MSIMG32(?,00000000,00000000,?,?,?,00000000,00000000,?,?,00000000), ref: 00249E19
Part of subcall function 00249C50: SelectObject.GDI32(?,?), ref: 00249E30
Part of subcall function 00249C50: DeleteDC.GDI32(?), ref: 00249E3C

IntersectRect.USER32 ref: 00241567
IntersectRect.USER32 ref: 002415C2
IntersectRect.USER32 ref: 002415ED
IntersectRect.USER32 ref: 00241655
IntersectRect.USER32 ref: 002416A3
IntersectRect.USER32 ref: 00241754
IntersectRect.USER32 ref: 0024177F
IntersectRect.USER32 ref: 002417C2

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Rect$Intersect$Create$ClipCompatibleDeleteIndirectSelect$AlphaBitmapBlendObject
String ID:
API String ID: 3145874863-0
Opcode ID: 9c52a4b3de6eb3096714da3205ff4e79a61ab5b3a56b63345a798f6aad28f14c
Instruction ID: 77fcad6bd56751dc6629c198fc7aa3af026436e73a9639451941851816e28c1a
Opcode Fuzzy Hash: 9c52a4b3de6eb3096714da3205ff4e79a61ab5b3a56b63345a798f6aad28f14c
Instruction Fuzzy Hash: 60D11534A106099FCB14DFA8DC94EEEB7B9FF49305F184169E805EB261EB31A951CF50

Uniqueness

Uniqueness Score: -1.00%

Function 002C46A4, Relevance: 13.8, APIs: 9, Instructions: 300COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f47f63b363e3513ab66d12b989bf8a78ba29cc9280f935c163ab00283b0a612
Instruction ID: db3961abec165ca7b99c364a4cf424e474dbd219ef4f00aba7c78b467c7841a4
Opcode Fuzzy Hash: 9f47f63b363e3513ab66d12b989bf8a78ba29cc9280f935c163ab00283b0a612
Instruction Fuzzy Hash: 64C1F470D2425A9FCF11EFA8C861FAFBBB5AF0A310F14428DE414A7392C7749951CB65

Uniqueness

Uniqueness Score: -1.00%

Function 002CCBF3, Relevance: 13.8, APIs: 9, Instructions: 272COMMON

Download Yara Rule

APIs

Part of subcall function 002CC932: CreateFileW.KERNEL32(00000000,00000000,?,002CCC9C,?,?,00000000,?,002CCC9C,00000000,0000000C), ref: 002CC94F

GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 002CCD07
__dosmaperr.LIBCMT ref: 002CCD0E
GetFileType.KERNEL32(00000000), ref: 002CCD1A
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 002CCD24
__dosmaperr.LIBCMT ref: 002CCD2D
CloseHandle.KERNEL32(00000000), ref: 002CCD4D
CloseHandle.KERNEL32(79EB413B), ref: 002CCE97
GetLastError.KERNEL32 ref: 002CCEC9
__dosmaperr.LIBCMT ref: 002CCED0

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorLast__dosmaperr$CloseFileHandle$CreateType
String ID:
API String ID: 4237864984-0
Opcode ID: 7e99137053e6c5f68e70c055902748d61975e9434f92df21d1726ac6dde911bc
Instruction ID: 48ea10ec88bc813405343d369fd72b01277ef01595a5df8a96e2f4d8c4a2f329
Opcode Fuzzy Hash: 7e99137053e6c5f68e70c055902748d61975e9434f92df21d1726ac6dde911bc
Instruction Fuzzy Hash: 60A15B329241458FCF19DF68DC81FAD7BA1AB06324F24025EF819DB391DB358D26CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00249C50, Relevance: 13.7, APIs: 9, Instructions: 158windowCOMMON

Download Yara Rule

APIs

IntersectRect.USER32 ref: 00249C91
CreateCompatibleDC.GDI32(?), ref: 00249CB3
CreateCompatibleBitmap.GDI32(?,?,?), ref: 00249CD0
DeleteDC.GDI32(?), ref: 00249CE6
SelectObject.GDI32(?,00000000), ref: 00249CFF
AlphaBlend.MSIMG32(?,00000000,00000000,?,?,?,00000000,00000000,?,?,00000000), ref: 00249E19
SelectObject.GDI32(?,?), ref: 00249E30
DeleteDC.GDI32(?), ref: 00249E3C
DeleteObject.GDI32(?), ref: 00249E48

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: DeleteObject$CompatibleCreateSelect$AlphaBitmapBlendIntersectRect
String ID:
API String ID: 201971325-0
Opcode ID: 84a843ee34bed00e62ab37f8055c12ee86849d2d6515c2a8e3c69ed16f40658a
Instruction ID: f33abcb075384aab573540c2ec65efa170e6f8a2a2b29c3a8cc7f6eb9c61bb00
Opcode Fuzzy Hash: 84a843ee34bed00e62ab37f8055c12ee86849d2d6515c2a8e3c69ed16f40658a
Instruction Fuzzy Hash: CD613374A11A01EFEB259F28C948FABBBF8FF49700F00055DE99A97291DB31A840CB50

Uniqueness

Uniqueness Score: -1.00%

Function 002337B0, Relevance: 12.6, APIs: 5, Strings: 2, Instructions: 358COMMON

Download Yara Rule

APIs

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

MultiByteToWideChar.KERNEL32(00000003,00000000,?,000000FF,00000000,00000000,?,?,?,?,?,00000000,002D6A28,000000FF,?,80004005), ref: 00233889
MultiByteToWideChar.KERNEL32(00000003,00000000,?,000000FF,?,-00000001,?,?,?,?,00000000,002D6A28,000000FF,?,80004005,79EB413B), ref: 002338BB

Strings

h(j-, xrefs: 00233825
SendData, xrefs: 00233B4B

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide$HeapProcess
String ID: SendData$h(j-
API String ID: 2590121937-3013303248
Opcode ID: 430ed09df2ec0ab36459ae8503359728e681c08a22e52a78f10f43eeb705762f
Instruction ID: 1ec90ffd63b8098b7f1319ce8c7832f1afa3b068fac79daeb1c6868f2078ee37
Opcode Fuzzy Hash: 430ed09df2ec0ab36459ae8503359728e681c08a22e52a78f10f43eeb705762f
Instruction Fuzzy Hash: 94D1DD70A0064ADFDB10DF68CC48B6EBBF8EF54324F14866DE455DB292DB70AA04CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00220350, Relevance: 12.5, APIs: 5, Strings: 2, Instructions: 249fileCOMMON

Download Yara Rule

APIs

Part of subcall function 00221A70: GetTempPathW.KERNEL32(00000104,00000010,79EB413B,00000010,00000010), ref: 00221ACB

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

PathFindFileNameW.SHLWAPI(?), ref: 00220484
PathFileExistsW.SHLWAPI(?,00000000), ref: 00220523
DeleteFileW.KERNEL32(?), ref: 0022052E
CopyFileW.KERNEL32(?,00000010,00000000), ref: 0022056E
GetTempFileNameW.KERNEL32(?,~tm,00000000,?), ref: 002205B3

Strings

~tm, xrefs: 002205A8
%s\%s-%d, xrefs: 00220551

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: File$Path$NameTemp$CopyDeleteExistsFindHeapProcess
String ID: %s\%s-%d$~tm
API String ID: 934832287-1237362780
Opcode ID: 8a5e455fb39cfa776a0f48390f534ceefeabe4b7ef28b898df9909d846d1c20d
Instruction ID: 0803b20c580fb810a170044bcc21becb36951b4ad991edcf66a8c568c9840e40
Opcode Fuzzy Hash: 8a5e455fb39cfa776a0f48390f534ceefeabe4b7ef28b898df9909d846d1c20d
Instruction Fuzzy Hash: C391C371A01619ABCB10DFA8DC8CB9DB7B8BF55320F0482D9A919DB292DB34DE50CF50

Uniqueness

Uniqueness Score: -1.00%

Function 0024FA43, Relevance: 12.5, APIs: 1, Strings: 6, Instructions: 215COMMON

Download Yara Rule

APIs

CharNextW.USER32(00000000), ref: 0024FB16

Strings

#, xrefs: 0024FB0F
name, xrefs: 0024FA4C
size, xrefs: 0025086A
mask, xrefs: 0024FAD5
Window, xrefs: 002507E9
restype, xrefs: 0024FA8F

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CharNext
String ID: #$Window$mask$name$restype$size
API String ID: 3213498283-597611151
Opcode ID: 11a39671ef69973d1e45fe0d0ac2f052e7c6017044a554c18d256116ac5a4ccc
Instruction ID: a8eb6f93561a4db8deb107473ab81eef8f4c86d95a001a354f4bf8bde7ba2ff3
Opcode Fuzzy Hash: 11a39671ef69973d1e45fe0d0ac2f052e7c6017044a554c18d256116ac5a4ccc
Instruction Fuzzy Hash: A671FA729201264ADB289F20CD91BFAB376FFA4754F4544E4DD0AA7241E7329D74CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00230BC0, Relevance: 12.5, APIs: 1, Strings: 6, Instructions: 206COMMON

Download Yara Rule

APIs

Part of subcall function 002309C0: SHGetValueW.SHLWAPI(80000002,Software\LDSGameCenter,Setup Path,00000001,?,?), ref: 00230A4D

PathFileExistsW.SHLWAPI(013DB2C0,00000000), ref: 00230D36

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

Part of subcall function 001F4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,002DDAF8,?,?,?,?,001F36E1,002DDAF8,?,?,?,002DDAF8), ref: 001F4186
Part of subcall function 001F4130: FindResourceW.KERNEL32(00000000,002DDAF8,00000006,?,002DDAF8), ref: 001F41C4

Strings

;Ay, xrefs: 00230BD0
\pgstation.exe, xrefs: 00230CEF
xw., xrefs: 00230FC4, 00230FC7
;Ay, xrefs: 00230D79, 00230D49, 00230C22
\LDSGameCenter.exe, xrefs: 00230CCB
ludashi, xrefs: 00230F99

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$ExistsFileHeapPathProcessValue
String ID: ;Ay$;Ay$\LDSGameCenter.exe$\pgstation.exe$ludashi$xw.
API String ID: 3695862699-4250934456
Opcode ID: f961fb179f3d01ecf39284b26fa4a4d255c399aa76e1c252e9f842ba5c58943e
Instruction ID: 2865dbdabddc2f767cbe2214161c7996b7ef19654d554b35c231eba63d8e0b51
Opcode Fuzzy Hash: f961fb179f3d01ecf39284b26fa4a4d255c399aa76e1c252e9f842ba5c58943e
Instruction Fuzzy Hash: 2E61F7B1A00549DBDB00DFA8CC49BAEB7F4EF01314F148169E815D7292DB75EE14CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00222650, Relevance: 12.4, APIs: 4, Strings: 3, Instructions: 177COMMON

Download Yara Rule

APIs

Part of subcall function 00221270: RegQueryValueExW.KERNEL32(00000000,svcVersion,00000000,?,?,?,80000002,SOFTWARE\Microsoft\Internet Explorer,00020019,79EB413B), ref: 00221330
Part of subcall function 00221270: RegQueryValueExW.ADVAPI32(00000000,Version,00000000,?,?,00000200), ref: 002213A2
Part of subcall function 00221270: RegCloseKey.KERNEL32(00000000), ref: 002213D3

_wcsstr.LIBVCRUNTIME ref: 0022269D
_wcsstr.LIBVCRUNTIME ref: 00222735
_wcsstr.LIBVCRUNTIME ref: 00222773

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

Part of subcall function 001F4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,002DDAF8,?,?,?,?,001F36E1,002DDAF8,?,?,?,002DDAF8), ref: 001F4186
Part of subcall function 001F4130: FindResourceW.KERNEL32(00000000,002DDAF8,00000006,?,002DDAF8), ref: 001F41C4

_wcsstr.LIBVCRUNTIME ref: 002227AE

Strings

FEATURE_BROWSER_EMULATION, xrefs: 002226CE, 002226E5, 0022274C, 0022278A, 002227C1, 002227D4
10., xrefs: 0022272F
11., xrefs: 00222697

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: _wcsstr$FindQueryResourceValue$CloseHeapProcess
String ID: 10.$11.$FEATURE_BROWSER_EMULATION
API String ID: 2497407237-2666944024
Opcode ID: 0e7a54f1fb3750a79693ca546a17f386a50ca12b377faf5e411354fe38b72ab9
Instruction ID: 52224d87c9dcc82a2cf45d21559c0be035d87d7300a2800428417aa75792cce2
Opcode Fuzzy Hash: 0e7a54f1fb3750a79693ca546a17f386a50ca12b377faf5e411354fe38b72ab9
Instruction Fuzzy Hash: 4E517C30A24656FBCB04DFE9DD1AB7EF3A0AF11324F144128E411E76C1DBB58E188B61

Uniqueness

Uniqueness Score: -1.00%

Function 0022104D, Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 169COMMON

Download Yara Rule

APIs

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

GetFileVersionInfoSizeW.VERSION(?,?,79EB413B,?,?), ref: 00221138
GetFileVersionInfoW.VERSION(?,00000000,00000000,?,?,?,79EB413B,?,?), ref: 0022115B
VerQueryValueW.VERSION(?,002DFD18,?,?,?,00000000,00000000,?,?,?,79EB413B,?,?), ref: 00221182

Part of subcall function 001F4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,002DDAF8,?,?,?,?,001F36E1,002DDAF8,?,?,?,002DDAF8), ref: 001F4186
Part of subcall function 001F4130: FindResourceW.KERNEL32(00000000,002DDAF8,00000006,?,002DDAF8), ref: 001F41C4

Strings

;Ay, xrefs: 00221102
QPj, xrefs: 00221156
;Ay, xrefs: 002210F9, 0022124F
%d.%d.%d.%d, xrefs: 002211EA

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFindInfoResourceVersion$HeapProcessQuerySizeValue
String ID: %d.%d.%d.%d$;Ay$;Ay$QPj
API String ID: 1124126271-3919120149
Opcode ID: 2aa6b1de4c822b143af45c0d6f1dba6853416927f3a765a780e2e0a20b4950ec
Instruction ID: 5135b2d4b61254785d96cf45892a2f754206705dbd47aded41126cec39ad5c7f
Opcode Fuzzy Hash: 2aa6b1de4c822b143af45c0d6f1dba6853416927f3a765a780e2e0a20b4950ec
Instruction Fuzzy Hash: C951B371A10229ABDB24DF54DC45FBEB3B9EF54700F0441AAE909D7282DB30EE64CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00238E20, Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 164encryptionCOMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(-00000080,79EB413B,000000FF,00000001,00000000), ref: 00238E65
GetVersionExW.KERNEL32(0000011C), ref: 00238E9A
WinVerifyTrust.WINTRUST(00000000,00AAC56B,00000030), ref: 00238F7C
WTHelperProvDataFromStateData.WINTRUST(?,00000000,00AAC56B,00000030), ref: 00238FB7
CertGetNameStringW.CRYPT32(00000001,00000004,00000000,00000000,?,00000200), ref: 0023903A
WinVerifyTrust.WINTRUST(00000000,00AAC56B,00000030,00000000,00AAC56B,00000030), ref: 002390AA

Strings

0, xrefs: 00239080

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: DataTrustVerify$CertExistsFileFromHelperNamePathProvStateStringVersion
String ID: 0
API String ID: 131157933-4108050209
Opcode ID: 94db13f14648eb65d44cb90dcf30c0b8757e4a2c444f82c36e9fc88bae0adc1b
Instruction ID: c233f8598f220584dc63d0893bdb2948dfa7824a9499a809ce418c9d845fc07e
Opcode Fuzzy Hash: 94db13f14648eb65d44cb90dcf30c0b8757e4a2c444f82c36e9fc88bae0adc1b
Instruction Fuzzy Hash: D4615FB1E107299FDB20DF68DC45BEAB7B8EB05715F4040E9E508EB280DBB59A84CF50

Uniqueness

Uniqueness Score: -1.00%

Function 0029EAD0, Relevance: 12.3, APIs: 2, Strings: 5, Instructions: 60sleepCOMMON

Download Yara Rule

APIs

InterlockedCompareExchange.KERNEL32(00322A0C,00000001,00322960), ref: 0029EAFC
Sleep.KERNEL32(00000001,?), ref: 0029EB52

Part of subcall function 0029EBB0: InitializeCriticalSection.KERNEL32(00322988,?,00322960,?,0029EB79), ref: 0029EBE9

Part of subcall function 00294BE3: __onexit.LIBCMT ref: 00294BE9

Strings

2, xrefs: 0029EADD
`)2, xrefs: 0029EB6A
`)2, xrefs: 0029EB12
`)2, xrefs: 0029EB86
`)2, xrefs: 0029EAE7, 0029EB8B, 0029EB9C

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CompareCriticalExchangeInitializeInterlockedSectionSleep__onexit
String ID: 2$`)2$`)2$`)2$`)2
API String ID: 3328004769-3216274330
Opcode ID: 216abc4aaae5a112b9b3570d14d7aa4e362c9698d87c62cb5bb584caae8bf2d6
Instruction ID: 4b55f5b75387cf6a68a7b847913bbe91b9af4cf2b189bef7d0a560dcb5ad8d71
Opcode Fuzzy Hash: 216abc4aaae5a112b9b3570d14d7aa4e362c9698d87c62cb5bb584caae8bf2d6
Instruction Fuzzy Hash: 15119D31A20241EBDF32DF54AC2AB6337A9FB11318F05801AE8069A661DB71D9B2DF41

Uniqueness

Uniqueness Score: -1.00%

Function 00218E30, Relevance: 10.7, APIs: 7, Instructions: 235COMMON

Download Yara Rule

APIs

_wcsstr.LIBVCRUNTIME ref: 00218EB5
_wcsstr.LIBVCRUNTIME ref: 00218EC9
_wcsstr.LIBVCRUNTIME ref: 00218F6B

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: _wcsstr
String ID:
API String ID: 1512112989-0
Opcode ID: 5b38fd7beb2336c422ae2fd93cb433c0469711ee92d508fcb04f57ef846d43cd
Instruction ID: 9ae8811e90c139c7636f86a15a0d13ba63820b3f5c5164c2d9f5c8c3db74d4ba
Opcode Fuzzy Hash: 5b38fd7beb2336c422ae2fd93cb433c0469711ee92d508fcb04f57ef846d43cd
Instruction Fuzzy Hash: 1B81C336E102169FCF24DF68C8809EEB7F5EFA8300B154559ED05A7214EB71AEA1CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00205750, Relevance: 10.7, APIs: 7, Instructions: 152windowCOMMON

Download Yara Rule

APIs

GetMessageW.USER32(?,00000000,00000000,00000000), ref: 0023E743
GetWindowLongW.USER32(?,000000F0), ref: 0023E765
GetParent.USER32(?), ref: 0023E779
GetParent.USER32(00000000), ref: 0023E7CE
TranslateMessage.USER32(?), ref: 0023E8C6
DispatchMessageW.USER32 ref: 0023E8D0
KiUserCallbackDispatcher.NTDLL(?,00000000,00000000,00000000), ref: 0023E8E0

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Message$Parent$CallbackDispatchDispatcherLongTranslateUserWindow
String ID:
API String ID: 1380769572-0
Opcode ID: dd3d7d00512b666a60d4ff70ac539a460f47b6bc5192bd8947ad09217202f33a
Instruction ID: 55c27da0e8902bf03fcb7264d13fb65e7f23981b3fe8b6827f43b4a125d343bc
Opcode Fuzzy Hash: dd3d7d00512b666a60d4ff70ac539a460f47b6bc5192bd8947ad09217202f33a
Instruction Fuzzy Hash: 2E5107B1E301169BDF15AF64EC84BFEB3A9BF49300F150129E902E71E5EF209959CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00231060, Relevance: 10.6, APIs: 1, Strings: 5, Instructions: 142COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(80000002,Software\LDSGameCenter,SubPID,00000001,?,?), ref: 002310FB

Strings

;Ay, xrefs: 002311C9, 002311D3
;Ay, xrefs: 002311E0, 00231203, 002311E8, 00231215
SubPID, xrefs: 002310EC
;Ay, xrefs: 00231083, 0023116D
Software\LDSGameCenter, xrefs: 002310F1

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Value
String ID: ;Ay$;Ay$;Ay$Software\LDSGameCenter$SubPID
API String ID: 3702945584-297540514
Opcode ID: 17723cb51479ca66b56cd961689d13d8f8925ca8920523720f8891857b944a5a
Instruction ID: c2d85c6750023b6cda65181ed24022808208aa611ffa8201a3dcae7e36c616ea
Opcode Fuzzy Hash: 17723cb51479ca66b56cd961689d13d8f8925ca8920523720f8891857b944a5a
Instruction Fuzzy Hash: 7041F6B195021DABDB10DF94DC49BEEB7B8FB04714F10429AF918A7381DB74AA548F90

Uniqueness

Uniqueness Score: -1.00%

Function 002995F0, Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 111fileCOMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(?), ref: 00299664
CreateFileW.KERNEL32(?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00299685
GetFileSize.KERNEL32(00000000,00000000), ref: 00299696
CreateFileMappingW.KERNELBASE(?,00000000,00000002,00000000,00000000,00000000), ref: 002996B1
MapViewOfFile.KERNEL32(00000000,00000004,00000000,00000000,00000000), ref: 002996C9

Part of subcall function 00298680: UnmapViewOfFile.KERNEL32(?,79EB413B,?,00000000,80004005,00000000,00000000,002D6120,000000FF,?,00299703), ref: 002986C2
Part of subcall function 00298680: CloseHandle.KERNEL32(?,79EB413B,?,00000000,80004005,00000000,00000000,002D6120,000000FF,?,00299703), ref: 002986E5
Part of subcall function 00298680: CloseHandle.KERNEL32(?,79EB413B,?,00000000,80004005,00000000,00000000,002D6120,000000FF,?,00299703), ref: 00298792

Strings

;Ay, xrefs: 00299603

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: File$CloseCreateHandleView$ExistsMappingPathSizeUnmap
String ID: ;Ay
API String ID: 3940366622-2185287194
Opcode ID: d6f8a70f38033cdc731815d331f984f136ddd82556c5ef3e87817dc07dd5d372
Instruction ID: 8043e81a0ba2a0acce472a9d11e16b859c6b764923ed6d20305ac5ab57dc7d41
Opcode Fuzzy Hash: d6f8a70f38033cdc731815d331f984f136ddd82556c5ef3e87817dc07dd5d372
Instruction Fuzzy Hash: EA31EE71A91B11BBEB305F289D06F5A77ACDB41F21F10452EF915A72C0DBB4A8108A94

Uniqueness

Uniqueness Score: -1.00%

Function 00247490, Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetPropW.USER32 ref: 0024749F
IsBadReadPtr.KERNEL32(00000000,00000004), ref: 002474AE
SetWindowLongW.USER32 ref: 002474D9
RemovePropW.USER32 ref: 002474E5
CallWindowProcW.USER32(7712D1D0,?,?,?,?), ref: 002474F4

Strings

{74F07C83-AB7B-4909-BF77-BE87C7273F6B}, xrefs: 00247499, 002474DF

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: PropWindow$CallLongProcReadRemove
String ID: {74F07C83-AB7B-4909-BF77-BE87C7273F6B}
API String ID: 1019334623-3545287619
Opcode ID: 62230ccfc454fe6395756147a79441662667a855e067ee560f358e93fc3cd986
Instruction ID: f23326d467b584118a0c4962f9f980ac6453fb477188a60f11d98b0497dec1e8
Opcode Fuzzy Hash: 62230ccfc454fe6395756147a79441662667a855e067ee560f358e93fc3cd986
Instruction Fuzzy Hash: 5EF0FF33942529BB8B215F15BC8CDBF7F3CEB96B76B540213FA10A215087219C20D6B1

Uniqueness

Uniqueness Score: -1.00%

Function 00247510, Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetPropW.USER32 ref: 0024751F
IsBadReadPtr.KERNEL32(00000000,00000004), ref: 0024752E
SetWindowLongW.USER32 ref: 00247559
RemovePropW.USER32 ref: 00247565
CallWindowProcW.USER32(7712D1D0,?,?,?,?), ref: 00247574

Strings

{22CEB27E-D1AA-4b4b-A1EA-96945DE5B3E2}, xrefs: 00247519, 0024755F

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: PropWindow$CallLongProcReadRemove
String ID: {22CEB27E-D1AA-4b4b-A1EA-96945DE5B3E2}
API String ID: 1019334623-1471426345
Opcode ID: b28c87db915507324b50999417752aa9dddfc9c0d8715aa6b94a962079937756
Instruction ID: 3a930e10b4ffc191ce27176c11ba1716990fea9d44eca9d587e9d975ba1d04bd
Opcode Fuzzy Hash: b28c87db915507324b50999417752aa9dddfc9c0d8715aa6b94a962079937756
Instruction Fuzzy Hash: 50F0FF33942519BBCB215F19BC8CDAF7B2CEB96B36B940113FE01A616087219D21D7B1

Uniqueness

Uniqueness Score: -1.00%

Function 00247590, Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetPropW.USER32 ref: 0024759F
IsBadReadPtr.KERNEL32(00000000,00000004), ref: 002475AE
SetWindowLongW.USER32 ref: 002475D9
RemovePropW.USER32 ref: 002475E5
CallWindowProcW.USER32(7712D1D0,?,?,?,?), ref: 002475F4

Strings

{0034D9EE-60D5-4ebb-9C17-0E237DF4F656}, xrefs: 00247599, 002475DF

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: PropWindow$CallLongProcReadRemove
String ID: {0034D9EE-60D5-4ebb-9C17-0E237DF4F656}
API String ID: 1019334623-3848682194
Opcode ID: 390a5be15879168747ffe5655dfdc0cb9c0cc809d80fd181ed32a6f453aa1131
Instruction ID: f614553243b69b2c3cdc5f962335cf4932c4318bc08da012baf2c7a13b70d077
Opcode Fuzzy Hash: 390a5be15879168747ffe5655dfdc0cb9c0cc809d80fd181ed32a6f453aa1131
Instruction Fuzzy Hash: 67F0FF33942519BBCB215F15BC8CDBF7B2CEB96B36B940113FE11A615087219D20D7B1

Uniqueness

Uniqueness Score: -1.00%

Function 0020DB40, Relevance: 9.2, APIs: 6, Instructions: 153windowthreadCOMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(00000000,?,?,00000000), ref: 0020DBAD
IsWindowVisible.USER32(00000001), ref: 0020DBBB
GetCurrentThreadId.KERNEL32 ref: 0020DC43
SystemParametersInfoW.USER32 ref: 0020DC7F
SystemParametersInfoW.USER32 ref: 0020DC96
SystemParametersInfoW.USER32 ref: 0020DCC9

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: InfoParametersSystem$CallbackCurrentDispatcherThreadUserVisibleWindow
String ID:
API String ID: 1409620410-0
Opcode ID: 102979bdc40045f2d19e74842bec27db3bf7f7aff2a5a2246185574ed1e391b1
Instruction ID: a1cc116da11beea86f5fb824502345ecf0e958f45179b125c27c89c0875e4c6b
Opcode Fuzzy Hash: 102979bdc40045f2d19e74842bec27db3bf7f7aff2a5a2246185574ed1e391b1
Instruction Fuzzy Hash: FD51A375622306FFEB248F90D848BAEBBA8FF04315F200559E905572D1C7B0AE64DB90

Uniqueness

Uniqueness Score: -1.00%

Function 002511E0, Relevance: 9.1, APIs: 6, Instructions: 79COMMON

Download Yara Rule

APIs

FindResourceW.KERNEL32(00000000,?,?,?,00000000,?,?,00247CB0,?,00000000,00000000,?,00000000,?), ref: 00251226
LoadResource.KERNEL32(00000000,00000000,?,00000000,?,?,00247CB0,?,00000000,00000000,?,00000000,?,?,?,?), ref: 00251239
FreeResource.KERNEL32(00000000,?,00000000,?,?,00247CB0,?,00000000,00000000,?,00000000,?,?,?,?), ref: 00251247
SizeofResource.KERNEL32(00000000,00000000,00000000,?,00000000,?,?,00247CB0,?,00000000,00000000,?,00000000,?), ref: 00251268
LockResource.KERNEL32(?,00000000,?,00000000,?,?,00247CB0,?,00000000,00000000,?,00000000,?,?,?,?), ref: 00251272

Part of subcall function 0024EC00: MultiByteToWideChar.KERNEL32(0000FDE9,00000000,?,?,00000000,00000000,00000000,?,?,?,?,00251280,00000000,?,00000000,?), ref: 0024EC4E
Part of subcall function 0024EC00: MultiByteToWideChar.KERNEL32(0000FDE9,00000000,?,00000000,00000000,00000000,?), ref: 0024EC74

FreeResource.KERNEL32(00000000,00000000,?,00000000,?,?,00247CB0,?,00000000,00000000,?,00000000,?,?,?,?), ref: 00251285

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Resource$ByteCharFreeMultiWide$FindLoadLockSizeof
String ID:
API String ID: 3711381239-0
Opcode ID: 7c5bfe8ef65b06fb7123f05809c22d435250b4a4d1ee54be9cc278218ee9afae
Instruction ID: f02a23e98f8a855cfc22988ee0a5a74f72629a4615159a0c4ced7b37882a7a09
Opcode Fuzzy Hash: 7c5bfe8ef65b06fb7123f05809c22d435250b4a4d1ee54be9cc278218ee9afae
Instruction Fuzzy Hash: 25119D72A50719ABDF10AF75AC48BAB376CEB84362F10451AFD04E7121DB319C319A64

Uniqueness

Uniqueness Score: -1.00%

Function 0020E750, Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 100windowCOMMON

Download Yara Rule

APIs

IsWindow.USER32(00000000), ref: 0020E777
GetWindowRect.USER32 ref: 0020E7E7

Part of subcall function 00218480: MoveWindow.USER32(00000000,?,?,?,0020E818,00000001,?,0020E818,?,?,?,00000000), ref: 00218494

Part of subcall function 00240AF0: IsWindow.USER32(001C0248), ref: 00240AF9
Part of subcall function 00240AF0: ShowWindow.USER32(001C0248,-00000004,?,0020D59E,00000000,00000000), ref: 00240B14

KiUserCallbackDispatcher.NTDLL(00000000), ref: 0020E833
SetFocus.USER32(00000000), ref: 0020E845

Strings

browser_page, xrefs: 0020E786

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$CallbackDispatcherFocusMoveRectShowUser
String ID: browser_page
API String ID: 3001243290-2674542326
Opcode ID: a807231e3d89ee9fb4a6f51cf1287c1c4b35089dbd2ea6bb66f478c13a7fd0e2
Instruction ID: 22ef28ca08b463d8dd2c9a411abd2ac1ce161ba01d3040fb4919b7a8cf297732
Opcode Fuzzy Hash: a807231e3d89ee9fb4a6f51cf1287c1c4b35089dbd2ea6bb66f478c13a7fd0e2
Instruction Fuzzy Hash: 7231A171A107059FCB14EFA8DC84BAEF7F9EF48305F14851AE516A72A1CB70AD90CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00240C30, Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

SetWindowLongW.USER32 ref: 00240C58
GetWindowLongW.USER32(?,000000EB), ref: 00240C7B
CallWindowProcW.USER32(?,?,?,?,?), ref: 00240C9B
SetWindowLongW.USER32 ref: 00240CAA
DefWindowProcW.USER32(?,?,?,?), ref: 00240CDB

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Long$Proc$Call
String ID:
API String ID: 1819824282-0
Opcode ID: d6d9d6c71d3e52b55801598d46abe7c51ca94fb1e29222578de00857f8769fec
Instruction ID: 5a51f35d562a7758cbdc0588ca8668c1bd906b180e1deba7c9c3cf4dcd5a1d35
Opcode Fuzzy Hash: d6d9d6c71d3e52b55801598d46abe7c51ca94fb1e29222578de00857f8769fec
Instruction Fuzzy Hash: 1A219932611514AFD7145F45ECC8F6B7BA9FF88725F00461EFA5657250C7709C50DB60

Uniqueness

Uniqueness Score: -1.00%

Function 0020CD10, Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 183COMMON

Download Yara Rule

APIs

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

PathFindFileNameW.SHLWAPI(002D46F0,00000000,?,?,?,?,?,00000010,00000000,002D46F0,000000FF), ref: 0020CDCC

Strings

CMainControl::_SwitchSkinFile, use skin %s, xrefs: 0020CE85
.ui, xrefs: 0020CE31
WdGame2Run_%s, xrefs: 0020CD64

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFindHeapNamePathProcess
String ID: .ui$CMainControl::_SwitchSkinFile, use skin %s$WdGame2Run_%s
API String ID: 1531794109-3340133399
Opcode ID: a7ff2f3ae1cf7ba4598c583d4ff44c30e8019d2f15c205c710983cff1c9aa445
Instruction ID: 5263f489db54d7ceb21d8cdc95e2a5b615b9fac9993e164165621517b4a4cedb
Opcode Fuzzy Hash: a7ff2f3ae1cf7ba4598c583d4ff44c30e8019d2f15c205c710983cff1c9aa445
Instruction Fuzzy Hash: 4551D871A0060BDFDB04DF69C945BAEF7B8FF15314F148269E425D7292EB30A924CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00231680, Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 123COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(80000002,Software\Ludashi,Setup Path,00000001,?,?), ref: 0023170D

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

Part of subcall function 001F4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,002DDAF8,?,?,?,?,001F36E1,002DDAF8,?,?,?,002DDAF8), ref: 001F4186
Part of subcall function 001F4130: FindResourceW.KERNEL32(00000000,002DDAF8,00000006,?,002DDAF8), ref: 001F41C4

Strings

Setup Path, xrefs: 002316FE
;Ay, xrefs: 002316A3, 00231811
Software\Ludashi, xrefs: 00231703

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$HeapProcessValue
String ID: ;Ay$Setup Path$Software\Ludashi
API String ID: 2870785007-3441259599
Opcode ID: 134f7c38a38c135b6b6bd383e90f53a1e99afcb3fde8d5bdcf88ddeaca2fb25a
Instruction ID: 51da0095fe365aeb12b68c43f3963dfcd4cf9d16e537e1291b72725f6dc8ed47
Opcode Fuzzy Hash: 134f7c38a38c135b6b6bd383e90f53a1e99afcb3fde8d5bdcf88ddeaca2fb25a
Instruction Fuzzy Hash: 5B41E5B0A502099BDB14EF64DC59BFEB7B4EF14704F04419DE90AA7281EB709A65CF81

Uniqueness

Uniqueness Score: -1.00%

Function 002319F0, Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 123COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(80000002,Software\LDSGameMaster,Setup Path,00000001,?,?), ref: 00231A7D

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

Part of subcall function 001F4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,002DDAF8,?,?,?,?,001F36E1,002DDAF8,?,?,?,002DDAF8), ref: 001F4186
Part of subcall function 001F4130: FindResourceW.KERNEL32(00000000,002DDAF8,00000006,?,002DDAF8), ref: 001F41C4

Strings

Setup Path, xrefs: 00231A6E
Software\LDSGameMaster, xrefs: 00231A73
;Ay, xrefs: 00231A13, 00231B81

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$HeapProcessValue
String ID: ;Ay$Setup Path$Software\LDSGameMaster
API String ID: 2870785007-571837315
Opcode ID: ca8a4a658792fa107869db4d0c2a3b7fc42266711dead6d38162dd1fb0042850
Instruction ID: 5a0d2f9e6edf699679863e00ed21e25e8d0273febf599af3381748c128478555
Opcode Fuzzy Hash: ca8a4a658792fa107869db4d0c2a3b7fc42266711dead6d38162dd1fb0042850
Instruction Fuzzy Hash: 3141F4B0A5020D9BCB14EF54DC59BFEB7B5EF14704F00419DE90AA7281EB70AA65CF81

Uniqueness

Uniqueness Score: -1.00%

Function 0022EC70, Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 123COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(80000002,Software\Microsoft\Windows\CurrentVersion\App Paths\360wpapp.exe,Path,00000001,?,?), ref: 0022ECFD

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

Part of subcall function 001F4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,002DDAF8,?,?,?,?,001F36E1,002DDAF8,?,?,?,002DDAF8), ref: 001F4186
Part of subcall function 001F4130: FindResourceW.KERNEL32(00000000,002DDAF8,00000006,?,002DDAF8), ref: 001F41C4

Strings

;Ay, xrefs: 0022EC93, 0022EE01
Path, xrefs: 0022ECEE
Software\Microsoft\Windows\CurrentVersion\App Paths\360wpapp.exe, xrefs: 0022ECF3

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$HeapProcessValue
String ID: ;Ay$Path$Software\Microsoft\Windows\CurrentVersion\App Paths\360wpapp.exe
API String ID: 2870785007-4158157973
Opcode ID: 14a7673acc87fba8b5a35dc05714959ae55960fa317d7e7425c2f8b04a112f15
Instruction ID: 462b3e3354b4c3c647a361863b60d9922ee97c4ac050f444b23ba7cda49533af
Opcode Fuzzy Hash: 14a7673acc87fba8b5a35dc05714959ae55960fa317d7e7425c2f8b04a112f15
Instruction Fuzzy Hash: 5741237065011DABCF24EFA4D859BFE77B8EF14704F00419DE90AAB291EB70AA558F81

Uniqueness

Uniqueness Score: -1.00%

Function 002309C0, Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(80000002,Software\LDSGameCenter,Setup Path,00000001,?,?), ref: 00230A4D

Part of subcall function 001F3FD0: __CxxThrowException@8.LIBVCRUNTIME ref: 001F3FE7

Strings

Setup Path, xrefs: 00230A3E
;Ay, xrefs: 00230B30
Software\LDSGameCenter, xrefs: 00230A43

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Exception@8ThrowValue
String ID: ;Ay$Setup Path$Software\LDSGameCenter
API String ID: 3195123253-1340916593
Opcode ID: e985c0d022fab875bfbe43a40d305790a73215eac1ef5d9e38934166e4a3d0b7
Instruction ID: ed3ec7c66e8199e631b371138e02ef134990de5277134a5059e768929e7f299e
Opcode Fuzzy Hash: e985c0d022fab875bfbe43a40d305790a73215eac1ef5d9e38934166e4a3d0b7
Instruction Fuzzy Hash: 2341F4B195021D9BCB14DF54DC99BEEB3B8EB14704F00419DE90AA7280EB705E95CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00222900, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 96registryCOMMON

Download Yara Rule

APIs

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

Part of subcall function 001F4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,002DDAF8,?,?,?,?,001F36E1,002DDAF8,?,?,?,002DDAF8), ref: 001F4186
Part of subcall function 001F4130: FindResourceW.KERNEL32(00000000,002DDAF8,00000006,?,002DDAF8), ref: 001F41C4

RegCreateKeyW.ADVAPI32(00000000,?,?), ref: 00222995
RegSetValueExW.KERNEL32(00000004,?,00000000,00000004,00000004,00000004,?,00000000,00000000), ref: 002229AF
RegCloseKey.ADVAPI32(?,?,00000000,00000000), ref: 002229C7

Strings

Software\Microsoft\Internet Explorer\Main\FeatureControl\, xrefs: 0022294F, 00222965

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$CloseCreateHeapProcessValue
String ID: Software\Microsoft\Internet Explorer\Main\FeatureControl\
API String ID: 4045034132-2285535824
Opcode ID: 245f4c143a63f62060656dbabc20e8eb07d30d422a484a15de97a7a06366501b
Instruction ID: 7a744506835e07402471c66f139da02c135f60a45eb771dc065480f55043acc2
Opcode Fuzzy Hash: 245f4c143a63f62060656dbabc20e8eb07d30d422a484a15de97a7a06366501b
Instruction Fuzzy Hash: CB318B71A1061AAFDB10DFA8DD05BAEB7B8EF44721F14462AF920A7290DB719914CB60

Uniqueness

Uniqueness Score: -1.00%

Function 002ADE50, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 54threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(?,;Ay,Function_000BDCFC,00000000,00225011,?), ref: 002ADE99
GetLastError.KERNEL32(?,?,?,?,?,00224F47,00000000,00000000,00225230,?,00000000,?), ref: 002ADEA5
__dosmaperr.LIBCMT ref: 002ADEAC

Strings

;Ay, xrefs: 002ADE93

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CreateErrorLastThread__dosmaperr
String ID: ;Ay
API String ID: 2744730728-2185287194
Opcode ID: 4960ad8fd68788c91380135881c9ea86e6409b141120786e550c0e71e741a393
Instruction ID: 4bb95209e5f77bf46689466231f35e4cd88e064ee9ab286306162ab1b5cfb2e8
Opcode Fuzzy Hash: 4960ad8fd68788c91380135881c9ea86e6409b141120786e550c0e71e741a393
Instruction Fuzzy Hash: CC019E3652521AAFCB15AFA1ED0599F3B6AEF96361F000469F9068A510DF719C31CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 002075AF, Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 40registrylibraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(Advapi32.dll,002D3238,LDSGameCenter,00000000,002D3238,?,0022BBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,002D3238), ref: 002075D4
GetProcAddress.KERNEL32(00000000,RegOpenKeyTransactedW), ref: 002075EB
RegOpenKeyExW.KERNEL32(82-,0002001F,00000000,?,00000000,002D3238,LDSGameCenter,00000000,002D3238,?,0022BBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,002D3238), ref: 00207624
RegCloseKey.ADVAPI32(00000000,?,0022BBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,002D3238), ref: 00207637

Strings

Advapi32.dll, xrefs: 002075CF
LDSGameCenter, xrefs: 002075BE

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressCloseHandleModuleOpenProc
String ID: Advapi32.dll$LDSGameCenter
API String ID: 823179699-2117812903
Opcode ID: 98229e975000f0f2ea2345acf2d3078abd95b5258b7b2e06dab3b4a5abee3d17
Instruction ID: 996d57caa027454566e5f6964402977564f024b6c8db810c73f2155df5c9ab1a
Opcode Fuzzy Hash: 98229e975000f0f2ea2345acf2d3078abd95b5258b7b2e06dab3b4a5abee3d17
Instruction Fuzzy Hash: C9F0C831F187029BDB148F5DDC84B66B7ACAB94301F184069EC06D7295E6B1EC20C760

Uniqueness

Uniqueness Score: -1.00%

Function 0020E880, Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 36COMMON

Download Yara Rule

APIs

SetWindowPos.USER32(?,000000FF,00000000,00000000,00000000,00000000,00000083,00000000,00000010), ref: 0020E8A2
SetWindowPos.USER32(?,000000FE,00000000,00000000,00000000,00000000,00000083), ref: 0020E8BA
SwitchToThisWindow.USER32(?,00000001), ref: 0020E8C5

Part of subcall function 00240AF0: IsWindow.USER32(001C0248), ref: 00240AF9
Part of subcall function 00240AF0: ShowWindow.USER32(001C0248,-00000004,?,0020D59E,00000000,00000000), ref: 00240B14

Part of subcall function 0020E750: IsWindow.USER32(00000000), ref: 0020E777
Part of subcall function 0020E750: GetWindowRect.USER32 ref: 0020E7E7
Part of subcall function 0020E750: KiUserCallbackDispatcher.NTDLL(00000000), ref: 0020E833
Part of subcall function 0020E750: SetFocus.USER32(00000000), ref: 0020E845

Strings

CMainWindow::_ShowWindow, xrefs: 0020E881

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$CallbackDispatcherFocusRectShowSwitchThisUser
String ID: CMainWindow::_ShowWindow
API String ID: 4044173373-875174567
Opcode ID: 66c860f09fc9362a781276363811434756de2c19b8ecfb3db6d5cbe9da87809f
Instruction ID: 1cdb98cbd222a9d8030a282ca2b2c4c2afea284d9576004145ceb345834b4e9d
Opcode Fuzzy Hash: 66c860f09fc9362a781276363811434756de2c19b8ecfb3db6d5cbe9da87809f
Instruction Fuzzy Hash: EEF058317D4B4177FA362720BC0BF68BA127B81F24F648315B3252D1E2CBE269A08B44

Uniqueness

Uniqueness Score: -1.00%

Function 0024A9E0, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 144COMMON

Download Yara Rule

APIs

GetObjectW.GDI32(00000000,00000018,;Ay), ref: 0024AB53

Part of subcall function 0023ACB0: wvsprintfW.USER32(?,?,?), ref: 0023AD62

Strings

;Ay, xrefs: 0024AB37, 0024AB3D
fade='%d', xrefs: 0024AA51

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Objectwvsprintf
String ID: ;Ay$fade='%d'
API String ID: 3597854423-772276511
Opcode ID: edd0d139054bb56aeb5ba5b2d831f8bda25681057bd13ca4abed9e65e6ff89f7
Instruction ID: 343b4238eacb8337c257c747f9aee756ca5a9934faddac6f5cfd7be1be12433e
Opcode Fuzzy Hash: edd0d139054bb56aeb5ba5b2d831f8bda25681057bd13ca4abed9e65e6ff89f7
Instruction Fuzzy Hash: CD51E371A50716ABDF19DF60CC41BEAF778FF15304F00426AE919A7281EB706AA4CF91

Uniqueness

Uniqueness Score: -1.00%

Function 00221F00, Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137COMMON

Download Yara Rule

APIs

__fread_nolock.LIBCMT ref: 00221F7C

Strings

r+b, xrefs: 00221F0F

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: __fread_nolock
String ID: r+b
API String ID: 2638373210-2113443889
Opcode ID: de181b76dae94650ad8146141c2b842085f3e471c5b206aeb9cdb39324e7b190
Instruction ID: d4f2bf7d3802e154dcdd88a02e4ebc880641623430778211ef55fb8e69f3854e
Opcode Fuzzy Hash: de181b76dae94650ad8146141c2b842085f3e471c5b206aeb9cdb39324e7b190
Instruction Fuzzy Hash: 5D415B716243107BDF309EB8EC81F2AB758AF62710F10462DF4198B682D7A1EA75C795

Uniqueness

Uniqueness Score: -1.00%

Function 00243E90, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 116COMMON

Download Yara Rule

APIs

SysFreeString.OLEAUT32(?), ref: 00243FA9

Strings

unload, xrefs: 00243F1F
onunload, xrefs: 00243F7A

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FreeString
String ID: onunload$unload
API String ID: 3341692771-3344776389
Opcode ID: 663031c00fa0f672ec79f29c86e8d7c87663cb5716be5aba63fe15da7a4c33c4
Instruction ID: f10cb2fb4fc3c1c92953456200a70075f760ff76595503d75c47f835315492e5
Opcode Fuzzy Hash: 663031c00fa0f672ec79f29c86e8d7c87663cb5716be5aba63fe15da7a4c33c4
Instruction Fuzzy Hash: 5D417C70A10646AFDB24CFA4C948BAEFBB8FF04704F204559E815AB790C7B5AA15CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00221A70, Relevance: 4.6, APIs: 3, Instructions: 141COMMON

Download Yara Rule

APIs

GetTempPathW.KERNEL32(00000104,00000010,79EB413B,00000010,00000010), ref: 00221ACB
SHCreateDirectoryExW.SHELL32(00000000,00000000,00000000,00000000,?,?), ref: 00221BAB
PathFileExistsW.SHLWAPI(00000000), ref: 00221BB2

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

Part of subcall function 001F4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,002DDAF8,?,?,?,?,001F36E1,002DDAF8,?,?,?,002DDAF8), ref: 001F4186
Part of subcall function 001F4130: FindResourceW.KERNEL32(00000000,002DDAF8,00000006,?,002DDAF8), ref: 001F41C4

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FindPathResource$CreateDirectoryExistsFileHeapProcessTemp
String ID:
API String ID: 786711630-0
Opcode ID: a4e17f7316ac97c0bf651f9b5388401629b1015fa3ec2df99c977ad81022aa9b
Instruction ID: 34917481349db527ef76a7d6abcbf747c0e8f337355abb8d21bf717e2aac0d32
Opcode Fuzzy Hash: a4e17f7316ac97c0bf651f9b5388401629b1015fa3ec2df99c977ad81022aa9b
Instruction Fuzzy Hash: DB412675A4121DABDB10EF68DC49FEE73B4EF20314F104199F915A7291EB70AE108F91

Uniqueness

Uniqueness Score: -1.00%

Function 002C2C84, Relevance: 4.6, APIs: 3, Instructions: 80COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 002C2CF7
_free.LIBCMT ref: 002C2D4D

Part of subcall function 002C2B29: _free.LIBCMT ref: 002C2B81
Part of subcall function 002C2B29: GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,002FD518), ref: 002C2B93
Part of subcall function 002C2B29: WideCharToMultiByte.KERNEL32(00000000,00000000,W. Europe Standard Time,000000FF,00000000,0000003F,00000000,?,?), ref: 002C2C0B
Part of subcall function 002C2B29: WideCharToMultiByte.KERNEL32(00000000,00000000,W. Europe Daylight Time,000000FF,?,0000003F,00000000,?), ref: 002C2C38

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ByteCharMultiWide$InformationTimeZone
String ID:
API String ID: 314583886-0
Opcode ID: 77b37a4d88eccd67da0898b1eb896fc618add85e962083371a30fa266e9b9155
Instruction ID: b40ef921080a1e41e5bbbcc835c9df3f6fa54f93bdbcf20748111da7ac74c989
Opcode Fuzzy Hash: 77b37a4d88eccd67da0898b1eb896fc618add85e962083371a30fa266e9b9155
Instruction Fuzzy Hash: B3213E72820219E7D735AB249C81FEFB77CCB55320F10035DE859A6151EFB04DA98990

Uniqueness

Uniqueness Score: -1.00%

Function 002C2F28, Relevance: 4.6, APIs: 3, Instructions: 61COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNEL32(00000000,00000000,?,?,002C2E46,?,00316868,0000000C), ref: 002C2F7E
GetLastError.KERNEL32(?,002C2E46,?,00316868,0000000C), ref: 002C2F88
__dosmaperr.LIBCMT ref: 002C2FB3

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ChangeCloseErrorFindLastNotification__dosmaperr
String ID:
API String ID: 490808831-0
Opcode ID: 07637813cf700c43bd9524f82f901ba9399044386129742f1f652a0d6cba06f5
Instruction ID: dbb1541a61f7d39007722fa77905af5a59d292374cc7c62088561958ac614daf
Opcode Fuzzy Hash: 07637813cf700c43bd9524f82f901ba9399044386129742f1f652a0d6cba06f5
Instruction Fuzzy Hash: 6001CE32A341189BC2321774A889F7E636B6F82B34F24036DF814870C2CE60CD9981D0

Uniqueness

Uniqueness Score: -1.00%

Function 002C4B5E, Relevance: 4.6, APIs: 3, Instructions: 50COMMON

Download Yara Rule

APIs

SetFilePointerEx.KERNEL32(00000000,?,00000002,?,00000000,?,?,?,?,?,002C4C0D,?,?,00000002,00000000), ref: 002C4B97
GetLastError.KERNEL32(?,002C4C0D,?,?,00000002,00000000,?,002C3826,?,00000000,00000000,00000002,?,?,?,?), ref: 002C4BA1
__dosmaperr.LIBCMT ref: 002C4BA8

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorFileLastPointer__dosmaperr
String ID:
API String ID: 2336955059-0
Opcode ID: b17b2d56ce605a68e288d99c884a0075c61af66c3b2d87500d5def085834f5e6
Instruction ID: da50d9d625e072e3c8e08521823f733d037383471745ecc1853c7cc6bd59a86d
Opcode Fuzzy Hash: b17b2d56ce605a68e288d99c884a0075c61af66c3b2d87500d5def085834f5e6
Instruction Fuzzy Hash: 22014532A305296B8B119F98DC14EAE3B2EEF81330B240349F80087180EA71DD218BD0

Uniqueness

Uniqueness Score: -1.00%

Function 00240AF0, Relevance: 4.5, APIs: 3, Instructions: 25COMMON

Download Yara Rule

APIs

IsWindow.USER32(001C0248), ref: 00240AF9
ShowWindow.USER32(001C0248,-00000004,?,0020D59E,00000000,00000000), ref: 00240B14
ShowWindow.USER32(001C0248,00000000,?,0020D59E,00000000,00000000), ref: 00240B25

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Show
String ID:
API String ID: 990937876-0
Opcode ID: ddacf527d24abf09059d0f112a9980f7d965d7a0572216ad1d1922727c32a415
Instruction ID: 8fe874998775c3273dfb50a31b691e002298c3f5d0ef0a0e483258456a5c426e
Opcode Fuzzy Hash: ddacf527d24abf09059d0f112a9980f7d965d7a0572216ad1d1922727c32a415
Instruction Fuzzy Hash: BBE0DF32500514AFE7112B28FC0DAB2BF9CEB00369B088427F996C0420DB31ED20D7A0

Uniqueness

Uniqueness Score: -1.00%

Function 00215E10, Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 177COMMON

Download Yara Rule

Strings

.ui, xrefs: 00215EEA

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: .ui
API String ID: 0-2880759479
Opcode ID: 4bca600980fc2cdd17e84fdc4a19128a83527224dd85e6c7aedf18edd77230ad
Instruction ID: 7b6adbe43dcb1f3c52dff2b061840fac43786219edb3363b570ba94f5bb93655
Opcode Fuzzy Hash: 4bca600980fc2cdd17e84fdc4a19128a83527224dd85e6c7aedf18edd77230ad
Instruction Fuzzy Hash: 0651CC71610615EFDB14DF69CC88FAEB7E8FF95320F10459DE91597290DB70AA10CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 002220B0, Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(?,;Ay,?,00000001,?,?), ref: 0022213F

Strings

;Ay, xrefs: 002220D0, 00222138

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Value
String ID: ;Ay
API String ID: 3702945584-2185287194
Opcode ID: 73dfc5352a586db9880e33967ae6bcac2edcf4657c6aac9a6d10f7816d3a6c0a
Instruction ID: 309fc87f2c6844f90fe54578803e798118ae45f35b2e777ed6d96628824ae851
Opcode Fuzzy Hash: 73dfc5352a586db9880e33967ae6bcac2edcf4657c6aac9a6d10f7816d3a6c0a
Instruction Fuzzy Hash: F811FEB5A1022CABDB10DF55DD45BEAB7BCEB44304F0040EAAB19E3241D7719EA58F94

Uniqueness

Uniqueness Score: -1.00%

Function 002C2289, Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 59COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 002C2242

Strings

;Ay, xrefs: 002C2206, 002C228B

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: __wsopen_s
String ID: ;Ay
API String ID: 3347428461-2185287194
Opcode ID: 084fcfb8a40a1faa870f2dfc93f1d99fa47869dca2433cdcc31aea0883cc2af2
Instruction ID: b5d71b88c620b53980e48dfa5c9263a67b78b34fba47d7c4b142af6e7a9ec2ea
Opcode Fuzzy Hash: 084fcfb8a40a1faa870f2dfc93f1d99fa47869dca2433cdcc31aea0883cc2af2
Instruction Fuzzy Hash: 9211587190420AAFCB05DF58E941EAE7BF8EF48310F11419AFC08AB301DA71E925CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 0021C3DC, Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 57COMMON

Download Yara Rule

APIs

Part of subcall function 0021BDF0: VariantClear.OLEAUT32(?), ref: 0021BE34
Part of subcall function 0021BDF0: VariantClear.OLEAUT32(?), ref: 0021BE59

VariantClear.OLEAUT32(?), ref: 0021CC3D

Strings

PqS, xrefs: 0021C3E8

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ClearVariant
String ID: PqS
API String ID: 1473721057-1528398380
Opcode ID: d183191300a733a509bf60d40cf961091eff33da821e2608c6d2fee55b6e3c6d
Instruction ID: 2020306ed4d5fa0647a89400d1cca0dc7e5c8f0d7551bd02ac4efd34cda96926
Opcode Fuzzy Hash: d183191300a733a509bf60d40cf961091eff33da821e2608c6d2fee55b6e3c6d
Instruction Fuzzy Hash: 3C11AF71D006498BC700DB68C818A9DF7B5EF55330F24836AE826D72D1DB34AD42CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0021C427, Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 57COMMON

Download Yara Rule

APIs

Part of subcall function 0021BDF0: VariantClear.OLEAUT32(?), ref: 0021BE34
Part of subcall function 0021BDF0: VariantClear.OLEAUT32(?), ref: 0021BE59

VariantClear.OLEAUT32(?), ref: 0021CC3D

Strings

Pf*, xrefs: 0021C433

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ClearVariant
String ID: Pf*
API String ID: 1473721057-2000932642
Opcode ID: fc221926b191b131bc22a823af0c893f604c1aaac04110c78692d86efab6b3b0
Instruction ID: b71fe957b18e536be1b5abc318ee4aeca800f128395de18f08e00cf123967533
Opcode Fuzzy Hash: fc221926b191b131bc22a823af0c893f604c1aaac04110c78692d86efab6b3b0
Instruction Fuzzy Hash: B511AF71D006098BC700DB68C808A9EF7F4EF55330F25836AE826972D1EB34AD41CF90

Uniqueness

Uniqueness Score: -1.00%

Function 001FD500, Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 37COMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(?,\NetBridge.dll,0000000E), ref: 001FD562

Strings

\NetBridge.dll, xrefs: 001FD54A

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ExistsFilePath
String ID: \NetBridge.dll
API String ID: 1174141254-1463754331
Opcode ID: 7b0bba519be9e2fb714b1b7b7234f66c92fcb78fefad1d631e0aa3cd16bd3155
Instruction ID: 774f4c826bae2a23bac77711e9c1e2e77e417e963146c694aaf7d8a43e17a0ab
Opcode Fuzzy Hash: 7b0bba519be9e2fb714b1b7b7234f66c92fcb78fefad1d631e0aa3cd16bd3155
Instruction Fuzzy Hash: ACF06DB6900258ABEB00EBA4DC45FBFB7ACFB05710F440529F510D3292DB74A9048B91

Uniqueness

Uniqueness Score: -1.00%

Function 00259090, Relevance: 3.1, APIs: 2, Instructions: 124COMMON

Download Yara Rule

APIs

IntersectRect.USER32 ref: 0025916A
IntersectRect.USER32 ref: 00259179

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: IntersectRect
String ID:
API String ID: 481094312-0
Opcode ID: 5e0ea8f81d16c633f6f3d3879fbd667883a50c1c94d16a4a9c33bee546fa1061
Instruction ID: 113ebe7c8f1cce5d86cba32d7a0be8811fec1a983e782f48d0c57bfacf03bc59
Opcode Fuzzy Hash: 5e0ea8f81d16c633f6f3d3879fbd667883a50c1c94d16a4a9c33bee546fa1061
Instruction Fuzzy Hash: DF414C72D1061ADBCF11DFA4C9409EEB7B9FF48300F148559ED49A7201EB31AEA5CB90

Uniqueness

Uniqueness Score: -1.00%

Function 002197C0, Relevance: 3.1, APIs: 2, Instructions: 83COMMON

Download Yara Rule

APIs

VariantInit.OLEAUT32(?), ref: 00219853
VariantClear.OLEAUT32(00000008), ref: 00219898

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

Part of subcall function 001F4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,002DDAF8,?,?,?,?,001F36E1,002DDAF8,?,?,?,002DDAF8), ref: 001F4186
Part of subcall function 001F4130: FindResourceW.KERNEL32(00000000,002DDAF8,00000006,?,002DDAF8), ref: 001F41C4

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResourceVariant$ClearHeapInitProcess
String ID:
API String ID: 4166881454-0
Opcode ID: 2668b9a71afef652b193798f5907356058e40627902efa543f7a56b195e23272
Instruction ID: df003bb5d10dc7943888b9119b8d3779b4e95d1527414a0af9584651647be234
Opcode Fuzzy Hash: 2668b9a71afef652b193798f5907356058e40627902efa543f7a56b195e23272
Instruction Fuzzy Hash: 8621E431E146099FCB14DFA8C805BAEB3F8EF15710F00812AF911A7380DB74AD90CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00222860, Relevance: 3.1, APIs: 2, Instructions: 57COMMON

Download Yara Rule

APIs

GetModuleFileNameW.KERNEL32(00000000,?,00000104), ref: 0022289C
PathFindFileNameW.SHLWAPI(?), ref: 002228A9

Part of subcall function 00222900: RegCreateKeyW.ADVAPI32(00000000,?,?), ref: 00222995
Part of subcall function 00222900: RegSetValueExW.KERNEL32(00000004,?,00000000,00000004,00000004,00000004,?,00000000,00000000), ref: 002229AF
Part of subcall function 00222900: RegCloseKey.ADVAPI32(?,?,00000000,00000000), ref: 002229C7

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FileName$CloseCreateFindModulePathValue
String ID:
API String ID: 1057649116-0
Opcode ID: 25453aa725b4e1ba111bbf72138c959937527164af0463432ee4566585fc392e
Instruction ID: e10b67e6e2bba5afc7eddaf2fc3ef7ce50b93e7b5d5cb85fa164a2abc61018d7
Opcode Fuzzy Hash: 25453aa725b4e1ba111bbf72138c959937527164af0463432ee4566585fc392e
Instruction Fuzzy Hash: B00196B5D0121CBBDB10AFA4AC4AFAE776CDB08355F5041A5FD1C96143EA329E248B91

Uniqueness

Uniqueness Score: -1.00%

Function 002C1266, Relevance: 3.0, APIs: 2, Instructions: 44memoryCOMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 002C1287

Part of subcall function 002C01B0: RtlAllocateHeap.NTDLL(00000000,?,00000000,?,002C6929,00000000,?,?,002AC193,?,00000008,?,002BB90E,00000000,00000000), ref: 002C01E2

RtlReAllocateHeap.NTDLL(00000000,?,?,00000004,00000000,?,002AB70F,?,00000004,00000000,?,?,?,002BD5A0,?,00000000), ref: 002C12C3

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateHeap$_free
String ID:
API String ID: 1482568997-0
Opcode ID: 0c7a4bc71c04ec794b2326a12fd4defbbe81152b87152b372036f74fd45c52f1
Instruction ID: 474b975053c9e0102d78e92830bda4acc9c6c262d9dc7feaee73a8ae37f3dc1f
Opcode Fuzzy Hash: 0c7a4bc71c04ec794b2326a12fd4defbbe81152b87152b372036f74fd45c52f1
Instruction Fuzzy Hash: 78F0C835630136AADB312E2A9C02FAB371D9F83770F14431EFC18D6192DF7498309962

Uniqueness

Uniqueness Score: -1.00%

Function 00294920, Relevance: 3.0, APIs: 2, Instructions: 41COMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBVCRUNTIME ref: 00295895

Part of subcall function 002A3827: RaiseException.KERNEL32(?,?,002360BB,?,0031A044,?,0000000F,?,?,?,?,002360BB,?,00313034,?), ref: 002A3887

__CxxThrowException@8.LIBVCRUNTIME ref: 002958B2

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Exception@8Throw$ExceptionRaise
String ID:
API String ID: 3476068407-0
Opcode ID: be54a4ab5350eacfaffea67e00e358f77e756c7f414f9e36313e958dcd812186
Instruction ID: 0763d6de2a28fe681ad4a20a4cbd7af563fb66248e8238d65efa0af8eeb77f80
Opcode Fuzzy Hash: be54a4ab5350eacfaffea67e00e358f77e756c7f414f9e36313e958dcd812186
Instruction Fuzzy Hash: 53F0906092460E7ACF05BAB5EC4AC9E736C6E02350F504230BD2496496EF70DAB6CAD0

Uniqueness

Uniqueness Score: -1.00%

Function 002ADCFC, Relevance: 3.0, APIs: 2, Instructions: 38threadCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(00316398,00000010), ref: 002ADD0F
ExitThread.KERNEL32 ref: 002ADD16

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorExitLastThread
String ID:
API String ID: 1611280651-0
Opcode ID: 58885d2bd47a202d7ecc9a2107606f92c1a8919251b104adfabcf5c2b9c3db6f
Instruction ID: fd803a05e09a32d8146dbd5132ab7aa375a8bb964547a1bc9d4e87cf714ec1f9
Opcode Fuzzy Hash: 58885d2bd47a202d7ecc9a2107606f92c1a8919251b104adfabcf5c2b9c3db6f
Instruction Fuzzy Hash: EEF0AF71950605AFDB04AFB0D80ABAD7774EF45711F20414AF4065B6A2CF31AD61CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 002446F0, Relevance: 1.7, APIs: 1, Instructions: 180COMMON

Download Yara Rule

APIs

_com_issue_error.COMSUPP ref: 002448D9

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: _com_issue_error
String ID:
API String ID: 2162355165-0
Opcode ID: a2f393577af829c5d19ad4fc268501e378627368b625d34258f45f65944df189
Instruction ID: 343d7dff4e4ad84ea91711cd3744b294df2fbe489b00f592c504a642287a5597
Opcode Fuzzy Hash: a2f393577af829c5d19ad4fc268501e378627368b625d34258f45f65944df189
Instruction Fuzzy Hash: CB51D171E10249EFDB14DF98C944BAEFBB8EF89710F148159E805AB380D735AE10CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0020E360, Relevance: 1.6, APIs: 1, Instructions: 140COMMON

Download Yara Rule

APIs

DestroyWindow.USER32(00000000), ref: 0020E41F

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: DestroyWindow
String ID:
API String ID: 3375834691-0
Opcode ID: 4c37ad6cb2d9f306e0cc93fa756f91460fa0cb62ec01953afd9ade672275b522
Instruction ID: d6d00042678668b7ad93acad50e404e5701e49c66715221250cb9b509189650d
Opcode Fuzzy Hash: 4c37ad6cb2d9f306e0cc93fa756f91460fa0cb62ec01953afd9ade672275b522
Instruction Fuzzy Hash: 3051BC71610B0AAFDB14DF68CC45BAAB7A8FF40320F108A6DE436972D2DB71A914CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00221760, Relevance: 1.6, APIs: 1, Instructions: 92COMMON

Download Yara Rule

APIs

GetModuleFileNameW.KERNEL32(001F0000,?,00000104,79EB413B,?,?), ref: 002217BD

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

Part of subcall function 001F4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,002DDAF8,?,?,?,?,001F36E1,002DDAF8,?,?,?,002DDAF8), ref: 001F4186
Part of subcall function 001F4130: FindResourceW.KERNEL32(00000000,002DDAF8,00000006,?,002DDAF8), ref: 001F41C4

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$FileHeapModuleNameProcess
String ID:
API String ID: 3971721318-0
Opcode ID: 3621a21bb3b6e8f674ac33273467fe8b91eb0296edbaa1daf1d4d674c8bf60ac
Instruction ID: e8f2c3bab4d093ca2902ec3870dc6dd39ecd02f29bec4aba8741501284f3bedb
Opcode Fuzzy Hash: 3621a21bb3b6e8f674ac33273467fe8b91eb0296edbaa1daf1d4d674c8bf60ac
Instruction Fuzzy Hash: 4E31E87194011DABDB14DF54DC49FEEB7B8EF14310F1042AAE91997281DB706E15CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0023C4A0, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

DeleteObject.GDI32(00000000), ref: 0023C543

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: DeleteObject
String ID:
API String ID: 1531683806-0
Opcode ID: a0a5b37573c9e26761ae93ee9acd83d3e10fe411a51577d70dc038758df1af66
Instruction ID: 8fcdd48f6021621a5790ad3ef271fe6938d242fa520dd365fb0454a806404985
Opcode Fuzzy Hash: a0a5b37573c9e26761ae93ee9acd83d3e10fe411a51577d70dc038758df1af66
Instruction Fuzzy Hash: 7421CBB1A21315BBCB209F65DC42FAB7798EF45750F500429FD09EB241EA71ED24CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 001FA0B0, Relevance: 1.6, APIs: 1, Instructions: 57COMMON

Download Yara Rule

APIs

Part of subcall function 00238AC1: EnterCriticalSection.KERNEL32(0032148C,002DDAF8,?,?,001F4161,00000000,002DDAF8,?,?,?,?,001F36E1,002DDAF8,?,?,?), ref: 00238ACC
Part of subcall function 00238AC1: LeaveCriticalSection.KERNEL32(0032148C,?,001F4161,00000000,002DDAF8,?,?,?,?,001F36E1,002DDAF8,?,?,?,002DDAF8,002D1BE8), ref: 00238AF8

FindResourceExW.KERNEL32(00000000,00000006,00000000,?,00000000,?,?,00000000,00000000,?,0022E72B,?,00000000,?,00000000,?), ref: 001FA0E7

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalSection$EnterFindLeaveResource
String ID:
API String ID: 2190064429-0
Opcode ID: b22bbe593168e99137b2cd2830852a8a3c61cc22b9df5659abae32dd3818640d
Instruction ID: 8596259cc6dc86c748632af259101b8c534f6df63f90057a5d9dadc24ab1067e
Opcode Fuzzy Hash: b22bbe593168e99137b2cd2830852a8a3c61cc22b9df5659abae32dd3818640d
Instruction Fuzzy Hash: 4B0126B2B4512827E7205A5A7C41B7BB7ACDF81760F450176FF0DCB340D6218C0146E1

Uniqueness

Uniqueness Score: -1.00%

Function 0020D4D0, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

IsWindow.USER32(001C0248), ref: 0020D4FA

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Window
String ID:
API String ID: 2353593579-0
Opcode ID: 88321a930636e74269c37c808f1bff6803d4faadf6cc94320ff0066c7cd41525
Instruction ID: 7c917e469cb33835c027c90821cfe6d3a9268ea30a8623e35efc2d45f8100930
Opcode Fuzzy Hash: 88321a930636e74269c37c808f1bff6803d4faadf6cc94320ff0066c7cd41525
Instruction Fuzzy Hash: 1F11C271A02715AFD710CF95DD05B5BBBA8EF09B24F00426AE815977C0DBB5A910CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00280D20, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetVersion.KERNEL32(?,?,?,00259258), ref: 00280D2D

Part of subcall function 00280DA0: CoCreateInstance.OLE32(00305E50,00000000,00000001,002F47E4,00000008,?,00000000,?,00280D4F,00259258), ref: 00280DE4

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CreateInstanceVersion
String ID:
API String ID: 1462612201-0
Opcode ID: 351d5bec3bf47787c6ec0219b702fa8b91923906b607d350571b2aa938f337d4
Instruction ID: 93ad3c134f955f7ff1ee5b52fa17dfa48bc8e84c041104b1628411fd3cfcaef7
Opcode Fuzzy Hash: 351d5bec3bf47787c6ec0219b702fa8b91923906b607d350571b2aa938f337d4
Instruction Fuzzy Hash: 7D01DBB1A212055FDB90AF9CE805756B7E8DB00315F0441BDD94CCB392F7B1D8248BD1

Uniqueness

Uniqueness Score: -1.00%

Function 002AE2A2, Relevance: 1.5, APIs: 1, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4e2a4191501faa05ba5fbe44928932b585b3ee39623e02d1807a582e04eb67d
Instruction ID: f3f2332c1c79e777379f2389565506abffc0fa51dab7b8d6210205ea377d5df1
Opcode Fuzzy Hash: b4e2a4191501faa05ba5fbe44928932b585b3ee39623e02d1807a582e04eb67d
Instruction Fuzzy Hash: 71F0A93293562497DE317A298C05B6A36989F83334F150B19F824931D1CFB498278A95

Uniqueness

Uniqueness Score: -1.00%

Function 002C11D6, Relevance: 1.5, APIs: 1, Instructions: 39memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,002C0055,00000001,00000364,?,002ADD21,00316398,00000010), ref: 002C1217

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 63c49b0f8a648485e0ad989ce5efde6edad56e55769c2b96e8eedbcc96e962d3
Instruction ID: bfc8cf7c44caf5bb1ce6802675571ac860e84f65a67070d1438a9ac8d2e74819
Opcode Fuzzy Hash: 63c49b0f8a648485e0ad989ce5efde6edad56e55769c2b96e8eedbcc96e962d3
Instruction Fuzzy Hash: 5DF02436A34531679B251E62AC06F9A7749AF477B0B18821AAC08D7196CA70D8308AE2

Uniqueness

Uniqueness Score: -1.00%

Function 00222F00, Relevance: 1.5, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

SHSetValueW.SHLWAPI(00000000,00000000,00000000,00000001,002DDAF8,002DDAFA,?,0022E622,80000002,Software\LDSGameCenterExtra,LastRunVer), ref: 00222F50

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: 4a9bd01e06c8c2654a9841795f629ce0c2b2e6ee0f3389a0d294bf40f04a5c43
Instruction ID: 8d89e8d0451e97c60729ad023d240c25b2ca080e0f71d351eceee744f44cbd1d
Opcode Fuzzy Hash: 4a9bd01e06c8c2654a9841795f629ce0c2b2e6ee0f3389a0d294bf40f04a5c43
Instruction Fuzzy Hash: 0CF04F3512420AEFDF249FA4E908BB637F9EB45709F048069FC19869A0D372DD76CB50

Uniqueness

Uniqueness Score: -1.00%

Function 002160C0, Relevance: 1.5, APIs: 1, Instructions: 36COMMON

Download Yara Rule

APIs

Part of subcall function 002401F0: GetClassInfoExW.USER32 ref: 0024022B
Part of subcall function 002401F0: GetClassInfoExW.USER32 ref: 00240247
Part of subcall function 002401F0: RegisterClassExW.USER32 ref: 00240278
Part of subcall function 002401F0: GetLastError.KERNEL32 ref: 00240283
Part of subcall function 002401F0: LoadCursorW.USER32(00000000,00007F00), ref: 002402E8
Part of subcall function 002401F0: RegisterClassW.USER32 ref: 0024030D
Part of subcall function 002401F0: GetLastError.KERNEL32 ref: 00240318

SetWindowPos.USER32(?,?,00000000,00000000,00000000,00000000,00000003,00000000,002DDAF8,90000000,08000000,FFFFD8F1,FFFFD8F1,00000000,00000000,00000000), ref: 0021611D

Part of subcall function 00240870: GetClientRect.USER32(00000000,?), ref: 00240891
Part of subcall function 00240870: GetWindowLongW.USER32(00000000,000000F0), ref: 002408C8
Part of subcall function 00240870: GetMenu.USER32(00000000), ref: 002408D4
Part of subcall function 00240870: GetWindowLongW.USER32(00000000,000000EC), ref: 002408EC
Part of subcall function 00240870: GetWindowLongW.USER32(00000000,000000F0), ref: 002408F5
Part of subcall function 00240870: AdjustWindowRectEx.USER32(?,00000000), ref: 002408FC
Part of subcall function 00240870: SetWindowPos.USER32(00000000,00000000,00000000,00000000,00000016,?,00000016), ref: 00240921

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Class$Long$ErrorInfoLastRectRegister$AdjustClientCursorLoadMenu
String ID:
API String ID: 2036137914-0
Opcode ID: 7a1e485ac1bf03737b117157fa402de8b4d5f33e88fac9eb74909bd843fd31f9
Instruction ID: 79cb30c4fdf6967344f508f96e8836808b1fb961596e611d7d6aa2bf3f8b7830
Opcode Fuzzy Hash: 7a1e485ac1bf03737b117157fa402de8b4d5f33e88fac9eb74909bd843fd31f9
Instruction Fuzzy Hash: 5FF054313807157BDF366A51DC03F9A3B55AF10B50F204015B796391E0CAA17970DA9C

Uniqueness

Uniqueness Score: -1.00%

Function 002C01B0, Relevance: 1.5, APIs: 1, Instructions: 32memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,?,00000000,?,002C6929,00000000,?,?,002AC193,?,00000008,?,002BB90E,00000000,00000000), ref: 002C01E2

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 75cbbe07c9e357599ba7b608e8ebe74380a62eb4019764cac98326bf97184c39
Instruction ID: 89d05849b5d4ef5540fda95f52147fd88ef42c602158079d24e0972b6b67a122
Opcode Fuzzy Hash: 75cbbe07c9e357599ba7b608e8ebe74380a62eb4019764cac98326bf97184c39
Instruction Fuzzy Hash: 41E0E531531666D7D7222E659C88F9EBA899B017E0F1D0319EC19E3190CBE0CD6089A0

Uniqueness

Uniqueness Score: -1.00%

Function 00280DA0, Relevance: 1.5, APIs: 1, Instructions: 24comCOMMON

Download Yara Rule

APIs

CoCreateInstance.OLE32(00305E50,00000000,00000001,002F47E4,00000008,?,00000000,?,00280D4F,00259258), ref: 00280DE4

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CreateInstance
String ID:
API String ID: 542301482-0
Opcode ID: bc3db533eb7b112b54b2e26e5fe539f149f7a9242d631b8a3f4e063be050a3d9
Instruction ID: 54b3bfb59b6a29e703753c12b459642e675facfb43187c910e2dc3aed1b791f5
Opcode Fuzzy Hash: bc3db533eb7b112b54b2e26e5fe539f149f7a9242d631b8a3f4e063be050a3d9
Instruction Fuzzy Hash: 5EE06DB0511704ABE3209F01DC09B93FBE8EB01B24F00455EE9994B680C3F5A9088BD0

Uniqueness

Uniqueness Score: -1.00%

Function 002403B0, Relevance: 1.5, APIs: 1, Instructions: 16COMMON

Download Yara Rule

APIs

CallWindowProcW.USER32(00000000,00000000,?,?,00000000), ref: 002403D1

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CallProcWindow
String ID:
API String ID: 2714655100-0
Opcode ID: d70cec89045a2f8de20ddb7cc0845f9d77b76d3d304a3e9c117f4bf024647901
Instruction ID: 6799476bd756f9f909ef83adeda244637eb0b1cd9056c5c042e620f5c6120a30
Opcode Fuzzy Hash: d70cec89045a2f8de20ddb7cc0845f9d77b76d3d304a3e9c117f4bf024647901
Instruction Fuzzy Hash: 41D06732144108EF8B129F88EC44C6A7FA9EB243157548459F50885521D333E8B2EB60

Uniqueness

Uniqueness Score: -1.00%

Function 002CC932, Relevance: 1.5, APIs: 1, Instructions: 15fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,00000000,?,002CCC9C,?,?,00000000,?,002CCC9C,00000000,0000000C), ref: 002CC94F

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 2121d783156b6a56a9df6f571dfe059cf12a22eb7f3d7f119650e9c4083699dc
Instruction ID: b51de8b931304e9e1854f5e6cf92058e96aef1d8c63d6b8d1475515849529ea7
Opcode Fuzzy Hash: 2121d783156b6a56a9df6f571dfe059cf12a22eb7f3d7f119650e9c4083699dc
Instruction Fuzzy Hash: C8D06C3204014DBBDF028F84EC06EDA3BAAFB48714F014000BA1856020C732E821AB90

Uniqueness

Uniqueness Score: -1.00%

Function 00221C30, Relevance: 1.5, APIs: 1, Instructions: 13COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNEL32 ref: 00221C33

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: 2ac899ed9dd2299ab63875983f696529e760e5e682db0250f983047137486e81
Instruction ID: 0041118c2a56c84a5e6fc9f3e6289a2ddac071dcb9dc955b44da5eb5fbdf65ff
Opcode Fuzzy Hash: 2ac899ed9dd2299ab63875983f696529e760e5e682db0250f983047137486e81
Instruction Fuzzy Hash: 59C08C332A0E0F0BE7444AB8EC05720731AC780730F848320792EC67D0EA74D8408640

Uniqueness

Uniqueness Score: -1.00%

Function 00240850, Relevance: 1.5, APIs: 1, Instructions: 9windowCOMMON

Download Yara Rule

APIs

PostMessageW.USER32(00000005,?,0022D76B,?), ref: 0024085F

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: MessagePost
String ID:
API String ID: 410705778-0
Opcode ID: 90027ec406ab38362cfd34326fc2b731b401ba21ac454a039ecd58b4887adc04
Instruction ID: 70120135ea04282e2c56aac66101d9bc79e91931e4ce28a7a0be02e3dff50e6b
Opcode Fuzzy Hash: 90027ec406ab38362cfd34326fc2b731b401ba21ac454a039ecd58b4887adc04
Instruction Fuzzy Hash: 3CC00136001208FBCF026F81ED09C9ABF2AEB19264B44801AFA180802187339931AB90

Uniqueness

Uniqueness Score: -1.00%

Function 001F3F10, Relevance: 1.5, APIs: 1, Instructions: 8memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,00000000,?), ref: 001F3F1B

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 74dbcfc1bec8bfa4cd6bc66b7d5a12890c981dfc2e01545b642514fd530ab5af
Instruction ID: 4a760875ecea40d4a68dc4aef8b6038e304404bfc0655d62df4874ce0d40792a
Opcode Fuzzy Hash: 74dbcfc1bec8bfa4cd6bc66b7d5a12890c981dfc2e01545b642514fd530ab5af
Instruction Fuzzy Hash: 75B09236480208BBCB011F81EC0AF95BF29EB15750F648062F608080628773A821AA99

Uniqueness

Uniqueness Score: -1.00%

Function 0021DAF0, Relevance: 1.3, APIs: 1, Instructions: 89COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(79EB413B,?,?,?,?,?,002D5A80,000000FF), ref: 0021DB28

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: 3d0f8a030b13310a41e541209aea70d63a78cabf1f05758520f01d4c8beb7927
Instruction ID: c62395496e6fde2fe37bb5bed4724cb7840af9a255841a2b30ba57cb11ab3c42
Opcode Fuzzy Hash: 3d0f8a030b13310a41e541209aea70d63a78cabf1f05758520f01d4c8beb7927
Instruction Fuzzy Hash: 3B31F572618609DFDB14CF18D841BEAB7E4FB94724F11826FEC1687380D736A960CB90

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00225040, Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 81threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00225056

Strings

CWorkThread::Stop, wait thread stop timeout, %d, xrefs: 002250F1

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CurrentThread
String ID: CWorkThread::Stop, wait thread stop timeout, %d
API String ID: 2882836952-1075796771
Opcode ID: e8b36f14f365ece962cf7fd436998c99c22a38cde004f65201f9a871a7be987b
Instruction ID: 2902c7bf70d6c88ea761357c7679c4799f23494fb1ab968787701f8d1b9cbb47
Opcode Fuzzy Hash: e8b36f14f365ece962cf7fd436998c99c22a38cde004f65201f9a871a7be987b
Instruction Fuzzy Hash: 4621E230611B26BBE7309FA4FC48B5677D8AB14710F20C42AF048D6190DBB1EC90CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0021E030, Relevance: 16.6, APIs: 11, Instructions: 112threadmemoryprocessCOMMON

Download Yara Rule

APIs

CreateToolhelp32Snapshot.KERNEL32 ref: 0021E05E
Thread32First.KERNEL32 ref: 0021E07A
GetCurrentProcessId.KERNEL32(00000000,?,00000004,00000000,00000000,?,00000000), ref: 0021E096
GetCurrentThreadId.KERNEL32 ref: 0021E09D
HeapAlloc.KERNEL32(?,00000200), ref: 0021E0C1
HeapReAlloc.KERNEL32(00000000,?,00000000), ref: 0021E0E6
Thread32Next.KERNEL32 ref: 0021E114
CloseHandle.KERNEL32(00000000,00000000,?,00000004,00000000,00000000,?,00000000), ref: 0021E122
OpenThread.KERNEL32(0000005A,00000000,00000000,00000004,00000000,00000000,?,00000000,?,?,0021DE7C,?,00000000,00000001,?,745FB7C0), ref: 0021E13D
SuspendThread.KERNEL32(00000000,?,?,0021DE7C,?,00000000,00000001,?,745FB7C0), ref: 0021E14A
CloseHandle.KERNEL32(00000000,?,?,?,?,?,0021DE7C,?,00000000,00000001,?,745FB7C0), ref: 0021E160

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Thread$AllocCloseCurrentHandleHeapThread32$CreateFirstNextOpenProcessSnapshotSuspendToolhelp32
String ID:
API String ID: 999149816-0
Opcode ID: 282f4782dacdc38af51783dc3ccddac799416f177eaf9eb946fc9e0af82c78af
Instruction ID: 915012ceee58426c20465c550db831a171252ee9b9cd9582b9b89d1d5b9071ce
Opcode Fuzzy Hash: 282f4782dacdc38af51783dc3ccddac799416f177eaf9eb946fc9e0af82c78af
Instruction Fuzzy Hash: 06419D74A10706EBDF209F64DC88BAAB7F9FF59700F21842DE859A2291D771AC91CF11

Uniqueness

Uniqueness Score: -1.00%

Function 002B61D0, Relevance: 7.5, APIs: 2, Strings: 2, Instructions: 464COMMON

Download Yara Rule

Strings

y_+, xrefs: 002B6638, 002B6422, 002B62B1
y_+, xrefs: 002B61ED, 002B6398, 002B65BC, 002B6556, 002B63E6, 002B6374

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: y_+$y_+
API String ID: 0-1253719516
Opcode ID: 29e5f6c41ffa0866baa120815184587225c467bf0a8298443b519430ee4ab3c6
Instruction ID: f1d6431cf8136c78f5ed9db1e2688c01cbe4061ca323378a4265c84b6340b9af
Opcode Fuzzy Hash: 29e5f6c41ffa0866baa120815184587225c467bf0a8298443b519430ee4ab3c6
Instruction Fuzzy Hash: D0025C71E102199FDF24CFA8C8846EEB7F5FF48364F258169D819E7384D734AA518B80

Uniqueness

Uniqueness Score: -1.00%

Function 002042B3, Relevance: 6.1, APIs: 4, Instructions: 60filestringCOMMON

Download Yara Rule

APIs

SetFileAttributesW.KERNEL32 ref: 002042BC
lstrlenW.KERNEL32(?), ref: 002042F0
FindFirstFileW.KERNEL32(?,?), ref: 00204336
FindClose.KERNEL32(00000000), ref: 0020454E

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFind$AttributesCloseFirstlstrlen
String ID:
API String ID: 2695905019-0
Opcode ID: 9359a57064602652083d9cb74924c6d318b9fa2f7d7efea63fba357f5f9ccaff
Instruction ID: 365a5f240a031720681d5d23c85811254d80cff3b2f91b757dcb0bd8aa246050
Opcode Fuzzy Hash: 9359a57064602652083d9cb74924c6d318b9fa2f7d7efea63fba357f5f9ccaff
Instruction Fuzzy Hash: 962178F1E116189BDB10EF64DC4879DB7B8EB08314F5045D6FA29E32C2DB349A948F54

Uniqueness

Uniqueness Score: -1.00%

Function 0028F2B0, Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2c183488eca160c0c3ca54c1cb7c39c93a4362115199bc45144586ccc0ff5b8
Instruction ID: ff974b0d7155f929de7f0684362f4c62a50a1ff28786ac63591760be2942e6b6
Opcode Fuzzy Hash: d2c183488eca160c0c3ca54c1cb7c39c93a4362115199bc45144586ccc0ff5b8
Instruction Fuzzy Hash: 1BF062F5517616EBC704EF58E484296FBE8FB41324F05C259DA1C8B281D3716474CBD9

Uniqueness

Uniqueness Score: -1.00%

Function 00202280, Relevance: 42.5, APIs: 11, Strings: 13, Instructions: 495COMMON

Download Yara Rule

APIs

PathIsDirectoryW.SHLWAPI(00000010), ref: 00202305
PathFileExistsW.SHLWAPI(00000010,?,?,?), ref: 00202340

Strings

\Utils\CefHelper.dll, xrefs: 00202810
\cefview.exe, xrefs: 0020267D
\Utils\7z.dll, xrefs: 002025CF
', xrefs: 00202C0B
\NetBridge.dll, xrefs: 0020252C
weiduan, xrefs: 00202955, 00202C66
\cef, xrefs: 0020266B
res_down_success, xrefs: 00202950
\Utils\helper.zip, xrefs: 00202757
wd_show_overtime, xrefs: 00202C61
_InstallFiles, CInstallres::download() failed, xrefs: 00202C7F
\Utils, xrefs: 002025A9, 00202769
\cefhelper.dll, xrefs: 0020279B

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Path$DirectoryExistsFile
String ID: '$\NetBridge.dll$\Utils$\Utils\7z.dll$\Utils\CefHelper.dll$\Utils\helper.zip$\cef$\cefhelper.dll$\cefview.exe$_InstallFiles, CInstallres::download() failed$res_down_success$wd_show_overtime$weiduan
API String ID: 1302732169-4027753242
Opcode ID: f880e084dcac89cd2122fcfcc79c23f2ce98cbc7af6663fb13f1832953f6090b
Instruction ID: ca7d6c4fcb0e70feac08ec6f7ac462d3ff8e8daf2a68e1d5ea0cdd3cda929d7e
Opcode Fuzzy Hash: f880e084dcac89cd2122fcfcc79c23f2ce98cbc7af6663fb13f1832953f6090b
Instruction Fuzzy Hash: 2112C170D00249DFDB00EFB8DD49B9EBBB8AF15314F144169E414E7292EB74DA19CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0021B010, Relevance: 37.2, APIs: 4, Strings: 17, Instructions: 422COMMON

Download Yara Rule

APIs

ShowWindow.USER32(?,00000006,min), ref: 0021B111
ShellExecuteW.SHELL32(00000000,open,00000010,00000000,00000000,00000005), ref: 0021B405
ShellExecuteW.SHELL32(00000000,open,?,00000000,00000000,00000005), ref: 0021B601

Strings

kefu, xrefs: 0021B298, 0021B32A
min, xrefs: 0021B0E1, 0021B13F
click, xrefs: 0021B04B
{game_id}, xrefs: 0021B5CE
restore, xrefs: 0021B206, 0021B263
max, xrefs: 0021B174, 0021B1D1
tray, xrefs: 0021B647
link, xrefs: 0021B062
{server_id}, xrefs: 0021B5E4
to_tray, xrefs: 0021B6AA
site, xrefs: 0021B514, 0021B578
close, xrefs: 0021B091
open, xrefs: 0021B2F1, 0021B3F7, 0021B5FA
charge, xrefs: 0021B45B, 0021B4BB
shouye, xrefs: 0021B3A2, 0021B430
CPlayWindow::_DoSite, siteUrlFmt='%s', xrefs: 0021B5B5
CPlayWindow::_DoCharge, chargeUrlFmt='%s', xrefs: 0021B4F8

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ExecuteShell$ShowWindow
String ID: CPlayWindow::_DoCharge, chargeUrlFmt='%s'$CPlayWindow::_DoSite, siteUrlFmt='%s'$charge$click$close$kefu$link$max$min$open$restore$shouye$site$to_tray$tray${game_id}${server_id}
API String ID: 2421332015-1834362062
Opcode ID: 25ce3e629eef0beb0ff57d96d2cecf43cc0da7d8bc338e2a71d97c36fcd04f45
Instruction ID: d2fb250f9b79587fefc763b05b8a09714f5de6f8fd2bf8767ff7950cf8e8cd2e
Opcode Fuzzy Hash: 25ce3e629eef0beb0ff57d96d2cecf43cc0da7d8bc338e2a71d97c36fcd04f45
Instruction Fuzzy Hash: 3C028D70A60214AFDB14EF64CD16BDDB7F1AF49714F104288B1296B2E2DBB06A65CF81

Uniqueness

Uniqueness Score: -1.00%

Function 00222260, Relevance: 37.0, APIs: 18, Strings: 3, Instructions: 300filewindowCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(00201BFD,40000000,00000001,00000000,00000002,00000000,00000000,?), ref: 00222290
WriteFile.KERNEL32(00000000,?,00000006,?,00000000,?,?), ref: 002222E0
GetIconInfo.USER32(?,?), ref: 00222330
GetDC.USER32(00000000), ref: 00222340
GetDIBits.GDI32(00000000,?,00000000,00000001,00000000,?,00000000), ref: 0022238C
SetFilePointer.KERNEL32(00000000,?,00000000,00000000), ref: 00222411

Strings

(, xrefs: 002224DB
(, xrefs: 0022243B
(, xrefs: 00222364

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: File$BitsCreateIconInfoPointerWrite
String ID: ($($(
API String ID: 3469908135-3938514357
Opcode ID: a817c565207ed0e06dfe082ed017e1db0e4a55c960de43d91247271c45b3dfd8
Instruction ID: 4c9f6576b581469fc7962a487b47ea4a85b868b20b7fc1a4785bd48d23a50f1c
Opcode Fuzzy Hash: a817c565207ed0e06dfe082ed017e1db0e4a55c960de43d91247271c45b3dfd8
Instruction Fuzzy Hash: 1BC15571D10659EAEF20CFA4DC49BEDB7B9FF59304F108219F508AA191EB71AA94CB10

Uniqueness

Uniqueness Score: -1.00%

Function 001F5100, Relevance: 33.7, APIs: 5, Strings: 14, Instructions: 474COMMON

Download Yara Rule

APIs

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

GetWindowRect.USER32 ref: 001F536B
MoveWindow.USER32(?,?,?,00000000,00000000,00000001), ref: 001F5384

Strings

GotoMainTab, xrefs: 001F5643
ResizeBrowser, xrefs: 001F5205
GetVersion, xrefs: 001F5461
Unknown, xrefs: 001F5172, 001F51A4
ResizeWindow, xrefs: 001F52F5
EnableWindow, xrefs: 001F5397
browser_titlebar, xrefs: 001F5618
CloseWindow, xrefs: 001F53E5
parent-center, xrefs: 001F52A3
browser_title, xrefs: 001F5575
ShowWindow, xrefs: 001F51B7
CloseMainWindow, xrefs: 001F5441
SetWindowTitle, xrefs: 001F5527
ShowTitleBar, xrefs: 001F55E3

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$HeapMoveProcessRect
String ID: CloseMainWindow$CloseWindow$EnableWindow$GetVersion$GotoMainTab$ResizeBrowser$ResizeWindow$SetWindowTitle$ShowTitleBar$ShowWindow$Unknown$browser_title$browser_titlebar$parent-center
API String ID: 212485854-3548442536
Opcode ID: 39aaf13d0b41090e3eac7116caaab32bf8a21ba8bcf81a0a716df7cf9bfd011a
Instruction ID: dbfa8b40cd90b523e84eef3f483ad0ca85c59a236a59367b09a8054cd3d5618d
Opcode Fuzzy Hash: 39aaf13d0b41090e3eac7116caaab32bf8a21ba8bcf81a0a716df7cf9bfd011a
Instruction Fuzzy Hash: AC02D130D0060CABDB14EFA4EC45BFDB7BAAF05324F544169FA14AB292EB70AD55CB50

Uniqueness

Uniqueness Score: -1.00%

Function 001FC170, Relevance: 28.2, APIs: 8, Strings: 8, Instructions: 176libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 001FC890: GetCurrentThread.KERNEL32 ref: 001FC8EC
Part of subcall function 001FC890: OpenThreadToken.ADVAPI32(00000000,?,?,00000000,\..\360wpapp.exe,79EB413B), ref: 001FC8F3
Part of subcall function 001FC890: GetTokenInformation.ADVAPI32(00000000,00000002,00000000,00000000,00000000,?,?,00000000,\..\360wpapp.exe), ref: 001FC95C
Part of subcall function 001FC890: GetLastError.KERNEL32(?,?,00000000,\..\360wpapp.exe), ref: 001FC96F
Part of subcall function 001FC890: GetTokenInformation.ADVAPI32(00000000,00000002,00000000,00000000,00000000,?), ref: 001FC9A6
Part of subcall function 001FC890: AllocateAndInitializeSid.ADVAPI32(00000000,00000002,00000020,00000220,00000000,00000000,00000000,00000000,00000000,00000000,?), ref: 001FC9DE

LoadLibraryW.KERNEL32(?,002E2604,?,00000107), ref: 001FC2C1
GetProcAddress.KERNEL32(00000000,002E266C), ref: 001FC2D9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,79EB413B), ref: 001FC369
GetProcAddress.KERNEL32(00000000,Wow64DisableWow64FsRedirection), ref: 001FC387
GetProcAddress.KERNEL32(00000000,Wow64RevertWow64FsRedirection), ref: 001FC391
ShellExecuteExW.SHELL32(0000003C), ref: 001FC41C
GetProcessId.KERNEL32(?), ref: 001FC434
CloseHandle.KERNEL32(?), ref: 001FC448

Part of subcall function 001FF120: OpenSCManagerW.ADVAPI32(00000000,00000000,80000000,79EB413B,00000000), ref: 001FF17A
Part of subcall function 001FF120: OpenServiceW.ADVAPI32(00000000,?,80000000), ref: 001FF192
Part of subcall function 001FF120: QueryServiceStatus.ADVAPI32(00000000,?), ref: 001FF1B9

Strings

T&., xrefs: 001FC217
Wow64RevertWow64FsRedirection, xrefs: 001FC38B
<, xrefs: 001FC3C1
(&., xrefs: 001FC1F9
kernel32.dll, xrefs: 001FC364
4&., xrefs: 001FC203
@&., xrefs: 001FC20D
Wow64DisableWow64FsRedirection, xrefs: 001FC37B

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressOpenProcToken$InformationLibraryLoadServiceThread$AllocateCloseCurrentErrorExecuteHandleInitializeLastManagerProcessQueryShellStatus
String ID: (&.$4&.$<$@&.$T&.$Wow64DisableWow64FsRedirection$Wow64RevertWow64FsRedirection$kernel32.dll
API String ID: 797284464-2558644573
Opcode ID: 21622c38835165d80b0a2794572d358b36a45aeb6d233436ece157bd30fb50a4
Instruction ID: 740b8d70f21734a483f0e9c28555de35a34141786ce43f5b564996cb257a6079
Opcode Fuzzy Hash: 21622c38835165d80b0a2794572d358b36a45aeb6d233436ece157bd30fb50a4
Instruction Fuzzy Hash: E37118B1D4162D9BCB209F65CD88BAABBB8FF84710F1046DAE90DA2250DB714E84DF51

Uniqueness

Uniqueness Score: -1.00%

Function 001FE34B, Relevance: 26.7, APIs: 5, Strings: 10, Instructions: 431COMMON

Download Yara Rule

APIs

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

Concurrency::cancel_current_task.LIBCPMT ref: 001FE89E
Concurrency::cancel_current_task.LIBCPMT ref: 001FE8B7
Concurrency::cancel_current_task.LIBCPMT ref: 001FE8BC
Concurrency::cancel_current_task.LIBCPMT ref: 001FE8CB
Concurrency::cancel_current_task.LIBCPMT ref: 001FE8D0

Part of subcall function 001F4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,002DDAF8,?,?,?,?,001F36E1,002DDAF8,?,?,?,002DDAF8), ref: 001F4186
Part of subcall function 001F4130: FindResourceW.KERNEL32(00000000,002DDAF8,00000006,?,002DDAF8), ref: 001F41C4

Strings

http://wan.ludashi.com/cms/newbuy/microend.php?game_id=%s&channel=%s&pid=%s&subpid=%s, xrefs: 001FE36F
data, xrefs: 001FE6CD
CInstallHelper::_GetConfigInfoFromServer, no data, xrefs: 001FE6E3
errno, xrefs: 001FE5AF
CInstallHelper::_GetConfigInfoFromServer, get '%s' failed, xrefs: 001FE443
CInstallHelper::_GetConfigInfoFromServer, parse config failed, '%s', xrefs: 001FE793
CInstallHelper::_GetConfigInfoFromServer, parse json failed, '%s', xrefs: 001FE52F
msg, xrefs: 001FE5CD
get_info_fail, xrefs: 001FE46F, 001FE556, 001FE612, 001FE70F, 001FE7BF
CInstallHelper::_GetConfigInfoFromServer, error=%s, msg=%s, xrefs: 001FE5E6

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Concurrency::cancel_current_task$FindResource$HeapProcess
String ID: CInstallHelper::_GetConfigInfoFromServer, error=%s, msg=%s$CInstallHelper::_GetConfigInfoFromServer, get '%s' failed$CInstallHelper::_GetConfigInfoFromServer, no data$CInstallHelper::_GetConfigInfoFromServer, parse config failed, '%s'$CInstallHelper::_GetConfigInfoFromServer, parse json failed, '%s'$data$errno$get_info_fail$http://wan.ludashi.com/cms/newbuy/microend.php?game_id=%s&channel=%s&pid=%s&subpid=%s$msg
API String ID: 1353333805-2550322094
Opcode ID: b898bf33f2f727a04694142d65a1753e522437d486522f3c44cdf71bdbde2196
Instruction ID: 5c70f71f39f6850a2db16de92708b4ba510522fd182ebcb3f803e9c2d1b2865f
Opcode Fuzzy Hash: b898bf33f2f727a04694142d65a1753e522437d486522f3c44cdf71bdbde2196
Instruction Fuzzy Hash: F5F1F870A00249DFDB04EBB8C949BBEBBF5AF55310F148198F615AB2A2DB709E14CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00245480, Relevance: 26.5, APIs: 11, Strings: 4, Instructions: 261memoryCOMMON

Download Yara Rule

APIs

VariantInit.OLEAUT32(?), ref: 002455A2
SysAllocString.OLEAUT32(00000000), ref: 002455C0
VariantInit.OLEAUT32(?), ref: 002455DD
VariantInit.OLEAUT32(?), ref: 002456AC
SafeArrayCreate.OLEAUT32(00000011,00000001,?), ref: 00245754
SafeArrayPutElement.OLEAUT32(00000000,00000000,?), ref: 0024577E
VariantInit.OLEAUT32(;Ay), ref: 002457A7
VariantClear.OLEAUT32(;Ay), ref: 00245814
VariantClear.OLEAUT32(?), ref: 0024581D
VariantClear.OLEAUT32(?), ref: 00245842
VariantClear.OLEAUT32(?), ref: 0024584B

Strings

;Ay, xrefs: 002457A0, 002457E0, 0024580D, 002457A6, 002457EC, 00245813
%lld, xrefs: 00245573
%s: %s, xrefs: 0024563F
about:noop, xrefs: 00245504

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Variant$ClearInit$ArraySafe$AllocCreateElementString
String ID: %lld$%s: %s$;Ay$about:noop
API String ID: 1912777856-989256408
Opcode ID: 3b306d658c24fa81ad56daf000847d92f0ca755f431d82ae98cde44dad149c0e
Instruction ID: b272271d6f56eabc012d1942f3f64addae342d93c962bc04f1e46c332de49dbc
Opcode Fuzzy Hash: 3b306d658c24fa81ad56daf000847d92f0ca755f431d82ae98cde44dad149c0e
Instruction Fuzzy Hash: C9B128719106699FDB24EF64DC44BA9B7F8FF05300F1481EAA489A7291DF70AE94CF90

Uniqueness

Uniqueness Score: -1.00%

Function 002990C0, Relevance: 22.7, APIs: 15, Instructions: 175filetimeCOMMON

Download Yara Rule

APIs

PathRemoveFileSpecW.SHLWAPI(?,?,?,?,00000000,00000001,?), ref: 00299170
PathFileExistsW.SHLWAPI(?,?,?,?,00000000,00000001,?), ref: 0029917D
SHCreateDirectory.SHELL32(00000000,?,?,?,?,00000000,00000001,?), ref: 0029918F
CreateFileW.KERNEL32(00299049,C0000000,00000000,00000000,00000002,00000080,00000000,?,?,?,00000000,00000001,?), ref: 002991A8
SetFilePointer.KERNEL32(00000000,?,00000000,00000000,?,?,?,00000000,00000001,?), ref: 002991E6
SetEndOfFile.KERNEL32(00000000,?,?,?,00000000,00000001,?), ref: 002991F6
CreateFileMappingW.KERNEL32(00000000,00000000,00000004,00000000,00000000,00000000,?,?,?,00000000,00000001,?), ref: 0029920F
MapViewOfFile.KERNEL32(00000000,00000006,00000000,00000000,00000000,?,?,?,00000000,00000001,?), ref: 0029922C
DosDateTimeToFileTime.KERNEL32 ref: 0029927F
LocalFileTimeToFileTime.KERNEL32(?,?,?,?,?,00000000,00000001,?), ref: 00299297
SetFileTime.KERNEL32(00000000,00000000,00000000,?,?,?,?,00000000,00000001,?), ref: 002992AD
UnmapViewOfFile.KERNEL32(?,?,00000000,?,?,?,?,00000000,00000001,?), ref: 002992BE
CloseHandle.KERNEL32(?,?,?,?,00000000,00000001,?), ref: 002992CA
CloseHandle.KERNEL32(00000000,?,?,?,00000000,00000001,?), ref: 002992D1
DeleteFileW.KERNEL32(00299049,00000000,00000001,?), ref: 002992DC

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: File$Time$Create$CloseHandlePathView$DateDeleteDirectoryExistsLocalMappingPointerRemoveSpecUnmap
String ID:
API String ID: 1846070058-0
Opcode ID: 82865da13f75f8818c869588f63228e184b4758ceaa0aeccfb232a161427ebe3
Instruction ID: c9102a20ceb735ce8691cf9f53517b276d0135a4ade1b962407a5635c3dd8853
Opcode Fuzzy Hash: 82865da13f75f8818c869588f63228e184b4758ceaa0aeccfb232a161427ebe3
Instruction Fuzzy Hash: 8F518E71A41219ABDB209F68DC8CF9977BCAF08710F1041AAF909EB191D770ED91CF24

Uniqueness

Uniqueness Score: -1.00%

Function 0022C350, Relevance: 21.1, APIs: 14, Instructions: 121processsleepsynchronizationCOMMON

Download Yara Rule

APIs

CreateToolhelp32Snapshot.KERNEL32 ref: 0022C386
Process32FirstW.KERNEL32(00000000,?), ref: 0022C3AC
CreateToolhelp32Snapshot.KERNEL32 ref: 0022C3E7
Module32FirstW.KERNEL32 ref: 0022C405
Module32NextW.KERNEL32(00000000,00000428), ref: 0022C42C
CloseHandle.KERNEL32(00000000,00000000,?,00000008,?), ref: 0022C43A
OpenProcess.KERNEL32(00000001,00000000,?), ref: 0022C44E
TerminateProcess.KERNEL32(00000000,00000001), ref: 0022C45F
Process32NextW.KERNEL32(?,0000022C), ref: 0022C480
CloseHandle.KERNEL32(?,00000002,00000000), ref: 0022C493
Sleep.KERNEL32(00000064), ref: 0022C49F
WaitForSingleObject.KERNEL32(00000000,000003E8,00000002,00000000), ref: 0022C4C5
GetLastError.KERNEL32 ref: 0022C4CB
CloseHandle.KERNEL32(00000000), ref: 0022C4D2

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CloseHandle$CreateFirstModule32NextProcessProcess32SnapshotToolhelp32$ErrorLastObjectOpenSingleSleepTerminateWait
String ID:
API String ID: 2944208615-0
Opcode ID: 8a6ed731513c2b6792054203f4bc07c2ad75b6cb1bcb774ec45b6b04cea0e356
Instruction ID: 47e1f6189048bff540e8f437627394335be8e2be9bbfab42a292ac9413b73fb8
Opcode Fuzzy Hash: 8a6ed731513c2b6792054203f4bc07c2ad75b6cb1bcb774ec45b6b04cea0e356
Instruction Fuzzy Hash: 9541B3B0952639AFDB20AFB0EC08FAE7779AF45701F144195F808A7190DB328E64CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0025B320, Relevance: 19.8, APIs: 13, Instructions: 313COMMON

Download Yara Rule

APIs

SetBkMode.GDI32(?,00000001), ref: 0025B39E
SetTextColor.GDI32(?), ref: 0025B3C4
SelectObject.GDI32(?,00000000), ref: 0025B3D7
GetTextExtentPoint32W.GDI32(?,?,?,?), ref: 0025B3FB
GetTextExtentPoint32W.GDI32(?,?,00000000,?), ref: 0025B497
DrawTextW.USER32(?,?,000000FF,?,?), ref: 0025B503
DrawTextW.USER32(?,?,000000FF,00000000,?), ref: 0025B572
SetBkMode.GDI32(?,00000001), ref: 0025B5A7
SetTextColor.GDI32(?), ref: 0025B5CD
SelectObject.GDI32(?,00000000), ref: 0025B5E0
GetTextExtentPoint32W.GDI32(?,?,?,?), ref: 0025B648
SelectObject.GDI32(?,?), ref: 0025B652

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Text$ExtentObjectPoint32Select$ColorDrawMode
String ID:
API String ID: 3405755493-0
Opcode ID: dab7c117546d0f05ac2b846b9404f2a6d9bb9b05c49269ce4c50d9891295d476
Instruction ID: 8d2e8d94fbc5642f968e1fb812882efac7dd40f8a2d4e433463ac46afccab4da
Opcode Fuzzy Hash: dab7c117546d0f05ac2b846b9404f2a6d9bb9b05c49269ce4c50d9891295d476
Instruction Fuzzy Hash: F8B1BD75A11118AFCF05EFA8DC859FEBBB9EF89311F504219FC06A2290DB319D25CB64

Uniqueness

Uniqueness Score: -1.00%

Function 001FF230, Relevance: 19.6, APIs: 4, Strings: 7, Instructions: 381COMMON

Download Yara Rule

APIs

Part of subcall function 001F3FD0: __CxxThrowException@8.LIBVCRUNTIME ref: 001F3FE7

Concurrency::cancel_current_task.LIBCPMT ref: 001FF6C2

Part of subcall function 0023607F: __CxxThrowException@8.LIBVCRUNTIME ref: 00236096

Concurrency::cancel_current_task.LIBCPMT ref: 001FF6C7
Concurrency::cancel_current_task.LIBCPMT ref: 001FF6CC
Concurrency::cancel_current_task.LIBCPMT ref: 001FF6D1

Strings

wd_install_success, xrefs: 001FF5F4
d, xrefs: 001FF5A7
;Ay, xrefs: 001FF371, 001FF393, 001FF3BD, 001FF4B9, 001FF66D, 001FF29F, 001FF2A9, 001FF4BC, 001FF67F
inst_fail, xrefs: 001FF3E8, 001FF45D, 001FF4EB
inst_succ, xrefs: 001FF634
install, xrefs: 001FF2D4
weiduan, xrefs: 001FF5F9

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Concurrency::cancel_current_task$Exception@8Throw
String ID: ;Ay$d$inst_fail$inst_succ$install$wd_install_success$weiduan
API String ID: 3339364867-2751725838
Opcode ID: 96ab79860f4759595a8cfdbf6b90d3cfa4e5e0b87fb47476c8c2091cda7b895b
Instruction ID: c3bde7aa936043f7ed758a96fd2cf40f567844bcc86922b91f5ec1d8fc3d595d
Opcode Fuzzy Hash: 96ab79860f4759595a8cfdbf6b90d3cfa4e5e0b87fb47476c8c2091cda7b895b
Instruction Fuzzy Hash: 22E1E370A01349EFDB04EBA8C949BAEB7F4AF55314F04816CF515A72A2DBB09E05CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0025B1F0, Relevance: 19.6, APIs: 13, Instructions: 108windowCOMMON

Download Yara Rule

APIs

CreateCompatibleDC.GDI32(?), ref: 0025B20A
CreateCompatibleBitmap.GDI32(?,?,?), ref: 0025B226
SelectObject.GDI32(00000000,00000000), ref: 0025B231
GdipCreateFromHDC.GDIPLUS(00000000,00000000), ref: 0025B245
GdipSetSmoothingMode.GDIPLUS(00000000,00000004,00000000,00000000), ref: 0025B253
GdipCreateSolidFill.GDIPLUS(?,?,00000000,00000004,00000000,00000000), ref: 0025B28B
GdipFillEllipseI.GDIPLUS(00FFFFFF,00000000,00000000,00000000,-00000001,-00000001,?,?,00000000,00000004,00000000,00000000), ref: 0025B2AA
AlphaBlend.MSIMG32(00000000,?,00000000,00000000,?,?,00000000,00000000,00000000,?,01FF0000,00FFFFFF,00000000,00000000,00000000,-00000001), ref: 0025B2DB
SelectObject.GDI32(?,00000000), ref: 0025B2E6
DeleteObject.GDI32(?), ref: 0025B2EF
DeleteDC.GDI32(?), ref: 0025B2F6
GdipDeleteBrush.GDIPLUS(00000000,?,00000000,00000000,?,?,00000000,00000000,00000000,?,01FF0000,00FFFFFF,00000000,00000000,00000000,-00000001), ref: 0025B2FD
GdipDeleteGraphics.GDIPLUS(01FF0000,00000000,?,00000000,00000000,?,?,00000000,00000000,00000000,?,01FF0000,00FFFFFF,00000000,00000000,00000000), ref: 0025B305

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Gdip$CreateDelete$Object$CompatibleFillSelect$AlphaBitmapBlendBrushEllipseFromGraphicsModeSmoothingSolid
String ID:
API String ID: 1405219648-0
Opcode ID: 59f6692a63d6446ef9b55c9e54f8ef1d973044af5316da418d296e165979a469
Instruction ID: 998089cabfdadfc75a0afb249d74f686635e06e0c0b96cb3f6a86480145060e1
Opcode Fuzzy Hash: 59f6692a63d6446ef9b55c9e54f8ef1d973044af5316da418d296e165979a469
Instruction Fuzzy Hash: 2E314CB5A10619AFDB14DFA8DD89EBEBBF8EF48300F104519B959E7251C670A910CB60

Uniqueness

Uniqueness Score: -1.00%

Function 00200280, Relevance: 17.8, APIs: 4, Strings: 6, Instructions: 319fileCOMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(?,?,?,?,?,?,00000010,?,?,?,?,?,?,00000000,002D3380,000000FF), ref: 0020036D
DeleteFileW.KERNEL32(?,?,?,?,?,?,00000010,?,?,?,?,?,?,00000000,002D3380,000000FF), ref: 00200378

Part of subcall function 001F3FD0: __CxxThrowException@8.LIBVCRUNTIME ref: 001F3FE7

Strings

_AddStartMenu, success, xrefs: 002004ED
add_start_menu, xrefs: 00200519
--uninstall --from=start_menu, xrefs: 002004DF
--from=start_menu, xrefs: 002003CF, 002003E6
_AddStartMenu, Delete %s, xrefs: 0020037F, 002004C3
%s\%s.lnk, xrefs: 0020035B, 0020049C

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: File$DeleteException@8ExistsPathThrow
String ID: %s\%s.lnk$--from=start_menu$--uninstall --from=start_menu$_AddStartMenu, Delete %s$_AddStartMenu, success$add_start_menu
API String ID: 825949922-213476557
Opcode ID: 7335ed0ff89a16fe9b3942c5f5e48dcdfaee26283dc8c7aa816656212e1d7663
Instruction ID: ed6eec00a42f3015f7e9bdffc811feab3a31198de99d66453a9d4b575e13e179
Opcode Fuzzy Hash: 7335ed0ff89a16fe9b3942c5f5e48dcdfaee26283dc8c7aa816656212e1d7663
Instruction Fuzzy Hash: 78C19E7091064A9FEB00EFA8CC89B6EBBB4BF55314F548168E414AB2E3DB749D14CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0020E510, Relevance: 17.7, APIs: 7, Strings: 3, Instructions: 177windowCOMMON

Download Yara Rule

APIs

FindResourceW.KERNEL32(00000000,00000000), ref: 0020E56A
LoadResource.KERNEL32(00000000,00000000), ref: 0020E57D
FreeResource.KERNEL32(00000000), ref: 0020E58E
SizeofResource.KERNEL32(00000000,00000000), ref: 0020E5A1
LockResource.KERNEL32(?,00000000), ref: 0020E5C6
FreeResource.KERNEL32(00000000), ref: 0020E5DC
MessageBoxW.USER32(00000000,002E4160,Duilib,00000010), ref: 0020E6FE

Strings

ZIPRES, xrefs: 0020E55B
xml, xrefs: 0020E694
Duilib, xrefs: 0020E6F3

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Resource$Free$FindLoadLockMessageSizeof
String ID: Duilib$ZIPRES$xml
API String ID: 881160665-1461252140
Opcode ID: 4877af9e052f9de622ed1310aac4bdb8fbd38d92d2b7b6c83e58ef28ece650d9
Instruction ID: e790484df9fc2721e811cce1ca67b65fe7909792e6d4eb405d132982501a61e6
Opcode Fuzzy Hash: 4877af9e052f9de622ed1310aac4bdb8fbd38d92d2b7b6c83e58ef28ece650d9
Instruction Fuzzy Hash: E2512671A20315ABCB14EB74DD49FAE7BA8EF54300F400598F40AA3292DF74AE64CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00265460, Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 148COMMON

Download Yara Rule

APIs

GetWindowRect.USER32 ref: 0026548C
GetWindowLongW.USER32(00000000,000000F0), ref: 0026549E
GetParent.USER32(00000000), ref: 002654AF
GetWindow.USER32(00000000,00000004), ref: 002654BA
GetWindowLongW.USER32(00000000,000000F0), ref: 002654C9
SystemParametersInfoW.USER32 ref: 002654E8
GetWindowRect.USER32 ref: 00265501
SetWindowPos.USER32(00000000,00000000,?,?,000000FF,000000FF,00000015,?,?,?), ref: 002655B0

Strings

jQ&, xrefs: 002655B9

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$LongRect$InfoParametersParentSystem
String ID: jQ&
API String ID: 1649471469-3417079308
Opcode ID: 4322f604ce12c81d3bb91d9690701f3837f79e334e49f84d571de688c093cb8b
Instruction ID: 9e35cc83e34bdb34330b65e9378c357b81f2a1ce5572ad601c1b43c9d12d5245
Opcode Fuzzy Hash: 4322f604ce12c81d3bb91d9690701f3837f79e334e49f84d571de688c093cb8b
Instruction Fuzzy Hash: C751C271E116299FCB11CF78DE84A9DB7F9AF48314F55432AE805F72A0EB30AD918B50

Uniqueness

Uniqueness Score: -1.00%

Function 002070D0, Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 79registrylibraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(Advapi32.dll), ref: 002070EA
GetProcAddress.KERNEL32(00000000,RegDeleteKeyTransactedW), ref: 002070FA
RegDeleteKeyW.ADVAPI32(?,?), ref: 00207122
GetModuleHandleW.KERNEL32(Advapi32.dll), ref: 00207147
GetProcAddress.KERNEL32(00000000,RegDeleteKeyExW), ref: 00207157
RegDeleteKeyW.ADVAPI32(?,?), ref: 00207199

Strings

Advapi32.dll, xrefs: 002070E5, 00207142
RegDeleteKeyTransactedW, xrefs: 002070F4
RegDeleteKeyExW, xrefs: 00207151

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressDeleteHandleModuleProc
String ID: Advapi32.dll$RegDeleteKeyExW$RegDeleteKeyTransactedW
API String ID: 588496660-1053001802
Opcode ID: cfed49332655b81b25a7422617f81f995ef9c93ab348d5c79b0c8d7c5193f5d0
Instruction ID: c90b434140a45bc5decd6bb8767b5d55801075585aa81c7b13ea79581b516f4c
Opcode Fuzzy Hash: cfed49332655b81b25a7422617f81f995ef9c93ab348d5c79b0c8d7c5193f5d0
Instruction Fuzzy Hash: A621C236658341EBD7215F99FC08F86FBA8DB50761F14002BF608A10E1C3B5A8B9DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 002530C0, Relevance: 14.3, APIs: 4, Strings: 4, Instructions: 322COMMON

Download Yara Rule

APIs

PtInRect.USER32(?,?,?), ref: 00253181
PtInRect.USER32(?,?,?), ref: 002531DD

Strings

menu, xrefs: 0025321C
mouseleave, xrefs: 002532C8
fade='%d', xrefs: 00253388, 002533AA, 00253411, 00253433
mouseenter, xrefs: 0025324D

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Rect
String ID: fade='%d'$menu$mouseenter$mouseleave
API String ID: 400858303-536504314
Opcode ID: 85cf508d508d164932fa5499306a5eb257e24cbffbfee60413ae35b217475e72
Instruction ID: 01045081875d3125762f899d6a2e2dbb6da23153fb1f4162c086302f28263551
Opcode Fuzzy Hash: 85cf508d508d164932fa5499306a5eb257e24cbffbfee60413ae35b217475e72
Instruction Fuzzy Hash: D7B1F572710A02ABDA29DF68E844FBDF3A5BF853A1F000226E519C7191CB31AD75CF95

Uniqueness

Uniqueness Score: -1.00%

Function 00280560, Relevance: 14.2, APIs: 5, Strings: 3, Instructions: 212libraryloaderCOMMON

Download Yara Rule

APIs

OutputDebugStringW.KERNEL32(00000E7D,00000781,00000E7D,?,?,?,?,?,?,?,?,?,?,79EB413B), ref: 002805C2

Part of subcall function 002808B0: GetModuleFileNameW.KERNEL32(00000000,?,00000104,00000E7D,?,?), ref: 002808F3
Part of subcall function 002808B0: PathRemoveFileSpecW.SHLWAPI(?), ref: 00280900
Part of subcall function 002808B0: PathCombineW.SHLWAPI(?,?,WebView.dll), ref: 00280935
Part of subcall function 002808B0: PathFileExistsW.SHLWAPI(?), ref: 00280944
Part of subcall function 002808B0: PathCombineW.SHLWAPI(?,?,Utils\WebView.dll), ref: 0028095D
Part of subcall function 002808B0: PathFileExistsW.SHLWAPI(?), ref: 00280966
Part of subcall function 002808B0: PathCombineW.SHLWAPI(?,?,LdsWebView.dll), ref: 0028097F
Part of subcall function 002808B0: PathFileExistsW.SHLWAPI(?), ref: 00280988
Part of subcall function 002808B0: PathRemoveFileSpecW.SHLWAPI(?), ref: 00280995
Part of subcall function 002808B0: PathCombineW.SHLWAPI(?,?,Utils\WebView.dll), ref: 002809AE

PathFileExistsW.SHLWAPI(?,?,?,?), ref: 0028062F
LoadLibraryW.KERNEL32(?), ref: 00280653
GetProcAddress.KERNEL32(00000000), ref: 00280668
OutputDebugStringW.KERNEL32(?), ref: 002806B3

Strings

DuiLibMultiTabWebView::GetMultiTabWebView ,group_id:%s, xrefs: 002805B0
InitMultiTabWebView ,group_id:%s, xrefs: 002806A1
;Ay, xrefs: 00280582, 002807A1

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Path$File$CombineExists$DebugOutputRemoveSpecString$AddressLibraryLoadModuleNameProc
String ID: ;Ay$DuiLibMultiTabWebView::GetMultiTabWebView ,group_id:%s$InitMultiTabWebView ,group_id:%s
API String ID: 711857884-1864738811
Opcode ID: bb385118c0524480d4732bb2fba45f79964585dfcb8f82eeb3edd390a2123382
Instruction ID: 33959767ab3eb1cd98330002ee55f67c5f4ecc54b15894edecb2bb7f4ff05143
Opcode Fuzzy Hash: bb385118c0524480d4732bb2fba45f79964585dfcb8f82eeb3edd390a2123382
Instruction Fuzzy Hash: A8713E75D11219ABCF14EFA8D884AEEB7BCEF08350F048529F811B7291DB34A918CF60

Uniqueness

Uniqueness Score: -1.00%

Function 0022C4F0, Relevance: 14.2, APIs: 4, Strings: 4, Instructions: 181COMMON

Download Yara Rule

APIs

AssocQueryStringW.SHLWAPI(00000000,00000001,http,open,?,?), ref: 0022C573
CloseHandle.KERNEL32(?,002E7298,00000000), ref: 0022C6C4
CloseHandle.KERNEL32(?), ref: 0022C6CC

Strings

R , xrefs: 0022C756
http, xrefs: 0022C56A
open, xrefs: 0022C565, 0022C6F2
D, xrefs: 0022C68F

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CloseHandle$AssocQueryString
String ID: R $D$http$open
API String ID: 3786467014-2093793455
Opcode ID: c9c8cb1626c0cda1c488528d39a70d17fbd87687ddb3fc1ba955c409745a8527
Instruction ID: 736c146e78bd3ea782a8a9e0841028eb08c0a4b98f2aff3ba74e7276319df3b6
Opcode Fuzzy Hash: c9c8cb1626c0cda1c488528d39a70d17fbd87687ddb3fc1ba955c409745a8527
Instruction Fuzzy Hash: 4E61E031950229ABCB24DF64DC49BFDB7B8EB45310F1442A9E81AA72D1DB706E94CF50

Uniqueness

Uniqueness Score: -1.00%

Function 002C30F3, Relevance: 14.2, APIs: 7, Strings: 1, Instructions: 152fileCOMMON

Download Yara Rule

APIs

GetConsoleCP.KERNEL32(?,?,?,?,?,?,?,?,?,002C3868,?,?,?,?,?,?), ref: 002C3135
__fassign.LIBCMT ref: 002C31B0
__fassign.LIBCMT ref: 002C31CB
WideCharToMultiByte.KERNEL32(?,00000000,?,00000001,?,00000005,00000000,00000000), ref: 002C31F1
WriteFile.KERNEL32(?,?,00000000,h8,,00000000,?,?,?,?,?,?,?,?,?,002C3868,?), ref: 002C3210
WriteFile.KERNEL32(?,?,00000001,h8,,00000000,?,?,?,?,?,?,?,?,?,002C3868,?), ref: 002C3249

Strings

h8,, xrefs: 002C3204, 002C323C, 002C3207, 002C323F

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FileWrite__fassign$ByteCharConsoleMultiWide
String ID: h8,
API String ID: 1324828854-2629997458
Opcode ID: 20be009aac8687fd4180b66634eee009e9c9eaaeb0d88bb09664ba2249bead4a
Instruction ID: c27bc1776d9d2003492f3246ff2292a1abd54e9116b88d6b20d770e77ed25050
Opcode Fuzzy Hash: 20be009aac8687fd4180b66634eee009e9c9eaaeb0d88bb09664ba2249bead4a
Instruction Fuzzy Hash: A0517D71D102059FCB10CFA8D885BAEBBB8AF09310F18865EE956E7291E7709A51CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00229260, Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 127COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00229296
std::_Lockit::_Lockit.LIBCPMT ref: 002292B8
std::_Lockit::~_Lockit.LIBCPMT ref: 002292D8
__Getctype.LIBCPMT ref: 00229382
__Getcvt.LIBCPMT ref: 00229392
std::_Facet_Register.LIBCPMT ref: 002293D6
std::_Lockit::~_Lockit.LIBCPMT ref: 002293EE

Strings

o., xrefs: 00229278

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_GetctypeGetcvtRegister
String ID: o.
API String ID: 2755674607-3666013755
Opcode ID: 6e759b3246deaddbe1fde09246a52669577d481e3ebcbe9af85c4b785059f82d
Instruction ID: 1b225aa3cf9978fe50580077f5c6c2288798a6ae9683087c86545a42f36a4ad1
Opcode Fuzzy Hash: 6e759b3246deaddbe1fde09246a52669577d481e3ebcbe9af85c4b785059f82d
Instruction Fuzzy Hash: 1B510471910665EFCB21CF94D880BAAB7F8EF08710F14819DE849A7392DB70A9D5CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0020230F, Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 102fileCOMMON

Download Yara Rule

APIs

SHCreateDirectoryExW.SHELL32 ref: 00202312
PathFileExistsW.SHLWAPI(00000010,?,?,?), ref: 00202340
DeleteFileW.KERNEL32(00000010), ref: 00202359
CopyFileW.KERNEL32(?,00000010,00000000,?,?,?,?), ref: 00202375
PathFileExistsW.SHLWAPI(00000010,?,?,?,?), ref: 0020237C
GetLastError.KERNEL32 ref: 00202397

Strings

_InstallFiles, copy exe '%s' -> '%s' failed, xrefs: 0020238A
_InstallFiles, delete '%s', xrefs: 0020234B

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: File$ExistsPath$CopyCreateDeleteDirectoryErrorLast
String ID: _InstallFiles, copy exe '%s' -> '%s' failed$_InstallFiles, delete '%s'
API String ID: 2238415590-2062991328
Opcode ID: fbee6b854cd55d06e505469969c32b91920aa5bafe24accc0b515db5a3b9a12a
Instruction ID: f37b877e31f9df15a571c3787713c0967eaf59d2b288739bfb4d2c988d641dd1
Opcode Fuzzy Hash: fbee6b854cd55d06e505469969c32b91920aa5bafe24accc0b515db5a3b9a12a
Instruction Fuzzy Hash: 6631C170901605DBD710DFA8DD4CB5DBBB8EF42320F1482AAE8199B2E2DB349D14CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 002A4051, Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 87COMMON

Download Yara Rule

APIs

FindSITargetTypeInstance.LIBVCRUNTIME ref: 002A40A4
FindMITargetTypeInstance.LIBVCRUNTIME ref: 002A40BD
FindVITargetTypeInstance.LIBVCRUNTIME ref: 002A40C4
PMDtoOffset.LIBCMT ref: 002A40E3

Strings

Bad dynamic_cast!, xrefs: 002A4125
YYh<11, xrefs: 002A4133

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FindInstanceTargetType$Offset
String ID: Bad dynamic_cast!$YYh<11
API String ID: 1467055271-1953080565
Opcode ID: 2bb94ecaf49ec6d4c97749b35cdbfc76a77d4534e2a9d40854571cd106415208
Instruction ID: 6fbfebf39e2b5ca5f6c1f673534c5223eb6fed4681986cc6f8e9f624e6a9b178
Opcode Fuzzy Hash: 2bb94ecaf49ec6d4c97749b35cdbfc76a77d4534e2a9d40854571cd106415208
Instruction Fuzzy Hash: 4D210B72A24606EFCF18EF64DD06AAD7774FBC6720F104219FA1193180DFB5EA249B91

Uniqueness

Uniqueness Score: -1.00%

Function 002440B0, Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 86windowCOMMON

Download Yara Rule

APIs

IsWindow.USER32(?), ref: 002440D1
FindWindowExW.USER32 ref: 002440F4
FindWindowExW.USER32 ref: 00244108
FindWindowExW.USER32 ref: 00244118
SetFocus.USER32(00000000), ref: 0024411F

Part of subcall function 00249B90: LoadCursorW.USER32(00000000,00007F00), ref: 00249BA8

Strings

Shell Embedding, xrefs: 002440E7
Internet Explorer_Server, xrefs: 00244110
Shell DocObject View, xrefs: 00244100

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Find$CursorFocusLoad
String ID: Internet Explorer_Server$Shell DocObject View$Shell Embedding
API String ID: 557455586-2040739340
Opcode ID: 1ade3eaf5667f62ffe33a2ffa661c3174e1606b3015571560a85da093794dc83
Instruction ID: 4089eb444daff88dd5db6de7ba388407147425b522c8fab6f5a81e7e57f72098
Opcode Fuzzy Hash: 1ade3eaf5667f62ffe33a2ffa661c3174e1606b3015571560a85da093794dc83
Instruction Fuzzy Hash: 3821BB31360B066BEA28BE6AAC45F6FB75CDFA1755F50002AF10DD7190CB60ECA0CB64

Uniqueness

Uniqueness Score: -1.00%

Function 00201094, Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 213fileCOMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(?), ref: 002010BF
DeleteFileW.KERNEL32(?), ref: 002010CA
PathFileExistsW.SHLWAPI(?), ref: 002010D1

Strings

__WdGameTemp__, xrefs: 00201290
%s\%s.%s, xrefs: 002010AD
%s\%s-%d.%s, xrefs: 002010F4

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: File$ExistsPath$Delete
String ID: %s\%s-%d.%s$%s\%s.%s$__WdGameTemp__
API String ID: 3881821482-3792032342
Opcode ID: b97215b4dd5fcaf1b9459d280949fd968b0426fb78c0cb481e12f9d1ec7bcf83
Instruction ID: 12ef83eab838e436c5cd1af6e4cea414b8a0a71d3b82fc24ac1bbc9bee99810d
Opcode Fuzzy Hash: b97215b4dd5fcaf1b9459d280949fd968b0426fb78c0cb481e12f9d1ec7bcf83
Instruction Fuzzy Hash: 7E71B2716006469FDB04DF68C849BAEB7E8EF41324F148169F919DB292DB70DD24CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0024F390, Relevance: 12.4, APIs: 4, Strings: 3, Instructions: 194COMMON

Download Yara Rule

APIs

Part of subcall function 0024F830: CharNextW.USER32(?,745EEEF0,0024E28C,?,0024F018,0024E28C), ref: 0024F857

CharNextW.USER32(0024E28A,0024E28A,00000000,0024E28C,00000000,0024E28C,0024E28C), ref: 0024F40C
CharNextW.USER32(?,0024E28A,00000000,0024E28C,00000000,0024E28C,0024E28C), ref: 0024F441
CharNextW.USER32(?,0024E28A,00000000,0024E28C,00000000,0024E28C,0024E28C), ref: 0024F492
CharNextW.USER32(00000002,0024E288,0024E28C,00000022,0024E28A,00000000,0024E28C,00000000,0024E28C,0024E28C), ref: 0024F50B

Strings

Expected attribute value, xrefs: 0024F555
Error while parsing attributes, xrefs: 0024F56C
Error while parsing attribute string, xrefs: 0024F531

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CharNext
String ID: Error while parsing attribute string$Error while parsing attributes$Expected attribute value
API String ID: 3213498283-2127762582
Opcode ID: 9765ade6265fb5e64319639a3105f764c149272c63ec2c64868cc354b7b307c5
Instruction ID: 756ee3c40cd4347e789c6cc52ece641750e4014dcb6b51cf61fbc8e138f46c62
Opcode Fuzzy Hash: 9765ade6265fb5e64319639a3105f764c149272c63ec2c64868cc354b7b307c5
Instruction Fuzzy Hash: 635116357102428BCB68EF1DE54057AB3E5EFE9350B64447AE985CB390EB30CCA2C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 002803C0, Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 147COMMON

Download Yara Rule

APIs

OutputDebugStringW.KERNEL32(?,79EB413B,?,?,?,?,?,79EB413B), ref: 00280422
OutputDebugStringW.KERNEL32(?,?,?,?,?,;Ay,?,?,?,?,?,79EB413B), ref: 0028048C
OutputDebugStringW.KERNEL32(?,?,?,;Ay,?,?,?,?,;Ay), ref: 002804ED

Strings

DelTabWebViewCount ,group_id:%s,count:%d, xrefs: 0028047A
ReleaseMultiTabWebView ,group_id:%s, xrefs: 002804DB
DelTabWebViewCount ,group_id:%s,total size:%d, xrefs: 00280410
;Ay, xrefs: 002803F5, 002804C4, 00280455, 0028040C, 0028042E, 0028044D, 00280476, 002804A2, 002804BC, 002804D7

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: DebugOutputString
String ID: ;Ay$DelTabWebViewCount ,group_id:%s,count:%d$DelTabWebViewCount ,group_id:%s,total size:%d$ReleaseMultiTabWebView ,group_id:%s
API String ID: 1166629820-1233054687
Opcode ID: 8523d82010768961611461feda8e80c24711c8470373fc371dfc6920cb76ec7e
Instruction ID: 1727f0282290fba0dc1eed92fdf4085d8537847eb6d6c38b04e880f5b5be53d8
Opcode Fuzzy Hash: 8523d82010768961611461feda8e80c24711c8470373fc371dfc6920cb76ec7e
Instruction Fuzzy Hash: 81519071911619AFCB10EFA8D8C4DAFB7B8FF09310F040669E925A7291D730EE54CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0020B040, Relevance: 12.4, APIs: 1, Strings: 6, Instructions: 133COMMON

Download Yara Rule

APIs

ShellExecuteW.SHELL32(00000000,open,00000010,?,00000000,00000005), ref: 0020B1B8

Strings

open, xrefs: 0020B1B1
CMainControl::_NotifyProgress, '%s' not valid, xrefs: 0020B19A
d, xrefs: 0020B06D
inst_open, xrefs: 0020B134
run_at_succ, xrefs: 0020B089
yes, xrefs: 0020B0CA

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ExecuteShell
String ID: CMainControl::_NotifyProgress, '%s' not valid$d$inst_open$open$run_at_succ$yes
API String ID: 587946157-3061618252
Opcode ID: 486317318af71dfb82bbe4ea5bb3b3c93df80a1df56ae0abc492c2e176c17df6
Instruction ID: 3e5111e1b1d2863298038a8060225c1b24991973a503792fd223298803e33b90
Opcode Fuzzy Hash: 486317318af71dfb82bbe4ea5bb3b3c93df80a1df56ae0abc492c2e176c17df6
Instruction Fuzzy Hash: 5C41F771A20305EFD721EF65DC15BAAB7B4FF18720F104219E825A72D2EB719914CF90

Uniqueness

Uniqueness Score: -1.00%

Function 002563D0, Relevance: 12.1, APIs: 8, Instructions: 138windowCOMMON

Download Yara Rule

APIs

CreateCompatibleDC.GDI32(?), ref: 00256438
CreateCompatibleBitmap.GDI32(?,?,?), ref: 00256448
SelectObject.GDI32(?,00000000), ref: 00256455
GradientFill.MSIMG32(?,?,00000002,00000000,00000001,?,?,?,?), ref: 0025650F
AlphaBlend.MSIMG32(?,?,?,?,?,?,00000000,00000000,?,?,00000000,?,?), ref: 00256541
SelectObject.GDI32(?,00000000), ref: 0025654B
DeleteObject.GDI32(00000000), ref: 00256554
DeleteDC.GDI32(?), ref: 0025655B

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Object$CompatibleCreateDeleteSelect$AlphaBitmapBlendFillGradient
String ID:
API String ID: 549390703-0
Opcode ID: 968568c367e8bb2bfc8efd50fa6c5bea9e5bc4c2bc67331934a85d864c4f7624
Instruction ID: 7c09700fa148db6832288954d1779ea22786cabb90119370abeb230daa52216b
Opcode Fuzzy Hash: 968568c367e8bb2bfc8efd50fa6c5bea9e5bc4c2bc67331934a85d864c4f7624
Instruction Fuzzy Hash: 7551F375E11209AFDB10CFA8D884AEEBBB5FF48310F54812AF854E72A0D735A945CB64

Uniqueness

Uniqueness Score: -1.00%

Function 00240080, Relevance: 12.1, APIs: 8, Instructions: 124COMMON

Download Yara Rule

APIs

GetWindowRect.USER32 ref: 002400A9
GetWindowLongW.USER32(00000000,000000F0), ref: 002400BB
GetParent.USER32(00000000), ref: 002400CC
GetWindow.USER32(00000000,00000004), ref: 002400D7
GetWindowLongW.USER32(00000000,000000F0), ref: 002400E6
SystemParametersInfoW.USER32 ref: 00240105
GetWindowRect.USER32 ref: 0024011E
SetWindowPos.USER32(00000000,00000000,?,?,000000FF,000000FF,00000015), ref: 0024019E

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$LongRect$InfoParametersParentSystem
String ID:
API String ID: 1649471469-0
Opcode ID: 5f104eb2d53be575b5ccd9f870ab9c79f3a38b163596d41f71be0c8f7235b448
Instruction ID: d0781ae3b5867ee59ace2effd74d0e3b14cf8e56cea7e1130fa086ec472f0210
Opcode Fuzzy Hash: 5f104eb2d53be575b5ccd9f870ab9c79f3a38b163596d41f71be0c8f7235b448
Instruction Fuzzy Hash: 8441D031E1151AABCB14CF78DE85BADB7B9AF48314F644325F919F3290DA30AD908B50

Uniqueness

Uniqueness Score: -1.00%

Function 0025E1F0, Relevance: 10.8, APIs: 7, Instructions: 250COMMON

Download Yara Rule

APIs

ImmGetContext.IMM32(00000000), ref: 0025E28D
GetCaretPos.USER32(?,00000000), ref: 0025E29C
ImmSetCompositionWindow.IMM32(00000000,?), ref: 0025E2BA
ImmReleaseContext.IMM32(00000000), ref: 0025E2CF
ScreenToClient.USER32 ref: 0025E385
PtInRect.USER32(00000100,?,?), ref: 0025E397
ScreenToClient.USER32 ref: 0025E439

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ClientContextScreen$CaretCompositionRectReleaseWindow
String ID:
API String ID: 3333783890-0
Opcode ID: d1d408934eefa0875a2005525127f476698cfd8f3e2d267a53e83b0edead91f6
Instruction ID: 8a64676ba56bb725ee8a8a54c1d25946be58db305cfba5e030590482f2aca263
Opcode Fuzzy Hash: d1d408934eefa0875a2005525127f476698cfd8f3e2d267a53e83b0edead91f6
Instruction Fuzzy Hash: 10917F71E102159FCF18EFA8C488AEDB7A9BF48301F0644AAEC59E7241DB34DE658F54

Uniqueness

Uniqueness Score: -1.00%

Function 002460F0, Relevance: 10.7, APIs: 3, Strings: 3, Instructions: 220memoryCOMMON

Download Yara Rule

APIs

SysFreeString.OLEAUT32(?), ref: 002461BD
GlobalAlloc.KERNEL32(00000040,00000402), ref: 00246297
CreateStreamOnHGlobal.OLE32(00000000,00000001,00000000,79EB413B), ref: 002462CA

Part of subcall function 0021BEE0: MultiByteToWideChar.KERNEL32(00000003,00000000,?,000000FF,00000000,00000000), ref: 0021BF02
Part of subcall function 0021BEE0: SysAllocStringLen.OLEAUT32(00000000,-00000001), ref: 0021BF11
Part of subcall function 0021BEE0: MultiByteToWideChar.KERNEL32(00000003,00000000,?,000000FF,00000000,?), ref: 0021BF28
Part of subcall function 0021BEE0: SysFreeString.OLEAUT32(00000000), ref: 0021BF34

Strings

about:blank, xrefs: 00246220
<body></body>, xrefs: 002462A9
onunload, xrefs: 002461A0

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: String$AllocByteCharFreeGlobalMultiWide$CreateStream
String ID: <body></body>$about:blank$onunload
API String ID: 3439142833-1279213774
Opcode ID: aa9fc45218ace24cc2389d9f1192c7214677999236449c2d5b3859134ae3125c
Instruction ID: 99a1d9da0082fc925660a3aab9405aa4d07374623af9c7b39636f3e959656cf0
Opcode Fuzzy Hash: aa9fc45218ace24cc2389d9f1192c7214677999236449c2d5b3859134ae3125c
Instruction Fuzzy Hash: 02918370600246AFDB18CFA4C848FAEBBB9BF49704F144198E515EB391CB75AD15CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0021F500, Relevance: 10.7, APIs: 3, Strings: 3, Instructions: 155COMMON

Download Yara Rule

APIs

std::locale::_Init.LIBCPMT ref: 0021F5E3
std::ios_base::_Addstd.LIBCPMT ref: 0021F686
__CxxThrowException@8.LIBVCRUNTIME ref: 0021F6E1

Strings

ios_base::badbit set, xrefs: 0021F6A9, 0021F6D2
ios_base::failbit set, xrefs: 0021F6B3
ios_base::eofbit set, xrefs: 0021F6B8

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: AddstdException@8InitThrowstd::ios_base::_std::locale::_
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 3446850132-1866435925
Opcode ID: 16b1cfa4847fb2d90e7c2bb3a15bf0551df398116b6e17bab8ae030a602f1b37
Instruction ID: bd56efd818953e471633288177cc81e71800115392d91548d81429df46189fbd
Opcode Fuzzy Hash: 16b1cfa4847fb2d90e7c2bb3a15bf0551df398116b6e17bab8ae030a602f1b37
Instruction Fuzzy Hash: A45178B09107459FDB10CF55C988B9ABBF4FF04308F10852DE92A9B791D7B6AA64CF80

Uniqueness

Uniqueness Score: -1.00%

Function 00229410, Relevance: 10.7, APIs: 3, Strings: 3, Instructions: 154COMMON

Download Yara Rule

APIs

std::locale::_Init.LIBCPMT ref: 002294F3
std::ios_base::_Addstd.LIBCPMT ref: 00229596
__CxxThrowException@8.LIBVCRUNTIME ref: 002295F1

Strings

ios_base::badbit set, xrefs: 002295B9, 002295E2
ios_base::failbit set, xrefs: 002295C3
ios_base::eofbit set, xrefs: 002295C8

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: AddstdException@8InitThrowstd::ios_base::_std::locale::_
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 3446850132-1866435925
Opcode ID: 12824b7a635dbecdff33f9d3730b79235a848aeef934366b1abffe58288f0244
Instruction ID: 9629dae49693a7cb19ae5e494a98af5935f97aad41f74e58b46e29f1e909cbc2
Opcode Fuzzy Hash: 12824b7a635dbecdff33f9d3730b79235a848aeef934366b1abffe58288f0244
Instruction Fuzzy Hash: D2517BB0A10715AFDB10CF95D548B9ABBF4FF04304F40852DE91A9B781D7B5E964CB80

Uniqueness

Uniqueness Score: -1.00%

Function 002560D0, Relevance: 10.6, APIs: 7, Instructions: 143COMMON

Download Yara Rule

APIs

Part of subcall function 00255EA0: lstrcmpW.KERNEL32(?,002DDAF8,?,?), ref: 00255EC7

CreateCompatibleDC.GDI32(?), ref: 00256105
SelectObject.GDI32(00000000,00000000), ref: 00256110
GetObjectW.GDI32(00000000,00000018,?,?,?,?,?,?,?,?,?,?,0025B618,?,00000000,?), ref: 00256128
AlphaBlend.MSIMG32(?,?,?,?,?,?,00000000,00000000,000000FF,?,00000000,?,?,?,?,?), ref: 00256216
SelectObject.GDI32(?,?), ref: 00256220
DeleteObject.GDI32(?), ref: 00256229
DeleteDC.GDI32(?), ref: 00256230

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Object$DeleteSelect$AlphaBlendCompatibleCreatelstrcmp
String ID:
API String ID: 883273431-0
Opcode ID: 13e430815a5137331b82ce11ffc916bb00cb39a2fa18502839675910b82f16de
Instruction ID: c83c3e6eb2d150581fb338ffbf950adf46a20e6e404821879e9f89c5ab99edd3
Opcode Fuzzy Hash: 13e430815a5137331b82ce11ffc916bb00cb39a2fa18502839675910b82f16de
Instruction Fuzzy Hash: CB514231A1160AAFCB14CFACDD49AAEBBF6FF48340F588119E945E3251D731AD15CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0023F280, Relevance: 10.6, APIs: 7, Instructions: 96COMMON

Download Yara Rule

APIs

GetStockObject.GDI32(00000011), ref: 0023F2B0
GetObjectW.GDI32(00000000,?,?,?,?,?,?,0024FF24,?,0000000C,?,?,?,?,0000000C,?), ref: 0023F2B7
CreateFontIndirectW.GDI32(?), ref: 0023F30A
DeleteObject.GDI32(00000000), ref: 0023F31C
SelectObject.GDI32(?,00000000), ref: 0023F37A
GetTextMetricsW.GDI32(?,?,?,?,?), ref: 0023F388
SelectObject.GDI32(?,00000000), ref: 0023F392

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Object$Select$CreateDeleteFontIndirectMetricsStockText
String ID:
API String ID: 1721824061-0
Opcode ID: 9a69d57e9117a2ed8c79641e8eb52ba21f4a5c20e7d040f3a0e3722c988c2dfb
Instruction ID: 8eb926bc1814cdf0ca7e5e90b5b336cb2e34e0e3ac94b6c6d4aae2cf56630fbc
Opcode Fuzzy Hash: 9a69d57e9117a2ed8c79641e8eb52ba21f4a5c20e7d040f3a0e3722c988c2dfb
Instruction Fuzzy Hash: 6E316C71905289AFDB11AFA4DC49BDE7FB8AF15300F0840AAED589B282D770D915CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0023F3F0, Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 83windowCOMMON

Download Yara Rule

APIs

IsWindowVisible.USER32(00000000), ref: 0023F3FB
GetFocus.USER32(00000000,?,?,?,?,?,?,00000000,00000000), ref: 0023F40A
GetTickCount.KERNEL32 ref: 0023F43E

Part of subcall function 0023EFC0: GetTickCount.KERNEL32 ref: 0023F050

GetTickCount.KERNEL32 ref: 0023F4C0

Strings

killfocus, xrefs: 0023F45C
setfocus, xrefs: 0023F4DE

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CountTick$FocusVisibleWindow
String ID: killfocus$setfocus
API String ID: 2565274150-1991930995
Opcode ID: e4c7600b5241299b29b0d1b95e4d7b64d55f2e99c8abe51e129bce99d13347d7
Instruction ID: 8db229c0cdfa186566c6ea71e53c09273e1703d9d193f98df9e2cf396f7e78a7
Opcode Fuzzy Hash: e4c7600b5241299b29b0d1b95e4d7b64d55f2e99c8abe51e129bce99d13347d7
Instruction Fuzzy Hash: 99314D70E1075A9BCB10DF55DD49BBEB7B1BF99704F140259EA00A72A0EBB0A995CFC0

Uniqueness

Uniqueness Score: -1.00%

Function 00207000, Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 81registrylibraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(Advapi32.dll,?,00000000,?,?,?,C000008C,00000001,?,?,002063FA), ref: 00207024
GetProcAddress.KERNEL32(00000000,RegCreateKeyTransactedW), ref: 0020703B
RegCreateKeyExW.ADVAPI32(?,?,00000000,?,?,?,?,00000000,?,?,00000000,?,?,?,C000008C,00000001), ref: 0020708E
RegCloseKey.ADVAPI32(00000000,?,?,?,C000008C,00000001,?,?,002063FA), ref: 002070AD

Strings

Advapi32.dll, xrefs: 0020701F
RegCreateKeyTransactedW, xrefs: 00207035

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressCloseCreateHandleModuleProc
String ID: Advapi32.dll$RegCreateKeyTransactedW
API String ID: 1765684683-2994018265
Opcode ID: cb743d46ce07cdf25902424775e796ab41b21e5bb9ee334ac5978aec5d5bfd42
Instruction ID: da28a12caccd57f9a578426ecca666dc2dfcd55f8ed534a288e28b162b89d005
Opcode Fuzzy Hash: cb743d46ce07cdf25902424775e796ab41b21e5bb9ee334ac5978aec5d5bfd42
Instruction Fuzzy Hash: FE219A31A1420AEBDF218F95DC48FAB7BBAEF48700F104169FA05961A0D771E960DB60

Uniqueness

Uniqueness Score: -1.00%

Function 0020D3E0, Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 57windowCOMMON

Download Yara Rule

APIs

DestroyIcon.USER32(?,?,?,?,?,?,?,79EB413B,?,?,002D2570,000000FF), ref: 0020D432
DestroyIcon.USER32(?,?,?,?,?,?,?,79EB413B,?,?,002D2570,000000FF), ref: 0020D44D

Strings

,@., xrefs: 0020D418
<@., xrefs: 0020D426
$@., xrefs: 0020D411
4@., xrefs: 0020D41F

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: DestroyIcon
String ID: $@.$,@.$4@.$<@.
API String ID: 1234817797-3762576155
Opcode ID: 95206ca3de1d2f3e989bc798ef08236b3969cebf62858d02d1c999a335410c98
Instruction ID: 9f0c8406f92b06f5a607627b888c80abb336b4cfeb18ddb0a1751d3b0da7e6c1
Opcode Fuzzy Hash: 95206ca3de1d2f3e989bc798ef08236b3969cebf62858d02d1c999a335410c98
Instruction Fuzzy Hash: 99110070665B409BD321DF2AE808B56BBE8FF09714F00862EE869C7381DB71E910CF80

Uniqueness

Uniqueness Score: -1.00%

Function 0025B170, Relevance: 10.6, APIs: 7, Instructions: 50COMMON

Download Yara Rule

APIs

CreatePen.GDI32(00000006,?), ref: 0025B198
SelectObject.GDI32(?,00000000), ref: 0025B1AC
GetStockObject.GDI32(00000005), ref: 0025B1B2
SelectObject.GDI32(?,00000000), ref: 0025B1BA
RoundRect.GDI32(?,?,?,?,?,?,?), ref: 0025B1D1
SelectObject.GDI32(?,00000000), ref: 0025B1D9
DeleteObject.GDI32(?), ref: 0025B1DE

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Object$Select$CreateDeleteRectRoundStock
String ID:
API String ID: 1454345155-0
Opcode ID: 46882b7a03fad3b3659b5bcc2ca197bdc3ba7e671b86be03adf0612bc5ec2c5a
Instruction ID: 660b3e751be21c3bd5118695d28cf6f719de2217f5f298ffb57f9ce2e7bdf3a5
Opcode Fuzzy Hash: 46882b7a03fad3b3659b5bcc2ca197bdc3ba7e671b86be03adf0612bc5ec2c5a
Instruction Fuzzy Hash: F9011276501619BFDB016FA2EC4CDAB7FAEEFC8361B018012FA0986561C636D821DF70

Uniqueness

Uniqueness Score: -1.00%

Function 001FE300, Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 49COMMON

Download Yara Rule

APIs

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

Concurrency::cancel_current_task.LIBCPMT ref: 001FE89E
Concurrency::cancel_current_task.LIBCPMT ref: 001FE8B7
Concurrency::cancel_current_task.LIBCPMT ref: 001FE8BC
Concurrency::cancel_current_task.LIBCPMT ref: 001FE8CB
Concurrency::cancel_current_task.LIBCPMT ref: 001FE8D0

Strings

CInstallHelper::_GetConfigInfoFromServer, xrefs: 001FE328

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Concurrency::cancel_current_task$HeapProcess
String ID: CInstallHelper::_GetConfigInfoFromServer
API String ID: 570625627-18946813
Opcode ID: 5f4372e4f162479cbb9c76cb8e3ff62762cf10827ad1bd438500ab5924f55a62
Instruction ID: 73c2ee2e445d41660e7dfaf6b8c22d43a42972943803f66e549ad51b36330b17
Opcode Fuzzy Hash: 5f4372e4f162479cbb9c76cb8e3ff62762cf10827ad1bd438500ab5924f55a62
Instruction Fuzzy Hash: 2AF09AA2A20589B6D608BBF48C2FB6E75BCEF20700F00412CBB347658BDB3055208877

Uniqueness

Uniqueness Score: -1.00%

Function 0025B0F0, Relevance: 10.5, APIs: 7, Instructions: 48COMMON

Download Yara Rule

APIs

CreatePen.GDI32(00000006,?), ref: 0025B118
SelectObject.GDI32(?,00000000), ref: 0025B12C
GetStockObject.GDI32(00000005), ref: 0025B132
SelectObject.GDI32(?,00000000), ref: 0025B13A
Rectangle.GDI32(?,?,?,?,?), ref: 0025B14B
SelectObject.GDI32(?,00000000), ref: 0025B153
DeleteObject.GDI32(?), ref: 0025B158

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Object$Select$CreateDeleteRectangleStock
String ID:
API String ID: 2689421921-0
Opcode ID: beee7cfa242a3044a39b64fd592b9e617f6949a46b7ddc0ed195e70636f1c859
Instruction ID: e48bc9e44059735ef0e3e486c33dc7494e8bdbcd16667d63b238147f7469d074
Opcode Fuzzy Hash: beee7cfa242a3044a39b64fd592b9e617f6949a46b7ddc0ed195e70636f1c859
Instruction Fuzzy Hash: CE011276501618BBDB00AFA1EC4CD7B7F6EEBC9321B108416FA4996591C636DC21DF70

Uniqueness

Uniqueness Score: -1.00%

Function 002161E0, Relevance: 10.5, APIs: 7, Instructions: 33synchronizationthreadCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,?,?,0020FEE9,00FFFFFF), ref: 002161EB
GetCurrentThreadId.KERNEL32 ref: 002161F1
LeaveCriticalSection.KERNEL32(?,?,?,0020FEE9,00FFFFFF), ref: 002161FD
LeaveCriticalSection.KERNEL32(?,?,?,0020FEE9,00FFFFFF), ref: 0021620A
WaitForSingleObject.KERNEL32(00000000,00FFFFFF,?,?,?,0020FEE9,00FFFFFF), ref: 00216216
EnterCriticalSection.KERNEL32(?,?,?,?,0020FEE9,00FFFFFF), ref: 00216224
LeaveCriticalSection.KERNEL32(?,?,?,?,?,0020FEE9,00FFFFFF), ref: 00216239

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalSection$Leave$Enter$CurrentObjectSingleThreadWait
String ID:
API String ID: 2447718595-0
Opcode ID: 1e1a31b98ea8f7d6675402e5754df0cfc946e44d8ab29f66a28aa9b0014c7a7d
Instruction ID: 6723545776ebcb6c1b1ac90f69f2d58182f3e355fdfa6ad82b513d3dc3a0c716
Opcode Fuzzy Hash: 1e1a31b98ea8f7d6675402e5754df0cfc946e44d8ab29f66a28aa9b0014c7a7d
Instruction Fuzzy Hash: 65F05432812E11ABC7602F94FC0C6CA7BE8AF2A312F014167F50181525C7715D959FE2

Uniqueness

Uniqueness Score: -1.00%

Function 002073F0, Relevance: 9.1, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

CharNextW.USER32(?,?,?,?), ref: 0020742E
CharNextW.USER32(00000000,?,?), ref: 0020745B
CharNextW.USER32(745EEEF0,?,?), ref: 00207474
CharNextW.USER32(745EEEF0,?,?), ref: 0020747F
CharNextW.USER32(?,?,?), ref: 002074EE

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CharNext
String ID:
API String ID: 3213498283-0
Opcode ID: a75cbece8a98ccb5faef993f73a32dc58a97c0d7cf1de01bad6a905d03a3ae68
Instruction ID: 73053fadf2219b3cd16d0216ad918a4954c07d6c9d368158e56e6b943a8cdc99
Opcode Fuzzy Hash: a75cbece8a98ccb5faef993f73a32dc58a97c0d7cf1de01bad6a905d03a3ae68
Instruction Fuzzy Hash: 6041D536E14216CFCB10DF28E8846B9BBF2EF99310BA481A6D844C7395E734AD51CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0021F380, Relevance: 9.1, APIs: 6, Instructions: 116COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 0021F3B3
std::_Lockit::_Lockit.LIBCPMT ref: 0021F3D5
std::_Lockit::~_Lockit.LIBCPMT ref: 0021F3F5
__Getctype.LIBCPMT ref: 0021F49C
std::_Facet_Register.LIBCPMT ref: 0021F4C5
std::_Lockit::~_Lockit.LIBCPMT ref: 0021F4DD

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_GetctypeRegister
String ID:
API String ID: 1102183713-0
Opcode ID: 849701af00b1eb061dcc6404f2d9f212812bb2d349a216ca44aa0b2b0abeabf7
Instruction ID: bcd29e62fbcdbca492a6fa461cde2948d587315d662a5f9ecef7dcb4765d48a0
Opcode Fuzzy Hash: 849701af00b1eb061dcc6404f2d9f212812bb2d349a216ca44aa0b2b0abeabf7
Instruction Fuzzy Hash: A34122B19202259BCB61CF14D940BEFB7F8EF20710F148129E866AB342D770AD96CB81

Uniqueness

Uniqueness Score: -1.00%

Function 00255450, Relevance: 9.1, APIs: 2, Strings: 3, Instructions: 336networkCOMMON

Download Yara Rule

APIs

Part of subcall function 00239C20: _wcschr.LIBVCRUNTIME ref: 00239C51

InternetCrackUrlW.WININET(00000000,00000000,00000000,0000003C), ref: 00255587
InternetCrackUrlW.WININET(00000000,00000000,00000000,0000003C), ref: 002555BF

Strings

<, xrefs: 002554F8
://, xrefs: 0025582A
;Ay, xrefs: 0025599B

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CrackInternet$_wcschr
String ID: ://$;Ay$<
API String ID: 278801108-3557144356
Opcode ID: c688021c53e8ffefb0b2462a9b60025c929cc62056bec656f0ca11d452aeb804
Instruction ID: 7306808d5e8ac0d83c3eecace9524f04ffb8ac19a04ea303914db92a9995c6b1
Opcode Fuzzy Hash: c688021c53e8ffefb0b2462a9b60025c929cc62056bec656f0ca11d452aeb804
Instruction Fuzzy Hash: 00E1AE719212689BDB24EB64CC65BEDF7B8AF05318F4041D9E84963282DF742F98CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0023C390, Relevance: 9.1, APIs: 6, Instructions: 79COMMON

Download Yara Rule

APIs

SelectObject.GDI32(?,?), ref: 0023C3FA
GetTextMetricsW.GDI32(?,00000000), ref: 0023C40B
SelectObject.GDI32(?,00000000), ref: 0023C418
SelectObject.GDI32(?,?), ref: 0023C43D
GetTextMetricsW.GDI32(?,00000000), ref: 0023C44B
SelectObject.GDI32(?,00000000), ref: 0023C455

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ObjectSelect$MetricsText
String ID:
API String ID: 3697559710-0
Opcode ID: bfcc329f8f7c31df0377385b364f1656554bdc00aca485fb2f26b743dc4c7e93
Instruction ID: c94e68c2e7549097d2d33b852166bab55a1f5f38c5be61ee5553f9927e940cd9
Opcode Fuzzy Hash: bfcc329f8f7c31df0377385b364f1656554bdc00aca485fb2f26b743dc4c7e93
Instruction Fuzzy Hash: 59215E76610114EFCB10EF58DDC4AA9B7A9EF48310F1940B6EE08EB226D7719D61DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 002C0027, Relevance: 9.0, APIs: 6, Instructions: 50COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,002ADD21,00316398,00000010), ref: 002C002B
_free.LIBCMT ref: 002C005E
_free.LIBCMT ref: 002C0086
SetLastError.KERNEL32(00000000), ref: 002C0093
SetLastError.KERNEL32(00000000), ref: 002C009F
_abort.LIBCMT ref: 002C00A5

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorLast$_free$_abort
String ID:
API String ID: 3160817290-0
Opcode ID: 377885a312ebf6c2ff4f8828fe0ac79a9243a450cd20f1cfa9655c5373dd94d7
Instruction ID: 7336c4d20ea9b3c268c6ee1a70a96b2b79f6cb3216884bdacd6a838b4e66068b
Opcode Fuzzy Hash: 377885a312ebf6c2ff4f8828fe0ac79a9243a450cd20f1cfa9655c5373dd94d7
Instruction Fuzzy Hash: FCF0A935960A11A6C2323B746D4AF5B162E5BD17B1B26431DF51892191EFA48C318961

Uniqueness

Uniqueness Score: -1.00%

Function 0025B060, Relevance: 9.0, APIs: 6, Instructions: 48COMMON

Download Yara Rule

APIs

CreatePen.GDI32(00000000,?), ref: 0025B092
SelectObject.GDI32(?,00000000), ref: 0025B09F
MoveToEx.GDI32(?,?,?,?), ref: 0025B0B6
LineTo.GDI32(?,?,?), ref: 0025B0C6
SelectObject.GDI32(?,00000000), ref: 0025B0CE
DeleteObject.GDI32(?), ref: 0025B0D7

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Object$Select$CreateDeleteLineMove
String ID:
API String ID: 3907703346-0
Opcode ID: a0b2929283b3eb6797fcb9c224fd8103d79ca4f0680c0d10c3cdeb01bfc11b3f
Instruction ID: f7e4a52948f1a99585d8e211c8213c2abdc17f2d15d5f385ba402bbb02ee9c8e
Opcode Fuzzy Hash: a0b2929283b3eb6797fcb9c224fd8103d79ca4f0680c0d10c3cdeb01bfc11b3f
Instruction Fuzzy Hash: 15017536801528BFDB019F61ED0C9EE7FBAEF89322F008116FD45A2560D731D961DBA1

Uniqueness

Uniqueness Score: -1.00%

Function 002252A0, Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 137windowsleepCOMMON

Download Yara Rule

APIs

PeekMessageW.USER32 ref: 00225307
PeekMessageW.USER32 ref: 0022535C
Sleep.KERNEL32(00000014,?,?), ref: 002253C1
Concurrency::cancel_current_task.LIBCPMT ref: 00225410

Strings

;Ay, xrefs: 002252DF, 00225301

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: MessagePeek$Concurrency::cancel_current_taskSleep
String ID: ;Ay
API String ID: 1075073604-2185287194
Opcode ID: 9cb7c5fc9040d505b55dc80b250a8b2de2318d0941b693d58ff8a0f4899e1ae7
Instruction ID: bc4fe30422d46faac7ee5ae0eb6537b062f9b6e35b28b841971f939da53d19e0
Opcode Fuzzy Hash: 9cb7c5fc9040d505b55dc80b250a8b2de2318d0941b693d58ff8a0f4899e1ae7
Instruction Fuzzy Hash: CA410430A11716AFDB14DFA0D848BAEB7B5BF05704F208159F406AB680DBB4AD50CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00256240, Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 130COMMON

Download Yara Rule

APIs

SetBkColor.GDI32(?), ref: 00256294
ExtTextOutW.GDI32(?,00000000,00000000,00000002,?,00000000,00000000,00000000), ref: 002562A8
CreateDIBSection.GDI32(?,00000028,00000000,?,00000000,00000000), ref: 0025630F
DeleteObject.GDI32(?), ref: 002563AA

Strings

(, xrefs: 002562C6

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ColorCreateDeleteObjectSectionText
String ID: (
API String ID: 2482505015-3887548279
Opcode ID: 9914b4ba7f0030f6c94def9c238d1f198decedb65655a1f501e5ea03290f2dab
Instruction ID: bd5c4ab46508e1d8b25dd0223f53352baee531f8b0269ccd2834a5434cd4304c
Opcode Fuzzy Hash: 9914b4ba7f0030f6c94def9c238d1f198decedb65655a1f501e5ea03290f2dab
Instruction Fuzzy Hash: D641F670D01218AADB14DFA9DC99BFDBBF8EF55305F10414AF904BA2D0C7B06989CB64

Uniqueness

Uniqueness Score: -1.00%

Function 00235370, Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 124synchronizationCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,00000000,00000000,?), ref: 0023538A

Part of subcall function 001FEBE0: MappingData::MappingData.MSPDB140-MSVCRT ref: 001FEC52

Part of subcall function 00235C70: GetModuleFileNameW.KERNEL32(00000000,?,00000104,?,?,00000000), ref: 00235CB7
Part of subcall function 00235C70: PathRemoveFileSpecW.SHLWAPI(?,?,?,00000000), ref: 00235CC4
Part of subcall function 00235C70: PathAppendW.SHLWAPI(?,360NetUL.dll,?,?,?,?,?,?,?,?,00000000), ref: 00235D04

WaitForMultipleObjects.KERNEL32(00000002,?,00000000,00000000), ref: 00235469
WaitForSingleObject.KERNEL32(?,00000000), ref: 0023547F

Strings

gzip, xrefs: 002353C5
ungzip, xrefs: 002353D3

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FileMappingModulePathWait$AppendDataData::HandleMultipleNameObjectObjectsRemoveSingleSpec
String ID: gzip$ungzip
API String ID: 1170771217-4062267990
Opcode ID: 35a67129450b7e71debdc464be83265a08c885e058c1aeeeef83bc5bcf92a35d
Instruction ID: c5225db1270fd1edcf16fef0709778b517efd9b8497bf48ff94fd1c30e35205a
Opcode Fuzzy Hash: 35a67129450b7e71debdc464be83265a08c885e058c1aeeeef83bc5bcf92a35d
Instruction Fuzzy Hash: 5F417B75610216EFDB04DF64D885E9AB7B9FF48301F504499EA059F262E731ECA0CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 002043CB, Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 123fileCOMMON

Download Yara Rule

APIs

FindNextFileW.KERNEL32(?,?), ref: 0020444F
FindNextFileW.KERNEL32(?,?), ref: 002044CB
FindClose.KERNEL32(00000000), ref: 0020451F
FindClose.KERNEL32(00000000), ref: 0020454E

Strings

., xrefs: 00204413

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Find$CloseFileNext
String ID: .
API String ID: 2066263336-248832578
Opcode ID: dd72f5ce74779eff2c94ee2ac67d2da14fe0d36be0b3180ff1d55afad2531ff6
Instruction ID: 226a3e3aec0a0add0acda8dec0118e3382a0f01256efb9e33cb83234741aa3d2
Opcode Fuzzy Hash: dd72f5ce74779eff2c94ee2ac67d2da14fe0d36be0b3180ff1d55afad2531ff6
Instruction Fuzzy Hash: F24191F1A212258BDF24EF18CD047A9B3F4EF44314F5481D9EA19A32C2DB749E908F94

Uniqueness

Uniqueness Score: -1.00%

Function 00280290, Relevance: 8.9, APIs: 1, Strings: 4, Instructions: 103COMMON

Download Yara Rule

APIs

OutputDebugStringW.KERNEL32(00280513,?,79EB413B,?,00280513,00280513,?), ref: 002802ED

Strings

AddTabWebViewCount ,group_id:%s,total size:%d, xrefs: 002802DC
AddTabWebViewCount ,group_id:%s,count:%d, xrefs: 0028033F
;Ay, xrefs: 00280311
AddTabWebViewCount ,group_id:%s Not Found, xrefs: 00280357

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: DebugOutputString
String ID: ;Ay$AddTabWebViewCount ,group_id:%s Not Found$AddTabWebViewCount ,group_id:%s,count:%d$AddTabWebViewCount ,group_id:%s,total size:%d
API String ID: 1166629820-1794409454
Opcode ID: d53f2ed1efb5d189b9b29073a81f97b869d0c792960649671087e3f8bb6218b9
Instruction ID: c490698756d47e8d0047884150709e6f9eaf4b83b3335f401a3fce09b1aacf0a
Opcode Fuzzy Hash: d53f2ed1efb5d189b9b29073a81f97b869d0c792960649671087e3f8bb6218b9
Instruction Fuzzy Hash: 0D31E772D11619AFCB10EFA8DC85DAEB7B8FF49310F04465AE825E7290E770E954CB90

Uniqueness

Uniqueness Score: -1.00%

Function 002441F0, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 86registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.ADVAPI32(80000001,Software\LDSGameCenter\Debug,00000000,00020019,?), ref: 0024425B
RegQueryValueExW.ADVAPI32(?,ScriptError,00000000,00000000,?,?), ref: 00244283
RegCloseKey.ADVAPI32(?), ref: 0024429C

Strings

Software\LDSGameCenter\Debug, xrefs: 00244251
ScriptError, xrefs: 0024427B

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CloseOpenQueryValue
String ID: ScriptError$Software\LDSGameCenter\Debug
API String ID: 3677997916-4190505144
Opcode ID: e352be39f5775031421677da93906778966572ffc0f9ef88c67b02dba36ebe27
Instruction ID: a081df8923d7fac7c8d17dcb7b37b826f3c9ab59babc45b02896fbe2d2a9a89e
Opcode Fuzzy Hash: e352be39f5775031421677da93906778966572ffc0f9ef88c67b02dba36ebe27
Instruction Fuzzy Hash: 3921BF72700219ABDB24EF58E844FAAB759EF41765F10852BFD09DB260C370ED608B90

Uniqueness

Uniqueness Score: -1.00%

Function 00222180, Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 72COMMON

Download Yara Rule

APIs

FindResourceW.KERNEL32(?,00000000,`G ,?,001FD581,?,?,00204760,00000000,?,?), ref: 00222192
SizeofResource.KERNEL32(?,00000000,?,001FD581,?,?,00204760,00000000,?,?), ref: 002221A0
LoadResource.KERNEL32(?,00000000,?,001FD581,?,?,00204760,00000000,?,?), ref: 002221AE
LockResource.KERNEL32(00000000,?,001FD581,?,?,00204760,00000000,?,?), ref: 002221B9

Strings

`G , xrefs: 0022218D

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Resource$FindLoadLockSizeof
String ID: `G
API String ID: 3473537107-868281144
Opcode ID: ff947c8966c174558291f114f8fe7a682acd1dcb2ac30894abea207a580f3b7d
Instruction ID: b7699153f2080435d39dd417efea41e689d2df0aaffc8bd174c904d619f89caf
Opcode Fuzzy Hash: ff947c8966c174558291f114f8fe7a682acd1dcb2ac30894abea207a580f3b7d
Instruction Fuzzy Hash: A2110A32314666FBDB105EADBC88F6B77DCEB84710B04052AF909C7241CB62DC548AB0

Uniqueness

Uniqueness Score: -1.00%

Function 002191E0, Relevance: 7.7, APIs: 5, Instructions: 165COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,79EB413B), ref: 00219224
LeaveCriticalSection.KERNEL32(?,79EB413B), ref: 002192F1
CloseHandle.KERNEL32(?,79EB413B), ref: 0021932C
LeaveCriticalSection.KERNEL32(?,79EB413B), ref: 00219341
Concurrency::cancel_current_task.LIBCPMT ref: 0021937E

Part of subcall function 0023607F: __CxxThrowException@8.LIBVCRUNTIME ref: 00236096

Part of subcall function 00240850: PostMessageW.USER32(00000005,?,0022D76B,?), ref: 0024085F

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalSection$Leave$CloseConcurrency::cancel_current_taskEnterException@8HandleMessagePostThrow
String ID:
API String ID: 3088635052-0
Opcode ID: cb24128ffe1a5823b827a6c1cd404e2dbbff75c5a9e7385a38fb97dbb935179c
Instruction ID: cef0a4d91fdfdd80b2e621179fe637fee9b5d3e63aaf8dc86138f9db90ac5b02
Opcode Fuzzy Hash: cb24128ffe1a5823b827a6c1cd404e2dbbff75c5a9e7385a38fb97dbb935179c
Instruction Fuzzy Hash: AF518A70A116069FDB28DF64D4A8BAEB7F9FF48700F24455DE8069BA91C734ED90CB90

Uniqueness

Uniqueness Score: -1.00%

Function 002BD513, Relevance: 7.6, APIs: 5, Instructions: 129COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 002BD585
_free.LIBCMT ref: 002BD5A5

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: _free
String ID:
API String ID: 269201875-0
Opcode ID: 6aa4418d0cbbea0a387f571ad3378bba699787d24d817b84b64274152c6a9202
Instruction ID: aae741bd3aba21669b75098fbcead770953d104b654f265d40efe6c5fe1c2c7d
Opcode Fuzzy Hash: 6aa4418d0cbbea0a387f571ad3378bba699787d24d817b84b64274152c6a9202
Instruction Fuzzy Hash: 8941D532A102009FDB20DF78C881AEEB7B5EF88754F258569E919EB341E731AD11CF80

Uniqueness

Uniqueness Score: -1.00%

Function 0021F220, Relevance: 7.6, APIs: 5, Instructions: 113COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 0021F251
std::_Lockit::_Lockit.LIBCPMT ref: 0021F26F
std::_Lockit::~_Lockit.LIBCPMT ref: 0021F28F
std::_Facet_Register.LIBCPMT ref: 0021F346
std::_Lockit::~_Lockit.LIBCPMT ref: 0021F35E

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_Register
String ID:
API String ID: 459529453-0
Opcode ID: b813fbb1bb3cafc871f5f9eb34fd8090a0a3f42a47cf83bccc90facff0fdd61a
Instruction ID: 40cebe300fbcbc528805454af36831991dc7685421325b154166e54e7dee408b
Opcode Fuzzy Hash: b813fbb1bb3cafc871f5f9eb34fd8090a0a3f42a47cf83bccc90facff0fdd61a
Instruction Fuzzy Hash: B641E2719202559FCB65DF58D980AEAB7F8EB14710F14806DEC66AB342D730AD96CBC0

Uniqueness

Uniqueness Score: -1.00%

Function 0023D39B, Relevance: 7.6, APIs: 5, Instructions: 102COMMON

Download Yara Rule

APIs

ScreenToClient.USER32 ref: 0023D3BF
ReleaseCapture.USER32 ref: 0023D3E1
GetTickCount.KERNEL32 ref: 0023DCFF
EnterCriticalSection.KERNEL32(?), ref: 0023E4D9
LeaveCriticalSection.KERNEL32(?,00000000,00000000), ref: 0023E502

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalSection$CaptureClientCountEnterLeaveReleaseScreenTick
String ID:
API String ID: 2828702900-0
Opcode ID: 6de8fcda926378fffeeb71087ecdb7c89055042da038651de42ffea253f0a75d
Instruction ID: 3b95d88af31c9045f574d59a9d515c55ba5edcf37060e530c06ac395c6cfcc17
Opcode Fuzzy Hash: 6de8fcda926378fffeeb71087ecdb7c89055042da038651de42ffea253f0a75d
Instruction Fuzzy Hash: A5417EB0912625DFDB65DF64D898BE9B7B8BF08304F4001D9E409E7291EB74AEA4CF41

Uniqueness

Uniqueness Score: -1.00%

Function 002C00AB, Relevance: 7.6, APIs: 5, Instructions: 53COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,002A7C6C,002C1228,?,002C0055,00000001,00000364,?,002ADD21,00316398,00000010), ref: 002C00B0
_free.LIBCMT ref: 002C00E5
_free.LIBCMT ref: 002C010C
SetLastError.KERNEL32(00000000), ref: 002C0119
SetLastError.KERNEL32(00000000), ref: 002C0122

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorLast$_free
String ID:
API String ID: 3170660625-0
Opcode ID: 37725008cebcfad8c07d8cd1e74ca7e95ebedb0fc368ae1748d5b5d87964dfd3
Instruction ID: 9ce5c9964294b1aa7bda39b891ce0b38565cbe913e5dc78133a9d080902dba72
Opcode Fuzzy Hash: 37725008cebcfad8c07d8cd1e74ca7e95ebedb0fc368ae1748d5b5d87964dfd3
Instruction Fuzzy Hash: 2601F932670A01A7C6236B246CCAF5B526DDBD97B1B29432DF41DA2152EFF48C314961

Uniqueness

Uniqueness Score: -1.00%

Function 002CA236, Relevance: 7.5, APIs: 5, Instructions: 40COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 002CA24E

Part of subcall function 002C0176: RtlFreeHeap.NTDLL(00000000,00000000,?,002CA4E9,?,00000000,?,00000000,?,002CA78D,?,00000007,?,?,002CAAEC,?), ref: 002C018C
Part of subcall function 002C0176: GetLastError.KERNEL32(?,?,002CA4E9,?,00000000,?,00000000,?,002CA78D,?,00000007,?,?,002CAAEC,?,?), ref: 002C019E

_free.LIBCMT ref: 002CA260
_free.LIBCMT ref: 002CA272
_free.LIBCMT ref: 002CA284
_free.LIBCMT ref: 002CA296

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: ed918c7975e4eb3a9e5dfe58ae0c0a606214111a7502c778fe76cef9bc1fd5f7
Instruction ID: 82e99c2d88faddc36aae3a109b6a10c34227abf93e7e94bacb4959c01b6c8149
Opcode Fuzzy Hash: ed918c7975e4eb3a9e5dfe58ae0c0a606214111a7502c778fe76cef9bc1fd5f7
Instruction Fuzzy Hash: A9F0F432514219ABC526DF6CE4C5D57B3EDAA047147588A0DF409D7621CF71FC90CAA5

Uniqueness

Uniqueness Score: -1.00%

Function 002041D0, Relevance: 7.5, APIs: 5, Instructions: 33fileCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNEL32(00000010,00000010,?,00203E97,00000010,?,?,?,?,?), ref: 002041D8
PathFileExistsW.SHLWAPI(00000010,?,00203E97,00000010,?,?,?,?,?), ref: 002041E3
SetFileAttributesW.KERNEL32(00000010,00000080,?,00203E97,00000010,?,?,?,?,?), ref: 002041F3
DeleteFileW.KERNEL32(00000010,?,00203E97,00000010,?,?,?,?,?), ref: 002041FE
MoveFileExW.KERNEL32(00000010,00000000,00000004,?,00203E97,00000010,?,?,?,?,?), ref: 0020420D

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: File$Delete$AttributesExistsMovePath
String ID:
API String ID: 3704743691-0
Opcode ID: ec85fe335d17670b477c7b352596d398ef5e1f84b23f0e932aba15d3b028613c
Instruction ID: 1463cec5e7d3fdd37ff45ed425e4dd70a35094c6b07951d980c4b7b3ab5634e3
Opcode Fuzzy Hash: ec85fe335d17670b477c7b352596d398ef5e1f84b23f0e932aba15d3b028613c
Instruction Fuzzy Hash: 4AE06571792B126BE7203F717C4CBDA379C9F11756F014112FE09D5093D754E91146E5

Uniqueness

Uniqueness Score: -1.00%

Function 001F9430, Relevance: 7.4, APIs: 3, Strings: 1, Instructions: 382COMMON

Download Yara Rule

APIs

FindResourceW.KERNEL32(00000000,?,00000006), ref: 001F96D6
WideCharToMultiByte.KERNEL32(00000003,00000000,00000002,?,00000000,00000000,00000000,00000000,?,?,00000006), ref: 001F970D
WideCharToMultiByte.KERNEL32(00000003,00000000,00000002,?,?,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,?,?,00000006), ref: 001F974B

Strings

hX'-, xrefs: 001F9655

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide$FindResource
String ID: hX'-
API String ID: 3073988107-576950760
Opcode ID: 7253a94cfb76f4ed2fd55c2f1528f11dc29e75a1951cb5c542e83ede1b22304c
Instruction ID: 53c1f76c85db0fed10f0df36e89dc50e5eab9a0fe485267998a6f8b2549e460e
Opcode Fuzzy Hash: 7253a94cfb76f4ed2fd55c2f1528f11dc29e75a1951cb5c542e83ede1b22304c
Instruction Fuzzy Hash: 61D1C271A002099FDB14EF68CC85BBEBBE5EF55310F14426AEA15EB391DB34AD01CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00201344, Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 167COMMON

Download Yara Rule

APIs

ShellExecuteW.SHELL32(00000000,open,?,?,00000000), ref: 0020146F

Strings

--target_dir="%s", xrefs: 00201425
open, xrefs: 00201468
target_dir, xrefs: 00201365

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ExecuteShell
String ID: --target_dir="%s"$open$target_dir
API String ID: 587946157-111038580
Opcode ID: 76716469291fe29e3139cdab61461e812db40b88f808642845420b2d36a936ac
Instruction ID: ecd6616a9f95eaa6e682ef5342e816b7f4e60dd63b99f6df96b843e1ec3a1a66
Opcode Fuzzy Hash: 76716469291fe29e3139cdab61461e812db40b88f808642845420b2d36a936ac
Instruction Fuzzy Hash: BE61AE71A00649DFDB00DFA8C849B9EBBF4FF15325F148269E415E72A2EB30A915CF90

Uniqueness

Uniqueness Score: -1.00%

Function 001F8250, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 92COMMON

Download Yara Rule

APIs

Part of subcall function 002486F0: GetWindowLongW.USER32(00000000,000000F0), ref: 00248728
Part of subcall function 002486F0: SetWindowLongW.USER32 ref: 00248743
Part of subcall function 002486F0: GetClientRect.USER32(00000000,001F828E), ref: 00248755
Part of subcall function 002486F0: SetWindowPos.USER32(00000000,00000000,001F828E,?,?,?,00000020), ref: 0024877B
Part of subcall function 002486F0: FindResourceW.KERNEL32(00000000,00000000,?,?), ref: 002487DF
Part of subcall function 002486F0: LoadResource.KERNEL32(00000000,00000000,?,?), ref: 002487F6
Part of subcall function 002486F0: FreeResource.KERNEL32(00000000,?,?), ref: 00248807

Part of subcall function 00240080: GetWindowRect.USER32 ref: 002400A9
Part of subcall function 00240080: GetWindowLongW.USER32(00000000,000000F0), ref: 002400BB
Part of subcall function 00240080: GetParent.USER32(00000000), ref: 002400CC
Part of subcall function 00240080: GetWindowLongW.USER32(00000000,000000F0), ref: 002400E6
Part of subcall function 00240080: SystemParametersInfoW.USER32 ref: 00240105
Part of subcall function 00240080: SetWindowPos.USER32(00000000,00000000,?,?,000000FF,000000FF,00000015), ref: 0024019E

SetWindowPos.USER32(?,000000FF,00000000,00000000,00000000,00000000,00000083), ref: 001F82C3
SetWindowPos.USER32(?,000000FE,00000000,00000000,00000000,00000000,00000083), ref: 001F82D7
SwitchToThisWindow.USER32(?,00000001), ref: 001F82DE

Part of subcall function 00240AF0: IsWindow.USER32(001C0248), ref: 00240AF9
Part of subcall function 00240AF0: ShowWindow.USER32(001C0248,-00000004,?,0020D59E,00000000,00000000), ref: 00240B14

Part of subcall function 00224CA0: PostThreadMessageW.USER32 ref: 00224D0C

Strings

CChangeGameWindow::_ShowWindow, xrefs: 001F829E

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Long$Resource$Rect$ClientFindFreeInfoLoadMessageParametersParentPostShowSwitchSystemThisThread
String ID: CChangeGameWindow::_ShowWindow
API String ID: 3604550518-1501245210
Opcode ID: 57be3f457ed327060bfd9ed881b23de72cf435c1761980e88760d9086f0cfbfa
Instruction ID: ac2d1708640ebb5620380e26536e35bc5610bda5874d69f696ce6366f2144a5e
Opcode Fuzzy Hash: 57be3f457ed327060bfd9ed881b23de72cf435c1761980e88760d9086f0cfbfa
Instruction Fuzzy Hash: 4031C430A50209BBDB14EF64EC46FBEBB65FF44720F504229F615AA2D0CBB16920CF94

Uniqueness

Uniqueness Score: -1.00%

Function 001FF120, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 71serviceCOMMON

Download Yara Rule

APIs

OpenSCManagerW.ADVAPI32(00000000,00000000,80000000,79EB413B,00000000), ref: 001FF17A
OpenServiceW.ADVAPI32(00000000,?,80000000), ref: 001FF192
QueryServiceStatus.ADVAPI32(00000000,?), ref: 001FF1B9

Strings

;Ay, xrefs: 001FF14A, 001FF1DF

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: OpenService$ManagerQueryStatus
String ID: ;Ay
API String ID: 1684168364-2185287194
Opcode ID: b6d6387059330aaa6b18dd2327af57bce7c117a0e005876e4c99d1a2d55209b2
Instruction ID: ac4d6d5f54fbef9fc89bb4ef7aef35efc380605c0e25746dfa4fe85922036a11
Opcode Fuzzy Hash: b6d6387059330aaa6b18dd2327af57bce7c117a0e005876e4c99d1a2d55209b2
Instruction Fuzzy Hash: E4212772D01618EBCB10DFA9D944BAEBBB8EF89710F10822AF815A3340DB345842CB54

Uniqueness

Uniqueness Score: -1.00%

Function 00202192, Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 70COMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(?), ref: 002021C7
SHCreateDirectoryExW.SHELL32(00000000,?,00000000), ref: 002021D9

Strings

%s\%s, xrefs: 002021B2
_GetStartMenuDir, Create directory : %s, xrefs: 002021E0

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CreateDirectoryExistsFilePath
String ID: %s\%s$_GetStartMenuDir, Create directory : %s
API String ID: 2624722123-1213183106
Opcode ID: 7c8af0ec7ccbf003a3d4b8c4437ea49044c6a1570aab4b514a2350d3525efb80
Instruction ID: 4f6b21eaaf20190ee816d6d4dace0b7598e9de85cd1a7b2a19cef02f151c1b4c
Opcode Fuzzy Hash: 7c8af0ec7ccbf003a3d4b8c4437ea49044c6a1570aab4b514a2350d3525efb80
Instruction Fuzzy Hash: 6121A4719016199BDB10DFA8EC4DB99B7B8EF05320F1482AAE819D7292D7309D54CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00265120, Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 25timeCOMMON

Download Yara Rule

APIs

GetWindowLongW.USER32(00000000,000000EC), ref: 00265128
SetWindowLongW.USER32 ref: 00265139

Part of subcall function 00265460: GetWindowRect.USER32 ref: 0026548C
Part of subcall function 00265460: GetWindowLongW.USER32(00000000,000000F0), ref: 0026549E
Part of subcall function 00265460: GetParent.USER32(00000000), ref: 002654AF
Part of subcall function 00265460: GetWindowLongW.USER32(00000000,000000F0), ref: 002654C9
Part of subcall function 00265460: SystemParametersInfoW.USER32 ref: 002654E8

SetTimer.USER32(00000000,?,00000010,hO&), ref: 00265175

Strings

hO&, xrefs: 0026516A

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Long$InfoParametersParentRectSystemTimer
String ID: hO&
API String ID: 465713306-3533347106
Opcode ID: d977a09502186fcf68240f81e1992da7a26599c7a4009021754810dd1c957f8e
Instruction ID: 5a39f7cf12310275704d33e95e38a3589cdaaf19c9076f812b2fd76cb79e3aee
Opcode Fuzzy Hash: d977a09502186fcf68240f81e1992da7a26599c7a4009021754810dd1c957f8e
Instruction Fuzzy Hash: CFE06530515920AFDB217F14FD0EB5A7FA9EB06711F014619F05AA50A0DBA058A4DB94

Uniqueness

Uniqueness Score: -1.00%

Function 001F31B0, Relevance: 6.1, APIs: 4, Instructions: 140COMMON

Download Yara Rule

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(003222A8,00000000), ref: 001F31B7
GetLastError.KERNEL32 ref: 001F31C1
InitializeCriticalSectionAndSpinCount.KERNEL32(00322A18,00000000,00000000), ref: 001F31F7
GetLastError.KERNEL32 ref: 001F3201

Part of subcall function 001F3FD0: __CxxThrowException@8.LIBVCRUNTIME ref: 001F3FE7

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CountCriticalErrorInitializeLastSectionSpin$Exception@8Throw
String ID:
API String ID: 3390831176-0
Opcode ID: 3fc893aee7d31d376cbfd797ea554b6ed4727910e103b589c7c3105203ea333e
Instruction ID: 205236da18b2e6b02f4c919efa460b91cbafde113a3d306c289aaa9234f2b73f
Opcode Fuzzy Hash: 3fc893aee7d31d376cbfd797ea554b6ed4727910e103b589c7c3105203ea333e
Instruction Fuzzy Hash: 02318FB2B0030967D714AF69EC89F77779CAFC0740F100069FE14CA246EB34DA418AB1

Uniqueness

Uniqueness Score: -1.00%

Function 002C14B5, Relevance: 6.1, APIs: 4, Instructions: 52libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,00000000,00000000,?,002C145C,?,00000000,00000000,00000000,?,002C173A,00000006,FlsSetValue), ref: 002C14E7
GetLastError.KERNEL32(?,002C145C,?,00000000,00000000,00000000,?,002C173A,00000006,FlsSetValue,002FD3D0,FlsSetValue,00000000,00000364,?,002C00F9), ref: 002C14F3
LoadLibraryExW.KERNEL32(00000000,00000000,00000000,?,002C145C,?,00000000,00000000,00000000,?,002C173A,00000006,FlsSetValue,002FD3D0,FlsSetValue,00000000), ref: 002C1501

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: LibraryLoad$ErrorLast
String ID:
API String ID: 3177248105-0
Opcode ID: 07c68d08b09aca92371da94e27c4c9789087be02df0bb28cfb56e86f0cedd14d
Instruction ID: c8efdd9cdbd71e312724496bf19d0d0dabe67793fa1a5f40404324d089b303e9
Opcode Fuzzy Hash: 07c68d08b09aca92371da94e27c4c9789087be02df0bb28cfb56e86f0cedd14d
Instruction Fuzzy Hash: BA01AC37661623ABC7224F69EC49F567758AF467E17600728F907D7241D720DD31C6E0

Uniqueness

Uniqueness Score: -1.00%

Function 0021E560, Relevance: 6.0, APIs: 4, Instructions: 37threadmemoryCOMMON

Download Yara Rule

APIs

OpenThread.KERNEL32(0000005A,00000000,?,00000000,00000000,00000000,?,0021DE8E,?,00000000,?,?,00000000,00000001,?,745FB7C0), ref: 0021E57F
ResumeThread.KERNEL32(00000000,?,0021DE8E,?,00000000,?,?,00000000,00000001,?,745FB7C0), ref: 0021E58C
CloseHandle.KERNEL32(00000000,?,0021DE8E,?,00000000,?,?,00000000,00000001,?,745FB7C0), ref: 0021E593
HeapFree.KERNEL32(00000000,?,00000000,00000000,?,0021DE8E,?,00000000,?,?,00000000,00000001,?,745FB7C0), ref: 0021E5AB

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: Thread$CloseFreeHandleHeapOpenResume
String ID:
API String ID: 993137029-0
Opcode ID: 3b2742b758b910fabd055e4125b81ed40f07073a6b864ba0fde20180385dab56
Instruction ID: d6681085c8d3eb99f46d0034d15d1bcc9e6cfa524ec490563857190dcff5a4b9
Opcode Fuzzy Hash: 3b2742b758b910fabd055e4125b81ed40f07073a6b864ba0fde20180385dab56
Instruction Fuzzy Hash: E3F0F035600620BBCB215F44EC88FAAB7A9FB89B50F910055FC048B165D720DC81CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00225230, Relevance: 6.0, APIs: 4, Instructions: 27COMMON

Download Yara Rule

APIs

SleepEx.KERNEL32(00000000,00000001), ref: 00225239
GetTickCount.KERNEL32 ref: 0022523F
CoInitialize.OLE32(00000000), ref: 0022525A
CoUninitialize.OLE32 ref: 0022526D

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CountInitializeSleepTickUninitialize
String ID:
API String ID: 2576235990-0
Opcode ID: dfbd5279844a14bc157469d259230fc9c3c42897011e86a6bf2e14e14faab5c3
Instruction ID: eca434e9d14c5329c98bfa371ab47b256706500db487477fa6962356fe1c354b
Opcode Fuzzy Hash: dfbd5279844a14bc157469d259230fc9c3c42897011e86a6bf2e14e14faab5c3
Instruction Fuzzy Hash: 1AE092717D6B64BBEB006BB07C0EB9A7F988F1A751F084012F9458B191CA215C108665

Uniqueness

Uniqueness Score: -1.00%

Function 00231230, Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 305COMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(?,\LocalStorage.json,00000012,?,?,\LDSGameCenter\), ref: 00231381

Part of subcall function 001F45F0: GetProcessHeap.KERNEL32(00225638,79EB413B), ref: 001F4601

Part of subcall function 001F4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,002DDAF8,?,?,?,?,001F36E1,002DDAF8,?,?,?,002DDAF8), ref: 001F4186
Part of subcall function 001F4130: FindResourceW.KERNEL32(00000000,002DDAF8,00000006,?,002DDAF8), ref: 001F41C4

Part of subcall function 002966B0: CryptStringToBinaryW.CRYPT32(?,00000000,00000001,00000000,?,00000000,00000000), ref: 00296749
Part of subcall function 002966B0: MultiByteToWideChar.KERNEL32(0000FDE9,00000000,00000000,000000FF,00000000,00000000,?,?,79EB413B), ref: 00296776

Strings

\LDSGameCenter\, xrefs: 0023131B, 0023132B
\LocalStorage.json, xrefs: 00231371

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$BinaryByteCharCryptExistsFileHeapMultiPathProcessStringWide
String ID: \LDSGameCenter\$\LocalStorage.json
API String ID: 1195601645-381296370
Opcode ID: bef92f18d66b6c05f13533dfc22bac50ea15559e16b97b815cca2894dbf5968a
Instruction ID: c1d9d469f91ac51f66894403f38bb315ba06408df93989ed6c3be2abedde2439
Opcode Fuzzy Hash: bef92f18d66b6c05f13533dfc22bac50ea15559e16b97b815cca2894dbf5968a
Instruction Fuzzy Hash: E0C1D270D1424DDFDB00DFA8C849BEEFBB4AF21314F148198E415AB292DBB49E18CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0021D430, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 146COMMON

Download Yara Rule

APIs

SimpleUString::operator=.MSOBJ140-MSVCRT ref: 0021D4E8

Strings

CWebBrowserLogic::_InvokeSendStatData, invalid parameters, arg1=%d, arg2=%d, xrefs: 0021D5EE
CWebBrowserLogic::_InvokeSendStatData, not enough parameter!, xrefs: 0021D468

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: SimpleString::operator=
String ID: CWebBrowserLogic::_InvokeSendStatData, invalid parameters, arg1=%d, arg2=%d$CWebBrowserLogic::_InvokeSendStatData, not enough parameter!
API String ID: 356670603-3628007285
Opcode ID: c018bfa935da8be320bc044916ec117af14dfa8c7df1562d40228952249d447a
Instruction ID: b9c889e21c32bbb03f388050a8f00d4f54fadcde7dcbb2223091103ee36c41e6
Opcode Fuzzy Hash: c018bfa935da8be320bc044916ec117af14dfa8c7df1562d40228952249d447a
Instruction Fuzzy Hash: EA51D270A20259EFDF14DFA8C845BEEBBF5FF28308F804029E405A7291D7746AA5CB51

Uniqueness

Uniqueness Score: -1.00%

Function 002471B0, Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 129memoryCOMMON

Download Yara Rule

APIs

SysAllocString.OLEAUT32(002DD980), ref: 002472E2
SysFreeString.OLEAUT32(00000000), ref: 00247300

Strings

auto, xrefs: 0024726E

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: String$AllocFree
String ID: auto
API String ID: 344208780-1723475450
Opcode ID: 3007a6f1b750a9b10e4595b9aee52a9fa26f3935041bc596ec8ff9020b159b43
Instruction ID: 5af9eaf93d1077b2cd29ff60b8716dbdd45b190c3995b938578f477745da1f94
Opcode Fuzzy Hash: 3007a6f1b750a9b10e4595b9aee52a9fa26f3935041bc596ec8ff9020b159b43
Instruction Fuzzy Hash: F3416D74A1420ADFDB18CFA8C948BAEBBB8EF49700F148559E815A7350D775AD00CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00228440, Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32(;Ay,00000000,?,000000FF,00000000,00000000,00000000,00000000,?,001FCC37,00222AD0,?,001FCC37,00000000,79EB413B), ref: 00228475
WideCharToMultiByte.KERNEL32(00000003,00000000,?,000000FF,00000000,?,00000000,00000000,?,?,?,?,?,00000010,?,00000010), ref: 002284FF

Strings

;Ay, xrefs: 00228472

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide
String ID: ;Ay
API String ID: 626452242-2185287194
Opcode ID: c7b00d65ddd172613e0aa854af5ea0f8dfb757fc3dcf860ed36707d8d7013392
Instruction ID: ffeb6d1470ebc8c195b464e2dbf256ba5bba5ba140c5f224280b8aa86b06a602
Opcode Fuzzy Hash: c7b00d65ddd172613e0aa854af5ea0f8dfb757fc3dcf860ed36707d8d7013392
Instruction Fuzzy Hash: 66313971B153196BDB20BFA8EC02B6EB7B8EF45710F10066EF815972C1DBB09D208B91

Uniqueness

Uniqueness Score: -1.00%

Function 0021E3E0, Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 117threadinjectionCOMMON

Download Yara Rule

APIs

GetThreadContext.KERNEL32(00000001,?,?), ref: 0021E40F
SetThreadContext.KERNEL32(?,00010001,00000000,00000000), ref: 0021E514

Strings

\!, xrefs: 0021E451

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ContextThread
String ID: \!
API String ID: 1591575202-1725824319
Opcode ID: e254b4e0bbbf4009aa5ac171a1c58aa3370e0582e0a70d933a68b8da990259ff
Instruction ID: 889020005069cc7c32669a3b30cee5b019a82e1166cb942f2716b0099262ee19
Opcode Fuzzy Hash: e254b4e0bbbf4009aa5ac171a1c58aa3370e0582e0a70d933a68b8da990259ff
Instruction Fuzzy Hash: FA41A471A2112A8BCF288F28CC946F8B7F4BF14314F5A41EAD805AB252D634DDD1CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0025E4F0, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 71windowCOMMON

Download Yara Rule

APIs

GetWindowLongW.USER32(00000000), ref: 0025E567
SendMessageW.USER32(00000000), ref: 0025E59B

Strings

textchanged, xrefs: 0025E52D

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: LongMessageSendWindow
String ID: textchanged
API String ID: 3360111000-1330398090
Opcode ID: 6599cb776a77e45abe48215d3789df47da84db9f67fd97babd9ef41ee3ac5c26
Instruction ID: c00817f68fdf047453efc7e6b759bcf307dc2de76503e3783759e17d4902af92
Opcode Fuzzy Hash: 6599cb776a77e45abe48215d3789df47da84db9f67fd97babd9ef41ee3ac5c26
Instruction Fuzzy Hash: 7F113672B103009FDF189F29D888B1D7B9DFB84326F960126F50D8B2C1E639ED58CA14

Uniqueness

Uniqueness Score: -1.00%

Function 0023F500, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 57windowCOMMON

Download Yara Rule

APIs

SetFocus.USER32 ref: 0023F50C
GetTickCount.KERNEL32 ref: 0023F53F

Part of subcall function 0023EFC0: GetTickCount.KERNEL32 ref: 0023F050

Strings

killfocus, xrefs: 0023F55D

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: CountTick$Focus
String ID: killfocus
API String ID: 2427126678-1616503811
Opcode ID: 5b9bd0083af1963349c3c88911b85b61eafedf75c8b40f595bbb626e8ba7fc1e
Instruction ID: d21d9a1c9021feb17a9b9e890d95ef4cec641eefce452017b7d6848345a62baa
Opcode Fuzzy Hash: 5b9bd0083af1963349c3c88911b85b61eafedf75c8b40f595bbb626e8ba7fc1e
Instruction Fuzzy Hash: 3E219D70D10749DBDB10DFA5D948BAEBBF1EF89308F20426EE801676A0D7B56984CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0020E2C0, Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 44windowCOMMON

Download Yara Rule

APIs

Part of subcall function 00248B60: ScreenToClient.USER32 ref: 00248B8F
Part of subcall function 00248B60: GetClientRect.USER32(00000000,?), ref: 00248BA1
Part of subcall function 00248B60: IsZoomed.USER32(00000000), ref: 00248BAF

Part of subcall function 001F8B40: GetCursorPos.USER32(?), ref: 001F8B92
Part of subcall function 001F8B40: MapWindowPoints.USER32 ref: 001F8BBD
Part of subcall function 001F8B40: PtInRect.USER32(?,?,?), ref: 001F8BCD

SetFocus.USER32(00000000,close,min,?,?,?,?), ref: 0020E311

Strings

min, xrefs: 0020E2E1
close, xrefs: 0020E2F1

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ClientRect$CursorFocusPointsScreenWindowZoomed
String ID: close$min
API String ID: 2110861363-3562232782
Opcode ID: 499285016ae436a747f08954213dfc67061c1aaf91197c9cdd364f4433229df9
Instruction ID: 99fe0a3d462be1b0e3009021fac848a585d2f6ac57c16e301267346e294ac185
Opcode Fuzzy Hash: 499285016ae436a747f08954213dfc67061c1aaf91197c9cdd364f4433229df9
Instruction Fuzzy Hash: D5F0C2763102196BDF106F5AEC45BBF3B4DDB85724F01086AF901CB282DB619C6186A0

Uniqueness

Uniqueness Score: -1.00%

Function 002360BC, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 13COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 002360C8

Part of subcall function 00236033: std::exception::exception.LIBCONCRT ref: 00236040

__CxxThrowException@8.LIBVCRUNTIME ref: 002360D6

Part of subcall function 002A3827: RaiseException.KERNEL32(?,?,002360BB,?,0031A044,?,0000000F,?,?,?,?,002360BB,?,00313034,?), ref: 002A3887

Strings

bad function call, xrefs: 002360DC

Memory Dump Source

Source File: 00000014.00000002.1058724545.00000000001F1000.00000020.00020000.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000014.00000002.1058711417.00000000001F0000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058858088.00000000002DD000.00000002.00020000.sdmp Download File
Associated: 00000014.00000002.1058911148.000000000031A000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058922471.000000000031D000.00000008.00020000.sdmp Download File
Associated: 00000014.00000002.1058934005.0000000000320000.00000004.00020000.sdmp Download File
Associated: 00000014.00000002.1058949575.0000000000324000.00000002.00020000.sdmp Download File

Similarity

API ID: ExceptionException@8RaiseThrowstd::exception::exceptionstd::invalid_argument::invalid_argument
String ID: bad function call
API String ID: 1586462112-3612616537
Opcode ID: 982d3023af0368bb2fee416be93638fa193f646a1340713a9b6a159772fe837f
Instruction ID: aade817861c22d7816544bd988cb8f9c40a4609fa3ea78cae7f5fe06c91b8137
Opcode Fuzzy Hash: 982d3023af0368bb2fee416be93638fa193f646a1340713a9b6a159772fe837f
Instruction Fuzzy Hash: 3DC012A8C1010C77CB0CFBE5D8468CC776C6E04300FD08560B65092041DA7497388AD1

Uniqueness

Uniqueness Score: -1.00%

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by hijacking the search order used to load DLLs. Windows systems use a common method to look for required DLLs to load into a program. Hijacking DLL loads may be for the purpose of establishing persistence as well as elevating privileges and/or evading restrictions on file execution.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	DLL monitoring, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by application shims. The Microsoft Windows Application Compatibility Infrastructure/Framework (Application Shim) was created to allow for backward compatibility of software as the operating system codebase changes over time. For example, the application shimming feature allows developers to apply fixes to applications (without rewriting code) that were created for Windows XP so that it will work with Windows 10.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry. Service configurations can be modified using utilities such as sc.exe and Reg .
Tactics:	Persistence, Privilege Escalation
Data Sources:	API monitoring, File monitoring, Process command-line parameters, Process monitoring, Windows Registry, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in. These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, Access tokens, Authentication logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring, Windows Registry, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Kernel drivers, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, User interface, Windows Registry, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of accounts on a system or within an environment. This information can help adversaries determine which accounts exist to aid in follow-on behavior.
Tactics:	Discovery
Data Sources:	API monitoring, Azure activity logs, Office 365 account logs, Process command-line parameters, Process monitoring
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report UM6rAJhKEq.exe

Overview

General Information

Detection

Compliance

Signatures

Classification

Process Tree

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

AV Detection:

Cryptography:

Privilege Escalation:

Bitcoin Miner:

Compliance:

Spreading:

Networking:

Key, Mouse, Clipboard, Microphone and Screen Capturing:

System Summary:

Data Obfuscation:

Persistence and Installation Behavior:

Boot Survival:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Anti Debugging:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Lowering of HIPS / PFW / Operating System Security Settings:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Authenticode Signature

Entrypoint Preview

Rich Headers

Data Directories

Sections

Resources

Imports

Version Infos

Possible Origin

Network Behavior

Network Port Distribution

TCP Packets

Function 00A88E20, Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 164
encryptionCOMMON

Function 00A7D5B0, Relevance: 14.3, APIs: 6, Strings: 2, Instructions: 323
COMMON

Function 00A71760, Relevance: 12.2, APIs: 8, Instructions: 243
COMMON

Function 00A8C8E0, Relevance: 99.0, APIs: 49, Strings: 7, Instructions: 1045
COMMONCrypto

Function 00A74A00, Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 108
synchronizationthreadtimeCOMMON

Function 00A75040, Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 81
threadCOMMON

Function 00A74EE0, Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 82
timesleepsynchronizationCOMMON

Function 00AE8BE0, Relevance: 13.7, APIs: 9, Instructions: 244
fileCOMMONCrypto

Function 00A70E20, Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143
COMMON

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre